last executing test programs: 9m13.200089374s ago: executing program 2 (id=101): r0 = syz_io_uring_setup(0x75f8, &(0x7f0000001640)={0x0, 0xb98e, 0x1, 0x208, 0xa0}, 0x0, &(0x7f0000000180), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 9m12.983766438s ago: executing program 2 (id=103): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000b40)={0x0, 0x0, 0x10000100000008, 0xfffffffffffffffd}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "977a80fd17d0f52bb7c9ae7fc4d2e1f0292e5edb588805d54af50e09eccbc74c3915e0cb8a547c17a8ad6f1bfb491b04a14c3277b8c9f3d6284e16b08443c51f3f496bfc0bc72459cb24bdaf24c3c512634b73f9609d37d9f83e476d20fe9548753a0d6cd6c477401862b7c23f35e1"}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x0, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0xfffffffffffffeb4}}, 0x108}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r5}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 9m12.573035182s ago: executing program 2 (id=109): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x48, "26270000000000000000e253c04105a4b6d6932fc15210e1599b0586fc14c4b2013242dee38ba79bac1d65a4ab22fbd38e3871cf35650500000000000094cb1d6c90e59f1d478ddd"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd28, 0x10, {{@in=@multicast1, @in=@loopback, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}, 0x0, 0x400}, [@tmpl={0x4}]}, 0xbc}}, 0x80c4) syz_emit_ethernet(0x70, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c200000effffffffffff0800458000620000000000019078ffffffffe00000010305907800040066402600080067007f0711000cffffffffac1e00015f481b83ac1414bb00000009ac1414aa0000d5e9e000000100000008ac1414aa000000067f0000010000000aa097fb8a3758"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x8000}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='pim6reg\x00') r8 = syz_io_uring_setup(0x3aeb, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x5, 0x35}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000340)) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="653fa9d5f3a8123be595a0af01c2bef2d407081a218722820abc26e8b2e5d953da89bbe24f1e18913af59a4f5c5fc1cfa3158b43ef1f332cce8a47a213a5cea32ac582370fab52d7b5348a486ae8699817d77740813b9c6c539d47ae44a0ea76dba3", @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESOCT=0x0], 0x4) 9m12.280868492s ago: executing program 2 (id=112): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',g'], 0x0, 0x0, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) clock_getres(0x59509529629f9410, 0x0) (async) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4040001}, 0x28000000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0xfffffffffffffff4) 9m11.363565049s ago: executing program 2 (id=117): syz_usb_connect$uac2(0x3, 0xbc, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x7010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x7, 0xe0, 0xf5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x4, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x7, 0x41, 0x7}, [@selector_unit={0x7, 0x24, 0xb, 0x6b, 0x2, "4ec1"}, @extension_unit={0xb, 0x24, 0x9, 0x5, 0x9, 0x0, "b47b239d"}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x204, 0x4, 0xc1, 0x1, 0xf5, 0x0, 0x2, 0x4}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, [0x3, 0x9, 0xb]}, @sample_rate={0xb, 0x24, 0xd, 0x6, 0x3, 0x2, [0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe7, 0x8, 0x28, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x3, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x8, 0x5, {0x8, 0x25, 0x1, 0x84fdb8f8096e36e8, 0x0, 0x0, 0x10}}}}}}}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$hidraw(r0, &(0x7f0000002380)=""/93, 0xfdef) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) r2 = socket(0xa, 0x3, 0xff) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000100)=0x9, 0x4) 9m9.998941148s ago: executing program 2 (id=122): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0x9, @win={{0x4, 0x6, 0x100, 0x5}, 0x8, 0xc6, 0x0, 0x6, 0x0, 0x3c}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x4, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x8, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0x10]}}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff0000000039000000080003001d793a5c3c8f8385f0ca710f6c4021eacb8e068c8c0c7fe765219295dab26600f1679969b2e3fac3af574d6f78cfe13c6a52dcee7ba6570786a1ecdb7d9ae20193cd880f7ac5e618ab4f87ed4c2b847549eabd1630629b97fbb5da083bd4c9888b053205ce3b154e0fc694937d4eb96e4d4aadaccc58a076c21fef600fb6d62ff7b4b5c4d4191acc1442f96787ed5c59", @ANYRES32=r9, @ANYBLOB="10005a800c000180040002000400"], 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) open(&(0x7f00000002c0)='./file0\x00', 0x202040, 0x8f) 9m9.395574676s ago: executing program 32 (id=122): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0x9, @win={{0x4, 0x6, 0x100, 0x5}, 0x8, 0xc6, 0x0, 0x6, 0x0, 0x3c}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x4, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x8, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0x10]}}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff0000000039000000080003001d793a5c3c8f8385f0ca710f6c4021eacb8e068c8c0c7fe765219295dab26600f1679969b2e3fac3af574d6f78cfe13c6a52dcee7ba6570786a1ecdb7d9ae20193cd880f7ac5e618ab4f87ed4c2b847549eabd1630629b97fbb5da083bd4c9888b053205ce3b154e0fc694937d4eb96e4d4aadaccc58a076c21fef600fb6d62ff7b4b5c4d4191acc1442f96787ed5c59", @ANYRES32=r9, @ANYBLOB="10005a800c000180040002000400"], 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) open(&(0x7f00000002c0)='./file0\x00', 0x202040, 0x8f) 4.771091904s ago: executing program 1 (id=2998): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) userfaultfd(0x801) 4.666082579s ago: executing program 1 (id=3000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) 4.301653466s ago: executing program 1 (id=3005): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(0x0, 0x16, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$vbi(0x0, 0x1, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 3.322308292s ago: executing program 0 (id=3008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 3.088173549s ago: executing program 0 (id=3012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x2, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24020004}, 0x48) 3.011135779s ago: executing program 1 (id=3013): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.884326724s ago: executing program 0 (id=3015): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 2.693654945s ago: executing program 5 (id=3019): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) setresuid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 2.617491317s ago: executing program 0 (id=3020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r1}, 0x8) 2.617141432s ago: executing program 5 (id=3021): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x3328}, {0xffffffffffffffff, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.253461141s ago: executing program 4 (id=3022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 2.210585201s ago: executing program 4 (id=3023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.685300549s ago: executing program 5 (id=3027): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000180)) 1.685104442s ago: executing program 0 (id=3028): syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x80000000, 0x0) 1.601095762s ago: executing program 5 (id=3029): socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.311873853s ago: executing program 0 (id=3030): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setrlimit(0x4, &(0x7f00000000c0)={0x2}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) dup(0xffffffffffffffff) 1.217602449s ago: executing program 4 (id=3031): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1.165486367s ago: executing program 3 (id=3032): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x527b2191bafb7d0e) 1.009156876s ago: executing program 3 (id=3033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="3df9", 0x2}], 0x1}}], 0x1, 0x24040014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 861.703888ms ago: executing program 3 (id=3034): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x3000) ftruncate(r0, 0x51a9497) bind$rds(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01"], 0xfdef) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x2, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 792.510925ms ago: executing program 3 (id=3035): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000010c0)={0x28, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8}, 0x1) 682.004761ms ago: executing program 4 (id=3036): io_setup(0xffffff81, &(0x7f0000001940)) 545.665867ms ago: executing program 3 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 495.265974ms ago: executing program 4 (id=3038): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) 400.582078ms ago: executing program 3 (id=3039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() r3 = syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = creat(0x0, 0xc7) close(r4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xff8, 0x6, 0x1, 0x57, r3}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x3, &(0x7f0000000340)=""/71) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x160, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'team_slave_0\x00', 'macsec0\x00', {}, {0xff}, 0x73, 0x1, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010101, 0xff, 0xff, 'lo\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x73, 0x1, 0x51}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r5, 0x0, 0x0) 265.442515ms ago: executing program 5 (id=3040): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 201.611022ms ago: executing program 4 (id=3041): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="fd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)='h'}) 165.593161ms ago: executing program 5 (id=3042): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 76.173123ms ago: executing program 1 (id=3043): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0xc800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000019c0)={'syztnl1\x00', 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x70}}], 0x2, 0x2000c844) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 0s ago: executing program 1 (id=3044): gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): tream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 572.627817][ T30] audit: type=1326 audit(1790786679.388:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.2669" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 572.627857][ T30] audit: type=1326 audit(1790786679.388:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.2669" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 572.628001][ T30] audit: type=1326 audit(1790786679.388:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.2669" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 572.628104][ T30] audit: type=1326 audit(1790786679.388:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.2669" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 572.628143][ T30] audit: type=1326 audit(1790786679.388:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.2669" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 572.628367][ T30] audit: type=1326 audit(1790786679.388:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.5.2669" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 572.927721][T14387] netlink: 'syz.5.2671': attribute type 24 has an invalid length. [ 572.927736][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 572.927751][T14387] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 573.026906][T14391] Cannot find add_set index 2 as target [ 573.564672][T14405] netlink: 'syz.5.2679': attribute type 8 has an invalid length. [ 573.564698][T14405] netlink: 636 bytes leftover after parsing attributes in process `syz.5.2679'. [ 573.859751][ T5703] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 574.031481][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 574.032937][ T5703] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 574.035216][ T5703] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 574.035244][ T5703] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 574.035264][ T5703] usb 6-1: config 3 has no interface number 0 [ 574.035304][ T5703] usb 6-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 574.035332][ T5703] usb 6-1: config 3 interface 45 has no altsetting 0 [ 574.056310][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.056337][ T5703] usb 6-1: Product: syz [ 574.056353][ T5703] usb 6-1: Manufacturer: syz [ 574.056367][ T5703] usb 6-1: SerialNumber: syz [ 574.124673][T14412] FAULT_INJECTION: forcing a failure. [ 574.124673][T14412] name failslab, interval 1, probability 0, space 0, times 0 [ 574.124708][T14412] CPU: 1 UID: 0 PID: 14412 Comm: syz.0.2682 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.124737][T14412] Tainted: [L]=SOFTLOCKUP [ 574.124744][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.124757][T14412] Call Trace: [ 574.124765][T14412] [ 574.124774][T14412] dump_stack_lvl+0xe8/0x150 [ 574.124809][T14412] should_fail_ex+0x410/0x560 [ 574.124837][T14412] ? __alloc_skb+0x1db/0x7a0 [ 574.124862][T14412] should_failslab+0xa8/0x100 [ 574.124889][T14412] ? __alloc_skb+0x1db/0x7a0 [ 574.124912][T14412] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 574.124932][T14412] ? __alloc_skb+0x18d/0x7a0 [ 574.124956][T14412] ? __alloc_skb+0x1db/0x7a0 [ 574.124986][T14412] __alloc_skb+0x1db/0x7a0 [ 574.125015][T14412] netlink_ack+0x136/0xb30 [ 574.125033][T14412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.125058][T14412] ? __pfx_nl80211_post_doit+0x10/0x10 [ 574.125175][T14412] netlink_rcv_skb+0x2a4/0x4a0 [ 574.125197][T14412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.125223][T14412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.125257][T14412] ? down_read+0x2be/0x330 [ 574.125289][T14412] genl_rcv+0x28/0x40 [ 574.125312][T14412] netlink_unicast+0x7bd/0x940 [ 574.125350][T14412] netlink_sendmsg+0x813/0xb40 [ 574.125379][T14412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.125408][T14412] ? apparmor_socket_sendmsg+0x98/0x360 [ 574.125433][T14412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.125453][T14412] sock_sendmsg_nosec+0x13a/0x180 [ 574.125478][T14412] ____sys_sendmsg+0x54e/0x850 [ 574.125511][T14412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.125548][T14412] ? import_iovec+0x73/0xa0 [ 574.125576][T14412] ___sys_sendmsg+0x2a5/0x360 [ 574.125602][T14412] ? __lock_acquire+0x747/0x2de0 [ 574.125628][T14412] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.125689][T14412] ? __fget_files+0x2a/0x420 [ 574.125715][T14412] ? __fget_files+0x3a2/0x420 [ 574.125751][T14412] __x64_sys_sendmsg+0x1b1/0x290 [ 574.125781][T14412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.125829][T14412] do_syscall_64+0x166/0x520 [ 574.125854][T14412] ? trace_irq_disable+0x3b/0x140 [ 574.125875][T14412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.125896][T14412] ? clear_bhb_loop+0x70/0xc0 [ 574.125919][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.125939][T14412] RIP: 0033:0x7fdf5679e159 [ 574.125958][T14412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.125975][T14412] RSP: 002b:00007fdf57697028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.125996][T14412] RAX: ffffffffffffffda RBX: 00007fdf56a25fa0 RCX: 00007fdf5679e159 [ 574.126010][T14412] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 574.126024][T14412] RBP: 00007fdf57697090 R08: 0000000000000000 R09: 0000000000000000 [ 574.126036][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.126048][T14412] R13: 00007fdf56a26038 R14: 00007fdf56a25fa0 R15: 00007fdf56b4fa48 [ 574.126086][T14412] [ 574.506151][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 574.600167][ T5703] usb 6-1: USB disconnect, device number 16 [ 574.671729][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.076109][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.076557][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.173994][T14439] FAULT_INJECTION: forcing a failure. [ 575.173994][T14439] name failslab, interval 1, probability 0, space 0, times 0 [ 575.174018][T14439] CPU: 0 UID: 0 PID: 14439 Comm: syz.4.2692 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.174034][T14439] Tainted: [L]=SOFTLOCKUP [ 575.174038][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.174045][T14439] Call Trace: [ 575.174050][T14439] [ 575.174056][T14439] dump_stack_lvl+0xe8/0x150 [ 575.174077][T14439] should_fail_ex+0x410/0x560 [ 575.174095][T14439] should_failslab+0xa8/0x100 [ 575.174111][T14439] __kmalloc_cache_noprof+0xa3/0x600 [ 575.174133][T14439] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.174150][T14439] ? __request_module+0x2d0/0x630 [ 575.174164][T14439] ? __request_module+0x2d0/0x630 [ 575.174181][T14439] __request_module+0x2d0/0x630 [ 575.174199][T14439] ? l2tp_nl_cmd_session_create+0x5ca/0xbe0 [ 575.174266][T14439] ? __pfx___request_module+0x10/0x10 [ 575.174289][T14439] ? __mutex_unlock_slowpath+0x731/0x900 [ 575.174316][T14439] ? l2tp_tunnel_get+0x89/0x430 [ 575.174336][T14439] ? __local_bh_enable_ip+0xd6/0x140 [ 575.174355][T14439] ? l2tp_tunnel_get+0x398/0x430 [ 575.174375][T14439] l2tp_nl_cmd_session_create+0x5e2/0xbe0 [ 575.174391][T14439] ? trace_kmalloc+0x2a/0xf0 [ 575.174406][T14439] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 575.174426][T14439] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 575.174442][T14439] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 575.174463][T14439] genl_family_rcv_msg_doit+0x233/0x340 [ 575.174481][T14439] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 575.174502][T14439] ? bpf_lsm_capable+0x9/0x20 [ 575.174513][T14439] ? security_capable+0x7e/0x2c0 [ 575.174531][T14439] genl_rcv_msg+0x614/0x7a0 [ 575.174548][T14439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.174561][T14439] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 575.174586][T14439] netlink_rcv_skb+0x226/0x4a0 [ 575.174597][T14439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.174612][T14439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.174631][T14439] ? down_read+0x2be/0x330 [ 575.174651][T14439] genl_rcv+0x28/0x40 [ 575.174673][T14439] netlink_unicast+0x7bd/0x940 [ 575.174699][T14439] netlink_sendmsg+0x813/0xb40 [ 575.174715][T14439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.174730][T14439] ? apparmor_socket_sendmsg+0x98/0x360 [ 575.174745][T14439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.174756][T14439] sock_sendmsg_nosec+0x13a/0x180 [ 575.174770][T14439] ____sys_sendmsg+0x54e/0x850 [ 575.174788][T14439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.174809][T14439] ? import_iovec+0x73/0xa0 [ 575.174825][T14439] ___sys_sendmsg+0x2a5/0x360 [ 575.174840][T14439] ? __lock_acquire+0x747/0x2de0 [ 575.174854][T14439] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.174887][T14439] ? __fget_files+0x2a/0x420 [ 575.174902][T14439] ? __fget_files+0x3a2/0x420 [ 575.174922][T14439] __x64_sys_sendmsg+0x1b1/0x290 [ 575.174940][T14439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.174972][T14439] do_syscall_64+0x166/0x520 [ 575.174987][T14439] ? trace_irq_disable+0x3b/0x140 [ 575.174999][T14439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.175010][T14439] ? clear_bhb_loop+0x70/0xc0 [ 575.175024][T14439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.175036][T14439] RIP: 0033:0x7fe7e259e159 [ 575.175047][T14439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.175057][T14439] RSP: 002b:00007fe7e3455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.175070][T14439] RAX: ffffffffffffffda RBX: 00007fe7e2825fa0 RCX: 00007fe7e259e159 [ 575.175078][T14439] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000005 [ 575.175085][T14439] RBP: 00007fe7e3455090 R08: 0000000000000000 R09: 0000000000000000 [ 575.175092][T14439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.175099][T14439] R13: 00007fe7e2826038 R14: 00007fe7e2825fa0 R15: 00007fe7e294fa48 [ 575.175115][T14439] [ 575.442969][T14445] FAULT_INJECTION: forcing a failure. [ 575.442969][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 575.443006][T14445] CPU: 1 UID: 0 PID: 14445 Comm: syz.1.2694 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.443033][T14445] Tainted: [L]=SOFTLOCKUP [ 575.443041][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.443053][T14445] Call Trace: [ 575.443060][T14445] [ 575.443069][T14445] dump_stack_lvl+0xe8/0x150 [ 575.443104][T14445] should_fail_ex+0x410/0x560 [ 575.443134][T14445] should_failslab+0xa8/0x100 [ 575.443159][T14445] ? skb_clone+0x212/0x3a0 [ 575.443189][T14445] kmem_cache_alloc_noprof+0xa1/0x600 [ 575.443212][T14445] ? skb_clone+0x212/0x3a0 [ 575.443246][T14445] skb_clone+0x212/0x3a0 [ 575.443277][T14445] __netlink_deliver_tap+0x413/0x860 [ 575.443309][T14445] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.443331][T14445] netlink_deliver_tap+0x19c/0x1b0 [ 575.443353][T14445] netlink_dump+0x95b/0xee0 [ 575.443383][T14445] ? __pfx_netlink_dump+0x10/0x10 [ 575.443414][T14445] ? genl_start+0x497/0x6d0 [ 575.443453][T14445] __netlink_dump_start+0x589/0x7b0 [ 575.443479][T14445] genl_family_rcv_msg_dumpit+0x213/0x310 [ 575.443508][T14445] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 575.443541][T14445] ? __pfx_genl_start+0x10/0x10 [ 575.443563][T14445] ? __pfx_genl_dumpit+0x10/0x10 [ 575.443585][T14445] ? __pfx_genl_done+0x10/0x10 [ 575.443614][T14445] ? bpf_lsm_capable+0x9/0x20 [ 575.443633][T14445] ? security_capable+0x7e/0x2c0 [ 575.443663][T14445] genl_rcv_msg+0x5e1/0x7a0 [ 575.443694][T14445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.443718][T14445] ? __pfx_batadv_bla_backbone_dump+0x10/0x10 [ 575.443826][T14445] netlink_rcv_skb+0x226/0x4a0 [ 575.443848][T14445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.443873][T14445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.443908][T14445] ? down_read+0x2be/0x330 [ 575.443943][T14445] genl_rcv+0x28/0x40 [ 575.443965][T14445] netlink_unicast+0x7bd/0x940 [ 575.444003][T14445] netlink_sendmsg+0x813/0xb40 [ 575.444032][T14445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.444061][T14445] ? apparmor_socket_sendmsg+0x98/0x360 [ 575.444086][T14445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.444106][T14445] sock_sendmsg_nosec+0x13a/0x180 [ 575.444131][T14445] ____sys_sendmsg+0x54e/0x850 [ 575.444164][T14445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.444199][T14445] ? import_iovec+0x73/0xa0 [ 575.444228][T14445] ___sys_sendmsg+0x2a5/0x360 [ 575.444254][T14445] ? __lock_acquire+0x747/0x2de0 [ 575.444280][T14445] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.444340][T14445] ? __fget_files+0x2a/0x420 [ 575.444366][T14445] ? __fget_files+0x3a2/0x420 [ 575.444402][T14445] __x64_sys_sendmsg+0x1b1/0x290 [ 575.444432][T14445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.444487][T14445] do_syscall_64+0x166/0x520 [ 575.444511][T14445] ? trace_irq_disable+0x3b/0x140 [ 575.444532][T14445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.444552][T14445] ? clear_bhb_loop+0x70/0xc0 [ 575.444575][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.444595][T14445] RIP: 0033:0x7f488099e159 [ 575.444614][T14445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.444630][T14445] RSP: 002b:00007f48818ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.444651][T14445] RAX: ffffffffffffffda RBX: 00007f4880c25fa0 RCX: 00007f488099e159 [ 575.444665][T14445] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 575.444678][T14445] RBP: 00007f48818ac090 R08: 0000000000000000 R09: 0000000000000000 [ 575.444690][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.444702][T14445] R13: 00007f4880c26038 R14: 00007f4880c25fa0 R15: 00007f4880d4fa48 [ 575.444733][T14445] [ 575.904219][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 576.196335][T14465] sctp: [Deprecated]: syz.4.2700 (pid 14465) Use of int in max_burst socket option deprecated. [ 576.196335][T14465] Use struct sctp_assoc_value instead [ 576.541082][T14476] netlink: 'syz.5.2704': attribute type 8 has an invalid length. [ 576.554045][ T5696] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 576.700606][ T5696] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 576.711560][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.711586][ T5696] usb 5-1: Product: syz [ 576.711602][ T5696] usb 5-1: Manufacturer: syz [ 576.711616][ T5696] usb 5-1: SerialNumber: syz [ 576.763146][ T5696] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 576.763583][ T5696] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 576.763646][ T5696] usb-storage 5-1:1.0: USB Mass Storage device detected [ 576.812262][ T5696] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 576.823717][ T5696] scsi host1: usb-storage 5-1:1.0 [ 577.097613][T14482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.097867][T14482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.203104][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 577.314153][T14500] Cannot find add_set index 2 as target [ 577.933823][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 577.936167][T14519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.937903][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'. [ 577.937940][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 578.240848][T14535] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2720'. [ 578.241505][T14535] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2720'. [ 578.263992][T14534] netlink: 'syz.3.2722': attribute type 24 has an invalid length. [ 578.264013][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 578.264037][T14534] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 578.298130][T13050] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 578.454326][T14539] xt_hashlimit: max too large, truncated to 1048576 [ 578.468009][T13050] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 578.480526][T13050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.480552][T13050] usb 6-1: Product: syz [ 578.480567][T13050] usb 6-1: Manufacturer: syz [ 578.480581][T13050] usb 6-1: SerialNumber: syz [ 578.483292][T13050] usb 6-1: config 0 descriptor?? [ 578.685293][T13050] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 578.685322][T13050] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 578.685347][T13050] f81604 6-1:0.0: probe with driver f81604 failed with error -32 [ 578.802701][T14541] Cannot find add_set index 2 as target [ 579.035118][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2725'. [ 579.072361][T14545] netlink: 'syz.5.2718': attribute type 39 has an invalid length. [ 579.138661][T14544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.141471][T14544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.141974][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 579.145236][T14523] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 579.205388][ T5712] usb 5-1: USB disconnect, device number 121 [ 579.418410][T14550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.705301][T14553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.706889][T14553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.724397][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.724826][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.738476][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.738921][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.743692][T14555] tipc: Enabling of bearer rejected, failed to enable media [ 579.744288][T14555] IPVS: Unknown mcast interface: veth1_vlan [ 579.776242][T14553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.776676][T14553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.030599][T14557] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2729'. [ 580.342954][T14563] FAULT_INJECTION: forcing a failure. [ 580.342954][T14563] name failslab, interval 1, probability 0, space 0, times 0 [ 580.342976][T14563] CPU: 1 UID: 0 PID: 14563 Comm: syz.3.2731 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.342992][T14563] Tainted: [L]=SOFTLOCKUP [ 580.342997][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.343003][T14563] Call Trace: [ 580.343016][T14563] [ 580.343022][T14563] dump_stack_lvl+0xe8/0x150 [ 580.343045][T14563] should_fail_ex+0x410/0x560 [ 580.343062][T14563] should_failslab+0xa8/0x100 [ 580.343079][T14563] __kvmalloc_node_noprof+0x176/0x820 [ 580.343094][T14563] ? alloc_netdev_mqs+0xa9/0x12a0 [ 580.343107][T14563] ? alloc_netdev_mqs+0xa9/0x12a0 [ 580.343121][T14563] alloc_netdev_mqs+0xa9/0x12a0 [ 580.343132][T14563] ? __pfx_snprintf+0x10/0x10 [ 580.343144][T14563] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 580.343165][T14563] rtnl_create_link+0x321/0xd70 [ 580.343181][T14563] rtnl_newlink_create+0x258/0x7b0 [ 580.343200][T14563] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 580.343218][T14563] ? __pfx___mutex_lock+0x10/0x10 [ 580.343239][T14563] ? ns_capable+0x89/0xe0 [ 580.343256][T14563] rtnl_newlink+0x166d/0x1c30 [ 580.343279][T14563] ? __pfx_rtnl_newlink+0x10/0x10 [ 580.343292][T14563] ? do_syscall_64+0x166/0x520 [ 580.343306][T14563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.343335][T14563] ? kasan_quarantine_put+0xbb/0x1f0 [ 580.343347][T14563] ? lockdep_hardirqs_on+0x7b/0x110 [ 580.343364][T14563] ? nlmon_xmit+0xb0/0x100 [ 580.343377][T14563] ? kmem_cache_free+0x182/0x650 [ 580.343394][T14563] ? __lock_acquire+0x747/0x2de0 [ 580.343412][T14563] ? __local_bh_enable_ip+0xd6/0x140 [ 580.343426][T14563] ? lockdep_hardirqs_on+0x7b/0x110 [ 580.343440][T14563] ? __dev_queue_xmit+0x29b/0x3820 [ 580.343450][T14563] ? __local_bh_enable_ip+0xd6/0x140 [ 580.343463][T14563] ? __dev_queue_xmit+0x29b/0x3820 [ 580.343480][T14563] ? lock_acquire+0x115/0x350 [ 580.343511][T14563] ? __pfx_rtnl_newlink+0x10/0x10 [ 580.343536][T14563] rtnetlink_rcv_msg+0x802/0xc00 [ 580.343565][T14563] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 580.343589][T14563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.343612][T14563] ? ref_tracker_free+0x689/0x830 [ 580.343638][T14563] ? __pfx_ref_tracker_free+0x10/0x10 [ 580.343657][T14563] netlink_rcv_skb+0x226/0x4a0 [ 580.343670][T14563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.343686][T14563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.343704][T14563] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.343715][T14563] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.343728][T14563] netlink_unicast+0x7bd/0x940 [ 580.343751][T14563] netlink_sendmsg+0x813/0xb40 [ 580.343767][T14563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.343783][T14563] ? apparmor_socket_sendmsg+0x98/0x360 [ 580.343798][T14563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.343809][T14563] sock_sendmsg_nosec+0x13a/0x180 [ 580.343823][T14563] ____sys_sendmsg+0x54e/0x850 [ 580.343842][T14563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.343862][T14563] ? import_iovec+0x73/0xa0 [ 580.343879][T14563] ___sys_sendmsg+0x2a5/0x360 [ 580.343894][T14563] ? __lock_acquire+0x747/0x2de0 [ 580.343908][T14563] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.343944][T14563] ? __fget_files+0x2a/0x420 [ 580.343960][T14563] ? __fget_files+0x3a2/0x420 [ 580.343980][T14563] __x64_sys_sendmsg+0x1b1/0x290 [ 580.343998][T14563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.344031][T14563] do_syscall_64+0x166/0x520 [ 580.344045][T14563] ? trace_irq_disable+0x3b/0x140 [ 580.344057][T14563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.344068][T14563] ? clear_bhb_loop+0x70/0xc0 [ 580.344082][T14563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.344094][T14563] RIP: 0033:0x7f1aec79e159 [ 580.344105][T14563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.344115][T14563] RSP: 002b:00007f1aed5f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.344127][T14563] RAX: ffffffffffffffda RBX: 00007f1aeca25fa0 RCX: 00007f1aec79e159 [ 580.344136][T14563] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 580.344143][T14563] RBP: 00007f1aed5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 580.344149][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.344156][T14563] R13: 00007f1aeca26038 R14: 00007f1aeca25fa0 R15: 00007f1aecb4fa48 [ 580.344173][T14563] [ 580.347717][T14564] FAULT_INJECTION: forcing a failure. [ 580.347717][T14564] name failslab, interval 1, probability 0, space 0, times 0 [ 580.347751][T14564] CPU: 0 UID: 0 PID: 14564 Comm: syz.0.2732 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.347779][T14564] Tainted: [L]=SOFTLOCKUP [ 580.347786][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.347796][T14564] Call Trace: [ 580.347803][T14564] [ 580.347808][T14564] dump_stack_lvl+0xe8/0x150 [ 580.347830][T14564] should_fail_ex+0x410/0x560 [ 580.347846][T14564] should_failslab+0xa8/0x100 [ 580.347863][T14564] __kmalloc_noprof+0xfe/0x720 [ 580.347876][T14564] ? hash_ip4_add+0xbb5/0x1f40 [ 580.347978][T14564] ? hash_ip4_add+0xbb5/0x1f40 [ 580.347996][T14564] hash_ip4_add+0xbb5/0x1f40 [ 580.348018][T14564] ? ip_set_get_ipaddr4+0x177/0x2c0 [ 580.348057][T14564] ? __pfx_ip_set_get_ipaddr4+0x10/0x10 [ 580.348074][T14564] ? crng_make_state+0x2c5/0x600 [ 580.348095][T14564] hash_ip4_uadt+0x664/0x860 [ 580.348112][T14564] ? __pfx_hash_ip4_add+0x10/0x10 [ 580.348126][T14564] ? __pfx_hash_ip4_uadt+0x10/0x10 [ 580.348152][T14564] call_ad+0x18d/0xb50 [ 580.348164][T14564] ? __lock_acquire+0x747/0x2de0 [ 580.348179][T14564] ? __pfx_call_ad+0x10/0x10 [ 580.348198][T14564] ? __nla_parse+0x40/0x60 [ 580.348214][T14564] ip_set_ad+0x82a/0x9d0 [ 580.348230][T14564] ? __pfx_ip_set_ad+0x10/0x10 [ 580.348241][T14564] ? __mutex_lock+0x30b/0x1550 [ 580.348274][T14564] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 580.348291][T14564] ? unwind_get_return_address+0x4d/0x90 [ 580.348305][T14564] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 580.348330][T14564] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 580.348368][T14564] netlink_rcv_skb+0x226/0x4a0 [ 580.348380][T14564] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 580.348397][T14564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.348414][T14564] ? bpf_lsm_capable+0x9/0x20 [ 580.348425][T14564] ? security_capable+0x7e/0x2c0 [ 580.348443][T14564] nfnetlink_rcv+0x2b9/0x28c0 [ 580.348460][T14564] ? __dev_queue_xmit+0x29b/0x3820 [ 580.348473][T14564] ? __local_bh_enable_ip+0xd6/0x140 [ 580.348489][T14564] ? lockdep_hardirqs_on+0x7b/0x110 [ 580.348519][T14564] ? __dev_queue_xmit+0x29b/0x3820 [ 580.348538][T14564] ? __local_bh_enable_ip+0xd6/0x140 [ 580.348562][T14564] ? __dev_queue_xmit+0x29b/0x3820 [ 580.348581][T14564] ? __dev_queue_xmit+0x1edc/0x3820 [ 580.348595][T14564] ? do_syscall_64+0x166/0x520 [ 580.348609][T14564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.348626][T14564] ? __dev_queue_xmit+0x29b/0x3820 [ 580.348637][T14564] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 580.348656][T14564] ? __pfx___dev_queue_xmit+0x10/0x10 [ 580.348671][T14564] ? ref_tracker_free+0x689/0x830 [ 580.348686][T14564] ? __pfx_ref_tracker_free+0x10/0x10 [ 580.348705][T14564] ? __skb_clone+0x449/0x6c0 [ 580.348724][T14564] ? skb_clone+0x246/0x3a0 [ 580.348742][T14564] ? __netlink_deliver_tap+0x811/0x860 [ 580.348753][T14564] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.348767][T14564] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.348778][T14564] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.348791][T14564] netlink_unicast+0x7bd/0x940 [ 580.348812][T14564] netlink_sendmsg+0x813/0xb40 [ 580.348828][T14564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.348843][T14564] ? apparmor_socket_sendmsg+0x98/0x360 [ 580.348858][T14564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.348868][T14564] sock_sendmsg_nosec+0x13a/0x180 [ 580.348882][T14564] ____sys_sendmsg+0x54e/0x850 [ 580.348901][T14564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.348921][T14564] ? import_iovec+0x73/0xa0 [ 580.348937][T14564] ___sys_sendmsg+0x2a5/0x360 [ 580.348952][T14564] ? __lock_acquire+0x747/0x2de0 [ 580.348966][T14564] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.348998][T14564] ? __fget_files+0x2a/0x420 [ 580.349015][T14564] ? __fget_files+0x3a2/0x420 [ 580.349035][T14564] __x64_sys_sendmsg+0x1b1/0x290 [ 580.349052][T14564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.349078][T14564] do_syscall_64+0x166/0x520 [ 580.349093][T14564] ? trace_irq_disable+0x3b/0x140 [ 580.349104][T14564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.349116][T14564] ? clear_bhb_loop+0x70/0xc0 [ 580.349129][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.349140][T14564] RIP: 0033:0x7fdf5679e159 [ 580.349152][T14564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.349162][T14564] RSP: 002b:00007fdf57697028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.349175][T14564] RAX: ffffffffffffffda RBX: 00007fdf56a25fa0 RCX: 00007fdf5679e159 [ 580.349183][T14564] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006 [ 580.349190][T14564] RBP: 00007fdf57697090 R08: 0000000000000000 R09: 0000000000000000 [ 580.349197][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.349204][T14564] R13: 00007fdf56a26038 R14: 00007fdf56a25fa0 R15: 00007fdf56b4fa48 [ 580.349220][T14564] [ 580.562934][T14566] fuse: Unknown parameter '¢‡' [ 580.620100][T14566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.625612][T14566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.654656][T14573] input: syz1 as /devices/virtual/input/input70 [ 581.053852][T14578] Cannot find add_set index 2 as target [ 581.186805][ T5703] usb 6-1: USB disconnect, device number 17 [ 581.204628][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'. [ 581.326991][T14580] netlink: 'syz.0.2736': attribute type 10 has an invalid length. [ 581.370114][T14586] Cannot find add_set index 2 as target [ 581.558548][T14580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.582599][T14580] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 581.639602][T13050] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 581.757117][T14602] syz_tun: entered promiscuous mode [ 581.762362][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 581.762391][T14602] syz_tun: left promiscuous mode [ 581.762521][T14602] FAULT_INJECTION: forcing a failure. [ 581.762521][T14602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.762549][T14602] CPU: 1 UID: 0 PID: 14602 Comm: syz.1.2743 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.762575][T14602] Tainted: [L]=SOFTLOCKUP [ 581.762591][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.762603][T14602] Call Trace: [ 581.762611][T14602] [ 581.762619][T14602] dump_stack_lvl+0xe8/0x150 [ 581.762653][T14602] should_fail_ex+0x410/0x560 [ 581.762683][T14602] _copy_from_user+0x2d/0xb0 [ 581.762710][T14602] kstrtouint_from_user+0xd6/0x180 [ 581.762736][T14602] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 581.762766][T14602] ? lock_acquire+0x115/0x350 [ 581.762793][T14602] proc_fail_nth_write+0x8e/0x210 [ 581.762815][T14602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 581.762846][T14602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 581.762866][T14602] vfs_write+0x296/0xba0 [ 581.762893][T14602] ? __pfx_vfs_write+0x10/0x10 [ 581.762914][T14602] ? __fget_files+0x2a/0x420 [ 581.762945][T14602] ? __fget_files+0x3a2/0x420 [ 581.762971][T14602] ? __fget_files+0x2a/0x420 [ 581.763006][T14602] ksys_write+0x150/0x270 [ 581.763028][T14602] ? __pfx_ksys_write+0x10/0x10 [ 581.763057][T14602] do_syscall_64+0x166/0x520 [ 581.763083][T14602] ? trace_irq_disable+0x3b/0x140 [ 581.763104][T14602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.763124][T14602] ? clear_bhb_loop+0x70/0xc0 [ 581.763148][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.763167][T14602] RIP: 0033:0x7f488095e98e [ 581.763185][T14602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.763203][T14602] RSP: 002b:00007f48818abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.763224][T14602] RAX: ffffffffffffffda RBX: 00007f48818ac6c0 RCX: 00007f488095e98e [ 581.763239][T14602] RDX: 0000000000000001 RSI: 00007f48818ac0a0 RDI: 000000000000000d [ 581.763251][T14602] RBP: 00007f48818ac090 R08: 0000000000000000 R09: 0000000000000000 [ 581.763264][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.763276][T14602] R13: 00007f4880c26038 R14: 00007f4880c25fa0 R15: 00007f4880d4fa48 [ 581.763307][T14602] [ 581.806682][T13048] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 581.810321][T13050] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 581.811510][T13050] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 581.811533][T13050] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 581.816034][T13050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.816059][T13050] usb 5-1: Product: syz [ 581.816073][T13050] usb 5-1: Manufacturer: syz [ 581.816088][T13050] usb 5-1: SerialNumber: syz [ 581.833898][T13050] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 581.853577][T13050] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 581.853577][T13050] Please send a copy of this message to and [ 581.995874][T14609] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2746'. [ 581.996740][T14609] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2746'. [ 582.084292][T13048] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 582.110699][T13048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.110748][T13048] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 582.110769][T13048] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 582.110807][T13048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.157457][T14613] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2747'. [ 582.199184][T13048] ttusb_dec_send_command: command bulk message failed: error -8 [ 582.207287][T13048] ttusb-dec 6-1:1.0: probe with driver ttusb-dec failed with error -8 [ 582.235626][T13050] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 582.262354][T13050] usb 5-1: USB disconnect, device number 122 [ 582.398210][T14594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.398736][T14594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.421165][T14594] loop0: detected capacity change from 0 to 3904 [ 582.472337][T14594] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 582.472373][T14594] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 582.472381][T14594] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 582.472473][T14594] loop0: [ 582.474526][T13050] usb 6-1: USB disconnect, device number 18 [ 582.892481][T14621] Cannot find add_set index 2 as target [ 582.905177][ T5703] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 583.053564][ T5703] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 583.055360][ T5703] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.066717][T14628] xt_bpf: check failed: parse error [ 583.090577][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 583.090605][ T5703] usb 5-1: Product: syz [ 583.090619][ T5703] usb 5-1: Manufacturer: syz [ 583.132054][ T5703] usb 5-1: selecting invalid altsetting 1 [ 583.132223][ T5703] dvb_ttusb_budget: ttusb_init_controller: error [ 583.132237][ T5703] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 583.234745][ T5703] DVB: Unable to find symbol cx22700_attach() [ 583.244762][ T5712] hid_parser_main: 8 callbacks suppressed [ 583.244785][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.244817][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.244842][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.244867][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.244892][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.244916][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.244942][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.244966][ T5712] hid-generic 0000:0000:0001.0039: unknown main item tag 0x0 [ 583.257397][ T5712] hid-generic 0000:0000:0001.0039: hidraw0: HID v0.10 Device [syz0] on syz1 [ 583.299500][T13048] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 583.331987][ T5703] DVB: Unable to find symbol tda10046_attach() [ 583.332005][ T5703] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 583.363681][ T5703] usb 5-1: USB disconnect, device number 123 [ 583.450350][T13048] usb 6-1: Using ep0 maxpacket: 16 [ 583.528335][T14636] fido_id[14636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 583.583755][T13048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 583.583810][T13048] usb 6-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c8.70 [ 583.585205][T13048] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 583.585242][T13048] usb 6-1: can't read configurations, error -71 [ 583.980007][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 584.215417][T14650] trusted_key: encrypted_key: insufficient parameters specified [ 584.855649][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 584.855682][ T30] audit: type=1326 audit(1790786691.618:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.858044][ T30] audit: type=1326 audit(1790786691.618:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.858889][ T30] audit: type=1326 audit(1790786691.618:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.890449][ T30] audit: type=1326 audit(1790786691.658:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.890499][ T30] audit: type=1326 audit(1790786691.658:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.895074][ T30] audit: type=1326 audit(1790786691.658:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.895140][ T30] audit: type=1326 audit(1790786691.658:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.895178][ T30] audit: type=1326 audit(1790786691.658:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.900701][ T30] audit: type=1326 audit(1790786691.668:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.901501][ T30] audit: type=1326 audit(1790786691.668:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.5.2761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3790d9e159 code=0x7ffc0000 [ 584.954665][T14669] FAULT_INJECTION: forcing a failure. [ 584.954665][T14669] name failslab, interval 1, probability 0, space 0, times 0 [ 584.954700][T14669] CPU: 0 UID: 0 PID: 14669 Comm: syz.5.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.954729][T14669] Tainted: [L]=SOFTLOCKUP [ 584.954737][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.954748][T14669] Call Trace: [ 584.954757][T14669] [ 584.954765][T14669] dump_stack_lvl+0xe8/0x150 [ 584.954800][T14669] should_fail_ex+0x410/0x560 [ 584.954830][T14669] should_failslab+0xa8/0x100 [ 584.954858][T14669] __kmalloc_cache_noprof+0xa3/0x600 [ 584.954881][T14669] ? audit_log_d_path+0xb8/0x1a0 [ 584.954908][T14669] ? audit_log_d_path+0xb8/0x1a0 [ 584.954942][T14669] audit_log_d_path+0xb8/0x1a0 [ 584.954971][T14669] audit_log_d_path_exe+0x42/0x70 [ 584.954999][T14669] audit_log_task+0x2c3/0x3d0 [ 584.955028][T14669] ? __pfx_audit_log_task+0x10/0x10 [ 584.955063][T14669] audit_seccomp+0x85/0x190 [ 584.955093][T14669] __seccomp_filter+0xd14/0x1de0 [ 584.955129][T14669] ? __pfx___seccomp_filter+0x10/0x10 [ 584.955152][T14669] ? __mutex_unlock_slowpath+0x731/0x900 [ 584.955182][T14669] ? __fget_files+0x2a/0x420 [ 584.955212][T14669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 584.955240][T14669] ? __fget_files+0x3a2/0x420 [ 584.955272][T14669] ? fput+0xa0/0xd0 [ 584.955308][T14669] ? __pfx_ksys_write+0x10/0x10 [ 584.955331][T14669] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 584.955360][T14669] do_syscall_64+0x11f/0x520 [ 584.955385][T14669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.955405][T14669] ? clear_bhb_loop+0x70/0xc0 [ 584.955429][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.955448][T14669] RIP: 0033:0x7f3790d9e159 [ 584.955467][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.955483][T14669] RSP: 002b:00007f3791d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 584.955506][T14669] RAX: ffffffffffffffda RBX: 00007f3791025fa0 RCX: 00007f3790d9e159 [ 584.955520][T14669] RDX: 0000000000000001 RSI: 0000200000019440 RDI: 0000000000000008 [ 584.955533][T14669] RBP: 00007f3791d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 584.955546][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.955558][T14669] R13: 00007f3791026038 R14: 00007f3791025fa0 R15: 00007f379114fa48 [ 584.955587][T14669] [ 585.484479][T14680] Cannot find add_set index 2 as target [ 585.633138][T14685] program syz.3.2765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.649579][T13052] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 585.802618][T13052] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 585.807272][T13052] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.807306][T13052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 585.807335][T13052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 585.816507][T13052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.816534][T13052] usb 6-1: Product: syz [ 585.816548][T13052] usb 6-1: Manufacturer: syz [ 585.816562][T13052] usb 6-1: SerialNumber: syz [ 585.824571][T13052] usb 6-1: config 0 descriptor?? [ 585.826695][T14678] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 585.991058][T13052] rc_core: IR keymap rc-streamzap not found [ 585.991080][T13052] Registered IR keymap rc-empty [ 585.992308][T13052] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 585.996073][T13052] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input71 [ 586.120743][T14678] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 586.874765][T14706] FAULT_INJECTION: forcing a failure. [ 586.874765][T14706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.874796][T14706] CPU: 1 UID: 0 PID: 14706 Comm: syz.0.2771 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.874812][T14706] Tainted: [L]=SOFTLOCKUP [ 586.874817][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.874824][T14706] Call Trace: [ 586.874829][T14706] [ 586.874835][T14706] dump_stack_lvl+0xe8/0x150 [ 586.874867][T14706] should_fail_ex+0x410/0x560 [ 586.874897][T14706] _copy_to_user+0x31/0xb0 [ 586.874927][T14706] simple_read_from_buffer+0xe1/0x170 [ 586.874959][T14706] proc_fail_nth_read+0x1bb/0x230 [ 586.874979][T14706] ? common_file_perm+0x20e/0x2b0 [ 586.875007][T14706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.875034][T14706] ? rw_verify_area+0x24a/0x4c0 [ 586.875062][T14706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.875081][T14706] vfs_read+0x213/0xa80 [ 586.875116][T14706] ? __pfx___mutex_lock+0x10/0x10 [ 586.875145][T14706] ? __pfx_vfs_read+0x10/0x10 [ 586.875176][T14706] ? __fget_files+0x2a/0x420 [ 586.875201][T14706] ? __fget_files+0x3a2/0x420 [ 586.875216][T14706] ? __fget_files+0x2a/0x420 [ 586.875235][T14706] ksys_read+0x150/0x270 [ 586.875250][T14706] ? __pfx_ksys_read+0x10/0x10 [ 586.875280][T14706] do_syscall_64+0x166/0x520 [ 586.875306][T14706] ? trace_irq_disable+0x3b/0x140 [ 586.875328][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.875349][T14706] ? clear_bhb_loop+0x70/0xc0 [ 586.875374][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.875391][T14706] RIP: 0033:0x7fdf5675e98e [ 586.875402][T14706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 586.875412][T14706] RSP: 002b:00007fdf57696fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.875425][T14706] RAX: ffffffffffffffda RBX: 00007fdf576976c0 RCX: 00007fdf5675e98e [ 586.875433][T14706] RDX: 000000000000000f RSI: 00007fdf576970a0 RDI: 0000000000000006 [ 586.875440][T14706] RBP: 00007fdf57697090 R08: 0000000000000000 R09: 0000000000000000 [ 586.875453][T14706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.875465][T14706] R13: 00007fdf56a26038 R14: 00007fdf56a25fa0 R15: 00007fdf56b4fa48 [ 586.875497][T14706] [ 587.446366][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 587.572209][T14711] bond0: left allmulticast mode [ 587.986351][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2775'. [ 588.789657][T13064] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 588.940602][T13064] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 588.941591][T13064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.941620][T13064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.941642][T13064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.973239][T13064] usb 5-1: config 0 descriptor?? [ 589.111245][T14731] Cannot find add_set index 2 as target [ 589.139368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 589.213059][T13048] usb 6-1: USB disconnect, device number 21 [ 589.496758][T13064] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 589.514610][T14744] FAULT_INJECTION: forcing a failure. [ 589.514610][T14744] name failslab, interval 1, probability 0, space 0, times 0 [ 589.514634][T14744] CPU: 1 UID: 0 PID: 14744 Comm: syz.1.2781 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.514649][T14744] Tainted: [L]=SOFTLOCKUP [ 589.514654][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.514660][T14744] Call Trace: [ 589.514665][T14744] [ 589.514671][T14744] dump_stack_lvl+0xe8/0x150 [ 589.514692][T14744] should_fail_ex+0x410/0x560 [ 589.514710][T14744] should_failslab+0xa8/0x100 [ 589.514726][T14744] __kmalloc_noprof+0xfe/0x720 [ 589.514739][T14744] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 589.514755][T14744] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 589.514773][T14744] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 589.514792][T14744] genl_family_rcv_msg_doit+0xda/0x340 [ 589.514810][T14744] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.514829][T14744] ? apparmor_capable+0x126/0x170 [ 589.514841][T14744] ? bpf_lsm_capable+0x9/0x20 [ 589.514853][T14744] ? security_capable+0x7e/0x2c0 [ 589.514870][T14744] genl_rcv_msg+0x614/0x7a0 [ 589.514893][T14744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.514911][T14744] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 589.514928][T14744] ? __pfx_nl80211_start_ap+0x10/0x10 [ 589.514938][T14744] ? __pfx_nl80211_post_doit+0x10/0x10 [ 589.514961][T14744] netlink_rcv_skb+0x226/0x4a0 [ 589.514974][T14744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.514988][T14744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.515007][T14744] ? down_read+0x2be/0x330 [ 589.515026][T14744] genl_rcv+0x28/0x40 [ 589.515038][T14744] netlink_unicast+0x7bd/0x940 [ 589.515060][T14744] netlink_sendmsg+0x813/0xb40 [ 589.515076][T14744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.515092][T14744] ? apparmor_socket_sendmsg+0x98/0x360 [ 589.515107][T14744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.515118][T14744] sock_sendmsg_nosec+0x13a/0x180 [ 589.515132][T14744] ____sys_sendmsg+0x54e/0x850 [ 589.515150][T14744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.515178][T14744] ? import_iovec+0x73/0xa0 [ 589.515195][T14744] ___sys_sendmsg+0x2a5/0x360 [ 589.515210][T14744] ? __lock_acquire+0x747/0x2de0 [ 589.515225][T14744] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.515260][T14744] ? __fget_files+0x2a/0x420 [ 589.515276][T14744] ? __fget_files+0x3a2/0x420 [ 589.515296][T14744] __x64_sys_sendmsg+0x1b1/0x290 [ 589.515313][T14744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.515339][T14744] do_syscall_64+0x166/0x520 [ 589.515354][T14744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.515366][T14744] ? clear_bhb_loop+0x70/0xc0 [ 589.515384][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.515396][T14744] RIP: 0033:0x7f488099e159 [ 589.515408][T14744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.515417][T14744] RSP: 002b:00007f48818ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.515430][T14744] RAX: ffffffffffffffda RBX: 00007f4880c25fa0 RCX: 00007f488099e159 [ 589.515438][T14744] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 589.515445][T14744] RBP: 00007f48818ac090 R08: 0000000000000000 R09: 0000000000000000 [ 589.515452][T14744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.515459][T14744] R13: 00007f4880c26038 R14: 00007f4880c25fa0 R15: 00007f4880d4fa48 [ 589.515476][T14744] [ 589.734726][T13064] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003A/input/input72 [ 589.837165][T14748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2777'. [ 590.024090][T13064] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 590.631519][T13064] usb 5-1: USB disconnect, device number 124 [ 591.460708][T14779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.464829][T14779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.740780][T14785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.741200][T14785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.004075][T14782] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2790'. [ 592.124212][T14794] Cannot find add_set index 2 as target [ 592.173399][T14796] FAULT_INJECTION: forcing a failure. [ 592.173399][T14796] name failslab, interval 1, probability 0, space 0, times 0 [ 592.179851][T14796] CPU: 1 UID: 0 PID: 14796 Comm: syz.5.2794 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.179871][T14796] Tainted: [L]=SOFTLOCKUP [ 592.179876][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.179882][T14796] Call Trace: [ 592.179888][T14796] [ 592.179894][T14796] dump_stack_lvl+0xe8/0x150 [ 592.179915][T14796] should_fail_ex+0x410/0x560 [ 592.179930][T14796] ? create_io_worker+0x27/0x5c0 [ 592.179948][T14796] should_failslab+0xa8/0x100 [ 592.179964][T14796] __kmalloc_cache_noprof+0xa3/0x600 [ 592.179977][T14796] ? create_io_worker+0xab/0x5c0 [ 592.179991][T14796] ? create_io_worker+0xab/0x5c0 [ 592.180008][T14796] ? create_io_worker+0x27/0x5c0 [ 592.180023][T14796] create_io_worker+0xab/0x5c0 [ 592.180040][T14796] io_wq_enqueue+0x675/0x8a0 [ 592.180054][T14796] ? io_wq_enqueue+0x332/0x8a0 [ 592.180068][T14796] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 592.180083][T14796] ? __pfx_io_req_task_submit+0x10/0x10 [ 592.180097][T14796] tctx_task_work_run+0x73d/0xa80 [ 592.180197][T14796] ? kick_process+0xeb/0x160 [ 592.180215][T14796] ? __pfx_tctx_task_work_run+0x10/0x10 [ 592.180235][T14796] tctx_task_work+0x3f/0x60 [ 592.180251][T14796] task_work_run+0x1d9/0x270 [ 592.180265][T14796] ? __pfx_task_work_run+0x10/0x10 [ 592.180277][T14796] ? __mutex_unlock_slowpath+0x731/0x900 [ 592.180305][T14796] get_signal+0x1181/0x12c0 [ 592.180326][T14796] ? __se_sys_io_uring_enter+0x17d0/0x1bb0 [ 592.180343][T14796] arch_do_signal_or_restart+0xbb/0x860 [ 592.180361][T14796] ? __fget_files+0x3a2/0x420 [ 592.180377][T14796] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 592.180396][T14796] ? ksys_write+0x242/0x270 [ 592.180411][T14796] exit_to_user_mode_loop+0x10e/0x770 [ 592.180425][T14796] ? rcu_is_watching+0x16/0xb0 [ 592.180442][T14796] do_syscall_64+0x328/0x520 [ 592.180457][T14796] ? trace_irq_disable+0x3b/0x140 [ 592.180469][T14796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.180480][T14796] ? clear_bhb_loop+0x70/0xc0 [ 592.180494][T14796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.180506][T14796] RIP: 0033:0x7f3790d9e159 [ 592.180519][T14796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.180529][T14796] RSP: 002b:00007f3791d2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 592.180542][T14796] RAX: 0000000000000002 RBX: 00007f3791025fa0 RCX: 00007f3790d9e159 [ 592.180549][T14796] RDX: 00000000fffffffd RSI: 0000000000002000 RDI: 0000000000000004 [ 592.180556][T14796] RBP: 00007f3791d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 592.180563][T14796] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 592.180570][T14796] R13: 00007f3791026038 R14: 00007f3791025fa0 R15: 00007f379114fa48 [ 592.180586][T14796] [ 592.627845][T14803] FAULT_INJECTION: forcing a failure. [ 592.627845][T14803] name failslab, interval 1, probability 0, space 0, times 0 [ 592.627867][T14803] CPU: 0 UID: 0 PID: 14803 Comm: syz.1.2797 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.627883][T14803] Tainted: [L]=SOFTLOCKUP [ 592.627887][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.627894][T14803] Call Trace: [ 592.627899][T14803] [ 592.627905][T14803] dump_stack_lvl+0xe8/0x150 [ 592.627926][T14803] should_fail_ex+0x410/0x560 [ 592.627942][T14803] should_failslab+0xa8/0x100 [ 592.627960][T14803] __kmalloc_noprof+0xfe/0x720 [ 592.627972][T14803] ? tomoyo_encode+0x2ad/0x570 [ 592.627987][T14803] ? tomoyo_encode+0x2ad/0x570 [ 592.628005][T14803] tomoyo_encode+0x2ad/0x570 [ 592.628023][T14803] tomoyo_realpath_from_path+0x5fa/0x640 [ 592.628043][T14803] ? tomoyo_path_number_perm+0x219/0x5f0 [ 592.628056][T14803] tomoyo_path_number_perm+0x246/0x5f0 [ 592.628070][T14803] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 592.628083][T14803] ? __lock_acquire+0x747/0x2de0 [ 592.628104][T14803] ? hook_file_ioctl+0x1f2/0x600 [ 592.628128][T14803] ? __fget_files+0x2a/0x420 [ 592.628146][T14803] ? __fget_files+0x2a/0x420 [ 592.628160][T14803] ? __fget_files+0x3a2/0x420 [ 592.628175][T14803] ? __fget_files+0x2a/0x420 [ 592.628192][T14803] security_file_ioctl+0xc3/0x2a0 [ 592.628205][T14803] __se_sys_ioctl+0x47/0x170 [ 592.628220][T14803] do_syscall_64+0x166/0x520 [ 592.628236][T14803] ? trace_irq_disable+0x3b/0x140 [ 592.628248][T14803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.628260][T14803] ? clear_bhb_loop+0x70/0xc0 [ 592.628274][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.628285][T14803] RIP: 0033:0x7f488099e159 [ 592.628296][T14803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.628306][T14803] RSP: 002b:00007f48818ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.628319][T14803] RAX: ffffffffffffffda RBX: 00007f4880c25fa0 RCX: 00007f488099e159 [ 592.628327][T14803] RDX: 00002000000000c0 RSI: 000000004040ae79 RDI: 0000000000000004 [ 592.628334][T14803] RBP: 00007f48818ac090 R08: 0000000000000000 R09: 0000000000000000 [ 592.628340][T14803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.628347][T14803] R13: 00007f4880c26038 R14: 00007f4880c25fa0 R15: 00007f4880d4fa48 [ 592.628364][T14803] [ 592.628376][T14803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.835408][T13048] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 592.999746][T13048] usb 5-1: Using ep0 maxpacket: 32 [ 593.005845][T13048] usb 5-1: unable to get BOS descriptor or descriptor too short [ 593.005897][T13048] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 593.007026][T13048] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 593.007052][T13048] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 593.007073][T13048] usb 5-1: config 14 has no interface number 0 [ 593.007090][T13048] usb 5-1: config 14 has no interface number 1 [ 593.007147][T13048] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 593.007171][T13048] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 593.007196][T13048] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 593.007220][T13048] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 593.007528][T13048] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 593.007555][T13048] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.007582][T13048] usb 5-1: config 14 interface 57 has no altsetting 0 [ 593.007600][T13048] usb 5-1: config 14 interface 228 has no altsetting 0 [ 593.088699][T13048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.088736][T13048] usb 5-1: Product: syz [ 593.088752][T13048] usb 5-1: Manufacturer: syz [ 593.088767][T13048] usb 5-1: SerialNumber: syz [ 593.201247][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.201689][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.440536][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.446872][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.475634][T14804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2792'. [ 593.555312][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.558253][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.620843][T13048] legousbtower 5-1:14.57: interrupt endpoints not found [ 594.023942][T13048] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 594.027686][T13048] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 594.286983][T14825] binder: 14824:14825 ioctl c0189371 200000000240 returned -22 [ 594.504987][T12276] IPVS: starting estimator thread 0... [ 594.589601][T14832] IPVS: using max 52 ests per chain, 124800 per kthread [ 595.068314][T14845] Cannot find add_set index 2 as target [ 595.508147][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2809'. [ 596.096078][T13064] usb 5-1: USB disconnect, device number 125 [ 596.132390][ T5676] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 596.136086][T13064] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 596.280636][ T5676] usb 6-1: Using ep0 maxpacket: 16 [ 596.281552][ T5676] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 596.283833][ T5676] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 596.283858][ T5676] usb 6-1: config 0 has no interface number 0 [ 596.283896][ T5676] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 596.283932][ T5676] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 596.288915][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2815'. [ 596.289194][ T5676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.289215][ T5676] usb 6-1: Product: syz [ 596.289226][ T5676] usb 6-1: Manufacturer: syz [ 596.289241][ T5676] usb 6-1: SerialNumber: syz [ 596.301129][ T5676] usb 6-1: config 0 descriptor?? [ 596.304162][T14855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 596.304295][T14855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 596.510991][T14855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 596.511127][T14855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 596.517987][T14873] FAULT_INJECTION: forcing a failure. [ 596.517987][T14873] name failslab, interval 1, probability 0, space 0, times 0 [ 596.518010][T14873] CPU: 1 UID: 0 PID: 14873 Comm: syz.0.2817 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.518025][T14873] Tainted: [L]=SOFTLOCKUP [ 596.518029][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.518037][T14873] Call Trace: [ 596.518041][T14873] [ 596.518047][T14873] dump_stack_lvl+0xe8/0x150 [ 596.518071][T14873] should_fail_ex+0x410/0x560 [ 596.518088][T14873] should_failslab+0xa8/0x100 [ 596.518105][T14873] __kmalloc_noprof+0xfe/0x720 [ 596.518117][T14873] ? tomoyo_encode+0x2ad/0x570 [ 596.518132][T14873] ? tomoyo_encode+0x2ad/0x570 [ 596.518150][T14873] tomoyo_encode+0x2ad/0x570 [ 596.518168][T14873] tomoyo_realpath_from_path+0x5fa/0x640 [ 596.518188][T14873] ? tomoyo_path_number_perm+0x219/0x5f0 [ 596.518201][T14873] tomoyo_path_number_perm+0x246/0x5f0 [ 596.518216][T14873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 596.518231][T14873] ? sb_end_write+0xe8/0x190 [ 596.518245][T14873] ? vfs_write+0x9ce/0xba0 [ 596.518258][T14873] ? hook_file_ioctl+0x1f2/0x600 [ 596.518285][T14873] ? ksys_write+0x1fc/0x270 [ 596.518299][T14873] security_file_ioctl+0xc3/0x2a0 [ 596.518312][T14873] __se_sys_ioctl+0x47/0x170 [ 596.518327][T14873] do_syscall_64+0x166/0x520 [ 596.518342][T14873] ? trace_irq_disable+0x3b/0x140 [ 596.518354][T14873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.518365][T14873] ? clear_bhb_loop+0x70/0xc0 [ 596.518378][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.518392][T14873] RIP: 0033:0x7fdf5679e159 [ 596.518404][T14873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.518414][T14873] RSP: 002b:00007fdf57697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.518426][T14873] RAX: ffffffffffffffda RBX: 00007fdf56a25fa0 RCX: 00007fdf5679e159 [ 596.518434][T14873] RDX: 0000200000000000 RSI: 0000000000008983 RDI: 0000000000000004 [ 596.518441][T14873] RBP: 00007fdf57697090 R08: 0000000000000000 R09: 0000000000000000 [ 596.518448][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.518455][T14873] R13: 00007fdf56a26038 R14: 00007fdf56a25fa0 R15: 00007fdf56b4fa48 [ 596.518472][T14873] [ 596.518509][T14873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 596.728236][ T5676] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 596.938033][T14855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 596.963768][T14855] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 596.987995][ T5676] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 596.988017][ T5676] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 596.988157][ T5676] asix 6-1:0.34: probe with driver asix failed with error -71 [ 597.003913][ T5676] usb 6-1: USB disconnect, device number 22 [ 597.122085][T14890] Cannot find add_set index 2 as target [ 597.502859][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.508886][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.555936][T14893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 597.755144][T14898] bond5: Removing last ns target with arp_interval on [ 597.784711][T14898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.413866][T14910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.415007][T14910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.500231][T13052] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 598.673227][T13052] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 598.673275][T13052] usb 5-1: no configurations [ 598.673289][T13052] usb 5-1: can't read configurations, error -22 [ 598.800980][T13052] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 598.960254][T13052] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 598.960298][T13052] usb 5-1: no configurations [ 598.960335][T13052] usb 5-1: can't read configurations, error -22 [ 598.960598][T13052] usb usb5-port1: attempt power cycle [ 599.164502][T14940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2832'. [ 599.325921][T13052] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 599.341699][T13052] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 599.341743][T13052] usb 5-1: no configurations [ 599.341755][T13052] usb 5-1: can't read configurations, error -22 [ 599.470160][T13052] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 599.490718][T13052] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 599.490762][T13052] usb 5-1: no configurations [ 599.490776][T13052] usb 5-1: can't read configurations, error -22 [ 599.492127][T13052] usb usb5-port1: unable to enumerate USB device [ 600.197505][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.214935][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.256013][T14952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.302662][ T5676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 600.349714][ T5676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 600.450214][T12276] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 600.464077][T14957] Cannot find add_set index 2 as target [ 601.219156][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2838'. [ 601.266178][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2838'. [ 601.406034][T14964] x_tables: duplicate underflow at hook 1 [ 601.500009][ T168] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 601.500270][ T168] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 601.568514][T14968] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2843'. [ 601.579041][T14968] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2843'. [ 601.625559][T14970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.626045][T14970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.737124][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2845'. [ 601.752885][T14977] fuse: Unknown parameter '; · 냻“grouç…íXp00000000000000000000' [ 601.755739][T14977] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 601.755755][T14977] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.756867][T14977] vhci_hcd vhci_hcd.0: Device attached [ 601.781287][T14976] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 601.989655][ T5676] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 601.999451][T13064] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 602.149945][T13064] usb 6-1: Using ep0 maxpacket: 8 [ 602.150531][T13064] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 602.151503][T13064] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 602.151518][T13064] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 602.151528][T13064] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 602.151548][T13064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.279505][ T5696] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 602.285823][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.286222][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.345126][T14988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.345370][T14988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.449450][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 602.450726][ T5696] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 602.451782][ T5696] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 602.451807][ T5696] usb 5-1: config 0 has no interface number 0 [ 602.451845][ T5696] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 602.451871][ T5696] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 602.453767][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.453789][ T5696] usb 5-1: Product: syz [ 602.453797][ T5696] usb 5-1: Manufacturer: syz [ 602.453805][ T5696] usb 5-1: SerialNumber: syz [ 602.462893][T13050] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 602.465616][ T5696] usb 5-1: config 0 descriptor?? [ 602.475877][T14985] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 602.475998][T14985] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 602.686650][T14985] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 602.686817][T14985] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 602.804355][ T6682] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 602.804664][T14994] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 602.831575][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.832430][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.850047][T14996] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 602.888030][ T5696] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 603.023571][T15000] Cannot find add_set index 2 as target [ 603.096111][T14985] tipc: Resetting bearer [ 603.107642][T14985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 603.245440][T15005] FAULT_INJECTION: forcing a failure. [ 603.245440][T15005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.245478][T15005] CPU: 1 UID: 0 PID: 15005 Comm: syz.1.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.245533][T15005] Tainted: [L]=SOFTLOCKUP [ 603.245538][T15005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.245547][T15005] Call Trace: [ 603.245555][T15005] [ 603.245564][T15005] dump_stack_lvl+0xe8/0x150 [ 603.245606][T15005] should_fail_ex+0x410/0x560 [ 603.245636][T15005] _copy_to_user+0x31/0xb0 [ 603.245656][T15005] simple_read_from_buffer+0xe1/0x170 [ 603.245676][T15005] proc_fail_nth_read+0x1bb/0x230 [ 603.245688][T15005] ? common_file_perm+0x20e/0x2b0 [ 603.245706][T15005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.245730][T15005] ? rw_verify_area+0x24a/0x4c0 [ 603.245762][T15005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.245783][T15005] vfs_read+0x213/0xa80 [ 603.245807][T15005] ? __pfx___mutex_lock+0x10/0x10 [ 603.245824][T15005] ? __pfx_vfs_read+0x10/0x10 [ 603.245841][T15005] ? __fget_files+0x2a/0x420 [ 603.245862][T15005] ? __fget_files+0x3a2/0x420 [ 603.245889][T15005] ? __fget_files+0x2a/0x420 [ 603.245926][T15005] ksys_read+0x150/0x270 [ 603.245946][T15005] ? __pfx_ksys_read+0x10/0x10 [ 603.245962][T15005] do_syscall_64+0x166/0x520 [ 603.245982][T15005] ? trace_irq_disable+0x3b/0x140 [ 603.245995][T15005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.246007][T15005] ? clear_bhb_loop+0x70/0xc0 [ 603.246032][T15005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.246053][T15005] RIP: 0033:0x7f488095e98e [ 603.246072][T15005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 603.246089][T15005] RSP: 002b:00007f48818abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.246104][T15005] RAX: ffffffffffffffda RBX: 00007f48818ac6c0 RCX: 00007f488095e98e [ 603.246113][T15005] RDX: 000000000000000f RSI: 00007f48818ac0a0 RDI: 0000000000000004 [ 603.246120][T15005] RBP: 00007f48818ac090 R08: 0000000000000000 R09: 0000000000000000 [ 603.246126][T15005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.246133][T15005] R13: 00007f4880c26038 R14: 00007f4880c25fa0 R15: 00007f4880d4fa48 [ 603.246149][T15005] [ 603.695026][ T5696] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 603.695058][ T5696] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 603.695281][ T5696] asix 5-1:0.34: probe with driver asix failed with error -71 [ 603.729471][ T5696] usb 5-1: USB disconnect, device number 4 [ 604.499126][T15027] x_tables: duplicate underflow at hook 1 [ 604.509167][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 604.509224][T15027] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 604.793793][T13064] usb 6-1: USB disconnect, device number 23 [ 604.798918][T14978] usb 43-1: recv xbuf, 0 [ 604.799800][T12276] vhci_hcd vhci_hcd.5: stop threads [ 604.799822][T12276] vhci_hcd vhci_hcd.5: release socket [ 604.799860][T12276] vhci_hcd vhci_hcd.5: disconnect device [ 604.870257][ T5676] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 605.198070][T15034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 605.344322][T15043] Cannot find add_set index 2 as target [ 605.447900][T15040] dvmrp6: entered allmulticast mode [ 605.499575][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 605.760177][T15046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.764207][T15046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.813170][T15049] bond0: entered allmulticast mode [ 605.813584][T15049] bridge0: port 1(bond0) entered blocking state [ 605.813684][T15049] bridge0: port 1(bond0) entered disabled state [ 605.815146][T15049] bond0: entered promiscuous mode [ 605.887173][T15052] binder: 15051:15052 ioctl c0306201 0 returned -14 [ 605.903142][T15052] syz.4.2866 (15052): drop_caches: 2 [ 606.079528][T13064] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 606.179546][ T5676] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 606.230361][T13064] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 606.230406][T13064] usb 6-1: too many configurations: 102, using maximum allowed: 8 [ 606.231758][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.231785][T13064] usb 6-1: config 1 has no interface number 0 [ 606.232934][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.232958][T13064] usb 6-1: config 1 has no interface number 0 [ 606.234351][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.234378][T13064] usb 6-1: config 1 has no interface number 0 [ 606.235709][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.235734][T13064] usb 6-1: config 1 has no interface number 0 [ 606.236890][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.237005][T13064] usb 6-1: config 1 has no interface number 0 [ 606.238260][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.238285][T13064] usb 6-1: config 1 has no interface number 0 [ 606.240488][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.240512][T13064] usb 6-1: config 1 has no interface number 0 [ 606.241638][T13064] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.241661][T13064] usb 6-1: config 1 has no interface number 0 [ 606.245703][T13064] usb 6-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 606.245737][T13064] usb 6-1: Product: syz [ 606.245752][T13064] usb 6-1: Manufacturer: syz [ 606.245766][T13064] usb 6-1: SerialNumber: syz [ 606.264258][T13064] usb 6-1: 3:0 : does not exist [ 606.264282][T13064] usb 6-1: 3:0 : does not exist [ 606.330387][ T5676] usb 5-1: Using ep0 maxpacket: 16 [ 606.332640][ T5676] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 606.362698][ T5676] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 606.362728][ T5676] usb 5-1: config 0 has no interface number 0 [ 606.362767][ T5676] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 606.362792][ T5676] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 606.383983][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.384010][ T5676] usb 5-1: Product: syz [ 606.384026][ T5676] usb 5-1: Manufacturer: syz [ 606.384040][ T5676] usb 5-1: SerialNumber: syz [ 606.391437][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.391844][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.393790][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.394174][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.400248][ T5676] usb 5-1: config 0 descriptor?? [ 606.403587][T15054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 606.403725][T15054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 606.426452][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.438774][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.464127][T15057] usb usb7: usbfs: process 15057 (syz.3.2868) did not claim interface 0 before use [ 606.566794][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.567807][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.586836][T15049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.587729][T15049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.613414][T15054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 606.613552][T15054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 606.634567][T15059] bond3: entered promiscuous mode [ 606.701206][T15066] program syz.0.2869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.816108][ T5676] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 607.023057][T15054] tipc: Resetting bearer [ 607.033905][T15054] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.362976][T15070] FAULT_INJECTION: forcing a failure. [ 607.362976][T15070] name failslab, interval 1, probability 0, space 0, times 0 [ 607.363012][T15070] CPU: 1 UID: 0 PID: 15070 Comm: syz.3.2870 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.363041][T15070] Tainted: [L]=SOFTLOCKUP [ 607.363049][T15070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.363062][T15070] Call Trace: [ 607.363071][T15070] [ 607.363080][T15070] dump_stack_lvl+0xe8/0x150 [ 607.363122][T15070] should_fail_ex+0x410/0x560 [ 607.363152][T15070] should_failslab+0xa8/0x100 [ 607.363180][T15070] __kmalloc_noprof+0xfe/0x720 [ 607.363200][T15070] ? rcu_is_watching+0x16/0xb0 [ 607.363226][T15070] ? tomoyo_realpath_from_path+0xef/0x640 [ 607.363253][T15070] ? tomoyo_realpath_from_path+0xef/0x640 [ 607.363288][T15070] tomoyo_realpath_from_path+0xef/0x640 [ 607.363323][T15070] ? tomoyo_path_number_perm+0x219/0x5f0 [ 607.363347][T15070] tomoyo_path_number_perm+0x246/0x5f0 [ 607.363375][T15070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 607.363397][T15070] ? __lock_acquire+0x747/0x2de0 [ 607.363434][T15070] ? hook_file_ioctl+0x1f2/0x600 [ 607.363479][T15070] ? __fget_files+0x2a/0x420 [ 607.363511][T15070] ? __fget_files+0x2a/0x420 [ 607.363537][T15070] ? __fget_files+0x3a2/0x420 [ 607.363564][T15070] ? __fget_files+0x2a/0x420 [ 607.363595][T15070] security_file_ioctl+0xc3/0x2a0 [ 607.363619][T15070] __se_sys_ioctl+0x47/0x170 [ 607.363643][T15070] do_syscall_64+0x166/0x520 [ 607.363671][T15070] ? trace_irq_disable+0x3b/0x140 [ 607.363692][T15070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.363713][T15070] ? clear_bhb_loop+0x70/0xc0 [ 607.363735][T15070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.363754][T15070] RIP: 0033:0x7f1aec79e159 [ 607.363774][T15070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.363791][T15070] RSP: 002b:00007f1aed5f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.363814][T15070] RAX: ffffffffffffffda RBX: 00007f1aeca25fa0 RCX: 00007f1aec79e159 [ 607.363828][T15070] RDX: 0000200000000400 RSI: 00000000c0106407 RDI: 0000000000000003 [ 607.363841][T15070] RBP: 00007f1aed5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 607.363851][T15070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.363863][T15070] R13: 00007f1aeca26038 R14: 00007f1aeca25fa0 R15: 00007f1aecb4fa48 [ 607.363896][T15070] [ 607.364068][T15070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.399163][ T5676] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 607.399193][ T5676] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 607.400843][ T5676] asix 5-1:0.34: probe with driver asix failed with error -71 [ 607.436163][ T5676] usb 5-1: USB disconnect, device number 5 [ 607.810821][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.813337][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.229472][ T5676] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 608.231526][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 608.390747][ T5676] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 608.392635][ T5676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.392652][ T5676] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 608.392673][ T5676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.394629][ T5676] usb 5-1: config 0 descriptor?? [ 608.847142][T13048] usb 6-1: USB disconnect, device number 24 [ 609.306930][T15103] Cannot find add_set index 2 as target [ 609.383061][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.383493][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.125221][T15116] syzkaller0: entered promiscuous mode [ 610.484272][T15126] FAULT_INJECTION: forcing a failure. [ 610.484272][T15126] name failslab, interval 1, probability 0, space 0, times 0 [ 610.484307][T15126] CPU: 1 UID: 0 PID: 15126 Comm: syz.5.2884 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.484330][T15126] Tainted: [L]=SOFTLOCKUP [ 610.484337][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 610.484347][T15126] Call Trace: [ 610.484354][T15126] [ 610.484372][T15126] dump_stack_lvl+0xe8/0x150 [ 610.484403][T15126] should_fail_ex+0x410/0x560 [ 610.484429][T15126] should_failslab+0xa8/0x100 [ 610.484454][T15126] __kmalloc_cache_noprof+0xa3/0x600 [ 610.484477][T15126] ? __kmalloc_cache_noprof+0x14d/0x600 [ 610.484494][T15126] ? assoc_array_insert+0xca6/0x2f60 [ 610.484514][T15126] ? assoc_array_insert+0xca6/0x2f60 [ 610.484541][T15126] assoc_array_insert+0xca6/0x2f60 [ 610.484586][T15126] __key_link_begin+0xd6/0x1f0 [ 610.484687][T15126] __key_create_or_update+0x449/0xa80 [ 610.484718][T15126] ? __pfx___key_create_or_update+0x10/0x10 [ 610.484744][T15126] ? lookup_user_key+0xb68/0x1150 [ 610.484776][T15126] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 610.484797][T15126] ? __pfx_keyring_search_iterator+0x10/0x10 [ 610.484827][T15126] key_create_or_update+0x42/0x60 [ 610.484852][T15126] __se_sys_add_key+0x349/0x420 [ 610.484872][T15126] ? __pfx___se_sys_add_key+0x10/0x10 [ 610.484899][T15126] ? __x64_sys_add_key+0x20/0xc0 [ 610.484918][T15126] do_syscall_64+0x166/0x520 [ 610.484942][T15126] ? trace_irq_disable+0x3b/0x140 [ 610.484960][T15126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.484978][T15126] ? clear_bhb_loop+0x70/0xc0 [ 610.484999][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.485016][T15126] RIP: 0033:0x7f3790d9e159 [ 610.485034][T15126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.485048][T15126] RSP: 002b:00007f3791d2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 610.485067][T15126] RAX: ffffffffffffffda RBX: 00007f3791025fa0 RCX: 00007f3790d9e159 [ 610.485080][T15126] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000200000000140 [ 610.485091][T15126] RBP: 00007f3791d2e090 R08: 00000000134322f3 R09: 0000000000000000 [ 610.485103][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.485113][T15126] R13: 00007f3791026038 R14: 00007f3791025fa0 R15: 00007f379114fa48 [ 610.485142][T15126] [ 610.909309][T15133] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2887'. [ 611.035838][ T5676] usb 5-1: USB disconnect, device number 6 [ 611.097687][T15140] input: syz1 as /devices/virtual/input/input76 [ 611.111818][T15140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.112235][T15140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.225204][T15143] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2889'. [ 611.225364][T15143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2889'. [ 611.550029][T15145] binder: BINDER_SET_CONTEXT_MGR already set [ 611.550044][T15145] binder: 15130:15145 ioctl 4018620d 200000004a80 returned -16 [ 611.606318][T15146] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 612.413161][T15159] Cannot find add_set index 2 as target [ 613.541207][T15168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.541629][T15168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.796987][T15171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2896'. [ 613.855641][T15171] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 614.060916][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 614.085313][T14045] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 615.327538][T15134] syzkaller0: left promiscuous mode [ 615.327559][T15134] syzkaller0: left allmulticast mode [ 615.499069][T15182] netlink: 'syz.4.2900': attribute type 2 has an invalid length. [ 615.499091][T15182] netlink: 'syz.4.2900': attribute type 2 has an invalid length. [ 615.533007][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 615.533026][ T30] audit: type=1800 audit(1790786722.298:2616): pid=15183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2900" name="bus" dev="tmpfs" ino=3136 res=0 errno=0 [ 615.534116][ T30] audit: type=1800 audit(1790786722.298:2617): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2900" name="bus" dev="tmpfs" ino=3136 res=0 errno=0 [ 615.729437][T13064] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 615.910566][T13064] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 615.911681][T13064] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.911703][T13064] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 615.911738][T13064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.915075][T13064] usb 2-1: config 0 descriptor?? [ 615.969681][T13048] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 616.119487][T13048] usb 6-1: Using ep0 maxpacket: 8 [ 616.120325][T13048] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 616.125455][T13048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.125479][T13048] usb 6-1: Product: syz [ 616.125494][T13048] usb 6-1: Manufacturer: syz [ 616.125523][T13048] usb 6-1: SerialNumber: syz [ 616.138125][T13048] usb 6-1: config 0 descriptor?? [ 616.152366][T13048] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 616.234556][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.252256][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.258075][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.277281][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.278649][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.635325][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2908'. [ 616.891446][T15216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.891977][T15216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.923501][T15209] syzkaller0: entered promiscuous mode [ 616.929285][T12632] tipc: Resetting bearer [ 617.002561][T12632] tipc: Disabling bearer [ 617.176727][T13048] gspca_sonixj: reg_w err -71 [ 617.176815][T13048] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 617.178903][T13048] usb 6-1: USB disconnect, device number 25 [ 617.662009][T15215] futex_wake_op: syz.3.2910 tries to shift op by 36; fix this program [ 618.138004][T13048] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 618.394309][ T4933] Bluetooth: hci3: command tx timeout [ 618.421072][T13048] usb 6-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 618.438188][T13048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.453198][T13048] ums-sddr55 6-1:1.0: USB Mass Storage device detected [ 618.473023][T13048] ums-sddr55 6-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 618.473023][T13048] Please send a copy of this message to and [ 618.518161][T13048] scsi host1: usb-storage 6-1:1.0 [ 618.548389][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 618.564152][T13048] usb 2-1: USB disconnect, device number 60 [ 619.609389][T13486] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR55 0000 PQ: 0 ANSI: 0 [ 619.628345][T15233] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2914'. [ 619.944372][T13486] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 620.462719][ T4933] Bluetooth: hci3: command tx timeout [ 620.869499][T13047] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 621.020116][T13047] usb 2-1: Using ep0 maxpacket: 16 [ 621.022126][T13047] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40 [ 621.023194][T13047] usb 2-1: config 1 interface 0 altsetting 172 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 621.023226][T13047] usb 2-1: config 1 interface 0 altsetting 172 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 621.023254][T13047] usb 2-1: config 1 interface 0 altsetting 172 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.023281][T13047] usb 2-1: config 1 interface 0 has no altsetting 0 [ 621.025511][T13047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.025536][T13047] usb 2-1: Product: syz [ 621.025551][T13047] usb 2-1: Manufacturer: syz [ 621.025567][T13047] usb 2-1: SerialNumber: syz [ 621.033594][T15245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 621.447141][T15248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 621.464991][T15248] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 622.563255][ T4933] Bluetooth: hci3: command tx timeout [ 622.862825][T15199] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.863495][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.863668][T15199] bridge_slave_0: entered allmulticast mode [ 622.869252][T15199] bridge_slave_0: entered promiscuous mode [ 622.908245][T15199] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.908473][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.908672][T15199] bridge_slave_1: entered allmulticast mode [ 622.933455][T15199] bridge_slave_1: entered promiscuous mode [ 623.048058][T15199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.066419][T15199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.159709][T13052] usb 6-1: USB disconnect, device number 26 [ 623.166773][T12276] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 623.166896][T12276] sd 1:0:0:0: [sdb] Sense not available. [ 623.167319][T12276] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 623.167365][T12276] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 623.167519][T12276] sd 1:0:0:0: [sdb] Write Protect is off [ 623.187889][T12276] sd 1:0:0:0: [sdb] Asking for cache data failed [ 623.187981][T12276] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 623.316615][T15263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.317230][T15263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.357678][T15199] team0: Port device team_slave_0 added [ 623.388125][T15199] team0: Port device team_slave_1 added [ 623.496451][T15199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.496469][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.496496][T15199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.519608][T15199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.519626][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.519654][T15199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.531542][T12276] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 623.794124][T15199] hsr_slave_0: entered promiscuous mode [ 623.797517][T15199] hsr_slave_1: entered promiscuous mode [ 623.821761][T15199] debugfs: 'hsr0' already exists in 'hsr' [ 623.821787][T15199] Cannot create hsr debugfs directory [ 624.107382][T13047] usbhid 2-1:1.0: can't add hid device: -71 [ 624.107484][T13047] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 624.114499][T13047] usb 2-1: USB disconnect, device number 61 [ 624.242287][T15282] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 624.283110][ T5755] udevd[5755]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 624.303897][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.303954][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.621168][ T4933] Bluetooth: hci3: command tx timeout [ 624.877133][T15292] hub 8-0:1.0: USB hub found [ 624.878195][T15292] hub 8-0:1.0: 1 port detected [ 625.114816][T15199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.114854][T15199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.143696][T15296] syzkaller0: entered promiscuous mode [ 625.389618][T15199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.389656][T15199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.698688][T15318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.699106][T15318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.716990][T15199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.717026][T15199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.972944][T15322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2933'. [ 625.999432][T13047] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 626.028192][T15322] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 626.052290][ T30] audit: type=1800 audit(1790786732.818:2618): pid=15301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2929" name="bus" dev="ramfs" ino=89718 res=0 errno=0 [ 626.084999][T15199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.085021][T15199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.150023][T13047] usb 2-1: Using ep0 maxpacket: 8 [ 626.152068][T13047] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 626.157042][T13047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.157058][T13047] usb 2-1: Product: syz [ 626.157066][T13047] usb 2-1: Manufacturer: syz [ 626.157074][T13047] usb 2-1: SerialNumber: syz [ 626.158851][T13047] usb 2-1: config 0 descriptor?? [ 626.174950][T13047] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 626.904699][T15199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 626.935634][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.937564][T15199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 626.955960][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.956628][T15199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 626.976601][ T5676] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 626.989160][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 626.995939][T15199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 627.011064][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.077282][T15320] fuse: Bad value for 'group_id' [ 627.077302][T15320] fuse: Bad value for 'group_id' [ 627.139904][ T5676] usb 6-1: Using ep0 maxpacket: 16 [ 627.140738][ T5676] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 627.141722][ T5676] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 627.141737][ T5676] usb 6-1: config 0 has no interface number 0 [ 627.141759][ T5676] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 627.141777][ T5676] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 627.144101][ T5676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.144125][ T5676] usb 6-1: Product: syz [ 627.144140][ T5676] usb 6-1: Manufacturer: syz [ 627.144153][ T5676] usb 6-1: SerialNumber: syz [ 627.200025][T15199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.228782][T13047] gspca_sonixj: reg_w err -71 [ 627.228887][T13047] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 627.245192][T13047] usb 2-1: USB disconnect, device number 62 [ 627.248939][ T5676] usb 6-1: config 0 descriptor?? [ 627.266334][T15327] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 627.266496][T15327] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 627.293263][T15199] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.314088][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.314188][T12276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.353366][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.353432][ T6682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.504059][T15327] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 627.504164][T15327] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 627.609253][T15199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.702618][T15199] veth0_vlan: entered promiscuous mode [ 627.706755][ T5676] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 627.714768][T15199] veth1_vlan: entered promiscuous mode [ 627.774938][T15199] veth0_macvtap: entered promiscuous mode [ 627.799838][T15199] veth1_macvtap: entered promiscuous mode [ 627.846747][T15199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.875771][T15199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.928374][T15327] bond0: left promiscuous mode [ 627.934582][T15327] bridge0: port 1(bond0) entered disabled state [ 627.953232][T15327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 627.967717][T15327] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 627.989770][ T6682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.989815][ T6682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.989836][ T6682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.989856][ T6682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.005565][T15338] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2935'. [ 628.086614][ T5676] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 628.086644][ T5676] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 628.086870][ T5676] asix 6-1:0.34: probe with driver asix failed with error -71 [ 628.126779][ T5676] usb 6-1: USB disconnect, device number 27 [ 628.317132][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.317154][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.409273][T15340] netlink: NAT attribute has 8 unknown bytes [ 628.409297][T15340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.416540][ T6682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.416559][ T6682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.588013][T15347] Cannot find add_set index 2 as target [ 628.742699][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 628.742747][T15349] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2938'. [ 628.901845][T15356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.904694][T15356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.917530][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 628.948618][T15351] syzkaller0: entered promiscuous mode [ 629.023465][T15356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 629.428022][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.895190][T15377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.895646][T15377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.909631][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 629.909654][T15376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2947'. [ 629.918522][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 629.918546][T15376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2947'. [ 630.125236][T15382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.128015][T15382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.224001][T15383] netlink: 'syz.4.2947': attribute type 10 has an invalid length. [ 630.224016][T15383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2947'. [ 630.310571][T13047] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 630.699734][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 634.956770][T15382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 634.956897][T15383] batadv0: entered promiscuous mode [ 634.956916][T15383] batadv0: entered allmulticast mode [ 634.957672][T15383] bridge0: port 3(batadv0) entered blocking state [ 634.957810][T15383] bridge0: port 3(batadv0) entered disabled state [ 634.977973][T13486] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 634.977994][T13486] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 634.983532][T15383] bridge0: port 3(batadv0) entered blocking state [ 634.983651][T15383] bridge0: port 3(batadv0) entered forwarding state [ 635.315793][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.323175][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.398040][T15407] FAULT_INJECTION: forcing a failure. [ 635.398040][T15407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.406851][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.1.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.406886][T15407] Tainted: [L]=SOFTLOCKUP [ 635.406893][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.406905][T15407] Call Trace: [ 635.406914][T15407] [ 635.406924][T15407] dump_stack_lvl+0xe8/0x150 [ 635.406959][T15407] should_fail_ex+0x410/0x560 [ 635.406988][T15407] _copy_from_user+0x2d/0xb0 [ 635.407017][T15407] sctp_getsockopt_peeloff+0xc4/0x230 [ 635.407043][T15407] ? __pfx_sctp_getsockopt_peeloff+0x10/0x10 [ 635.407062][T15407] ? sctp_getsockopt+0x12f/0xb90 [ 635.407093][T15407] ? __local_bh_enable_ip+0xd6/0x140 [ 635.407123][T15407] sctp_getsockopt+0x196/0xb90 [ 635.407148][T15407] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 635.407173][T15407] do_sock_getsockopt+0x51d/0x7e0 [ 635.407207][T15407] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 635.407250][T15407] ? __fget_files+0x3a2/0x420 [ 635.407278][T15407] ? __fget_files+0x2a/0x420 [ 635.407312][T15407] __x64_sys_getsockopt+0x1a4/0x240 [ 635.407350][T15407] do_syscall_64+0x166/0x520 [ 635.407376][T15407] ? trace_irq_disable+0x3b/0x140 [ 635.407397][T15407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.407418][T15407] ? clear_bhb_loop+0x70/0xc0 [ 635.407443][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.407463][T15407] RIP: 0033:0x7f488099e159 [ 635.407483][T15407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.407502][T15407] RSP: 002b:00007f48818ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 635.407523][T15407] RAX: ffffffffffffffda RBX: 00007f4880c25fa0 RCX: 00007f488099e159 [ 635.407535][T15407] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003 [ 635.407547][T15407] RBP: 00007f48818ac090 R08: 00002000000001c0 R09: 0000000000000000 [ 635.407560][T15407] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 635.407573][T15407] R13: 00007f4880c26038 R14: 00007f4880c25fa0 R15: 00007f4880d4fa48 [ 635.407616][T15407] [ 635.465804][T15409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2951'. [ 635.675709][T15415] program syz.3.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.062016][T15427] Cannot find add_set index 2 as target [ 636.109985][ T5712] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 636.252177][ T5712] usb 2-1: device descriptor read/64, error -71 [ 636.279663][T13052] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 636.337393][T15431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.337632][T15431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.367294][T15429] syzkaller0: entered promiscuous mode [ 636.391008][T15431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 636.410688][T13052] usb 5-1: device descriptor read/64, error -71 [ 636.492803][ T5712] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 636.620050][ T5712] usb 2-1: device descriptor read/64, error -71 [ 636.657184][T13052] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 636.733818][ T5712] usb usb2-port1: attempt power cycle [ 636.800161][T13052] usb 5-1: device descriptor read/64, error -71 [ 636.911281][T13052] usb usb5-port1: attempt power cycle [ 637.081870][ T5712] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 637.106628][ T5712] usb 2-1: device descriptor read/8, error -71 [ 637.254306][T13052] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 637.271490][T13052] usb 5-1: device descriptor read/8, error -71 [ 637.348194][ T5712] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 637.360628][ T5712] usb 2-1: device descriptor read/8, error -71 [ 637.475214][ T5712] usb usb2-port1: unable to enumerate USB device [ 637.520437][T13052] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 637.549127][T13052] usb 5-1: device descriptor read/8, error -71 [ 637.653943][T13052] usb usb5-port1: unable to enumerate USB device [ 637.703223][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.703657][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.129554][T13064] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 639.315378][ T4933] Bluetooth: hci5: Malformed LE Event: 0x02 [ 639.335071][T13064] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff45, bcdDevice=3f.3d [ 639.335906][T13064] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 639.335939][T13064] usb 2-1: can't read configurations, error -71 [ 640.379761][T13064] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 640.571622][T13064] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 640.609460][T13064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 640.609510][T13064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.612149][T13064] usb 2-1: config 0 descriptor?? [ 640.625487][T15457] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 641.046593][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046628][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046655][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046682][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046707][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046731][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046756][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046781][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046806][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.046830][T13064] microsoft 0003:045E:00F9.003B: unknown main item tag 0x0 [ 641.152282][T13064] microsoft 0003:045E:00F9.003B: hidraw0: USB HID v0.81 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 641.542964][T15469] Cannot find add_set index 2 as target [ 641.567470][T15471] bond0: entered allmulticast mode [ 641.567487][T15471] bond_slave_0: entered allmulticast mode [ 641.567504][T15471] bond_slave_1: entered allmulticast mode [ 641.568047][T15471] bridge0: port 4(bond0) entered blocking state [ 641.568165][T15471] bridge0: port 4(bond0) entered disabled state [ 641.573736][T15471] bond0: entered promiscuous mode [ 641.573758][T15471] bond_slave_0: entered promiscuous mode [ 641.573943][T15471] bond_slave_1: entered promiscuous mode [ 641.575462][T15471] bridge0: port 4(bond0) entered blocking state [ 641.575575][T15471] bridge0: port 4(bond0) entered forwarding state [ 641.819571][T13052] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 641.942937][ T5712] usb 2-1: USB disconnect, device number 68 [ 641.970218][T13052] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 641.970271][T13052] usb 5-1: too many configurations: 102, using maximum allowed: 8 [ 641.972540][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 641.972566][T13052] usb 5-1: config 1 has no interface number 0 [ 641.973752][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 641.973775][T13052] usb 5-1: config 1 has no interface number 0 [ 641.976455][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 641.976476][T13052] usb 5-1: config 1 has no interface number 0 [ 641.977543][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 641.977565][T13052] usb 5-1: config 1 has no interface number 0 [ 641.978518][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 641.978539][T13052] usb 5-1: config 1 has no interface number 0 [ 642.069063][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 642.069090][T13052] usb 5-1: config 1 has no interface number 0 [ 642.089014][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 642.089040][T13052] usb 5-1: config 1 has no interface number 0 [ 642.108921][T13052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 642.108944][T13052] usb 5-1: config 1 has no interface number 0 [ 642.117882][T13052] usb 5-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 642.117910][T13052] usb 5-1: Product: syz [ 642.117924][T13052] usb 5-1: Manufacturer: syz [ 642.117938][T13052] usb 5-1: SerialNumber: syz [ 642.148251][T13052] usb 5-1: 3:0 : does not exist [ 642.148266][T13052] usb 5-1: 3:0 : does not exist [ 642.169798][T13064] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 642.309546][T13064] usb 6-1: device descriptor read/64, error -71 [ 642.347418][T15471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.347838][T15471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.426914][T15486] syzkaller0: entered promiscuous mode [ 642.462246][T13052] usb 5-1: USB disconnect, device number 11 [ 642.549520][T13064] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 642.625982][T15488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.626416][T15488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.713632][T13064] usb 6-1: device descriptor read/64, error -71 [ 642.764454][ T30] audit: type=1326 audit(1790786749.528:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.766208][ T30] audit: type=1326 audit(1790786749.528:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.768399][ T30] audit: type=1326 audit(1790786749.528:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.768448][ T30] audit: type=1326 audit(1790786749.528:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.768569][ T30] audit: type=1326 audit(1790786749.528:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.768927][ T30] audit: type=1326 audit(1790786749.528:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.795427][ T30] audit: type=1326 audit(1790786749.558:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.811251][ T30] audit: type=1326 audit(1790786749.578:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.813363][ T30] audit: type=1326 audit(1790786749.578:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.813409][ T30] audit: type=1326 audit(1790786749.578:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5679e159 code=0x7ffc0000 [ 642.821793][T13064] usb usb6-port1: attempt power cycle [ 642.881841][T15496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2979'. [ 643.309513][T13064] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 643.340292][T13064] usb 6-1: device descriptor read/8, error -71 [ 643.352426][T13052] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 643.543659][T13052] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 643.572547][T13052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.574893][T13052] usb 5-1: config 0 descriptor?? [ 643.642414][T13064] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 643.664323][T13064] usb 6-1: device descriptor read/8, error -71 [ 643.697259][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.697979][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.718552][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2983'. [ 643.770233][T13064] usb usb6-port1: unable to enumerate USB device [ 643.801934][T15500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.802467][T15500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.859963][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.860257][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.861300][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.861604][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.995181][T13052] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 644.218575][T13052] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 644.218599][T13052] [drm] Initialized udl on minor 1 [ 644.492323][T15509] program syz.0.2984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.031272][T15532] blktrace: Concurrent blktraces are not allowed on sg0 [ 648.755008][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.755517][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.420423][T13052] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffff92 [ 649.420875][T13052] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 649.425500][ T5712] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 649.427466][ T5712] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 649.428849][ T5712] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 649.731994][T13064] usb 5-1: USB disconnect, device number 12 [ 650.243538][T15584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.247899][T15584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.490147][T15584] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 650.490474][T15584] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 650.528401][T15584] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 650.571491][T15584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 650.571833][T15584] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 650.577347][T15584] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 650.778648][T15615] sctp: [Deprecated]: syz.0.3020 (pid 15615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.778648][T15615] Use struct sctp_sack_info instead [ 650.839584][T13052] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 651.010309][T13052] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 651.011294][T13052] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 651.011320][T13052] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 651.011356][T13052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.019212][T13052] usb 2-1: probing VID:PID(0424:012C) [ 651.023489][T13052] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 651.023517][T13052] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 651.023534][T13052] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 651.023552][T13052] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 651.023575][T13052] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 651.193483][T15624] syzkaller0: left promiscuous mode [ 651.413134][T15631] tipc: Resetting bearer [ 651.445801][T13052] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 651.646733][T13052] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 651.873920][T15631] tipc: Resetting bearer [ 651.969784][ T79] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.970049][T13486] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.970087][T13486] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.970121][T13486] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.540715][ T4933] Bluetooth: hci5: command 0x0c1a tx timeout [ 652.630023][ T4933] Bluetooth: hci3: command 0x0c1a tx timeout [ 652.678142][T13063] usb 2-1: USB disconnect, device number 69 [ 652.713375][T13052] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 652.791083][T13063] USB vub300 remote SDIO host controller[0] now disconnected [ 653.240412][T15676] binder: 15675:15676 ioctl 40046205 0 returned -22 [ 653.581899][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 653.581925][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 653.581943][ C0] preempt_count: 101, expected: 0 [ 653.581954][ C0] RCU nest depth: 0, expected: 0 [ 653.581977][ C0] locks held by swapper/0/0: 1, last CPU#0: [ 653.582068][ C0] #0: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 653.582228][ C0] Preemption disabled at: [ 653.582234][ C0] [] schedule_preempt_disabled+0x1d/0x30 [ 653.582275][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.582303][ C0] Tainted: [L]=SOFTLOCKUP [ 653.582311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.582323][ C0] Call Trace: [ 653.582332][ C0] [ 653.582342][ C0] dump_stack_lvl+0xe8/0x150 [ 653.582372][ C0] __might_resched+0x36a/0x4c0 [ 653.582404][ C0] ? schedule_preempt_disabled+0x1d/0x30 [ 653.582433][ C0] __cancel_work_sync+0x6d/0x110 [ 653.582467][ C0] mmc_free_host+0x19/0x40 [ 653.582538][ C0] call_timer_fn+0x18d/0x5f0 [ 653.582564][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 653.582648][ C0] ? call_timer_fn+0xd5/0x5f0 [ 653.582674][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 653.582710][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.582735][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 653.582768][ C0] __run_timer_base+0x652/0x8b0 [ 653.582807][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 653.582836][ C0] ? ktime_get+0x1f5/0x220 [ 653.582868][ C0] ? lapic_next_event+0x11/0x20 [ 653.582898][ C0] run_timer_softirq+0xb7/0x170 [ 653.582924][ C0] handle_softirqs+0x226/0x860 [ 653.582954][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 653.582988][ C0] __irq_exit_rcu+0xcb/0x220 [ 653.583015][ C0] irq_exit_rcu+0x9/0x30 [ 653.583039][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 653.583066][ C0] [ 653.583074][ C0] [ 653.583084][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 653.583107][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 653.583134][ C0] Code: fb 87 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e1 22 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 653.583152][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000246 [ 653.583172][ C0] RAX: 0000000000a6414d RBX: ffffffff819bcc30 RCX: 8000000000000001 [ 653.583187][ C0] RDX: 0000000000000001 RSI: ffffffff8e415fbc RDI: ffffffff8c6dad80 [ 653.583203][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 653.583218][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 653.583233][ C0] R13: 1ffffffff1d51e00 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 653.583253][ C0] ? do_idle+0x2e0/0x540 [ 653.583284][ C0] default_idle+0x9/0x20 [ 653.583311][ C0] default_idle_call+0x72/0xb0 [ 653.583341][ C0] do_idle+0x2e0/0x540 [ 653.583364][ C0] ? __pfx_do_idle+0x10/0x10 [ 653.583395][ C0] cpu_startup_entry+0x43/0x60 [ 653.583417][ C0] rest_init+0x378/0x3a0 [ 653.583438][ C0] ? __pfx_rest_init+0x10/0x10 [ 653.583466][ C0] ? __pfx_kernel_init+0x10/0x10 [ 653.583490][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 653.583555][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 653.583630][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 653.583660][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 653.583718][ C0] start_kernel+0x392/0x3e0 [ 653.583787][ C0] x86_64_start_reservations+0x24/0x30 [ 653.583841][ C0] x86_64_start_kernel+0x137/0x1b0 [ 653.583875][ C0] common_startup_64+0x13e/0x157 [ 653.583918][ C0] [ 653.584162][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffffff8ea00000, but annotated. [ 653.584835][ C0] ------------[ cut here ]------------ [ 653.584845][ C0] 1 [ 653.584863][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: swapper/0/0 [ 653.970662][ C0] Modules linked in: [ 653.974548][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 653.985036][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 653.990226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.000274][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 654.006193][ C0] Code: fe 06 cc 41 ff c7 44 89 3d 69 31 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad a3 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 ac 6d 0a 3b 05 7f [ 654.025793][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 654.031874][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: af50a0359ed0a900 [ 654.039839][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 654.047805][ C0] RBP: ffffffff8ea8f020 R08: 0000000000000100 R09: 1ffff110170c48e2 [ 654.055768][ C0] R10: dffffc0000000000 R11: ffffed10170c48e3 R12: 1ffff92000000f4c [ 654.063759][ C0] R13: ffff88807dd0bb98 R14: dffffc0000000000 R15: 0000000000000001 [ 654.071736][ C0] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 654.080688][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.087295][ C0] CR2: 00007f488188aff8 CR3: 000000005612a000 CR4: 00000000003526f0 [ 654.095256][ C0] Call Trace: [ 654.098524][ C0] [ 654.101362][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 654.106931][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 654.111998][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 654.117543][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 654.122589][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 654.128388][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 654.133950][ C0] ? synchronize_srcu+0x20a/0x260 [ 654.138985][ C0] wakeup_source_unregister+0x129/0x3f0 [ 654.144607][ C0] mmc_host_classdev_release+0x47/0x100 [ 654.150152][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 654.156329][ C0] device_release+0xc4/0x1f0 [ 654.160928][ C0] kobject_put+0x222/0x550 [ 654.165338][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 654.170090][ C0] call_timer_fn+0x18d/0x5f0 [ 654.174667][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.181327][ C0] ? call_timer_fn+0xd5/0x5f0 [ 654.186000][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 654.191107][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.196310][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.203068][ C0] __run_timer_base+0x652/0x8b0 [ 654.207918][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 654.213300][ C0] ? ktime_get+0x1f5/0x220 [ 654.217727][ C0] ? lapic_next_event+0x11/0x20 [ 654.222579][ C0] run_timer_softirq+0xb7/0x170 [ 654.227424][ C0] handle_softirqs+0x226/0x860 [ 654.232177][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 654.236962][ C0] __irq_exit_rcu+0xcb/0x220 [ 654.241567][ C0] irq_exit_rcu+0x9/0x30 [ 654.245800][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 654.251422][ C0] [ 654.254373][ C0] [ 654.257290][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.263288][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 654.268933][ C0] Code: fb 87 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e1 22 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 654.288538][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000246 [ 654.294599][ C0] RAX: 0000000000a6414d RBX: ffffffff819bcc30 RCX: 8000000000000001 [ 654.302586][ C0] RDX: 0000000000000001 RSI: ffffffff8e415fbc RDI: ffffffff8c6dad80 [ 654.310633][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 654.318607][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 654.326571][ C0] R13: 1ffffffff1d51e00 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 654.334535][ C0] ? do_idle+0x2e0/0x540 [ 654.338785][ C0] default_idle+0x9/0x20 [ 654.343024][ C0] default_idle_call+0x72/0xb0 [ 654.347784][ C0] do_idle+0x2e0/0x540 [ 654.351844][ C0] ? __pfx_do_idle+0x10/0x10 [ 654.356424][ C0] cpu_startup_entry+0x43/0x60 [ 654.361176][ C0] rest_init+0x378/0x3a0 [ 654.365404][ C0] ? __pfx_rest_init+0x10/0x10 [ 654.370153][ C0] ? __pfx_kernel_init+0x10/0x10 [ 654.375080][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 654.380436][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 654.385751][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 654.391078][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 654.396524][ C0] start_kernel+0x392/0x3e0 [ 654.401021][ C0] x86_64_start_reservations+0x24/0x30 [ 654.406481][ C0] x86_64_start_kernel+0x137/0x1b0 [ 654.411582][ C0] common_startup_64+0x13e/0x157 [ 654.416518][ C0] [ 654.419974][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 654.427265][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 654.437785][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 654.442966][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.453029][ C0] Call Trace: [ 654.456307][ C0] [ 654.459213][ C0] vpanic+0x56d/0xa60 [ 654.463247][ C0] ? __pfx__printk+0x10/0x10 [ 654.467844][ C0] ? __pfx_vpanic+0x10/0x10 [ 654.472345][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 654.477627][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 654.482819][ C0] panic+0xc5/0xd0 [ 654.486559][ C0] ? __pfx_panic+0x10/0x10 [ 654.490972][ C0] ? common_startup_64+0x13e/0x157 [ 654.496080][ C0] __warn+0x315/0x4c0 [ 654.500055][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 654.505335][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 654.510609][ C0] __report_bug+0x276/0x570 [ 654.515177][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 654.520454][ C0] ? __pfx___report_bug+0x10/0x10 [ 654.525476][ C0] ? __wake_up_klogd+0xf0/0x130 [ 654.530319][ C0] ? vprintk_emit+0x4ee/0x560 [ 654.534990][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 654.540010][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 654.545306][ C0] report_bug+0x16b/0x220 [ 654.549632][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 654.554929][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 654.560230][ C0] handle_bug+0x9c/0x200 [ 654.564471][ C0] exc_invalid_op+0x1a/0x50 [ 654.568995][ C0] asm_exc_invalid_op+0x1a/0x20 [ 654.573856][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 654.579742][ C0] Code: fe 06 cc 41 ff c7 44 89 3d 69 31 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad a3 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 ac 6d 0a 3b 05 7f [ 654.599360][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 654.605440][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: af50a0359ed0a900 [ 654.613422][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 654.621389][ C0] RBP: ffffffff8ea8f020 R08: 0000000000000100 R09: 1ffff110170c48e2 [ 654.629375][ C0] R10: dffffc0000000000 R11: ffffed10170c48e3 R12: 1ffff92000000f4c [ 654.637350][ C0] R13: ffff88807dd0bb98 R14: dffffc0000000000 R15: 0000000000000001 [ 654.645342][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 654.650627][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 654.656168][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 654.661278][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 654.666807][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 654.671828][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 654.677624][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 654.683160][ C0] ? synchronize_srcu+0x20a/0x260 [ 654.688177][ C0] wakeup_source_unregister+0x129/0x3f0 [ 654.693716][ C0] mmc_host_classdev_release+0x47/0x100 [ 654.699370][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 654.705565][ C0] device_release+0xc4/0x1f0 [ 654.710249][ C0] kobject_put+0x222/0x550 [ 654.714687][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 654.719452][ C0] call_timer_fn+0x18d/0x5f0 [ 654.724053][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.730727][ C0] ? call_timer_fn+0xd5/0x5f0 [ 654.735417][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 654.740527][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.745714][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.752384][ C0] __run_timer_base+0x652/0x8b0 [ 654.757230][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 654.762696][ C0] ? ktime_get+0x1f5/0x220 [ 654.767124][ C0] ? lapic_next_event+0x11/0x20 [ 654.771984][ C0] run_timer_softirq+0xb7/0x170 [ 654.776843][ C0] handle_softirqs+0x226/0x860 [ 654.781615][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 654.786376][ C0] __irq_exit_rcu+0xcb/0x220 [ 654.790959][ C0] irq_exit_rcu+0x9/0x30 [ 654.795192][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 654.800840][ C0] [ 654.803767][ C0] [ 654.806691][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.812655][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 654.818275][ C0] Code: fb 87 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e1 22 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 654.837868][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000246 [ 654.843925][ C0] RAX: 0000000000a6414d RBX: ffffffff819bcc30 RCX: 8000000000000001 [ 654.851884][ C0] RDX: 0000000000000001 RSI: ffffffff8e415fbc RDI: ffffffff8c6dad80 [ 654.859844][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 654.867806][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 654.875769][ C0] R13: 1ffffffff1d51e00 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 654.883744][ C0] ? do_idle+0x2e0/0x540 [ 654.888004][ C0] default_idle+0x9/0x20 [ 654.892334][ C0] default_idle_call+0x72/0xb0 [ 654.897101][ C0] do_idle+0x2e0/0x540 [ 654.901164][ C0] ? __pfx_do_idle+0x10/0x10 [ 654.905744][ C0] cpu_startup_entry+0x43/0x60 [ 654.910515][ C0] rest_init+0x378/0x3a0 [ 654.914749][ C0] ? __pfx_rest_init+0x10/0x10 [ 654.919527][ C0] ? __pfx_kernel_init+0x10/0x10 [ 654.924451][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 654.929823][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 654.935191][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 654.940545][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 654.946022][ C0] start_kernel+0x392/0x3e0 [ 654.950524][ C0] x86_64_start_reservations+0x24/0x30 [ 654.956073][ C0] x86_64_start_kernel+0x137/0x1b0 [ 654.961193][ C0] common_startup_64+0x13e/0x157 [ 654.966137][ C0] [ 654.969416][ C0] Kernel Offset: disabled [ 654.973739][ C0] Rebooting in 86400 seconds..