last executing test programs: 2m35.343504011s ago: executing program 1 (id=1456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x58010}, 0x0) 2m35.241025616s ago: executing program 1 (id=1457): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x7c, "a5bdd5108eb5eb67f48ccd1d24723f7f5c1bc84c969290a9de43507011753d4484b0813ea8d63d8fec30ecc1be3c30d5be606acff0393f1663ef5470f897af149091a96f559c692dad7a3d31c952d5a3f362ccd0ce62c40a69520131632c025c93c76b83c2d4e8211828dae780fa675a2a7f6e467884ed8a1dc7306c"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x6}}) 2m32.083788914s ago: executing program 1 (id=1479): r0 = syz_open_dev$sndpcmp(&(0x7f0000002880), 0xcabd, 0x101000) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) close(r2) statx(r2, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000061401"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x3b) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default'}}}]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001180)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x4004000) recvmmsg$unix(r5, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r6 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)=0xd) 2m31.291486545s ago: executing program 1 (id=1485): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (fail_nth: 6) 2m31.255002035s ago: executing program 1 (id=1486): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdc0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000001040)={0x2, 0x2, 0x8001, 0x3, 0xfffffff9, 0x200800}) dup(r1) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000001000)=0x2, 0x4) 2m31.019835s ago: executing program 1 (id=1489): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f64655face672646c696d69743d372c002209b42939f905b51e890db1cc750266e578728a02ce3f0a599f410815c46e"]) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0xfffdf7ffffffffff, 0x208983) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x4) (async) r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x8082a1) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffff800, 0x0, 0x2}) 2m15.978428306s ago: executing program 32 (id=1489): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f64655face672646c696d69743d372c002209b42939f905b51e890db1cc750266e578728a02ce3f0a599f410815c46e"]) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0xfffdf7ffffffffff, 0x208983) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x4) (async) r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x8082a1) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffff800, 0x0, 0x2}) 2m10.980479666s ago: executing program 0 (id=1605): r0 = socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES32], 0x1c}}, 0x20040810) 2m10.22678029s ago: executing program 0 (id=1610): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xc2b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0xff, 0xffffffffffffffff, 0x2004cb, 0x4000000000000000, 0x80000000008, 0x3, 0x0, 0x1, 0x0, 0x2, 0xb, 0x1], 0x80a0000, 0x100004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x40000800009) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@verity_on}], [], 0x2c}) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r7}) 2m8.523749802s ago: executing program 0 (id=1615): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYRESDEC=0x0]) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x200040c4) 2m8.426066727s ago: executing program 0 (id=1616): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00943f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1043400, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0xc048aeca, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x8) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='7', 0x1, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1462, 0x2, 0x4, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x40, 0x3, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x3, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2m7.218604007s ago: executing program 0 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, r3, 0x14, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0xc000}, 0x2000a083) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000200a01020000000000000000010000000900010073797a3000000000090002"], 0xe4}}, 0x0) 2m5.456045206s ago: executing program 0 (id=1624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x586c0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0xfffffffb) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x3330b000) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000100)={0x80, 0x0, 0x1}) 2m5.14222558s ago: executing program 33 (id=1624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x586c0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0xfffffffb) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x3330b000) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000100)={0x80, 0x0, 0x1}) 1m29.420992163s ago: executing program 4 (id=1797): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1m29.063447949s ago: executing program 4 (id=1799): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0xcc810}, 0x884) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5, 0x10}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 1m27.087729914s ago: executing program 4 (id=1805): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c73351e217bed4333cda6153d3e07b068dc9f2d324e00"]) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e0c031c20"], 0xf) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000280)={0x97, 0x5474, 0x92, 0x7}, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x3, 0x7}) io_submit(r2, 0x0, &(0x7f0000000580)) prctl$PR_GET_TIMERSLACK(0x1e) syz_open_dev$rtc(0x0, 0x0, 0x40040) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="282000001d00210000000000000000000500000005000000000000000a00580077a9e20000000000"], 0x28}}, 0x0) 1m26.863673435s ago: executing program 4 (id=1808): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x38ec0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) close(r4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x3a214c4, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4004743b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x8000000000000000, 0x505000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) 1m26.463232687s ago: executing program 4 (id=1810): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001740)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000040)=0xb, 0x4) r5 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f027, 0x1}) dup3(r0, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x0, r3}) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x82140, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04009590", @ANYRES16=r9, @ANYBLOB="ed222dbd7000fddbdf253400000008000300", @ANYRES32=r10, @ANYBLOB="14005500cc99bd92c7f896e0b7713f98d8898c85"], 0x30}, 0x1, 0x0, 0x0, 0x60000040}, 0x20000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x7, 0x1, 0x5989}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) setresuid(0x0, 0xee00, 0x0) r11 = msgget$private(0x0, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) msgctl$IPC_SET(r11, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x0, 0x0, 0x3, 0x7, 0x5, 0x1, 0x2, 0x9, 0x1, 0x1}) 1m25.280373117s ago: executing program 4 (id=1816): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x2, 0x800, 0xfffffffe, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2a1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) 1m24.964738342s ago: executing program 34 (id=1816): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x2, 0x800, 0xfffffffe, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2a1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) 6.623627315s ago: executing program 6 (id=2267): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2ec801, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix_mp={0x3, 0x3, 0x30314247, 0x0, 0xa, [{0x0, 0x4}, {0x5, 0xb6}, {0x2, 0x8}, {0xffffff81, 0x7}, {0x9, 0x4}, {0x10000, 0x7ff}, {0x6, 0x1}, {0x1f0, 0x7fff}], 0x6, 0x9, 0x0, 0x2}}) 6.482994214s ago: executing program 6 (id=2269): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7fb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x20493859}) r1 = syz_usb_connect(0x6, 0x24, &(0x7f00000002c0)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) mmap(&(0x7f00006f0000/0x4000)=nil, 0x4000, 0x6, 0x40010, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) syz_pidfd_open(r2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x9, 0xa, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x46, &(0x7f0000000280)}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket(0x11, 0x2, 0xfffffff9) connect$qrtr(r11, &(0x7f0000000540)={0x2d, 0x0, 0x8000}, 0xc) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESDEC=r2, @ANYRES8=r7, @ANYRES8=r5, @ANYRES8=r0, @ANYRESOCT=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) 5.667368052s ago: executing program 6 (id=2286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_usb_connect(0x5, 0x79c, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x200, 0x8, 0x8, 0xfc, 0x8}, 0x5, &(0x7f0000000e80)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x409}}, {0x69, &(0x7f0000000300)=@string={0x69, 0x3, "4ba3f4621d935574a1a65193b8e742b1ca14b1cb90dfae88a7961551fbdee70030a888cd5c5c3b418184eee17acbf0317c67e16839dea3b4b47390f71aeb2caf875e329ffd612448ed2bb97862860174d93ffebf7f8b9c910a29a512a5ab65eacbf183b141bec6"}}, {0xff, &(0x7f0000000840)=@string={0xff, 0x3, "17ef6354111ba388780d6ed520aba15029b219d7f87561afc985e8b8538e57e179f2a32934a24a9ababbeea72c4f2dc4c0551b1bd7623378065ebf4a0737f29babee4a9a005c3a7b57f733ebd44b8011b484f222443d87baa8668ffbe40bdd0e5c8b2fdf2e5a508313be364c30e9706962c11ecbec39b6cad8855ce0149afa92797d0f0ace8fb60b44e16a16423740e18a72f1d1d817e331e9598ee329d7c9ccfcdff27c94c8a10ffaa681094520514b914231191d91a7eefbb83ce7fcc6a3fb8bbec8dfd65ca823b014bde0d7c8eb911cd54a66d478a09ce65032f842569b022bcf276b47156bb7fbc93313b6c537a3e9149b6bf701b77bad8570a968"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbf7, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x23}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x44810) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg(r4, &(0x7f0000000040)={&(0x7f0000001840)=@ll={0x11, 0x3, r5, 0x1, 0x80, 0x6, @multicast}, 0x80, &(0x7f0000000240)=[{0x0, 0x6}, {&(0x7f0000000000)="f1ef9f8fc77456701af1", 0xa}], 0x2}, 0x24004045) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, 0x0, 0x22883, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) gettid() 3.663397326s ago: executing program 3 (id=2315): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7, 0x8000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0xe52f, 0x1000, 0x2, 0x19e}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3578, 0x2000, 0x0, 0x74, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95b3, 0x8808, 0x0, 0x2a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2eee, 0x100, 0x2, 0x151}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb810, 0x4, 0x1, 0x352}, 0xffffffffffffffff}], 0x4, &(0x7f00000030c0)={0x2e, 0x36, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xed2c}, 0x0, 0x0, '\x00', {0x1, 0x540, 0x0, &(0x7f00000020c0)=@buf_max_buf="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"}}, &(0x7f0000003140)) syz_io_uring_setup(0x6d53, &(0x7f0000000440)={0x0, 0xac0f, 0x40000, 0x3, 0x2b2, 0x0, r2}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000980)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x103c, 0xdf, 0x3, 0xdb9, 0x2, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) syz_usb_connect$uac2(0x4, 0xca, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x8, 0x80, 0xfd, {0x8, 0xb, 0x1, 0x2, 0x1, 0xa, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x4, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x61, 0x3, "fe", "b6ef"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0x81, "", '*XV'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff8c, 0x9, 0x8, 0xb3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xe9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x8, 0x3, {0x8, 0x25, 0x1, 0x80, 0x30, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xf0aa, 0xb5, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xc}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x61, 0x2, 0x6}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x174, 0x6c, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x5, 0x2, {0x8, 0x25, 0x1, 0x83, 0x0, 0x7, 0xfffc}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x5, 0xf2, 0x6, 0x20, 0x8}, 0xc, &(0x7f0000000540)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x8, 0x2}]}, 0x2, [{0x87, &(0x7f0000000580)=@string={0x87, 0x3, "ca56c65bea4862771e81df454fc00d487153cd73d670362a95c6ce82d2bf5e467982ff6797a7d6f860a3e149a8b10c0d146324b4d6d453aba47255e2448dc50142a27902bda45ffc2fd4b120ce6533f82989413fa636c74681600af71e613ca9007ab315f07b30ebb1f5d6cd06747751f3a85ac0128a0cee74101a8f43fa6f3dedffd2347f"}}, {0xa5, &(0x7f00000009c0)=@string={0xa5, 0x3, "e53b4aef9d701187e8e1efc410752cd3991bc1b572e0b67629a647c5be2a80a4ac842abc95ce01d41a7ec4fe138dcb1d41e9f30e81945e93ec73d087cfb3efc4831034c3e564a5a275e85650afdd982b239d591d8d7ea62e30132c87ecc30c88db749daebb104ffec55b7c6581438039d14a5e02d7950df55fd376eeacaa6768535c24a41fc234b9f72577ca0c2534251b08fb0529e2cfe8567a8b5f28cb10b74c3fc6"}}]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c011) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000000c0)) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0xd, 0x1, 0x4, {0x5, 0x657, 0xffffffff, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r9 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) 2.851893186s ago: executing program 3 (id=2318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x103) syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x80010, r0, 0x3000) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000240)=0x10, &(0x7f0000000280)=0x2) 2.596227457s ago: executing program 3 (id=2319): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.595212363s ago: executing program 6 (id=2320): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) landlock_restrict_self(r0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) listen(r2, 0x8) timer_delete(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x1a) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) pipe2$9p(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.090681004s ago: executing program 2 (id=2323): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001643c400d53a2635b6b9a14f8291478f8f27353efe240b2c4e8579a899a6b4f88a5f61dea36a9d90ef9cc2108c49662566006eff90de924933e27beb28", @ANYRES16, @ANYBLOB="0502ecfffffffddbdf25120000001800018014000200626f6e645f736c6176655f31000000000800060001000000"], 0x34}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x1, r4, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) 1.974448811s ago: executing program 6 (id=2324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab"], 0xfe33) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000200)="f5c89e1e", 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @remote, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) 1.869734473s ago: executing program 3 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x50, r1, 0x3a69ec6521303473, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0xe843937f8eb4663a}, {0xc, 0x8f, 0x4403}, {0xc, 0x90, 0x400}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.775363271s ago: executing program 3 (id=2326): syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c000201"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000007800000000080000000000000000000000000000661449c420562e756470a69581c6a3f6c15d6b34b7a332eaab347b3198d9b4c8dcca4ca89820a1c5d20c17ef64b885f2e14048a1fbf84cd6eb5d62d07eba98f52b4b4b1f0f9a5897e7861787405bf9de00cf6840135f7251e36723851e9c38af7959cf432591dfac0fedd161ba597d8c3b4c6eafa29524afdfc7f469c34c2884bb9bd778936e65"], 0x18}], 0x1}, 0x0) 1.239069343s ago: executing program 2 (id=2327): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000fa00000000001000000018000180140002006e657464657673696d30000000000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044890) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="a4bb3f21ef99dbfe0b834700fddbd130"], 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) close_range(r0, r2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0x4008af25, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x140) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r8, 0xc0401289, &(0x7f0000000380)={&(0x7f0000000100)="4d6ac0245df39bf6b5ccee7a24764799ae08602fb6df35943acd7982814e4fdebd", 0x21, &(0x7f0000000240)=""/79, 0x4f}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1, 0x28, 0x40) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0xa0340, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x8000000033, &(0x7f0000000080)=0x7, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 982.603374ms ago: executing program 6 (id=2329): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000280)=0x10001) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x60a01, 0x194) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x4}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x4000008, 0x13012, r4, 0x0) dup3(r3, r1, 0x80000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1d, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0x0, 0x0) 954.903939ms ago: executing program 2 (id=2330): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000030c0)={0x1d4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_FN={0x0, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x17, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40010}, 0x4040015) r0 = socket(0x10, 0x803, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000028c0)) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0x1e}) sendto(r0, &(0x7f00000008c0)="c96aaaa8", 0x4, 0x640488d4, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000300)={0x0, 0x0}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) shutdown(r0, 0x0) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000340)=0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000680)={r11, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r12, 0x0, 0x0, r13], [0x2b8]}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r2, 0xc010644f, &(0x7f0000000780)={{0x18, 0x3, &(0x7f0000000400)=[{r4, 0x0, 0x4, 0x7}, {r12, 0x1, 0xffffffff, 0x9}, {0x0, 0x0, 0x5, 0x3}]}}) r14 = syz_genetlink_get_family_id$nfc(&(0x7f00000062c0), r3) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000006600)={0x0, 0x0, &(0x7f00000065c0)={&(0x7f0000006400)={0x14, r14, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4800) r15 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r15, 0xc004500a, &(0x7f0000000000)=0x5) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) pwritev2(r0, &(0x7f0000003040)=[{&(0x7f0000000000)="fa870a0aae763cbc88ae9fc256aec861f96c2cea01f046081f44e6a61520ad0b470d389e09cb45ca2c17bfa0c3482d0b08d0c5b99247f383aff36001c528c853b9308855ea23897b9b78db918b4fb972b018316e251fc63181bdf81039847a331d99d5b060441d09d2dd391a5d2773dc3cf576842632728c5c914bc688426481624d37f207904a0a32938e027a8534b63b7cc46c21292bdc113f94d7ae3f3ff0e1bf4dcc7076b0c2a7e5e48653a6312cf8f3c6cc5598d61e91f043cc173313900b9660bf793d9ccb31655219af5aaa3d56605d3a3f", 0xd5}, {&(0x7f0000000100)="94ee89a8c04ebbdbcddca724f59991ebe8ebc554b1078c250cfaa180d4feb23699de9dede8ebb20db094f2b25a955af90dac8d105dc7f8", 0x37}, {&(0x7f00000006c0)="4184467477b55e4c85ecac2ecc9a38e8a6a574d740a2ee0e73eb8e5ddf84fb0609adddb00dc17c9c420fc91d24729758b58b8ece9f3b1fc3d4c30e595be2aaf78c7fc75d9f3e172f2679038953a8f35659ceb173ffaafe39dcf6f17ec7cc5094a22b1484981aa23d800c124b887eb482d6557f0ad37add624822986f375ab37b4008aeeae4d2929f95", 0x89}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="c8ee67100c31b6a52ae1b897351119c5ab3dab3aa96afda4016c30d0a6683f365bf7a12711e5dc8ae6eb21afffa58f91cd1dc622353338e8a135fd0e309feadd555d80eefb953b910d07bbf3ebc41ef7e2bd4afc58255ddbb8ca8d6930", 0x5d}], 0x5, 0x414, 0x4, 0x1a) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 519.734834ms ago: executing program 3 (id=2335): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001643c400d53a2635b6b9a14f8291478f8f27353efe240b2c4e8579a899a6b4f88a5f61dea36a9d90ef9cc2108c49662566006eff90de924933e27beb28", @ANYRES16, @ANYBLOB="0502ecfffffffddbdf25120000001800018014000200626f6e645f736c6176655f31000000000800060001000000"], 0x34}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x1, r4, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) 473.54395ms ago: executing program 2 (id=2336): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000e00)="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", 0x201}], 0x1, 0x0, 0x208}}], 0x1, 0x4000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f046463a96173742d6c696e6b"], 0x40}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 359.421347ms ago: executing program 5 (id=2338): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x666d1ffd, 0x7f}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0x1c000000000, 0x6}) 309.301376ms ago: executing program 5 (id=2339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_usb_connect(0x5, 0x79c, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x200, 0x8, 0x8, 0xfc, 0x8}, 0x5, &(0x7f0000000e80)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x409}}, {0x69, &(0x7f0000000300)=@string={0x69, 0x3, "4ba3f4621d935574a1a65193b8e742b1ca14b1cb90dfae88a7961551fbdee70030a888cd5c5c3b418184eee17acbf0317c67e16839dea3b4b47390f71aeb2caf875e329ffd612448ed2bb97862860174d93ffebf7f8b9c910a29a512a5ab65eacbf183b141bec6"}}, {0xff, &(0x7f0000000840)=@string={0xff, 0x3, "17ef6354111ba388780d6ed520aba15029b219d7f87561afc985e8b8538e57e179f2a32934a24a9ababbeea72c4f2dc4c0551b1bd7623378065ebf4a0737f29babee4a9a005c3a7b57f733ebd44b8011b484f222443d87baa8668ffbe40bdd0e5c8b2fdf2e5a508313be364c30e9706962c11ecbec39b6cad8855ce0149afa92797d0f0ace8fb60b44e16a16423740e18a72f1d1d817e331e9598ee329d7c9ccfcdff27c94c8a10ffaa681094520514b914231191d91a7eefbb83ce7fcc6a3fb8bbec8dfd65ca823b014bde0d7c8eb911cd54a66d478a09ce65032f842569b022bcf276b47156bb7fbc93313b6c537a3e9149b6bf701b77bad8570a968"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbf7, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x23}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x44810) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg(r4, &(0x7f0000000040)={&(0x7f0000001840)=@ll={0x11, 0x3, r5, 0x1, 0x80, 0x6, @multicast}, 0x80, &(0x7f0000000240)=[{0x0, 0x6}, {&(0x7f0000000000)="f1ef9f8fc77456701af1", 0xa}], 0x2}, 0x24004045) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, 0x0, 0x22883, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) gettid() 291.146408ms ago: executing program 2 (id=2340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = fanotify_init(0x0, 0x8000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x4c0480, 0xa9) ioctl$BLKSSZGET(r4, 0x1268, &(0x7f0000000400)) fanotify_mark(r2, 0x1, 0x40001038, r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0xfb) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000440)) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="00042abd7000fedbdf2501000000200008801c00078008000500260b55288b728b5f1f3d1269ada5afa918080005006d10e62a08000600e6000000e8000c802c000b8008000a005eab000008000900734e150908000a00fd4500000800090084cb3f540800090094d41c0f1c000b8008000a00f3bb00000800090015271f2a08000a00a8da00001c000b8008000900ad019b5808000a00c4e700000800090068f005430c000b8008000a0027fb00003c000b800800090071c67e7008000a008fb7000008000900b02bb44508000900495f2b110800090084a0fb0208000a00c1a1000008000900292d0b1b14000b8028000a0015bd000008000a003ed7000024000b8008000900bb96c93108000a0099e300000809008534ac150800090038e4f208080001000100000034010c8014000b8008000a00418d000008000a00824100004c000b8008000900a0a1ca2c08000900911379210800090070ce900f08000a00b9d6000008000a002145000008000a0073ae00000800090006c5df3808000a001e20000008000a001097000014000b8008000a0044ae0000080009000430f34c44000b8008000a007e63000008000a00d252000008000a00e76b000008000a005af5000008000a00d9fb000008000a000000000008000a00f80a000008000900ddf13e7254000b8008000900792d6c0708000a004b6a0000080009006f69757308000900a191cc1608000900a4f5821d08000a007e53000008000a000b380000080009003ef9690e08000a000800000008000a00c7c2000024000b8008000900e7b40f2108000a00597f0000080009003aa96305080009001f4ba23d6147e7db3487934e5f71f26eda0ef9c68223d254d1bb4d4b2f0bec010b81d6b9203510ed6fe7fd92da4cfe0de4d962146a23ccfb522879104c5a3133d336192e14f1ac19e9abe44c8dd6db11d6266eb801f5089fd0887fed8b678d943f5c274a620e57d1e07885da"], 0x258}, 0x1, 0x0, 0x0, 0x20004844}, 0x40000) fanotify_mark(r2, 0x201, 0x8000033, r3, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2000) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000280)) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100004864000480050003000500000008000100030000000800020003000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 203.770744ms ago: executing program 5 (id=2341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 164.22038ms ago: executing program 5 (id=2342): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 85.119417ms ago: executing program 2 (id=2343): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) (async, rerun: 32) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000000)={0x9, 0x554e5d8d8b514f32, 0xffffffffffffffff}) (rerun: 32) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ff"], 0x0) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f00000000c0)=@ethtool_rx_ntuple={0x35, {0xf, @esp_ip4_spec={@local, @local, 0xfffffff8, 0x7}, @udp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4e20}, 0x8001, 0x9, 0x1, 0x8, 0xffffffffffffffff}}}) (async, rerun: 32) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (rerun: 32) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="78d4730962e7", @ANYRES64=r4], 0xb2) (async) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x436c) 39.902729ms ago: executing program 5 (id=2344): add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799", 0x6, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) 0s ago: executing program 5 (id=2345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r9}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x50, r1, 0x3a69ec6521303473, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0xe843937f8eb4663a}, {0xc, 0x8f, 0x4403}, {0xc, 0x90, 0x400}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): not active [ 587.315907][T10467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.315920][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.315942][T10467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.419032][T10467] hsr_slave_0: entered promiscuous mode [ 587.422469][T10467] hsr_slave_1: entered promiscuous mode [ 587.424113][T10467] debugfs: 'hsr0' already exists in 'hsr' [ 587.424134][T10467] Cannot create hsr debugfs directory [ 587.451081][ T5779] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 587.491784][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 587.501583][ T821] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.506458][ T821] usb 4-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 587.506482][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.506499][ T821] usb 4-1: Product: “㗥䠥௜߆㞩⦠㋠䅷薷䱫ㅏ㎕ᴽ࣒ꩮᗻ옣䃐⽼띏뙔㶺섲섹炽煖옶亍눾仹饷抷䉑⾬裨摬뵙 [ 587.506514][ T821] usb 4-1: Manufacturer: э [ 587.506526][ T821] usb 4-1: SerialNumber: 옜寪㶮㌚ࢬ㏉㖥좃몘舿말⸤ᬃ軐쨜恽졫抭ןẐ㬭빽ش怏獔ᡨ♹댧柦㟵틷ꋾ噰誌㣒䷶⋑࿂ꑇ᦭閖ↄ्䤉병떝齛ᇓ㟤ㅿ읛糞෤섲瀅슈䨡꒳剓萐⎸㯙 [ 587.601668][ T5779] usb 3-1: device descriptor read/8, error -71 [ 587.711868][ T5779] usb usb3-port1: unable to enumerate USB device [ 587.849063][T10520] netlink: 1232 bytes leftover after parsing attributes in process `syz.3.1602'. [ 587.920120][ T821] usb 4-1: found format II with max.bitrate = 1177, frame size=9 [ 587.920145][ T821] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 587.936064][ T821] usb 4-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 587.936090][ T821] usb 4-1: found format II with max.bitrate = 3432, frame size=13 [ 587.936109][ T821] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 588.047116][ T821] usb 4-1: USB disconnect, device number 74 [ 588.567437][T10467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 588.621665][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.622857][T10467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 588.685855][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.714068][T10527] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 588.714093][T10527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 588.764487][ T5645] Bluetooth: hci2: command tx timeout [ 588.791309][T10530] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 588.792425][T10530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 588.812757][T10527] vhci_hcd vhci_hcd.0: Device attached [ 588.816876][T10533] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 588.816898][T10533] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 588.817022][T10533] vhci_hcd vhci_hcd.0: Device attached [ 588.824080][T10530] vhci_hcd vhci_hcd.0: Device attached [ 588.846555][T10528] vhci_hcd: connection closed [ 588.855786][T10531] vhci_hcd: connection closed [ 588.869193][T10534] vhci_hcd: connection closed [ 588.888339][ T1025] vhci_hcd vhci_hcd.0: stop threads [ 588.889414][ T1025] vhci_hcd vhci_hcd.0: release socket [ 588.889506][ T1025] vhci_hcd vhci_hcd.0: disconnect device [ 588.889855][ T1025] vhci_hcd vhci_hcd.0: stop threads [ 588.889865][ T1025] vhci_hcd vhci_hcd.0: release socket [ 588.889884][ T1025] vhci_hcd vhci_hcd.0: disconnect device [ 588.894058][ T1025] vhci_hcd vhci_hcd.0: stop threads [ 588.894073][ T1025] vhci_hcd vhci_hcd.0: release socket [ 588.894107][ T1025] vhci_hcd vhci_hcd.0: disconnect device [ 588.911899][T10467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 589.171040][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.172160][T10467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 589.196944][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.411087][ T821] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 589.415409][T10467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.487565][T10467] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.504353][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.504585][ T9013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.535841][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.536085][ T9013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.561204][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 589.566786][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.567753][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.572948][ T821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 589.574171][ T821] usb 4-1: config 14 has an invalid interface number: 228 but max is 0 [ 589.574193][ T821] usb 4-1: config 14 has no interface number 0 [ 589.574252][ T821] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 589.574276][ T821] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 589.574297][ T821] usb 4-1: config 14 interface 228 has no altsetting 0 [ 589.577489][ T821] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 589.577513][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.577529][ T821] usb 4-1: Product: syz [ 589.577541][ T821] usb 4-1: Manufacturer: syz [ 589.577553][ T821] usb 4-1: SerialNumber: syz [ 590.066508][ T821] legousbtower 4-1:14.228: interrupt endpoints not found [ 590.841540][ T5645] Bluetooth: hci2: command tx timeout [ 590.904691][T10467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.265456][T10588] do_umount: task=syz.0.1616[10588] propagate_mount_busy()!=0 [ 591.303165][ T5747] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 591.404649][T10467] veth0_vlan: entered promiscuous mode [ 591.435305][ T5747] usb 3-1: device descriptor read/64, error -71 [ 591.485158][T10467] veth1_vlan: entered promiscuous mode [ 591.568647][T10467] veth0_macvtap: entered promiscuous mode [ 591.639703][T10467] veth1_macvtap: entered promiscuous mode [ 591.662454][T10588] cgroup: fork rejected by pids controller in /syz0 [ 591.707304][ T5747] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 591.719700][T10467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.766531][T10467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.811683][ T9013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.826150][ T8973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.826194][ T8973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.826226][ T8973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.861538][ T5747] usb 3-1: device descriptor read/64, error -71 [ 592.043582][ T5747] usb usb3-port1: attempt power cycle [ 592.365722][ T5733] usb 4-1: USB disconnect, device number 75 [ 592.406213][ T5650] do_umount: task=syz-executor[5650] propagate_mount_busy()!=0 [ 592.406599][ T5650] do_umount: task=syz-executor[5650] propagate_mount_busy()!=0 [ 592.434105][ T5747] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 592.483100][ T5747] usb 3-1: device descriptor read/8, error -71 [ 592.813956][ T5747] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 592.843677][ T5747] usb 3-1: device descriptor read/8, error -71 [ 592.924289][ T5645] Bluetooth: hci2: command tx timeout [ 593.112509][ T5747] usb usb3-port1: unable to enumerate USB device [ 593.384198][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.384217][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.707635][T10626] cgroup: fork rejected by pids controller in /syz3 [ 593.833828][ T5726] usb 1-1: USB disconnect, device number 12 [ 593.868330][ T8975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.868349][ T8975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.252992][ T5733] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 594.431790][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 594.433902][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.433928][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.433948][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.433978][ T5733] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 594.433997][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.439850][ T5733] usb 4-1: config 0 descriptor?? [ 594.750647][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.767751][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.786216][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.789153][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.027620][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 595.059106][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 595.068233][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 595.069384][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.085203][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 595.137552][ T5733] usbhid 4-1:0.0: can't add hid device: -71 [ 595.137658][ T5733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 595.163474][ T5733] usb 4-1: USB disconnect, device number 76 [ 595.288150][ T9006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.900469][T10678] netlink: 'syz.4.1587': attribute type 10 has an invalid length. [ 595.931614][T10678] syz_tun: entered promiscuous mode [ 595.940122][T10678] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 596.158553][ T9006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.756371][ T9006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.260204][ T9006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.321134][ T5645] Bluetooth: hci3: command tx timeout [ 597.462497][ T5747] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 597.631073][ T5747] usb 5-1: Invalid ep0 maxpacket: 16 [ 597.691585][ T5733] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 597.771747][ T5747] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 597.909154][ T5733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.928308][ T5733] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 597.928336][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.928354][ T5733] usb 4-1: Product: syz [ 597.928368][ T5733] usb 4-1: Manufacturer: syz [ 597.928381][ T5733] usb 4-1: SerialNumber: syz [ 597.964363][ T5733] usb 4-1: config 0 descriptor?? [ 597.998171][ T5747] usb 5-1: Invalid ep0 maxpacket: 16 [ 597.998538][ T5747] usb usb5-port1: attempt power cycle [ 598.214449][ T5834] usb 4-1: USB disconnect, device number 77 [ 598.352526][ T5747] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 598.374164][ T5747] usb 5-1: Invalid ep0 maxpacket: 16 [ 598.561136][ T5747] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 598.581640][ T5747] usb 5-1: Invalid ep0 maxpacket: 16 [ 598.593096][ T5747] usb usb5-port1: unable to enumerate USB device [ 598.605361][ T9006] bridge_slave_1: left allmulticast mode [ 598.605381][ T9006] bridge_slave_1: left promiscuous mode [ 598.605594][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.701104][ T5733] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 598.802632][ T9006] bridge_slave_0: left allmulticast mode [ 598.802665][ T9006] bridge_slave_0: left promiscuous mode [ 598.806791][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.831048][ T5733] usb 3-1: device descriptor read/64, error -71 [ 599.000080][ T9006] dvmrp24: left allmulticast mode [ 599.075029][ T5733] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 599.222852][ T5733] usb 3-1: device descriptor read/64, error -71 [ 599.348896][ T5733] usb usb3-port1: attempt power cycle [ 599.431370][ T5645] Bluetooth: hci3: command tx timeout [ 599.762346][ T5733] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 599.781674][ T5733] usb 3-1: device descriptor read/8, error -71 [ 600.021099][ T5733] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 600.043720][ T5733] usb 3-1: device descriptor read/8, error -71 [ 600.151831][ T9006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.152040][ T5733] usb usb3-port1: unable to enumerate USB device [ 600.176159][ T5747] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 600.233656][ T9006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.275810][ T9006] bond0 (unregistering): Released all slaves [ 600.339258][ T5747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 600.352671][ T5747] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.352694][ T5747] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.383864][ T5747] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 600.383890][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.383907][ T5747] usb 4-1: Product: syz [ 600.383919][ T5747] usb 4-1: Manufacturer: syz [ 600.383931][ T5747] usb 4-1: SerialNumber: syz [ 600.404733][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 600.457710][ T5747] usb 4-1: selecting invalid altsetting 1 [ 600.458474][ T5747] usb 4-1: unit 6 not found! [ 600.542663][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.542944][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.543198][T10661] bridge_slave_0: entered allmulticast mode [ 600.546387][T10661] bridge_slave_0: entered promiscuous mode [ 600.560500][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.568428][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.568692][T10661] bridge_slave_1: entered allmulticast mode [ 600.578609][T10661] bridge_slave_1: entered promiscuous mode [ 600.830368][ T9006] tipc: Disabling bearer [ 600.830898][ T9006] tipc: Disabling bearer [ 600.841621][ T9006] tipc: Disabling bearer [ 600.841861][ T9006] tipc: Left network mode [ 600.911282][T10661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.935369][T10661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.256230][T10661] team0: Port device team_slave_0 added [ 601.346884][T10661] team0: Port device team_slave_1 added [ 601.362598][ T5747] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 601.481636][ T5645] Bluetooth: hci3: command tx timeout [ 601.723196][T10774] FAULT_INJECTION: forcing a failure. [ 601.723196][T10774] name failslab, interval 1, probability 0, space 0, times 0 [ 601.723225][T10774] CPU: 1 UID: 0 PID: 10774 Comm: syz.2.1649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 601.723244][T10774] Tainted: [L]=SOFTLOCKUP [ 601.723249][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.723257][T10774] Call Trace: [ 601.723263][T10774] [ 601.723269][T10774] dump_stack_lvl+0xe8/0x150 [ 601.723290][T10774] should_fail_ex+0x467/0x600 [ 601.723314][T10774] should_failslab+0xa8/0x100 [ 601.723336][T10774] ? skb_clone+0x212/0x3a0 [ 601.723357][T10774] kmem_cache_alloc_noprof+0x9e/0x680 [ 601.723377][T10774] ? skb_clone+0x212/0x3a0 [ 601.723402][T10774] skb_clone+0x212/0x3a0 [ 601.723422][T10774] __netlink_deliver_tap+0x410/0x880 [ 601.723448][T10774] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.723467][T10774] netlink_deliver_tap+0x19c/0x1b0 [ 601.723486][T10774] netlink_dump+0x95b/0xee0 [ 601.723512][T10774] ? __pfx_netlink_dump+0x10/0x10 [ 601.723546][T10774] netlink_recvmsg+0x683/0xa50 [ 601.723572][T10774] ? __pfx_netlink_recvmsg+0x10/0x10 [ 601.723591][T10774] ? lock_acquire+0x115/0x350 [ 601.723608][T10774] ? __lock_acquire+0x6df/0x2e40 [ 601.723626][T10774] ? __pfx_netlink_recvmsg+0x10/0x10 [ 601.723647][T10774] sock_recvmsg_nosec+0x130/0x170 [ 601.723665][T10774] ____sys_recvmsg+0x242/0x4f0 [ 601.723694][T10774] ? __pfx_____sys_recvmsg+0x10/0x10 [ 601.723726][T10774] ? import_iovec+0x73/0xa0 [ 601.723745][T10774] ___sys_recvmsg+0x213/0x5a0 [ 601.723783][T10774] ? __pfx____sys_recvmsg+0x10/0x10 [ 601.723810][T10774] ? lock_acquire+0x115/0x350 [ 601.723838][T10774] ? __fget_files+0x3a8/0x420 [ 601.723867][T10774] do_recvmmsg+0x320/0x7f0 [ 601.723894][T10774] ? __pfx_do_recvmmsg+0x10/0x10 [ 601.723914][T10774] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 601.723944][T10774] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 601.723970][T10774] __x64_sys_recvmmsg+0x198/0x250 [ 601.723992][T10774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 601.724021][T10774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.724038][T10774] do_syscall_64+0x174/0x580 [ 601.724059][T10774] ? trace_irq_disable+0x3b/0x140 [ 601.724075][T10774] ? clear_bhb_loop+0x40/0x90 [ 601.724095][T10774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.724111][T10774] RIP: 0033:0x7fbd47d8de59 [ 601.724126][T10774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.724139][T10774] RSP: 002b:00007fbd45fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 601.724156][T10774] RAX: ffffffffffffffda RBX: 00007fbd48015fa0 RCX: 00007fbd47d8de59 [ 601.724166][T10774] RDX: 0000000000000002 RSI: 00002000000006c0 RDI: 0000000000000003 [ 601.724175][T10774] RBP: 00007fbd45fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.724185][T10774] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 601.724195][T10774] R13: 00007fbd48016038 R14: 00007fbd48015fa0 R15: 00007ffc1a590c68 [ 601.724220][T10774] [ 601.937114][T10661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.937131][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.937151][T10661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.940342][T10661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.940354][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.940386][T10661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.153425][ T5747] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 602.171138][ T5747] usb 4-1: USB disconnect, device number 78 [ 602.316662][T10661] hsr_slave_0: entered promiscuous mode [ 602.319138][T10661] hsr_slave_1: entered promiscuous mode [ 602.323682][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.355434][T10661] debugfs: 'hsr0' already exists in 'hsr' [ 602.355459][T10661] Cannot create hsr debugfs directory [ 602.695169][T10791] kvm: MONITOR instruction emulated as NOP! [ 602.810492][T10796] FAULT_INJECTION: forcing a failure. [ 602.810492][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 602.810516][T10796] CPU: 1 UID: 0 PID: 10796 Comm: syz.4.1655 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 602.810530][T10796] Tainted: [L]=SOFTLOCKUP [ 602.810534][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 602.810540][T10796] Call Trace: [ 602.810544][T10796] [ 602.810548][T10796] dump_stack_lvl+0xe8/0x150 [ 602.810566][T10796] should_fail_ex+0x467/0x600 [ 602.810583][T10796] should_failslab+0xa8/0x100 [ 602.810599][T10796] __kmalloc_noprof+0xfb/0x790 [ 602.810613][T10796] ? tomoyo_realpath_from_path+0xef/0x640 [ 602.810626][T10796] ? tomoyo_realpath_from_path+0xef/0x640 [ 602.810640][T10796] tomoyo_realpath_from_path+0xef/0x640 [ 602.810654][T10796] ? tomoyo_path_number_perm+0x219/0x5f0 [ 602.810668][T10796] tomoyo_path_number_perm+0x246/0x5f0 [ 602.810683][T10796] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 602.810696][T10796] ? __lock_acquire+0x6df/0x2e40 [ 602.810712][T10796] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 602.810727][T10796] ? lockdep_hardirqs_on+0x7a/0x110 [ 602.810749][T10796] ? __fget_files+0x2a/0x420 [ 602.810765][T10796] ? __fget_files+0x2a/0x420 [ 602.810778][T10796] ? __fget_files+0x3a8/0x420 [ 602.810790][T10796] ? __fget_files+0x2a/0x420 [ 602.810805][T10796] security_file_ioctl+0xb9/0x260 [ 602.810819][T10796] __se_sys_ioctl+0x47/0x170 [ 602.810831][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.810841][T10796] do_syscall_64+0x174/0x580 [ 602.810855][T10796] ? trace_irq_disable+0x3b/0x140 [ 602.810864][T10796] ? clear_bhb_loop+0x40/0x90 [ 602.810875][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.810889][T10796] RIP: 0033:0x7f5c0583de59 [ 602.810899][T10796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.810907][T10796] RSP: 002b:00007f5c03a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.810923][T10796] RAX: ffffffffffffffda RBX: 00007f5c05ac5fa0 RCX: 00007f5c0583de59 [ 602.810934][T10796] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 602.810944][T10796] RBP: 00007f5c03a96090 R08: 0000000000000000 R09: 0000000000000000 [ 602.810952][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.810968][T10796] R13: 00007f5c05ac6038 R14: 00007f5c05ac5fa0 R15: 00007ffe03afd578 [ 602.810993][T10796] [ 602.811096][T10796] ERROR: Out of memory at tomoyo_realpath_from_path. [ 602.831425][ T5332] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 602.987618][ T5332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.990860][ T5332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.990880][ T5332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.997347][ T5332] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 602.997371][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.997388][ T5332] usb 4-1: Product: syz [ 602.997400][ T5332] usb 4-1: Manufacturer: syz [ 602.997411][ T5332] usb 4-1: SerialNumber: syz [ 603.014936][ T5332] usb 4-1: selecting invalid altsetting 1 [ 603.015679][ T5332] usb 4-1: unit 6 not found! [ 603.098599][ T5332] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 603.153091][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.202170][ T33] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,1024B). Runtime 120 seconds [ 603.202213][ T33] block nbd1: Possible stuck request ffff8880276a71c0: control (read@1024,1024B). Runtime 120 seconds [ 603.202240][ T33] block nbd1: Possible stuck request ffff8880276a7380: control (read@2048,1024B). Runtime 120 seconds [ 603.202267][ T33] block nbd1: Possible stuck request ffff8880276a7540: control (read@3072,1024B). Runtime 120 seconds [ 603.346175][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 603.487193][ T5726] usb 4-1: USB disconnect, device number 79 [ 603.561358][ T5645] Bluetooth: hci3: command tx timeout [ 603.570155][T10804] netlink: 738 bytes leftover after parsing attributes in process `syz.4.1657'. [ 603.612939][ T5747] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 603.791079][ T5747] usb 3-1: device descriptor read/64, error -71 [ 604.041551][ T5747] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 604.179038][ T5747] usb 3-1: device descriptor read/64, error -71 [ 604.281350][ T5747] usb usb3-port1: attempt power cycle [ 604.631070][ T9006] hsr_slave_0: left promiscuous mode [ 604.661127][ T5747] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 604.685146][ T5747] usb 3-1: device descriptor read/8, error -71 [ 604.691094][ T9006] hsr_slave_1: left promiscuous mode [ 604.695303][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.695326][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.743603][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.743629][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.809895][ T9006] veth1_macvtap: left promiscuous mode [ 604.810000][ T9006] veth0_macvtap: left promiscuous mode [ 604.841244][ T5726] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 604.921260][ T5747] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 604.941718][ T5747] usb 3-1: device descriptor read/8, error -71 [ 605.010369][ T5726] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 605.010396][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.010413][ T5726] usb 4-1: Product: syz [ 605.010436][ T5726] usb 4-1: Manufacturer: syz [ 605.010447][ T5726] usb 4-1: SerialNumber: syz [ 605.049528][ T5726] usb 4-1: config 0 descriptor?? [ 605.059037][ T5747] usb usb3-port1: unable to enumerate USB device [ 605.094781][ T5726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 605.472773][T10825] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1660'. [ 605.791965][ T5726] gspca_stk1135: reg_w 0x0 err -110 [ 605.793142][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793155][ T5726] gspca_stk1135: Sensor write failed [ 605.793175][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793183][ T5726] gspca_stk1135: Sensor write failed [ 605.793226][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793236][ T5726] gspca_stk1135: Sensor read failed [ 605.793259][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793266][ T5726] gspca_stk1135: Sensor read failed [ 605.793272][ T5726] gspca_stk1135: Detected sensor type unknown (0x0) [ 605.793296][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793303][ T5726] gspca_stk1135: Sensor read failed [ 605.793323][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793331][ T5726] gspca_stk1135: Sensor read failed [ 605.793351][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793357][ T5726] gspca_stk1135: Sensor write failed [ 605.793379][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 605.793386][ T5726] gspca_stk1135: Sensor write failed [ 605.793486][ T5726] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 606.002039][ T9006] team0 (unregistering): Port device team_slave_1 removed [ 606.041593][ T9006] team0 (unregistering): Port device team_slave_0 removed [ 606.335892][T10834] 9pnet_fd: Insufficient options for proto=fd [ 606.378825][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 606.410318][ T821] usb 4-1: USB disconnect, device number 80 [ 606.508525][T10839] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1663'. [ 607.219785][T10860] netlink: 'syz.3.1666': attribute type 10 has an invalid length. [ 607.241182][T10860] macvlan1: entered promiscuous mode [ 607.241209][T10860] macvlan1: entered allmulticast mode [ 607.259715][T10860] veth1_vlan: entered allmulticast mode [ 607.277752][T10860] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 607.662797][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 607.890269][ T5747] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 607.984974][T10661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 608.048037][T10661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.065067][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 608.075363][ T5747] usb 3-1: unable to get BOS descriptor or descriptor too short [ 608.084870][ T5747] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 608.084893][ T5747] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 608.084911][ T5747] usb 3-1: config 14 has no interface number 0 [ 608.084925][ T5747] usb 3-1: config 14 has no interface number 1 [ 608.084990][ T5747] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 608.085011][ T5747] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 608.085033][ T5747] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 608.085056][ T5747] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 608.085078][ T5747] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 608.085101][ T5747] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.085124][ T5747] usb 3-1: config 14 interface 57 has no altsetting 0 [ 608.085139][ T5747] usb 3-1: config 14 interface 228 has no altsetting 0 [ 608.136038][T10661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 608.208671][ T5747] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 608.208698][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.208708][ T5747] usb 3-1: Product: syz [ 608.208714][ T5747] usb 3-1: Manufacturer: syz [ 608.208721][ T5747] usb 3-1: SerialNumber: syz [ 608.343909][T10661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.359404][T10661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 608.507060][T10661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.518891][T10661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 608.565596][T10661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.717365][ T5747] legousbtower 3-1:14.57: interrupt endpoints not found [ 608.963452][T10890] random: crng reseeded on system resumption [ 609.105647][ T5747] legousbtower 3-1:14.228: get version request failed: -32 [ 609.105836][ T5747] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -32 [ 609.348680][T10661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.459474][T10661] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.552595][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.586497][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.651696][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.652037][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.144923][T10902] dvmrp24: entered allmulticast mode [ 610.641625][ T5834] usb 3-1: USB disconnect, device number 74 [ 611.047150][ T5834] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 611.051512][T10922] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=4 [ 611.211238][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 611.251890][ T5834] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 611.251914][ T5834] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.251949][ T5834] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 611.251967][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.257306][ T5834] usb 3-1: config 0 descriptor?? [ 611.380504][T10661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.491220][T10915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1676'. [ 612.390228][T10661] veth0_vlan: entered promiscuous mode [ 612.415857][T10661] veth1_vlan: entered promiscuous mode [ 612.521139][ T5734] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 612.587896][T10661] veth0_macvtap: entered promiscuous mode [ 612.618434][T10661] veth1_macvtap: entered promiscuous mode [ 612.671230][T10661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.682958][ T5734] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 612.682987][ T5734] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.683009][ T5734] usb 4-1: config 0 interface 0 has no altsetting 0 [ 612.683039][ T5734] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 612.683058][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.708877][ T5734] usb 4-1: config 0 descriptor?? [ 612.809638][T10661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.937943][ T5734] usbhid 4-1:0.0: can't add hid device: -71 [ 612.938056][ T5734] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 612.962168][ T5734] usb 4-1: USB disconnect, device number 81 [ 613.086531][ T194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.086576][ T194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.086610][ T194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.086641][ T194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.818176][ T5859] usb 3-1: USB disconnect, device number 75 [ 613.827956][ T8975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.827971][ T8975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.922796][T10972] binder: 10971:10972 ioctl c018620c 200000000000 returned -1 [ 614.019086][T10976] afs: Bad value for 'flock' [ 614.416295][ T8995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.416313][ T8995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.604910][T10989] sg_write: data in/out 622649/136 bytes for SCSI command 0x0-- guessing data in; [ 614.604910][T10989] program syz.4.1697 not setting count and/or reply_len properly [ 614.637016][ T38] audit: type=1800 audit(1783198251.898:11): pid=10989 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.1697" name="file0" dev="overlay" ino=146 res=0 errno=0 [ 614.941641][ T5726] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 615.137381][ T5726] usb 5-1: config 7 has an invalid interface number: 188 but max is 2 [ 615.137407][ T5726] usb 5-1: config 7 has an invalid interface number: 76 but max is 2 [ 615.137424][ T5726] usb 5-1: config 7 has an invalid interface number: 102 but max is 2 [ 615.137441][ T5726] usb 5-1: config 7 has no interface number 0 [ 615.137453][ T5726] usb 5-1: config 7 has no interface number 1 [ 615.137466][ T5726] usb 5-1: config 7 has no interface number 2 [ 615.137526][ T5726] usb 5-1: config 7 interface 188 altsetting 150 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 615.137547][ T5726] usb 5-1: config 7 interface 188 altsetting 150 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 615.137569][ T5726] usb 5-1: config 7 interface 188 altsetting 150 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 615.137589][ T5726] usb 5-1: config 7 interface 188 altsetting 150 has an invalid descriptor for endpoint zero, skipping [ 615.137607][ T5726] usb 5-1: config 7 interface 188 altsetting 150 has an invalid descriptor for endpoint zero, skipping [ 615.137624][ T5726] usb 5-1: config 7 interface 188 altsetting 150 has a duplicate endpoint with address 0xC, skipping [ 615.137655][ T5726] usb 5-1: config 7 interface 76 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 615.137677][ T5726] usb 5-1: config 7 interface 76 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 615.137694][ T5726] usb 5-1: config 7 interface 76 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 615.137711][ T5726] usb 5-1: config 7 interface 76 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 615.137729][ T5726] usb 5-1: config 7 interface 76 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 615.137757][ T5726] usb 5-1: config 7 interface 102 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 615.137773][ T5726] usb 5-1: config 7 interface 102 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 615.137790][ T5726] usb 5-1: config 7 interface 188 has no altsetting 0 [ 615.137804][ T5726] usb 5-1: config 7 interface 76 has no altsetting 0 [ 615.137818][ T5726] usb 5-1: config 7 interface 102 has no altsetting 0 [ 615.142125][ T5726] usb 5-1: New USB device found, idVendor=1410, idProduct=a013, bcdDevice=2e.3b [ 615.142151][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.142168][ T5726] usb 5-1: Product: syz [ 615.142180][ T5726] usb 5-1: Manufacturer: ї [ 615.142192][ T5726] usb 5-1: SerialNumber: syz [ 615.261966][T10991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.591480][ T5726] usb 5-1: USB disconnect, device number 6 [ 615.852104][T11004] kvm_intel: kvm [11003]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 616.539212][T11018] loop8: detected capacity change from 0 to 7 [ 616.559105][T11018] Dev loop8: unable to read RDB block 7 [ 616.559257][T11018] loop8: unable to read partition table [ 616.559451][T11018] loop8: partition table beyond EOD, truncated [ 616.559484][T11018] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 616.708413][T11013] Flush: task=syz.4.1705[11013] dev=loop8 state=2 [ 616.794924][T11013] Teardown: task=syz.4.1705[11013] dev=loop8 state=2 [ 616.911201][ T5332] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 617.065930][ T5332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 617.066650][ T5332] usb 4-1: not running at top speed; connect to a high speed hub [ 617.067999][ T5332] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 617.070626][ T5332] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 617.070650][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.070668][ T5332] usb 4-1: Product: syz [ 617.070707][ T5332] usb 4-1: Manufacturer: syz [ 617.070720][ T5332] usb 4-1: SerialNumber: syz [ 617.633806][ T5332] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 617.636585][ T5332] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 618.070116][T11063] binder: 11062:11063 ioctl c0306201 2000000004c0 returned -14 [ 618.071208][T11063] binder: 11062:11063 ioctl c0306201 200000000280 returned -14 [ 618.082157][T11063] binder: 11062:11063 ioctl c0306201 200000000180 returned -14 [ 618.157989][ T5332] usb 4-1: USB disconnect, device number 82 [ 618.174244][T11065] loop5: detected capacity change from 0 to 7 [ 618.187974][T11065] Dev loop5: unable to read RDB block 7 [ 618.188000][T11065] loop5: AHDI p1 [ 618.188017][T11065] loop5: partition table partially beyond EOD, truncated [ 618.348478][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.455297][ T5793] Flush: task=udevd[5793] dev=loop5 state=2 [ 618.544212][ T5793] Teardown: task=udevd[5793] dev=loop5 state=2 [ 618.581105][ T5332] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 618.711192][ T5332] usb 4-1: device descriptor read/64, error -71 [ 618.961171][ T5332] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 619.131235][ T5332] usb 4-1: device descriptor read/64, error -71 [ 619.258220][ T5332] usb usb4-port1: attempt power cycle [ 619.311122][ T5734] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 619.461824][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 619.463901][ T5734] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.463930][ T5734] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.463960][ T5734] usb 5-1: config 0 interface 0 has no altsetting 0 [ 619.463990][ T5734] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 619.464010][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.468227][ T5734] usb 5-1: config 0 descriptor?? [ 619.601948][ T5332] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 619.621940][ T5332] usb 4-1: device descriptor read/8, error -71 [ 619.924978][ T5734] hid_parser_main: 457 callbacks suppressed [ 619.925102][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x3 [ 619.925131][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x0 [ 619.925153][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x0 [ 619.925178][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x0 [ 619.925200][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x0 [ 619.925222][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x0 [ 619.925247][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x0 [ 619.925270][ T5734] corsair 0003:1B1C:1B09.0008: unknown main item tag 0x0 [ 619.931099][ T5332] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 619.955966][ T5332] usb 4-1: device descriptor read/8, error -71 [ 619.990626][ T38] audit: type=1326 audit(1783198257.278:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11118 comm="syz.2.1731" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd47d8de59 code=0x0 [ 620.001108][ T5733] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 620.020088][ T5734] corsair 0003:1B1C:1B09.0008: hidraw0: USB HID vff.ff Device [HID 1b1c:1b09] on usb-dummy_hcd.4-1/input0 [ 620.061472][ T5332] usb usb4-port1: unable to enumerate USB device [ 620.151070][ T5733] usb 6-1: Using ep0 maxpacket: 32 [ 620.152842][ T5733] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 620.152863][ T5733] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 620.152883][ T5733] usb 6-1: config 0 interface 0 has no altsetting 0 [ 620.154930][ T5733] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 620.154953][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.154970][ T5733] usb 6-1: Product: syz [ 620.154981][ T5733] usb 6-1: Manufacturer: syz [ 620.154993][ T5733] usb 6-1: SerialNumber: syz [ 620.158282][ T5733] usb 6-1: config 0 descriptor?? [ 620.210087][ T5332] usb 5-1: USB disconnect, device number 7 [ 620.630745][ T5733] gs_usb 6-1:0.0: Couldn't get device config: (err=-71) [ 620.630785][ T5733] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 620.674651][ T5733] usb 6-1: USB disconnect, device number 2 [ 620.893458][T11137] random: crng reseeded on system resumption [ 621.291096][ T5859] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 621.494643][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 621.496509][ T5859] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 621.496541][ T5859] usb 4-1: can't read configurations, error -71 [ 621.921221][T11179] fuseblk: fd is not a fuse device [ 622.452841][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 622.483690][ T5726] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 622.622168][ T5726] usb 3-1: device descriptor read/64, error -71 [ 622.712540][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1750'. [ 622.784189][ T5645] Bluetooth: hci3: connection err: -111 [ 622.861103][ T5726] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 622.991187][ T5726] usb 3-1: device descriptor read/64, error -71 [ 623.061125][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 623.084188][T11226] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1753'. [ 623.101315][ T5726] usb usb3-port1: attempt power cycle [ 623.223429][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 623.225599][ T5859] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 623.225622][ T5859] usb 5-1: config 0 has no interface number 0 [ 623.227894][ T5859] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 623.227919][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.227948][ T5859] usb 5-1: Product: syz [ 623.227961][ T5859] usb 5-1: Manufacturer: syz [ 623.227973][ T5859] usb 5-1: SerialNumber: syz [ 623.282684][ T5859] usb 5-1: config 0 descriptor?? [ 623.287234][ T5859] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 623.451144][ T5726] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 623.471758][ T5726] usb 3-1: device descriptor read/8, error -71 [ 623.520749][ T5859] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 623.540317][ T5859] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 623.591866][ T5332] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 623.732233][ T5726] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 623.743573][ T5332] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 623.743623][ T5332] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 623.743643][ T5332] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.747919][ T5332] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 623.747942][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 623.747959][ T5332] usb 4-1: Product: syz [ 623.747971][ T5332] usb 4-1: Manufacturer: syz [ 623.747983][ T5332] usb 4-1: SerialNumber: syz [ 623.755570][ T5332] usb 4-1: config 0 descriptor?? [ 623.770447][ T5332] hub 4-1:0.0: bad descriptor, ignoring hub [ 623.770481][ T5332] hub 4-1:0.0: probe with driver hub failed with error -5 [ 623.775245][ T5726] usb 3-1: device descriptor read/8, error -71 [ 623.776680][ T5332] usb 4-1: selecting invalid altsetting 0 [ 623.905079][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 623.905876][ T5726] usb usb3-port1: unable to enumerate USB device [ 623.953436][ T5733] usb 5-1: USB disconnect, device number 8 [ 623.984333][ T5733] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 624.057974][ T5733] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 624.079909][ T5733] quatech2 5-1:0.51: device disconnected [ 624.297897][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.430101][ T5726] usb 4-1: USB disconnect, device number 89 [ 625.551883][ T5863] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 625.691422][ T5863] usb 4-1: device descriptor read/64, error -71 [ 625.941196][ T5863] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 626.071203][ T5863] usb 4-1: device descriptor read/64, error -71 [ 626.181539][ T5863] usb usb4-port1: attempt power cycle [ 626.272202][ T5859] hid-generic 0005:0001:FFFFFFFB.0009: ignoring exceeding usage max [ 626.276143][ T5859] hid-generic 0005:0001:FFFFFFFB.0009: item fetching failed at offset 26/227 [ 626.276718][ T5859] hid-generic 0005:0001:FFFFFFFB.0009: probe with driver hid-generic failed with error -22 [ 626.531954][ T5863] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 626.553029][ T5863] usb 4-1: device descriptor read/8, error -71 [ 626.801075][ T5863] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 626.823230][ T5863] usb 4-1: device descriptor read/8, error -71 [ 626.932451][ T5863] usb usb4-port1: unable to enumerate USB device [ 627.071220][ T5859] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 627.091492][ T5829] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 627.251030][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 627.252728][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.252861][ T5829] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 26 [ 627.252921][ T5829] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 627.255531][ T5829] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 627.255555][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.255572][ T5829] usb 5-1: Product: syz [ 627.255584][ T5829] usb 5-1: Manufacturer: syz [ 627.255595][ T5829] usb 5-1: SerialNumber: syz [ 627.707279][T11319] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1777'. [ 627.707304][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 627.748620][ T5829] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 627.748635][ T5829] usb 5-1: clock source 0 is not valid, cannot use [ 627.748937][ T5829] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 627.749309][ T5829] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 627.821108][ T5829] usb 5-1: USB disconnect, device number 9 [ 627.866285][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.414626][T11328] FAULT_INJECTION: forcing a failure. [ 628.414626][T11328] name failslab, interval 1, probability 0, space 0, times 0 [ 628.414659][T11328] CPU: 0 UID: 0 PID: 11328 Comm: syz.4.1781 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 628.414681][T11328] Tainted: [L]=SOFTLOCKUP [ 628.414686][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.414695][T11328] Call Trace: [ 628.414702][T11328] [ 628.414709][T11328] dump_stack_lvl+0xe8/0x150 [ 628.414735][T11328] should_fail_ex+0x467/0x600 [ 628.414764][T11328] should_failslab+0xa8/0x100 [ 628.414789][T11328] __kmalloc_noprof+0xfb/0x790 [ 628.414812][T11328] ? tomoyo_encode+0x2ad/0x570 [ 628.414827][T11328] ? tomoyo_encode+0x2ad/0x570 [ 628.414849][T11328] tomoyo_encode+0x2ad/0x570 [ 628.414871][T11328] tomoyo_realpath_from_path+0x5fa/0x640 [ 628.414898][T11328] ? tomoyo_path_number_perm+0x219/0x5f0 [ 628.414920][T11328] tomoyo_path_number_perm+0x246/0x5f0 [ 628.414945][T11328] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 628.414967][T11328] ? __lock_acquire+0x6df/0x2e40 [ 628.414995][T11328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 628.415018][T11328] ? lockdep_hardirqs_on+0x7a/0x110 [ 628.415065][T11328] ? __fget_files+0x2a/0x420 [ 628.415091][T11328] ? __fget_files+0x2a/0x420 [ 628.415112][T11328] ? __fget_files+0x3a8/0x420 [ 628.415134][T11328] ? __fget_files+0x2a/0x420 [ 628.415160][T11328] security_file_ioctl+0xb9/0x260 [ 628.415185][T11328] __se_sys_ioctl+0x47/0x170 [ 628.415203][T11328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.415222][T11328] do_syscall_64+0x174/0x580 [ 628.415245][T11328] ? trace_irq_disable+0x3b/0x140 [ 628.415262][T11328] ? clear_bhb_loop+0x40/0x90 [ 628.415283][T11328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.415301][T11328] RIP: 0033:0x7f5c0583de59 [ 628.415317][T11328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.415331][T11328] RSP: 002b:00007f5c03a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.415350][T11328] RAX: ffffffffffffffda RBX: 00007f5c05ac5fa0 RCX: 00007f5c0583de59 [ 628.415363][T11328] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 628.415374][T11328] RBP: 00007f5c03a96090 R08: 0000000000000000 R09: 0000000000000000 [ 628.415384][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.415395][T11328] R13: 00007f5c05ac6038 R14: 00007f5c05ac5fa0 R15: 00007ffe03afd578 [ 628.415424][T11328] [ 628.415441][T11328] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.511079][ T5829] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 629.662886][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.662915][ T5829] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.662943][ T5829] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.663004][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.876354][ T5829] usb 4-1: usb_control_msg returned -32 [ 629.876398][ T5829] usbtmc 4-1:16.0: can't read capabilities [ 630.670697][T11395] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1800'. [ 630.871030][ T5859] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 630.951091][ T5726] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 631.021067][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 631.037230][ T5859] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 631.037248][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.058695][ T5859] usb 5-1: config 0 descriptor?? [ 631.071654][ T5859] gspca_main: sunplus-2.14.0 probing 041e:400b [ 631.111075][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 631.112933][ T5726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.112981][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.112994][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.113005][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.113027][ T5726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.113038][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.344409][ T5726] usb 3-1: GET_CAPABILITIES returned 0 [ 631.344437][ T5726] usbtmc 3-1:16.0: can't read capabilities [ 631.556832][ T5834] usb 3-1: USB disconnect, device number 80 [ 631.878643][ T5859] gspca_sunplus: reg_w_riv err -71 [ 631.878731][ T5859] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 631.946864][ T5859] usb 5-1: USB disconnect, device number 10 [ 632.281445][ T5859] usb 4-1: USB disconnect, device number 94 [ 632.515872][ T5829] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 632.584450][T11406] tmpfs: Unknown parameter 'mpols5!{C3ͦ' [ 632.651119][ T5829] usb 3-1: device descriptor read/64, error -71 [ 632.891181][ T5829] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 632.938514][T11418] dvmrp24: entered allmulticast mode [ 633.021076][ T5829] usb 3-1: device descriptor read/64, error -71 [ 633.131769][ T5829] usb usb3-port1: attempt power cycle [ 633.164746][T10467] do_umount: task=syz-executor[10467] propagate_mount_busy()!=0 [ 633.282638][ T33] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,1024B). Runtime 150 seconds [ 633.282681][ T33] block nbd1: Possible stuck request ffff8880276a71c0: control (read@1024,1024B). Runtime 150 seconds [ 633.282707][ T33] block nbd1: Possible stuck request ffff8880276a7380: control (read@2048,1024B). Runtime 150 seconds [ 633.282732][ T33] block nbd1: Possible stuck request ffff8880276a7540: control (read@3072,1024B). Runtime 150 seconds [ 633.481140][ T5829] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 633.511613][ T5829] usb 3-1: device descriptor read/8, error -71 [ 633.751383][ T5829] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 633.810717][ T5829] usb 3-1: device descriptor read/8, error -71 [ 633.911633][ T5829] usb usb3-port1: unable to enumerate USB device [ 633.952752][T10694] bond0: (slave syz_tun): Releasing backup interface [ 634.225466][T11429] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1814'. [ 634.492925][ T5834] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 634.635020][ T5834] usb 6-1: device descriptor read/64, error -71 [ 634.885258][ T5834] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 634.899297][T11438] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 634.899320][T11438] CIFS mount error: No usable UNC path provided in device string! [ 634.899320][T11438] [ 634.899555][T11438] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 634.967468][ T5761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.026754][ T5834] usb 6-1: device descriptor read/64, error -71 [ 635.090791][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 635.135966][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 635.151958][ T5834] usb usb6-port1: attempt power cycle [ 635.153445][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 635.165616][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 635.169896][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 635.591181][ T5834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 635.627207][ T5834] usb 6-1: device descriptor read/8, error -71 [ 635.688505][ T5761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.871113][ T5834] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 635.916320][ T5834] usb 6-1: device descriptor read/8, error -71 [ 636.021768][ T5834] usb usb6-port1: unable to enumerate USB device [ 636.180693][ T5761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.606827][ T5761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.330429][ T5640] Bluetooth: hci2: command tx timeout [ 637.360664][T11439] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.368434][T11439] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.368596][T11439] bridge_slave_0: entered allmulticast mode [ 637.370551][T11439] bridge_slave_0: entered promiscuous mode [ 637.381402][ T5834] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 637.418864][T11439] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.419246][T11439] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.419516][T11439] bridge_slave_1: entered allmulticast mode [ 637.433217][T11439] bridge_slave_1: entered promiscuous mode [ 637.541679][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 637.544470][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.544491][ T5834] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.591870][ T5834] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.591898][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.591917][ T5834] usb 4-1: Product: syz [ 637.591930][ T5834] usb 4-1: Manufacturer: syz [ 637.591943][ T5834] usb 4-1: SerialNumber: syz [ 637.707825][ T5834] usb 4-1: 0:2 : does not exist [ 637.707902][ T5834] usb 4-1: unit 11 not found! [ 638.006250][ T5834] usb 4-1: USB disconnect, device number 95 [ 638.216156][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.294066][T11439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.319961][T11439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.721906][ T5761] bridge_slave_1: left allmulticast mode [ 638.721946][ T5761] bridge_slave_1: left promiscuous mode [ 638.722134][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.845317][ T5761] bridge_slave_0: left allmulticast mode [ 638.845348][ T5761] bridge_slave_0: left promiscuous mode [ 638.845559][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.963724][ T5761] dvmrp24: left allmulticast mode [ 639.401174][ T5640] Bluetooth: hci2: command tx timeout [ 639.761870][ T5761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.841674][ T5761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.864632][ T5761] bond0 (unregistering): Released all slaves [ 639.906709][T11439] team0: Port device team_slave_0 added [ 640.110382][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 640.116611][T11439] team0: Port device team_slave_1 added [ 640.256505][T11439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.256520][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.256541][T11439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.348701][T11439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.348712][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.348726][T11439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.331110][ T5332] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 641.396670][T11439] hsr_slave_0: entered promiscuous mode [ 641.398709][T11439] hsr_slave_1: entered promiscuous mode [ 641.400374][T11439] debugfs: 'hsr0' already exists in 'hsr' [ 641.400396][T11439] Cannot create hsr debugfs directory [ 641.481906][ T5640] Bluetooth: hci2: command tx timeout [ 641.504612][ T5332] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 641.504642][ T5332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 641.504679][ T5332] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 641.504699][ T5332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.558140][ T5332] usb 4-1: config 0 descriptor?? [ 641.722180][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 641.798837][ T5332] ath6kl: Failed to submit usb control message: -71 [ 641.799064][ T5332] ath6kl: unable to send the bmi data to the device: -71 [ 641.799080][ T5332] ath6kl: Unable to send get target info: -71 [ 641.822554][ T5332] ath6kl: Failed to init ath6kl core: -71 [ 641.823919][ T5332] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 641.971715][ T5332] usb 4-1: USB disconnect, device number 96 [ 642.781045][ T5761] hsr_slave_0: left promiscuous mode [ 642.796540][ T5829] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 642.832444][ T5761] hsr_slave_1: left promiscuous mode [ 642.833139][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.833154][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.872764][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.872788][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.902837][T11559] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1844'. [ 642.957193][ T5829] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 642.957222][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.957239][ T5829] usb 3-1: Product: syz [ 642.957252][ T5829] usb 3-1: Manufacturer: syz [ 642.957263][ T5829] usb 3-1: SerialNumber: syz [ 642.993520][ T5829] usb 3-1: config 0 descriptor?? [ 642.999621][ T5829] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 643.083968][ T5761] veth1_macvtap: left promiscuous mode [ 643.084066][ T5761] veth0_macvtap: left promiscuous mode [ 643.087432][ T5761] veth1_vlan: left promiscuous mode [ 643.087626][ T5761] veth0_vlan: left promiscuous mode [ 643.562182][ T5640] Bluetooth: hci2: command tx timeout [ 643.604558][T11557] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1843'. [ 643.607107][ T5829] gspca_stk1135: reg_w 0x3 err -71 [ 643.608129][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608137][ T5829] gspca_stk1135: Sensor write failed [ 643.608150][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608154][ T5829] gspca_stk1135: Sensor write failed [ 643.608167][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608171][ T5829] gspca_stk1135: Sensor read failed [ 643.608183][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608188][ T5829] gspca_stk1135: Sensor read failed [ 643.608191][ T5829] gspca_stk1135: Detected sensor type unknown (0x0) [ 643.608206][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608210][ T5829] gspca_stk1135: Sensor read failed [ 643.608222][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608226][ T5829] gspca_stk1135: Sensor read failed [ 643.608239][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608243][ T5829] gspca_stk1135: Sensor write failed [ 643.608257][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 643.608261][ T5829] gspca_stk1135: Sensor write failed [ 643.608315][ T5829] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 643.736136][ T5829] usb 3-1: USB disconnect, device number 85 [ 644.263338][ T5761] team0 (unregistering): Port device team_slave_1 removed [ 644.323353][ T5761] team0 (unregistering): Port device team_slave_0 removed [ 644.453738][ T821] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 644.601222][ T821] usb 3-1: Using ep0 maxpacket: 32 [ 644.603083][ T821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 644.603105][ T821] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 644.603125][ T821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 644.638113][ T821] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 644.638140][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.638157][ T821] usb 3-1: Product: syz [ 644.638170][ T821] usb 3-1: Manufacturer: syz [ 644.638182][ T821] usb 3-1: SerialNumber: syz [ 644.685124][ T821] usb 3-1: config 0 descriptor?? [ 645.110686][ T821] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 645.321213][ T821] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 645.489860][ T821] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 645.518885][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 645.619032][ T5726] usb 3-1: USB disconnect, device number 86 [ 646.868581][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 647.624236][ T821] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 647.949687][ T821] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 647.949715][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.949732][ T821] usb 6-1: Product: syz [ 647.949744][ T821] usb 6-1: Manufacturer: syz [ 647.949756][ T821] usb 6-1: SerialNumber: syz [ 648.091578][ T821] usb 6-1: config 0 descriptor?? [ 648.190301][T11439] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 648.324250][ T821] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 649.752591][T11439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.814556][T11439] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 650.990811][ T821] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 651.091811][ T821] usb 6-1: USB disconnect, device number 9 [ 651.097614][T11439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.120220][T11439] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 651.307066][T11439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.325708][T11439] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 651.434169][T11439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.987865][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 652.098248][T11439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.184923][T11439] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.250060][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.250151][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.290810][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.298251][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.163076][T11439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.562541][ T821] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 653.675135][T11439] veth0_vlan: entered promiscuous mode [ 653.693543][T11439] veth1_vlan: entered promiscuous mode [ 653.716156][ T821] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 653.716184][ T821] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 653.716202][ T821] usb 6-1: Product: syz [ 653.716216][ T821] usb 6-1: Manufacturer: syz [ 653.716229][ T821] usb 6-1: SerialNumber: syz [ 653.770154][ T821] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 653.860834][T11439] veth0_macvtap: entered promiscuous mode [ 653.884969][T11439] veth1_macvtap: entered promiscuous mode [ 653.995876][T11439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.026012][T11439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.083748][ T9012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.083984][ T9012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.084018][ T9012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.084050][ T9012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.294166][ T821] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 654.294208][ T821] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 654.554380][T11689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.554977][T11689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.582826][ T5859] usb 6-1: USB disconnect, device number 10 [ 655.423377][ T8995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.423396][ T8995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.612592][ T8988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.612611][ T8988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.696130][T11711] FAULT_INJECTION: forcing a failure. [ 655.696130][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 655.696165][T11711] CPU: 0 UID: 0 PID: 11711 Comm: syz.3.1873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 655.696188][T11711] Tainted: [L]=SOFTLOCKUP [ 655.696194][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.696203][T11711] Call Trace: [ 655.696209][T11711] [ 655.696216][T11711] dump_stack_lvl+0xe8/0x150 [ 655.696242][T11711] should_fail_ex+0x467/0x600 [ 655.696270][T11711] should_failslab+0xa8/0x100 [ 655.696294][T11711] __kmalloc_noprof+0xfb/0x790 [ 655.696316][T11711] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 655.696340][T11711] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 655.696365][T11711] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 655.696385][T11711] ? kernel_text_address+0xa5/0xe0 [ 655.696412][T11711] genl_family_rcv_msg_doit+0xda/0x340 [ 655.696436][T11711] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 655.696457][T11711] ? rcu_is_watching+0x15/0xb0 [ 655.696479][T11711] ? cap_capable+0x123/0x460 [ 655.696499][T11711] ? safesetid_security_capable+0xa9/0x1a0 [ 655.696525][T11711] ? bpf_lsm_capable+0x9/0x20 [ 655.696541][T11711] ? security_capable+0x74/0x280 [ 655.696570][T11711] genl_rcv_msg+0x614/0x7a0 [ 655.696595][T11711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.696613][T11711] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 655.696633][T11711] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 655.696665][T11711] ? __pfx_nl802154_post_doit+0x10/0x10 [ 655.696699][T11711] netlink_rcv_skb+0x226/0x4a0 [ 655.696725][T11711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.696746][T11711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.696782][T11711] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.696806][T11711] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.696833][T11711] genl_rcv+0x28/0x40 [ 655.696851][T11711] netlink_unicast+0x7f5/0x990 [ 655.696883][T11711] netlink_sendmsg+0x813/0xb40 [ 655.696915][T11711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.696941][T11711] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 655.696963][T11711] ? __kernel_text_address+0xd/0x30 [ 655.696985][T11711] ? unwind_get_return_address+0x4d/0x90 [ 655.697005][T11711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.697029][T11711] sock_sendmsg_nosec+0x13a/0x180 [ 655.697052][T11711] ____sys_sendmsg+0x565/0x870 [ 655.697086][T11711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.697118][T11711] ? import_iovec+0x73/0xa0 [ 655.697141][T11711] ___sys_sendmsg+0x2a5/0x360 [ 655.697163][T11711] ? __lock_acquire+0x6df/0x2e40 [ 655.697184][T11711] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.697239][T11711] ? __fget_files+0x2a/0x420 [ 655.697263][T11711] ? __fget_files+0x3a8/0x420 [ 655.697295][T11711] __x64_sys_sendmsg+0x1b7/0x290 [ 655.697321][T11711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.697362][T11711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.697382][T11711] do_syscall_64+0x174/0x580 [ 655.697406][T11711] ? trace_irq_disable+0x3b/0x140 [ 655.697424][T11711] ? clear_bhb_loop+0x40/0x90 [ 655.697447][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.697464][T11711] RIP: 0033:0x7f97818bde59 [ 655.697482][T11711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.697497][T11711] RSP: 002b:00007f977fb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.697516][T11711] RAX: ffffffffffffffda RBX: 00007f9781b45fa0 RCX: 00007f97818bde59 [ 655.697530][T11711] RDX: 0000000000004894 RSI: 0000200000000600 RDI: 0000000000000004 [ 655.697542][T11711] RBP: 00007f977fb16090 R08: 0000000000000000 R09: 0000000000000000 [ 655.697553][T11711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.697564][T11711] R13: 00007f9781b46038 R14: 00007f9781b45fa0 R15: 00007ffe9a66aab8 [ 655.697593][T11711] [ 656.126212][T11719] No control pipe specified [ 656.133377][ T5640] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 656.266365][ T5640] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 656.471106][ T5863] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 656.629536][T11741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 656.643533][ T5863] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 656.643560][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.643577][ T5863] usb 4-1: Product: syz [ 656.643590][ T5863] usb 4-1: Manufacturer: syz [ 656.643602][ T5863] usb 4-1: SerialNumber: syz [ 656.654013][ T5863] usb 4-1: config 0 descriptor?? [ 656.700452][ T5863] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 657.561105][ T5747] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 657.611210][ T5863] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 657.611265][ T5863] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 657.732683][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 657.734263][ T5747] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.734285][ T5747] usb 6-1: config 0 has no interface number 0 [ 657.736421][ T5747] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 657.736445][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.736464][ T5747] usb 6-1: Product: syz [ 657.736477][ T5747] usb 6-1: Manufacturer: syz [ 657.736490][ T5747] usb 6-1: SerialNumber: syz [ 657.739519][ T5747] usb 6-1: config 0 descriptor?? [ 657.746759][ T5747] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 657.899976][ T5779] usb 4-1: USB disconnect, device number 97 [ 658.630082][ T5747] gspca_spca1528: reg_w err -71 [ 658.641088][ T5747] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 658.648006][ T5747] usb 6-1: USB disconnect, device number 11 [ 658.936529][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'. [ 658.936549][T11773] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 659.211073][ T5779] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 659.381038][ T5779] usb 3-1: Using ep0 maxpacket: 16 [ 659.389215][ T5779] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 659.389240][ T5779] usb 3-1: config 0 has no interface number 0 [ 659.389285][ T5779] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 659.389307][ T5779] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 659.445324][ T5779] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 659.445347][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.445357][ T5779] usb 3-1: Product: syz [ 659.445364][ T5779] usb 3-1: Manufacturer: syz [ 659.445371][ T5779] usb 3-1: SerialNumber: syz [ 659.486279][ T5779] usb 3-1: config 0 descriptor?? [ 659.492205][T11775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 659.492312][T11775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 659.687183][T11788] overlayfs: workdir and upperdir must be separate subtrees [ 659.694235][T11775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 659.694344][T11775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 659.746811][ T5859] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 659.863375][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1901'. [ 659.906693][ T5779] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 659.906960][ T5779] asix 3-1:0.34: probe with driver asix failed with error -61 [ 659.908527][ T5859] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 659.908551][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.908567][ T5859] usb 4-1: Product: syz [ 659.908580][ T5859] usb 4-1: Manufacturer: syz [ 659.908592][ T5859] usb 4-1: SerialNumber: syz [ 659.938931][ T5859] usb 4-1: config 0 descriptor?? [ 660.112792][ T5859] usb 4-1: selecting invalid altsetting 3 [ 660.112827][ T5859] comedi comedi5: could not set alternate setting 3 in high speed [ 660.112836][ T5859] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 660.116919][ T5859] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 660.245674][ T5747] usb 4-1: USB disconnect, device number 98 [ 660.470365][ T5733] usb 3-1: USB disconnect, device number 87 [ 660.691086][ T5640] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 660.762229][T11814] overlayfs: failed to resolve './file0': -2 [ 660.845506][T11816] team0: No ports can be present during mode change [ 661.657083][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1913'. [ 662.321748][T11854] binder: Unknown parameter 'smackfsroot' [ 662.366880][T11850] ALSA: mixer_oss: invalid OSS volume '' [ 662.366895][T11850] ALSA: mixer_oss: invalid OSS volume '@' [ 662.366906][T11850] ALSA: mixer_oss: invalid OSS volume '|' [ 662.367370][T11850] ALSA: mixer_oss: invalid OSS volume '' [ 662.792474][ T5859] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 662.894131][T11872] netlink: 'syz.6.1923': attribute type 46 has an invalid length. [ 662.894143][T11872] netlink: 'syz.6.1923': attribute type 19 has an invalid length. [ 662.941576][ T5859] usb 4-1: device descriptor read/64, error -71 [ 663.011192][ T5863] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 663.174336][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 663.196123][ T5859] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 663.212428][ T5863] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 663.212454][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.212472][ T5863] usb 3-1: Product: syz [ 663.212490][ T5863] usb 3-1: Manufacturer: syz [ 663.212503][ T5863] usb 3-1: SerialNumber: syz [ 663.225480][ T5863] usb 3-1: config 0 descriptor?? [ 663.251849][ T5863] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 663.361175][ T5859] usb 4-1: device descriptor read/64, error -71 [ 663.363812][ T33] block nbd1: Possible stuck request ffff8880276a7000: control (read@0,1024B). Runtime 180 seconds [ 663.363853][ T33] block nbd1: Possible stuck request ffff8880276a71c0: control (read@1024,1024B). Runtime 180 seconds [ 663.363880][ T33] block nbd1: Possible stuck request ffff8880276a7380: control (read@2048,1024B). Runtime 180 seconds [ 663.363907][ T33] block nbd1: Possible stuck request ffff8880276a7540: control (read@3072,1024B). Runtime 180 seconds [ 663.482058][ T5859] usb usb4-port1: attempt power cycle [ 663.841573][ T5859] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 663.861691][ T5859] usb 4-1: device descriptor read/8, error -71 [ 664.111130][ T5859] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 664.131924][ T5859] usb 4-1: device descriptor read/8, error -71 [ 664.251779][ T5859] usb usb4-port1: unable to enumerate USB device [ 664.510849][ T5863] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 664.922799][ T5863] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 665.073184][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 665.080279][ T5863] usb 6-1: unable to get BOS descriptor or descriptor too short [ 665.095936][ T5863] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 665.095960][ T5863] usb 6-1: config 0 has no interface number 0 [ 665.096003][ T5863] usb 6-1: config 0 interface 169 altsetting 13 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 665.096027][ T5863] usb 6-1: config 0 interface 169 has no altsetting 0 [ 665.118399][ T5863] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=21.2e [ 665.118426][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.118443][ T5863] usb 6-1: Product: syz [ 665.118456][ T5863] usb 6-1: SerialNumber: syz [ 665.130435][ T5863] usb 6-1: config 0 descriptor?? [ 665.235707][ T5779] usb 3-1: USB disconnect, device number 88 [ 665.281175][ T5779] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 665.296603][ T5779] ssu100 3-1:0.0: device disconnected [ 665.393813][ T5863] uvcvideo 6-1:0.169: Found UVC 0.00 device syz (05ac:8501) [ 665.393881][ T5863] uvcvideo 6-1:0.169: No valid video chain found. [ 665.420349][ T5863] usb 6-1: USB disconnect, device number 12 [ 665.868432][T11931] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 666.246245][ T821] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 666.335547][ T5640] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 666.393103][ T821] usb 6-1: config 0 has an invalid interface number: 47 but max is 0 [ 666.393129][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.393146][ T821] usb 6-1: config 0 has no interface number 0 [ 666.393186][ T821] usb 6-1: config 0 interface 47 altsetting 94 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 666.393210][ T821] usb 6-1: config 0 interface 47 has no altsetting 0 [ 666.393240][ T821] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 666.393261][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.428317][ T5779] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 666.492324][ T821] usb 6-1: config 0 descriptor?? [ 666.562992][ T5640] block nbd0: Receive control failed (result -22) [ 666.707200][ T5779] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 666.707227][ T5779] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.707244][ T5779] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 666.709367][ T5779] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 666.709392][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 666.709410][ T5779] usb 4-1: Product: syz [ 666.709472][ T5779] usb 4-1: Manufacturer: syz [ 666.811279][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.811790][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.815813][T11946] nbd0: detected capacity change from 0 to 32 [ 666.819058][ T329] block nbd0: Dead connection, failed to find a fallback [ 666.819079][ T329] block nbd0: shutting down sockets [ 666.819092][ T329] blk_print_req_error: 25 callbacks suppressed [ 666.819102][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.819248][ T329] buffer_io_error: 25 callbacks suppressed [ 666.819258][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.824220][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.824290][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.827373][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.827442][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.827581][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.827641][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.827770][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.827830][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.827994][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.828053][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.828880][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.828945][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.829412][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.839731][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.843431][ T5793] ldm_validate_partition_table(): Disk read failed. [ 666.849299][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.849384][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.867800][ T821] usb 6-1: string descriptor 0 read error: -32 [ 666.870975][ T329] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.878996][ T329] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.879925][ T5793] Dev nbd0: unable to read RDB block 0 [ 666.885066][ T5793] nbd0: unable to read partition table [ 667.089251][ T5747] usb 4-1: USB disconnect, device number 103 [ 667.146787][ T5793] ldm_validate_partition_table(): Disk read failed. [ 667.147430][ T5793] Dev nbd0: unable to read RDB block 0 [ 667.149350][ T5793] nbd0: unable to read partition table [ 667.382332][T11962] netlink: 'syz.2.1940': attribute type 10 has an invalid length. [ 667.428379][T11962] team0: Port device vlan0 added [ 667.841803][ T5863] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 668.011285][ T5863] usb 4-1: device descriptor read/64, error -71 [ 668.043680][T11972] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1943'. [ 668.261198][ T5863] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 668.422478][ T5863] usb 4-1: device descriptor read/64, error -71 [ 668.531758][ T5863] usb usb4-port1: attempt power cycle [ 668.830337][T11981] ieee802154 phy0 wpan0: encryption failed: -22 [ 668.871482][ T5863] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 668.894629][ T5863] usb 4-1: device descriptor read/8, error -71 [ 669.049472][ T5747] usb 6-1: USB disconnect, device number 13 [ 669.141030][ T5863] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 669.162334][ T5863] usb 4-1: device descriptor read/8, error -71 [ 669.271786][ T5863] usb usb4-port1: unable to enumerate USB device [ 669.667881][T11990] FAULT_INJECTION: forcing a failure. [ 669.667881][T11990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.667902][T11990] CPU: 0 UID: 0 PID: 11990 Comm: syz.5.1950 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.667916][T11990] Tainted: [L]=SOFTLOCKUP [ 669.667920][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.667926][T11990] Call Trace: [ 669.667931][T11990] [ 669.667935][T11990] dump_stack_lvl+0xe8/0x150 [ 669.667952][T11990] should_fail_ex+0x467/0x600 [ 669.667970][T11990] _copy_from_user+0x2d/0xb0 [ 669.667982][T11990] do_sock_getsockopt+0x200/0x7e0 [ 669.668000][T11990] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 669.668021][T11990] ? __fget_files+0x3a8/0x420 [ 669.668035][T11990] ? __fget_files+0x2a/0x420 [ 669.668052][T11990] __x64_sys_getsockopt+0x1aa/0x250 [ 669.668068][T11990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.668079][T11990] do_syscall_64+0x174/0x580 [ 669.668095][T11990] ? clear_bhb_loop+0x40/0x90 [ 669.668107][T11990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.668124][T11990] RIP: 0033:0x7f5dc9a3de59 [ 669.668134][T11990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.668142][T11990] RSP: 002b:00007f5dc7c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 669.668153][T11990] RAX: ffffffffffffffda RBX: 00007f5dc9cc5fa0 RCX: 00007f5dc9a3de59 [ 669.668161][T11990] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 669.668167][T11990] RBP: 00007f5dc7c96090 R08: 0000200000000000 R09: 0000000000000000 [ 669.668173][T11990] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 669.668179][T11990] R13: 00007f5dc9cc6038 R14: 00007f5dc9cc5fa0 R15: 00007ffff2803628 [ 669.668194][T11990] [ 670.152500][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1956'. [ 670.681226][ T821] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 670.713695][T12016] kvm: pic: single mode not supported [ 670.713705][T12016] pic_ioport_write: 23 callbacks suppressed [ 670.713713][T12016] kvm: pic: level sensitive irq not supported [ 670.713871][T12016] kvm: pic: single mode not supported [ 670.713876][T12016] kvm: pic: level sensitive irq not supported [ 670.714008][T12016] kvm: pic: single mode not supported [ 670.714013][T12016] kvm: pic: level sensitive irq not supported [ 670.714151][T12016] kvm: pic: single mode not supported [ 670.714156][T12016] kvm: pic: level sensitive irq not supported [ 670.851033][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 670.853209][ T821] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.853236][ T821] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.853249][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 670.853268][ T821] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 670.853280][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.856153][ T821] usb 6-1: config 0 descriptor?? [ 671.016786][ T5863] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 671.048582][ T5747] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 671.171029][ T5863] usb 3-1: device descriptor read/64, error -71 [ 671.204473][ T5747] usb 4-1: too many configurations: 136, using maximum allowed: 8 [ 671.205645][ T5747] usb 4-1: config index 0 descriptor too short (expected 28690, got 18) [ 671.205668][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.205685][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.205702][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.205721][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.205750][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.206807][ T5747] usb 4-1: config index 1 descriptor too short (expected 28690, got 18) [ 671.206828][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.206846][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.206863][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.206882][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.206911][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.207961][ T5747] usb 4-1: config index 2 descriptor too short (expected 28690, got 18) [ 671.207983][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.208000][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.208017][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.208036][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.208063][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.275672][ T5747] usb 4-1: config index 3 descriptor too short (expected 28690, got 18) [ 671.275699][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.275717][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.275735][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.275753][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.275783][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.392585][ T5747] usb 4-1: config index 4 descriptor too short (expected 28690, got 18) [ 671.392611][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.392630][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.392647][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.392666][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.392695][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.395385][ T5747] usb 4-1: config index 5 descriptor too short (expected 28690, got 18) [ 671.395408][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.395426][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.395450][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.395469][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.395496][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.396678][ T5747] usb 4-1: config index 6 descriptor too short (expected 28690, got 18) [ 671.396698][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.396716][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.396733][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.396751][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.396779][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.398740][ T5747] usb 4-1: config index 7 descriptor too short (expected 28690, got 18) [ 671.398761][ T5747] usb 4-1: config 71 has too many interfaces: 192, using maximum allowed: 32 [ 671.398779][ T5747] usb 4-1: config 71 has an invalid interface number: 202 but max is 191 [ 671.398796][ T5747] usb 4-1: config 71 has 1 interface, different from the descriptor's value: 192 [ 671.398815][ T5747] usb 4-1: config 71 has no interface number 0 [ 671.398843][ T5747] usb 4-1: config 71 interface 202 has no altsetting 0 [ 671.405562][ T5747] usb 4-1: New USB device found, idVendor=046d, idProduct=81bf, bcdDevice= 7.0b [ 671.405585][ T5747] usb 4-1: New USB device strings: Mfr=231, Product=19, SerialNumber=49 [ 671.405604][ T5747] usb 4-1: Product: syz [ 671.405616][ T5747] usb 4-1: Manufacturer: syz [ 671.405629][ T5747] usb 4-1: SerialNumber: syz [ 671.422143][ T5863] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 671.556511][ T5863] usb 3-1: device descriptor read/64, error -71 [ 671.667927][ T5863] usb usb3-port1: attempt power cycle [ 671.703356][ T821] usbhid 6-1:0.0: can't add hid device: -71 [ 671.703472][ T821] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 671.736449][ T821] usb 6-1: USB disconnect, device number 14 [ 672.021197][ T5863] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 672.041976][ T5863] usb 3-1: device descriptor read/8, error -71 [ 672.297296][ T5863] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 672.335472][ T5863] usb 3-1: device descriptor read/8, error -71 [ 672.444296][ T5863] usb usb3-port1: unable to enumerate USB device [ 672.720234][ T5747] usb 4-1: USB disconnect, device number 108 [ 674.041372][ T5863] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 674.134192][ T5747] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 674.193253][ T5863] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 674.193280][ T5863] usb 6-1: config 127 has no interface number 0 [ 674.193312][ T5863] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 674.195594][ T5863] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 674.195619][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.195637][ T5863] usb 6-1: Product: syz [ 674.195650][ T5863] usb 6-1: Manufacturer: syz [ 674.195661][ T5863] usb 6-1: SerialNumber: syz [ 674.200516][T12067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 674.282524][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 674.290004][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.290120][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.290145][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 674.290174][ T5747] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 674.290589][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.297263][ T5747] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 674.297287][ T5747] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 674.297305][ T5747] usb 4-1: Manufacturer: syz [ 674.334308][ T5747] usb 4-1: config 0 descriptor?? [ 674.601071][ T5747] rc_core: IR keymap rc-hauppauge not found [ 674.601091][ T5747] Registered IR keymap rc-empty [ 674.603461][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.621189][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.644425][ T5747] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 674.673952][ T5747] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 674.718994][T12090] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 674.726439][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.744710][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.765266][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.783508][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.801688][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.821303][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.841345][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.861096][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.882316][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.905728][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.948307][ T5747] mceusb 4-1:0.0: Registered 鱋 with mce emulator interface version 1 [ 674.948331][ T5747] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 675.042511][ T5747] usb 4-1: USB disconnect, device number 109 [ 675.332419][ T5863] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 675.332670][ T5863] asix 6-1:127.57: probe with driver asix failed with error -71 [ 675.377652][ T5863] usb 6-1: USB disconnect, device number 15 [ 675.671024][ T5859] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 675.822625][ T5859] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 675.822649][ T5859] usb 3-1: config 0 has no interface number 0 [ 675.824702][ T5859] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 675.824727][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.824745][ T5859] usb 3-1: Product: syz [ 675.824757][ T5859] usb 3-1: Manufacturer: syz [ 675.824765][ T5859] usb 3-1: SerialNumber: syz [ 675.828275][ T5859] usb 3-1: config 0 descriptor?? [ 675.871142][ T5863] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 675.913341][ T5859] usb 3-1: selecting invalid altsetting 1 [ 675.946987][ T5859] dvb_ttusb_budget: ttusb_init_controller: error [ 675.947008][ T5859] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 676.023365][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 676.032236][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.032258][ T5863] usb 4-1: config 0 has no interfaces? [ 676.063423][ T5863] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 676.063457][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.063474][ T5863] usb 4-1: Product: syz [ 676.063487][ T5863] usb 4-1: Manufacturer: syz [ 676.063500][ T5863] usb 4-1: SerialNumber: syz [ 676.162746][ T5863] usb 4-1: config 0 descriptor?? [ 676.163967][ T5859] DVB: Unable to find symbol stv0299_attach() [ 676.216566][ T5859] DVB: Unable to find symbol tda8083_attach() [ 676.216576][ T5859] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 676.225163][ T5859] usb 3-1: USB disconnect, device number 93 [ 676.409104][ T5863] usb 4-1: USB disconnect, device number 110 [ 676.625264][ T5640] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 677.353961][ T821] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 677.432481][T12161] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2020'. [ 677.435572][T12161] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2020'. [ 677.501348][ T821] usb 3-1: Using ep0 maxpacket: 8 [ 677.508741][ T821] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 677.508768][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.508785][ T821] usb 3-1: Product: syz [ 677.508798][ T821] usb 3-1: Manufacturer: syz [ 677.508811][ T821] usb 3-1: SerialNumber: syz [ 677.554674][ T821] usb 3-1: config 0 descriptor?? [ 677.757977][ T821] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 677.941090][ T5863] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 678.006533][ T821] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 678.026272][ T821] usb 3-1: USB disconnect, device number 94 [ 678.091028][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 678.092767][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 678.092789][ T5863] usb 4-1: config 0 has no interface number 0 [ 678.092814][ T5863] usb 4-1: config 0 interface 1 has no altsetting 0 [ 678.094815][ T5863] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 678.094840][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.094854][ T5863] usb 4-1: Product: syz [ 678.094861][ T5863] usb 4-1: Manufacturer: syz [ 678.094869][ T5863] usb 4-1: SerialNumber: syz [ 678.101232][ T5863] usb 4-1: config 0 descriptor?? [ 678.355547][ T5863] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 678.561517][ T821] usb 4-1: USB disconnect, device number 111 [ 678.851243][ T5863] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 678.981121][ T5863] usb 3-1: device descriptor read/64, error -71 [ 679.221115][ T5863] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 679.353496][ T5863] usb 3-1: device descriptor read/64, error -71 [ 679.461382][ T5863] usb usb3-port1: attempt power cycle [ 679.812697][ T5863] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 679.831829][ T5863] usb 3-1: device descriptor read/8, error -71 [ 679.851579][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.853604][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.071085][ T5863] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 680.071086][ T5779] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 680.091503][ T5863] usb 3-1: device descriptor read/8, error -71 [ 680.202023][ T5863] usb usb3-port1: unable to enumerate USB device [ 680.211113][ T5779] usb 6-1: device descriptor read/64, error -71 [ 680.486702][ T5779] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 680.824002][ T5779] usb 6-1: device descriptor read/64, error -71 [ 680.934478][ T5779] usb usb6-port1: attempt power cycle [ 681.231014][ T5733] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 681.281584][ T5779] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 681.314132][ T5779] usb 6-1: device descriptor read/8, error -71 [ 681.371079][ T5733] usb 4-1: device descriptor read/64, error -71 [ 681.571172][ T5779] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 681.591736][ T5779] usb 6-1: device descriptor read/8, error -71 [ 681.622032][ T5733] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 681.701575][ T5779] usb usb6-port1: unable to enumerate USB device [ 681.751510][ T5733] usb 4-1: device descriptor read/64, error -71 [ 681.872018][ T5733] usb usb4-port1: attempt power cycle [ 682.221092][ T5733] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 682.241826][ T5733] usb 4-1: device descriptor read/8, error -71 [ 682.511080][ T5733] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 682.534422][ T5733] usb 4-1: device descriptor read/8, error -71 [ 682.651542][ T5733] usb usb4-port1: unable to enumerate USB device [ 684.773960][ T5863] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 684.799611][T12354] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 684.799657][T12354] overlayfs: overlapping lowerdir path [ 684.901831][ T5863] usb 4-1: device descriptor read/64, error -71 [ 685.141120][ T5863] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 685.275574][ T5863] usb 4-1: device descriptor read/64, error -71 [ 685.392743][ T5863] usb usb4-port1: attempt power cycle [ 685.735177][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.746442][ T5863] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 685.773466][ T5863] usb 4-1: device descriptor read/8, error -71 [ 686.021040][ T5863] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 686.054286][ T5863] usb 4-1: device descriptor read/8, error -71 [ 686.113681][T12373] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2114'. [ 686.174445][ T5863] usb usb4-port1: unable to enumerate USB device [ 686.246550][T12381] FAULT_INJECTION: forcing a failure. [ 686.246550][T12381] name failslab, interval 1, probability 0, space 0, times 0 [ 686.246578][T12381] CPU: 1 UID: 0 PID: 12381 Comm: syz.5.2118 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 686.246597][T12381] Tainted: [L]=SOFTLOCKUP [ 686.246602][T12381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.246610][T12381] Call Trace: [ 686.246616][T12381] [ 686.246622][T12381] dump_stack_lvl+0xe8/0x150 [ 686.246653][T12381] should_fail_ex+0x467/0x600 [ 686.246678][T12381] should_failslab+0xa8/0x100 [ 686.246698][T12381] ? do_getname+0x2e/0x250 [ 686.246716][T12381] kmem_cache_alloc_noprof+0x9e/0x680 [ 686.246733][T12381] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 686.246754][T12381] ? do_getname+0x2e/0x250 [ 686.246774][T12381] do_getname+0x2e/0x250 [ 686.246790][T12381] ? user_path_at+0x1e/0x160 [ 686.246805][T12381] user_path_at+0x2a/0x160 [ 686.246820][T12381] __x64_sys_umount+0xf6/0x170 [ 686.246839][T12381] ? __pfx___x64_sys_umount+0x10/0x10 [ 686.246864][T12381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.246881][T12381] do_syscall_64+0x174/0x580 [ 686.246901][T12381] ? trace_irq_disable+0x3b/0x140 [ 686.246916][T12381] ? clear_bhb_loop+0x40/0x90 [ 686.246935][T12381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.246947][T12381] RIP: 0033:0x7f5dc9a3de59 [ 686.246961][T12381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.246972][T12381] RSP: 002b:00007f5dc7c96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 686.246986][T12381] RAX: ffffffffffffffda RBX: 00007f5dc9cc5fa0 RCX: 00007f5dc9a3de59 [ 686.246996][T12381] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 686.247004][T12381] RBP: 00007f5dc7c96090 R08: 0000000000000000 R09: 0000000000000000 [ 686.247013][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.247022][T12381] R13: 00007f5dc9cc6038 R14: 00007f5dc9cc5fa0 R15: 00007ffff2803628 [ 686.247044][T12381] [ 686.468169][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 686.480081][T12388] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 686.546252][T12386] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 686.546271][T12386] overlayfs: failed to set xattr on upper [ 686.546275][T12386] overlayfs: ...falling back to redirect_dir=nofollow. [ 686.546278][T12386] overlayfs: ...falling back to index=off. [ 686.546282][T12386] overlayfs: ...falling back to uuid=null. [ 686.546309][T12386] overlayfs: conflicting lowerdir path [ 686.891033][ T5733] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 687.043856][ T5733] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 687.043882][ T5733] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 687.043899][ T5733] usb 3-1: config 220 has no interface number 2 [ 687.043951][ T5733] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 687.043974][ T5733] usb 3-1: config 220 interface 0 has no altsetting 0 [ 687.043989][ T5733] usb 3-1: config 220 interface 76 has no altsetting 0 [ 687.044004][ T5733] usb 3-1: config 220 interface 1 has no altsetting 0 [ 687.046204][ T5733] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 687.046228][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.046246][ T5733] usb 3-1: Product: syz [ 687.046259][ T5733] usb 3-1: Manufacturer: syz [ 687.046272][ T5733] usb 3-1: SerialNumber: syz [ 687.931585][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2142'. [ 688.195983][T12452] syz.5.2145 (12452): drop_caches: 2 [ 688.397653][ T5733] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 688.397684][ T5733] uvcvideo 3-1:220.0: No valid video chain found. [ 688.397753][ T5733] usb 3-1: selecting invalid altsetting 0 [ 688.446490][ T5733] usb 3-1: selecting invalid altsetting 0 [ 688.446525][ T5733] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 688.477138][ T5733] usb 3-1: USB disconnect, device number 99 [ 688.861463][ T5863] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 689.021051][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 689.022926][ T5863] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 689.022977][ T5863] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 689.022998][ T5863] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 689.023019][ T5863] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 689.023040][ T5863] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.023077][ T5863] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 689.023097][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.751048][ T5733] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 689.901001][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 689.905752][ T5733] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 689.905778][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.905795][ T5733] usb 3-1: Product: syz [ 689.905804][ T5733] usb 3-1: Manufacturer: syz [ 689.905812][ T5733] usb 3-1: SerialNumber: syz [ 689.948712][ T5733] usb 3-1: config 0 descriptor?? [ 689.987240][ T5863] usb 6-1: USB disconnect, device number 20 [ 690.160013][ T5733] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 691.208532][T12503] kvm: pic: single mode not supported [ 691.208545][T12503] kvm: pic: level sensitive irq not supported [ 691.208911][T12503] kvm: pic: single mode not supported [ 691.208921][T12503] kvm: pic: level sensitive irq not supported [ 691.209103][T12503] kvm: pic: single mode not supported [ 691.209338][T12503] kvm: pic: single mode not supported [ 691.209550][T12503] kvm: pic: single mode not supported [ 691.209709][T12503] kvm: pic: level sensitive irq not supported [ 691.209866][T12503] kvm: pic: single mode not supported [ 691.209875][T12503] kvm: pic: level sensitive irq not supported [ 691.384126][ T5733] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 691.390708][ T5733] usb 3-1: USB disconnect, device number 100 [ 692.245034][T12556] fuse: Unknown parameter '0x00000000000000030x00000000000000038Zƹܑbz6Fi.N-B>VZte4G!?h82O`S?):/ٍM [ 710.241935][T12661] dump_stack_lvl+0xe8/0x150 [ 710.241953][T12661] should_fail_ex+0x467/0x600 [ 710.241970][T12661] _copy_to_user+0x31/0xb0 [ 710.241988][T12661] simple_read_from_buffer+0xe1/0x170 [ 710.242014][T12661] proc_fail_nth_read+0x1be/0x230 [ 710.242037][T12661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.242052][T12661] ? rw_verify_area+0x250/0x4d0 [ 710.242070][T12661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.242083][T12661] vfs_read+0x219/0xa90 [ 710.242100][T12661] ? __pfx_vfs_read+0x10/0x10 [ 710.242110][T12661] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 710.242125][T12661] ? lockdep_hardirqs_on+0x7a/0x110 [ 710.242139][T12661] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 710.242153][T12661] ? mutex_lock_nested+0x152/0x1d0 [ 710.242163][T12661] ? fdget_pos+0x252/0x320 [ 710.242181][T12661] ksys_read+0x156/0x270 [ 710.242192][T12661] ? __pfx_ksys_read+0x10/0x10 [ 710.242201][T12661] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 710.242219][T12661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.242229][T12661] do_syscall_64+0x174/0x580 [ 710.242243][T12661] ? trace_irq_disable+0x3b/0x140 [ 710.242253][T12661] ? clear_bhb_loop+0x40/0x90 [ 710.242264][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.242274][T12661] RIP: 0033:0x7f5dc99fe68e [ 710.242286][T12661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 710.242295][T12661] RSP: 002b:00007f5dc7c95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.242306][T12661] RAX: ffffffffffffffda RBX: 00007f5dc7c966c0 RCX: 00007f5dc99fe68e [ 710.242314][T12661] RDX: 000000000000000f RSI: 00007f5dc7c960a0 RDI: 0000000000000004 [ 710.242320][T12661] RBP: 00007f5dc7c96090 R08: 0000000000000000 R09: 0000000000000000 [ 710.242326][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.242332][T12661] R13: 00007f5dc9cc6038 R14: 00007f5dc9cc5fa0 R15: 00007ffff2803628 [ 710.242347][T12661] [ 712.142354][ T821] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 712.294826][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 712.310003][ T821] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 712.310030][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.310048][ T821] usb 6-1: Product: syz [ 712.310061][ T821] usb 6-1: Manufacturer: syz [ 712.310074][ T821] usb 6-1: SerialNumber: syz [ 712.316863][ T821] usb 6-1: config 0 descriptor?? [ 712.354598][ T821] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 712.613560][ T821] gspca_sonixj: reg_w1 err -71 [ 712.613652][ T821] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 712.620418][ T821] usb 6-1: USB disconnect, device number 25 [ 712.813102][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2263'. [ 713.076287][T12775] sg_write: data in/out 270300/136 bytes for SCSI command 0x0-- guessing data in; [ 713.076287][T12775] program syz.3.2265 not setting count and/or reply_len properly [ 713.395965][ T821] IPVS: starting estimator thread 0... [ 713.511130][T12794] IPVS: using max 9 ests per chain, 21600 per kthread [ 714.772323][T12854] openvswitch: netlink: Multiple metadata blocks provided [ 714.881030][ T5829] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 715.031070][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 715.046256][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short [ 715.058017][ T5829] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7 [ 715.064776][ T5829] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 715.064803][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.064822][ T5829] usb 3-1: Product: syz [ 715.064837][ T5829] usb 3-1: Manufacturer: syz [ 715.064851][ T5829] usb 3-1: SerialNumber: syz [ 715.548921][ T5829] usb 3-1: USB disconnect, device number 105 [ 715.722282][ T5863] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 715.736151][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.891858][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 715.892717][ T5863] usb 6-1: too many configurations: 68, using maximum allowed: 8 [ 715.894381][ T5863] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 715.894418][ T5863] usb 6-1: can't read configurations, error -61 [ 716.031861][ T5863] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 716.068221][T12885] binder: 12884:12885 ioctl c0306201 200000000640 returned -22 [ 716.181402][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 716.189552][ T5863] usb 6-1: too many configurations: 68, using maximum allowed: 8 [ 716.208784][ T5863] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 716.208820][ T5863] usb 6-1: can't read configurations, error -61 [ 716.209428][ T5863] usb usb6-port1: attempt power cycle [ 716.561108][ T5863] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 716.582399][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 716.582972][ T5863] usb 6-1: too many configurations: 68, using maximum allowed: 8 [ 716.584447][ T5863] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 716.584478][ T5863] usb 6-1: can't read configurations, error -61 [ 716.721134][ T5863] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 716.741626][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 716.742210][ T5863] usb 6-1: too many configurations: 68, using maximum allowed: 8 [ 716.743745][ T5863] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 716.743776][ T5863] usb 6-1: can't read configurations, error -61 [ 716.744096][ T5863] usb usb6-port1: unable to enumerate USB device [ 716.938892][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2318'. [ 717.673014][T12915] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2324'. [ 718.121332][ T5834] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 718.284855][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.284880][ T5834] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 718.284914][ T5834] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 718.284930][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.499125][ T5829] usb 4-1: USB disconnect, device number 120 [ 718.525566][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 719.265763][T12949] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[8644] was attempted by "?"[12949] [ 719.437747][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2340'. [ 719.643137][ T39] INFO: task syz.1.1489:10211 blocked for more than 143 seconds. [ 719.643161][ [ 719.643161][ T39] Tainted: G L syzkaller #0 [ 719.643172][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.643180][ T39] task:syz.1.1489 state:D stack:28392 pid:10211 tgid:10208 ppid:5643 task_flags:0x400040 flags:0x00080002 [ 719.643228][ T39] Call Trace: [ 719.643235][ T39] [ 719.643247][ T39] __schedule+0x1709/0x5530 [ 719.643284][ T39] ? tomoyo_check_open_permission+0x32c/0x470 [ 719.643312][ T39] ? rcu_is_watching+0x15/0xb0 [ 719.643353][ T39] ? __pfx___schedule+0x10/0x10 [ 719.643389][ T39] rt_mutex_schedule+0x76/0xf0 [ 719.643408][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 719.643437][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 719.643460][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 719.643482][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 719.643502][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 719.643520][ T39] ? bd_prepare_to_claim+0x41b/0x4b0 [ 719.643554][ T39] ? bdev_open+0xde/0xd00 [ 719.643579][ T39] ? bdev_open+0xde/0xd00 [ 719.643595][ T39] mutex_lock_nested+0x168/0x1d0 [ 719.643620][ T39] bdev_open+0xde/0xd00 [ 719.643649][ T39] blkdev_open+0x47f/0x630 [ 719.643672][ T39] ? __pfx_blkdev_open+0x10/0x10 [ 719.643691][ T39] do_dentry_open+0x849/0x1420 [ 719.643724][ T39] vfs_open+0x3b/0x350 [ 719.643744][ T39] ? path_openat+0x2e4d/0x3850 [ 719.643765][ T39] path_openat+0x2e64/0x3850 [ 719.643791][ T39] ? __kasan_slab_alloc+0x6c/0x80 [ 719.643816][ T39] ? do_sys_openat2+0xcc/0x200 [ 719.643836][ T39] ? __x64_sys_openat+0x138/0x170 [ 719.643857][ T39] ? do_syscall_64+0x174/0x580 [ 719.643896][ T39] do_file_open+0x23e/0x4a0 [ 719.643913][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 719.643942][ T39] ? __pfx_do_file_open+0x10/0x10 [ 719.643984][ T39] ? alloc_fd+0x654/0x6d0 [ 719.644018][ T39] do_sys_openat2+0x115/0x200 [ 719.644043][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 719.644067][ T39] ? exc_page_fault+0x6a/0xc0 [ 719.644155][ T39] ? do_user_addr_fault+0xc4a/0x1340 [ 719.644184][ T39] __x64_sys_openat+0x138/0x170 [ 719.644211][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.644231][ T39] do_syscall_64+0x174/0x580 [ 719.644253][ T39] ? trace_irq_disable+0x3b/0x140 [ 719.644271][ T39] ? clear_bhb_loop+0x40/0x90 [ 719.644294][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.644313][ T39] RIP: 0033:0x7f637a8ae68e [ 719.644329][ T39] RSP: 002b:00007f6378b03b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 719.644354][ T39] RAX: ffffffffffffffda RBX: 00007f6378b046c0 RCX: 00007f637a8ae68e [ 719.644367][ T39] RDX: 00000000008082a1 RSI: 00007f6378b03c00 RDI: ffffffffffffff9c [ 719.644380][ T39] RBP: 00007f6378b03c00 R08: 0000000000000000 R09: 0000000000000000 [ 719.644392][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 719.644414][ T39] R13: 00007f637ab76218 R14: 00007f637ab76180 R15: 00007ffe7f939828 [ 719.644441][ T39] [ 719.644511][ T39] [ 719.644511][ T39] Showing all locks held in the system: [ 719.644522][ T39] 1 lock held by khungtaskd/39: [ 719.644532][ T39] #0: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 719.644600][ T39] 2 locks held by udevd/4966: [ 719.644610][ T39] #0: ffffffff8eb347f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 719.644655][ T39] #1: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 719.644698][ T39] 2 locks held by getty/5353: [ 719.644708][ T39] #0: ffff8880371d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 719.644750][ T39] #1: ffffc90003cd32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 719.644804][ T39] 4 locks held by kworker/u8:8/5815: [ 719.644814][ T39] #0: ffff888032e54938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 719.644857][ T39] #1: ffffc90005e87c60 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 719.644898][ T39] #2: ffffffff8e2592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 719.644941][ T39] #3: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 719.644983][ T39] 1 lock held by udevd/5916: [ 719.644993][ T39] #0: ffff88802763d4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 719.645035][ T39] 1 lock held by udevd/6034: [ 719.645045][ T39] #0: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 719.645095][ T39] 5 locks held by kworker/u8:62/9011: [ 719.645105][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 719.645146][ T39] #1: ffffc9000633fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 719.645188][ T39] #2: ffff88803b184310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 719.645242][ T39] #3: ffff88805a95a520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 719.645291][ T39] #4: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 719.645333][ T39] 1 lock held by syz.1.1489/10211: [ 719.645351][ T39] #0: ffff88802763d4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 719.645391][ T39] 3 locks held by syz-executor/10661: [ 719.645401][ T39] #0: ffffffff8e496830 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 719.645443][ T39] #1: ffff8880387d62b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d40 [ 719.645489][ T39] #2: ffff8880343262b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d40 [ 719.645544][ T39] 2 locks held by syz.6.2329/12934: [ 719.645554][ T39] #0: ffff88803ed462b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 719.645597][ T39] #1: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 719.645643][ T39] 3 locks held by syz.2.2343/12965: [ 719.645653][ T39] #0: ffff88805b10d530 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 719.645697][ T39] #1: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 719.645737][ T39] #2: ffffffff8e3c37c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 719.645775][ T39] [ 719.645781][ T39] ============================================= [ 719.645781][ T39] [ 719.645795][ T39] NMI backtrace for cpu 1 [ 719.645808][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 719.645829][ T39] Tainted: [L]=SOFTLOCKUP [ 719.645836][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.645845][ T39] Call Trace: [ 719.645853][ T39] [ 719.645860][ T39] dump_stack_lvl+0xe8/0x150 [ 719.645882][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 719.645903][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 719.645927][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 719.645947][ T39] sys_info+0x135/0x170 [ 719.645964][ T39] watchdog+0xfd7/0x1030 [ 719.645993][ T39] ? watchdog+0x1c7/0x1030 [ 719.646020][ T39] kthread+0x388/0x470 [ 719.646043][ T39] ? __pfx_watchdog+0x10/0x10 [ 719.646063][ T39] ? __pfx_kthread+0x10/0x10 [ 719.646086][ T39] ret_from_fork+0x514/0xb70 [ 719.646113][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 719.646135][ T39] ? __switch_to+0xc89/0x1420 [ 719.646158][ T39] ? __pfx_kthread+0x10/0x10 [ 719.646181][ T39] ret_from_fork_asm+0x1a/0x30 [ 719.646218][ T39] [ 719.646226][ T39] Sending NMI from CPU 1 to CPUs 0: [ 719.646256][ C0] NMI backtrace for cpu 0 [ 719.646272][ C0] CPU: 0 UID: 0 PID: 10661 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 719.646293][ C0] Tainted: [L]=SOFTLOCKUP [ 719.646299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.646308][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x80 [ 719.646331][ C0] Code: cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 28 c3 fc 10 65 8b 35 49 c3 fc 10 <81> e6 00 00 ff 00 ba 00 01 00 00 23 91 fc 0b 00 00 89 d7 09 f7 74 [ 719.646344][ C0] RSP: 0018:ffffc900048af318 EFLAGS: 00000202 [ 719.646358][ C0] RAX: ffffffff82198354 RBX: 1ffff92000915e94 RCX: ffff88805b529f00 [ 719.646369][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000020 [ 719.646380][ C0] RBP: ffffc900048af5d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.646390][ C0] R10: dffffc0000000000 R11: fffff9400029be91 R12: ffff888034d80ca0 [ 719.646402][ C0] R13: ffff888029f3a358 R14: 80000000537d2007 R15: 1ffff110069b0194 [ 719.646413][ C0] FS: 0000555561beb500(0000) GS:ffff888125a00000(0000) knlGS:0000000000000000 [ 719.646427][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.646438][ C0] CR2: 00007f5dca7f56b8 CR3: 00000000352a0000 CR4: 00000000003526f0 [ 719.646452][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 8000000000000001 [ 719.646463][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 719.646474][ C0] Call Trace: [ 719.646480][ C0] [ 719.646486][ C0] copy_pmd_range+0x1704/0x5400 [ 719.646506][ C0] ? arch_stack_walk+0xfb/0x150 [ 719.646538][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 719.646559][ C0] ? __lock_acquire+0x6df/0x2e40 [ 719.646583][ C0] copy_page_range+0xb34/0x1160 [ 719.646607][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 719.646624][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 719.646644][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 719.646664][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 719.646683][ C0] ? up_write+0x5a/0x190 [ 719.646702][ C0] dup_mmap+0xf2d/0x1d40 [ 719.646729][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 719.646755][ C0] ? lock_acquire+0x115/0x350 [ 719.646777][ C0] copy_mm+0x11a/0x480 [ 719.646794][ C0] ? copy_process+0xd3c/0x43f0 [ 719.646809][ C0] copy_process+0x1e7d/0x43f0 [ 719.646830][ C0] ? copy_process+0xd3c/0x43f0 [ 719.646861][ C0] ? __pfx_copy_process+0x10/0x10 [ 719.646883][ C0] kernel_clone+0x2d7/0x940 [ 719.646901][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 719.646921][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 719.646947][ C0] __x64_sys_clone+0x1b6/0x230 [ 719.646966][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 719.646991][ C0] ? do_user_addr_fault+0xc4a/0x1340 [ 719.647015][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.647031][ C0] do_syscall_64+0x174/0x580 [ 719.647051][ C0] ? trace_irq_disable+0x3b/0x140 [ 719.647065][ C0] ? clear_bhb_loop+0x40/0x90 [ 719.647082][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.647097][ C0] RIP: 0033:0x7f5dc9a668d2 [ 719.647111][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 719.647123][ C0] RSP: 002b:00007ffff2803840 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 719.647138][ C0] RAX: ffffffffffffffda RBX: 00007ffff2803840 RCX: 00007f5dc9a668d2 [ 719.647149][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 719.647158][ C0] RBP: 00007ffff28039cc R08: 0000000000000000 R09: 0000000000000001 [ 719.647168][ C0] R10: 0000555561beb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 719.647179][ C0] R13: 00000000000927c0 R14: 00000000000afa2e R15: 00007ffff2803a20 [ 719.647198][ C0] [ 719.659980][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 719.660002][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 719.660027][ T39] Tainted: [L]=SOFTLOCKUP [ 719.660033][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.660044][ T39] Call Trace: [ 719.660052][ T39] [ 719.660059][ T39] vpanic+0x56c/0xa60 [ 719.660082][ T39] ? __pfx___schedule+0x10/0x10 [ 719.660106][ T39] ? __pfx_vpanic+0x10/0x10 [ 719.660132][ T39] panic+0xc5/0xd0 [ 719.660149][ T39] ? __pfx_panic+0x10/0x10 [ 719.660165][ T39] ? preempt_schedule_common+0x82/0xd0 [ 719.660188][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 719.660207][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 719.660229][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 719.660250][ T39] watchdog+0x1030/0x1030 [ 719.660278][ T39] ? watchdog+0x1c7/0x1030 [ 719.660306][ T39] kthread+0x388/0x470 [ 719.660330][ T39] ? __pfx_watchdog+0x10/0x10 [ 719.660360][ T39] ? __pfx_kthread+0x10/0x10 [ 719.660384][ T39] ret_from_fork+0x514/0xb70 [ 719.660411][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 719.660434][ T39] ? __switch_to+0xc89/0x1420 [ 719.660457][ T39] ? __pfx_kthread+0x10/0x10 [ 719.660481][ T39] ret_from_fork_asm+0x1a/0x30 [ 719.660518][ T39] [ 719.660795][ T39] Kernel Offset: disabled