last executing test programs: 29.815892032s ago: executing program 3 (id=922): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fsmount(r0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7fffffff) capset(&(0x7f0000000380)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 29.585977218s ago: executing program 1 (id=925): r0 = io_uring_setup(0x3cfd, &(0x7f00000000c0)={0x0, 0x8cd9, 0x8, 0x0, 0x6e}) close(r0) r1 = io_uring_setup(0x2f82, 0x0) close(r1) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x1000) io_uring_enter(r2, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) 29.48029063s ago: executing program 4 (id=926): fsopen(0x0, 0x1) mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 28.308291497s ago: executing program 3 (id=928): r0 = io_uring_setup(0x3cfd, &(0x7f00000000c0)={0x0, 0x8cd9, 0x8, 0x0, 0x6e}) close(r0) r1 = io_uring_setup(0x2f82, 0x0) close(r1) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x1000) io_uring_enter(r2, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) (fail_nth: 1) 28.127150505s ago: executing program 1 (id=930): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 27.877583364s ago: executing program 2 (id=932): unshare(0x22020600) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090589e702008000040905", @ANYBLOB="0237"], 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='p:mygrou_/myevent ./dummy:0', 0x1b) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffdff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0x5, 0x7, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0x86af, 0xffffffff]], '\x00', [{0xd, 0x14, 0x0, 0x0, 0x1}, {0x20, 0x8, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x1869c, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000040)=0x7) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000340)={0x200000, 0x200000, 0x9, 0x0, 0x5989, 0x99}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000000a004e21ffffffdaff02000000000000000000000000000172000000000000000000000000000000000000000000e4ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2000008000fc02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/264], 0x110) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x9b0308}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00ffdbdf250d000000230004000e000002800580ffffffffffff0b00038008000500ac141440000000"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x1) 27.037989651s ago: executing program 0 (id=934): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40040d0}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xd228, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x24005000) 27.037826416s ago: executing program 3 (id=935): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 26.977721635s ago: executing program 2 (id=936): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000440)={{0x3873f802, 0x7fb}, {0xfffffffffffffffe, 0x43}, 0x6, 0x4}) 26.908429291s ago: executing program 4 (id=937): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x812}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x32ce970513f32900) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x85}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1) sendto(r3, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400", 0x65, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 26.46883604s ago: executing program 3 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ff"], 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f00000025c0)='8', 0x1}], 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 26.468628036s ago: executing program 2 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) tkill(0x0, 0x23) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x3, {0xffffffffffffffff}, {0xee01}, 0x80000001, 0x100000100800}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000001c0)=r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xffff840e}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048806) 26.467817395s ago: executing program 1 (id=940): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000002000)={r3}, &(0x7f0000003040)=0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) syz_emit_ethernet(0xf5, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c2000002ffffffffffff8848ab017bdca3d2736002a653b7297488377902bcd9706238630db9211c5ab96a1f1bb225ba7837a1ae2cc1a015456fe436dbc841c60d4281f3768f8dbd501d64ac7883ac91bb069d2608f87fc4d4e9827767fe5caad825541ab8a070edc47199866e0e0bffe60e99a1805116dd415a2934698bb2174f0cb01b0070ea7713a1ecbdb2da2a08c3b068ae94d63384dbec44ed3b42819c73cd8f7c8d656b512b73d6193a9c8df9d8e9618e2d205a93e12550ced2866f9760f6b87429dbb62bc3e1b5fe57a1018f3d7fd5d007e920dd81f8cdd5ef300f9c1cdd086fcdf76e58734fb2656429e38adeaaad"], 0x0) 24.922686264s ago: executing program 1 (id=941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14348e05e417d17d628d2ed6000000020a010200000000000000000000000034000000140a01010000000000000000020000000900010073797a300000000008000340000000000c0006400000000000000000140000001100010000"], 0x70}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010800000000000000000200000908000240000000030900010073797a310000000040000000030a01030000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006414000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x0) close(0xffffffffffffffff) 24.799543667s ago: executing program 0 (id=942): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x5, &(0x7f0000000e80)=0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$OCFS2_IOC_INFO(r7, 0x80106f05, &(0x7f0000008800)={&(0x7f0000008640)=[&(0x7f00000002c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x8000, 0x7}, {0xffffffff, 0x3}, {0x2, 0xfffffffffffffffc}, {0x1, 0x7}, {0x54ae, 0x5}, {0x4, 0x5}, {0x8000000000000001, 0x5}, {0x80000001, 0x9}, {0x7, 0x8}, {0x5, 0x7b2e9003}, {0x8, 0x3}, {0x9, 0x7fffffff}, {0x8, 0x8000000000000001}, {0xc, 0x4}, {0x8, 0x3}, {0x0, 0x2}, {0xfffffffffffffff8, 0xffffffffffffff81}, {0xe947, 0x9}, {0x1, 0xf}, {0x8, 0x200}, {0x8000, 0x3}, {0x9, 0xad}, {0x6, 0x88}, {0x3, 0xd98}, {0x7e1c}, {0x81, 0x7f}, {0xe, 0x5}, {0x9, 0x66}, {0x9, 0x2}, {0x400, 0x6}, {0xb4, 0xc}, {0x4, 0xc}, {0x6f20, 0x8000}, {0x6, 0x3}, {0x9, 0x1}, {0x9, 0x7c}, {0x6, 0xa06a}, {0x9, 0x9}, {0x9, 0x1000}, {0x0, 0x7}, {0x7b, 0x7}, {0x7ff, 0x7fffffffffffffff}, {0xfffffffffffffff0, 0x1}, {0x2, 0x7}, {0xfffffffffffffffa, 0xfffffffffffffff9}, {0x2, 0x800}, {0xfffffffffffffff5, 0x4}, {0x8000000000000000, 0x6}, {0x1, 0x5}, {0x6, 0x3ff}, {0x8, 0xdfdb}, {0x9f7, 0x9}, {0xcaf7, 0x5}, {0x1c8440, 0x9}, {0x8001, 0xe}, {0x1, 0x5759}, {0x7, 0x3}, {0x8, 0x2a}, {0x6, 0x5}, {0x4, 0x281}, {0x89a, 0x8}, {0xe68, 0x7d}, {0x7f, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x7, 0xde}, {0x2, 0xd}, {0x5, 0x8}, {0x4}, {0x0, 0xf3a}, {0xe4a8, 0x8}, {0x8000000000000001, 0x22d1}, {0x48, 0x1}, {0x9, 0x4}, {0xff, 0x80000001}, {0x5, 0x1}, {0x3, 0x74}, {0xffff, 0x7}, {0xeb43, 0x9}, {0x37, 0x100000000}, {0x3, 0x2}, {0x5, 0x3}, {0x7f, 0x1}, {0x6, 0x4}, {0x80000001, 0x4}, {0x80, 0x1}, {0x2, 0x7}, {0x0, 0x4}, {0xa792, 0x1}, {0x6, 0x7}, {0xfc}, {0x2, 0x1ff}, {0x7, 0x2}, {0xe}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0xfffffffffffffffa}, {0x5, 0x80000000}, {0x7, 0xffffffff00000001}, {0x6}, {0xbb, 0x9}, {0x100, 0x2}, {0x7, 0x8}, {0x2b, 0x45}, {0x7, 0xe555}, {0x4, 0x3}, {0x8000, 0x400}, {}, {0x27b, 0x7f}, {0x9, 0x5}, {0x2, 0x8}, {0x430, 0x9}, {0x9, 0x6e69}, {0x7f, 0x10}, {0x2, 0x49f}, {0x1, 0x778d}, {0xfffffffffffffffb, 0x6}, {0x5259, 0x7c4}, {0x6fb9798d, 0x800}, {0x8, 0x5}, {0x8, 0x79}, {0x10000, 0x898}, {0x7, 0x9}, {0x0, 0x100000001}, {0x7, 0x2}, {0x0, 0x474df364}, {0x3, 0x4}, {0x8, 0x8}, {0x6, 0x983f}, {0x7f, 0x6}, {0x100, 0x5a00000000000000}, {0xb0, 0x3}, {0xb4}, {0x1, 0x4}, {0x100000000, 0x7}, {0x8, 0x3}, {0x4, 0x74da}, {0x8, 0x4}, {0x9, 0x3}, {0x3, 0xffffffffffffffff}, {0x0, 0x9}, {0x7, 0xdf4}, {0x8, 0xfffffffffffffff6}, {0x3, 0x7fff}, {0x800, 0x3}, {0xfff}, {0x9, 0x1}, {0xa59, 0x53}, {0x80000000, 0x1612}, {0x4, 0xd}, {0x1, 0x100}, {0x7, 0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x101, 0x1}, {0x4ec, 0x8d}, {0x5, 0x6}, {0x7, 0x10000}, {0x5, 0x10}, {0x1bc1, 0x8}, {0x6, 0xfffffffffffffff9}, {0x10001, 0x1}, {0x2, 0x2}, {0x3, 0x60000000000}, {0x6, 0xe7c}, {0x544, 0x8000000000000000}, {0x8, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x9, 0xd}, {0x4, 0xc2c}, {0x100, 0x8}, {0x1bf, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0xff, 0x3}, {0x8b42, 0x100}, {0x7, 0x8}, {0x300, 0x8}, {0x400, 0x5}, {0x5, 0x100000001}, {0x7ff, 0xffffffffffffffff}, {0xfffffffffffffff2, 0x1}, {0x401, 0x100}, {0x2, 0x8}, {0x3, 0x7ff}, {0x8, 0x4}, {0x4ba4, 0x2}, {0x90d, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x100}, {0x6, 0xfffffffffffffffb}, {0xb, 0x9}, {0x6, 0x8}, {0x9, 0x3}, {0x7, 0x9}, {0x40, 0x8000}, {0xa1, 0x8}, {0x7, 0xff}, {0x6, 0x8}, {0xfffffffffffffff8, 0x4}, {0x7, 0xb7}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x200}, {0x7fffffffffffffff, 0x1d1a}, {0x5e5, 0x490}, {0xb4a, 0x8}, {0x7, 0x81}, {0x400000000000000, 0xfffffffffffffff8}, {0x7}, {0x0, 0x9}, {0x6908, 0x8}, {0x200, 0x8}, {0x3, 0x4}, {0x5, 0x9}, {0x3, 0xfffffffffffff666}, {0x6, 0x7}, {0x9}, {0x9, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x5, 0xffffffff}, {0xa4ce, 0x7}, {0xff, 0x3}, {0x6, 0x5}, {0x4, 0x5eca}, {0xfffffffffffffffb, 0x80000001}, {0x8000000000000000, 0x7}, {0xbf7, 0x6}, {0x3b, 0x3}, {0x622, 0x3}, {0x9, 0x8}, {0x7, 0x5}, {0xc7c3, 0x516}, {0xc, 0x5}, {0x2, 0x1}, {0x40, 0x80000001}, {0x8000000000000000, 0x3}, {0x0, 0xfffffffffffffffd}, {0x3, 0x9}, {0x7, 0xc}, {0xfffffffeffffffff, 0x400}, {0xe11, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x6ac, 0x1ff}, {0x6, 0x7}, {0x4b51, 0x2}, {0x8, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x12c}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) umount2(&(0x7f0000000100)='./file0\x00', 0x8) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x4}, 0x8) 24.709434046s ago: executing program 4 (id=943): mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="626173651d3078302073697a653d30783430726974652d636f6d62696e696e670000000000100000000000", 0x2b) 24.68759167s ago: executing program 2 (id=944): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 24.448712904s ago: executing program 4 (id=945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1, 0x3}, 0x90) (fail_nth: 1) 24.411608293s ago: executing program 1 (id=946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1, 0x3}, 0x90) 24.371416675s ago: executing program 0 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYRES32=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x252000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) ioctl$KVM_TDX_FINALIZE_VM(r5, 0xc008aeba, &(0x7f00000000c0)) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x50}, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x8e9d, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5387, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000001c0)={0x4, 0x0, 0x10001}) 24.060238863s ago: executing program 2 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x5, 0x12) listen(r1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r2, 0x6410) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40046302}], 0x0, 0x0, 0x0}) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) 23.668237996s ago: executing program 3 (id=949): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 23.637082205s ago: executing program 0 (id=950): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$binfmt_script(r1, &(0x7f0000021180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) close_range(r0, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x6) 23.52481197s ago: executing program 4 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 23.516284769s ago: executing program 3 (id=952): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40040d0}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xd228, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x24005000) 23.458370948s ago: executing program 1 (id=953): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000140)=""/236, &(0x7f0000000240)=0xec) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="0f198d5aa5ca", 0x6}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010a0000000000000000800016"], 0x26}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xb2m\xe6\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\x00\x00\x00\x00\x01\x00\x00\x00nh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xec\xd3c\xdc\x88y\xbb+=#\t\x92<\x87Ro\xdeP\xab\xd5i\xebRW[\x16\x85\xe2\x81\x87\x1f\x88\x85\xef^N\xe8\x9a\xbb\xa7\x1c#\xc1I\xa3\xc0\"\xe3\xba`\x9e\x9a\xb8\xc6\xc8\x10!\xf1\xa2\xbfSL\xa3\x05\xf4\xaa\r\x89F\xac-\xd6[\x17\xcd\"\x8c\xb3\xab\x04bl\x0f\x8c\xfe\xb03 \xe1\x81\x84{C\xe5\x83\xc3\xf3\xaf\xd7\x7fg)\xf4&\xd9| \xb0\xdac\x9e\x16\xe5\aC\xf5q\x82\x033\xedG\x1e\x81}\xda\x95\xe5\xd5\x00\x1d\x1f.N\"dxn>D?\x81\xcd\xf2\xd4\xb2\xbf\x15z\xc3\xd9\xd3.!8\xff8\xf7\xf5\xa9D\x0eb\xeb\x89~\xd4Y\xad\xc9\x04\x18\x11\xd3\xfbpT\t\xebD\v\xea\xd8d\x94%?t\xcc\xa3\x041\x06\x80\xa3\xc6{\xce\x97\x1b\x81!o\xa3v\x96\xf6\xa4\x03Z\t\x04\xccR{\xd1(\x97b\x1b\xda\x80\xdc.w\xdbGC\xba?\xa1c@\xc2`y9\xca\x94\xe8\x10\x9c\xc0\x89>\x81\xd2@\x1c\xd6\xcc\xd9\xdbR\xecn\xd0\xd1\x12\xb5\xf2\xdb#Dk\x9d\xa7\xc2\"\xe2\x03D\x12J\rWe\xaf\xfc],\x7f\xe6\x8b\xab\x96\x92\xf6\xd7\r\xa8\x99e\xa4\xb7X\xfd|\x95\xdcek\xe8\x97\xd2\x9a\xdc\vSCI\xe5\xc1K4\xce\x99\xb3\xbfL=\xe6g0\t[nM\xc8G\xfc\xb2_w\'K\bI\vX\xd6\x95Q\xccvW42\x11\xe7\x18%uU\xd4\x96W\\^\xbf\f5\x14Rd%\xb9k\xbb\x8d\x90\x02\xa1\xd6*\xd7L\xa5\xb6\xea\x19\x8d\x83\x04\xdd\xfd\x06p\x17\x88\xb8\xe1X\x9a\xd4E2\b\b\x05\x9cRg\xb5\\\xa7}\x19\xd5\xe6o\xedd\xa0P\x88H\xd2\xe6\xb6\x93\xf7J6\rA\xec\xaa0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$OCFS2_IOC_INFO(r7, 0x80106f05, &(0x7f0000008800)={&(0x7f0000008640)=[&(0x7f00000002c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x8000, 0x7}, {0xffffffff, 0x3}, {0x2, 0xfffffffffffffffc}, {0x1, 0x7}, {0x54ae, 0x5}, {0x4, 0x5}, {0x8000000000000001, 0x5}, {0x80000001, 0x9}, {0x7, 0x8}, {0x5, 0x7b2e9003}, {0x8, 0x3}, {0x9, 0x7fffffff}, {0x8, 0x8000000000000001}, {0xc, 0x4}, {0x8, 0x3}, {0x0, 0x2}, {0xfffffffffffffff8, 0xffffffffffffff81}, {0xe947, 0x9}, {0x1, 0xf}, {0x8, 0x200}, {0x8000, 0x3}, {0x9, 0xad}, {0x6, 0x88}, {0x3, 0xd98}, {0x7e1c}, {0x81, 0x7f}, {0xe, 0x5}, {0x9, 0x66}, {0x9, 0x2}, {0x400, 0x6}, {0xb4, 0xc}, {0x4, 0xc}, {0x6f20, 0x8000}, {0x6, 0x3}, {0x9, 0x1}, {0x9, 0x7c}, {0x6, 0xa06a}, {0x9, 0x9}, {0x9, 0x1000}, {0x0, 0x7}, {0x7b, 0x7}, {0x7ff, 0x7fffffffffffffff}, {0xfffffffffffffff0, 0x1}, {0x2, 0x7}, {0xfffffffffffffffa, 0xfffffffffffffff9}, {0x2, 0x800}, {0xfffffffffffffff5, 0x4}, {0x8000000000000000, 0x6}, {0x1, 0x5}, {0x6, 0x3ff}, {0x8, 0xdfdb}, {0x9f7, 0x9}, {0xcaf7, 0x5}, {0x1c8440, 0x9}, {0x8001, 0xe}, {0x1, 0x5759}, {0x7, 0x3}, {0x8, 0x2a}, {0x6, 0x5}, {0x4, 0x281}, {0x89a, 0x8}, {0xe68, 0x7d}, {0x7f, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x7, 0xde}, {0x2, 0xd}, {0x5, 0x8}, {0x4}, {0x0, 0xf3a}, {0xe4a8, 0x8}, {0x8000000000000001, 0x22d1}, {0x48, 0x1}, {0x9, 0x4}, {0xff, 0x80000001}, {0x5, 0x1}, {0x3, 0x74}, {0xffff, 0x7}, {0xeb43, 0x9}, {0x37, 0x100000000}, {0x3, 0x2}, {0x5, 0x3}, {0x7f, 0x1}, {0x6, 0x4}, {0x80000001, 0x4}, {0x80, 0x1}, {0x2, 0x7}, {0x0, 0x4}, {0xa792, 0x1}, {0x6, 0x7}, {0xfc}, {0x2, 0x1ff}, {0x7, 0x2}, {0xe}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0xfffffffffffffffa}, {0x5, 0x80000000}, {0x7, 0xffffffff00000001}, {0x6}, {0xbb, 0x9}, {0x100, 0x2}, {0x7, 0x8}, {0x2b, 0x45}, {0x7, 0xe555}, {0x4, 0x3}, {0x8000, 0x400}, {}, {0x27b, 0x7f}, {0x9, 0x5}, {0x2, 0x8}, {0x430, 0x9}, {0x9, 0x6e69}, {0x7f, 0x10}, {0x2, 0x49f}, {0x1, 0x778d}, {0xfffffffffffffffb, 0x6}, {0x5259, 0x7c4}, {0x6fb9798d, 0x800}, {0x8, 0x5}, {0x8, 0x79}, {0x10000, 0x898}, {0x7, 0x9}, {0x0, 0x100000001}, {0x7, 0x2}, {0x0, 0x474df364}, {0x3, 0x4}, {0x8, 0x8}, {0x6, 0x983f}, {0x7f, 0x6}, {0x100, 0x5a00000000000000}, {0xb0, 0x3}, {0xb4}, {0x1, 0x4}, {0x100000000, 0x7}, {0x8, 0x3}, {0x4, 0x74da}, {0x8, 0x4}, {0x9, 0x3}, {0x3, 0xffffffffffffffff}, {0x0, 0x9}, {0x7, 0xdf4}, {0x8, 0xfffffffffffffff6}, {0x3, 0x7fff}, {0x800, 0x3}, {0xfff}, {0x9, 0x1}, {0xa59, 0x53}, {0x80000000, 0x1612}, {0x4, 0xd}, {0x1, 0x100}, {0x7, 0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x101, 0x1}, {0x4ec, 0x8d}, {0x5, 0x6}, {0x7, 0x10000}, {0x5, 0x10}, {0x1bc1, 0x8}, {0x6, 0xfffffffffffffff9}, {0x10001, 0x1}, {0x2, 0x2}, {0x3, 0x60000000000}, {0x6, 0xe7c}, {0x544, 0x8000000000000000}, {0x8, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x9, 0xd}, {0x4, 0xc2c}, {0x100, 0x8}, {0x1bf, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0xff, 0x3}, {0x8b42, 0x100}, {0x7, 0x8}, {0x300, 0x8}, {0x400, 0x5}, {0x5, 0x100000001}, {0x7ff, 0xffffffffffffffff}, {0xfffffffffffffff2, 0x1}, {0x401, 0x100}, {0x2, 0x8}, {0x3, 0x7ff}, {0x8, 0x4}, {0x4ba4, 0x2}, {0x90d, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x100}, {0x6, 0xfffffffffffffffb}, {0xb, 0x9}, {0x6, 0x8}, {0x9, 0x3}, {0x7, 0x9}, {0x40, 0x8000}, {0xa1, 0x8}, {0x7, 0xff}, {0x6, 0x8}, {0xfffffffffffffff8, 0x4}, {0x7, 0xb7}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x200}, {0x7fffffffffffffff, 0x1d1a}, {0x5e5, 0x490}, {0xb4a, 0x8}, {0x7, 0x81}, {0x400000000000000, 0xfffffffffffffff8}, {0x7}, {0x0, 0x9}, {0x6908, 0x8}, {0x200, 0x8}, {0x3, 0x4}, {0x5, 0x9}, {0x3, 0xfffffffffffff666}, {0x6, 0x7}, {0x9}, {0x9, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x5, 0xffffffff}, {0xa4ce, 0x7}, {0xff, 0x3}, {0x6, 0x5}, {0x4, 0x5eca}, {0xfffffffffffffffb, 0x80000001}, {0x8000000000000000, 0x7}, {0xbf7, 0x6}, {0x3b, 0x3}, {0x622, 0x3}, {0x9, 0x8}, {0x7, 0x5}, {0xc7c3, 0x516}, {0xc, 0x5}, {0x2, 0x1}, {0x40, 0x80000001}, {0x8000000000000000, 0x3}, {0x0, 0xfffffffffffffffd}, {0x3, 0x9}, {0x7, 0xc}, {0xfffffffeffffffff, 0x400}, {0xe11, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x6ac, 0x1ff}, {0x6, 0x7}, {0x4b51, 0x2}, {0x8, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x12c}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) umount2(&(0x7f0000000100)='./file0\x00', 0x8) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x4}, 0x8) 7.960242339s ago: executing program 32 (id=953): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000140)=""/236, &(0x7f0000000240)=0xec) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="0f198d5aa5ca", 0x6}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010a0000000000000000800016"], 0x26}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xb2m\xe6\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\x00\x00\x00\x00\x01\x00\x00\x00nh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xec\xd3c\xdc\x88y\xbb+=#\t\x92<\x87Ro\xdeP\xab\xd5i\xebRW[\x16\x85\xe2\x81\x87\x1f\x88\x85\xef^N\xe8\x9a\xbb\xa7\x1c#\xc1I\xa3\xc0\"\xe3\xba`\x9e\x9a\xb8\xc6\xc8\x10!\xf1\xa2\xbfSL\xa3\x05\xf4\xaa\r\x89F\xac-\xd6[\x17\xcd\"\x8c\xb3\xab\x04bl\x0f\x8c\xfe\xb03 \xe1\x81\x84{C\xe5\x83\xc3\xf3\xaf\xd7\x7fg)\xf4&\xd9| \xb0\xdac\x9e\x16\xe5\aC\xf5q\x82\x033\xedG\x1e\x81}\xda\x95\xe5\xd5\x00\x1d\x1f.N\"dxn>D?\x81\xcd\xf2\xd4\xb2\xbf\x15z\xc3\xd9\xd3.!8\xff8\xf7\xf5\xa9D\x0eb\xeb\x89~\xd4Y\xad\xc9\x04\x18\x11\xd3\xfbpT\t\xebD\v\xea\xd8d\x94%?t\xcc\xa3\x041\x06\x80\xa3\xc6{\xce\x97\x1b\x81!o\xa3v\x96\xf6\xa4\x03Z\t\x04\xccR{\xd1(\x97b\x1b\xda\x80\xdc.w\xdbGC\xba?\xa1c@\xc2`y9\xca\x94\xe8\x10\x9c\xc0\x89>\x81\xd2@\x1c\xd6\xcc\xd9\xdbR\xecn\xd0\xd1\x12\xb5\xf2\xdb#Dk\x9d\xa7\xc2\"\xe2\x03D\x12J\rWe\xaf\xfc],\x7f\xe6\x8b\xab\x96\x92\xf6\xd7\r\xa8\x99e\xa4\xb7X\xfd|\x95\xdcek\xe8\x97\xd2\x9a\xdc\vSCI\xe5\xc1K4\xce\x99\xb3\xbfL=\xe6g0\t[nM\xc8G\xfc\xb2_w\'K\bI\vX\xd6\x95Q\xccvW42\x11\xe7\x18%uU\xd4\x96W\\^\xbf\f5\x14Rd%\xb9k\xbb\x8d\x90\x02\xa1\xd6*\xd7L\xa5\xb6\xea\x19\x8d\x83\x04\xdd\xfd\x06p\x17\x88\xb8\xe1X\x9a\xd4E2\b\b\x05\x9cRg\xb5\\\xa7}\x19\xd5\xe6o\xedd\xa0P\x88H\xd2\xe6\xb6\x93\xf7J6\rA\xec\xaa0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xd228, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x24005000) 7.389082263s ago: executing program 35 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14348e05e417d17d628d2ed6000000020a010200000000000000000000000034000000140a01010000000000000000020000000900010073797a300000000008000340000000000c0006400000000000000000140000001100010000"], 0x70}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010800000000000000000200000908000240000000030900010073797a310000000040000000030a01030000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006414000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x0) close(0xffffffffffffffff) 0s ago: executing program 36 (id=957): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x5, &(0x7f0000000e80)=0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$OCFS2_IOC_INFO(r7, 0x80106f05, &(0x7f0000008800)={&(0x7f0000008640)=[&(0x7f00000002c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x8000, 0x7}, {0xffffffff, 0x3}, {0x2, 0xfffffffffffffffc}, {0x1, 0x7}, {0x54ae, 0x5}, {0x4, 0x5}, {0x8000000000000001, 0x5}, {0x80000001, 0x9}, {0x7, 0x8}, {0x5, 0x7b2e9003}, {0x8, 0x3}, {0x9, 0x7fffffff}, {0x8, 0x8000000000000001}, {0xc, 0x4}, {0x8, 0x3}, {0x0, 0x2}, {0xfffffffffffffff8, 0xffffffffffffff81}, {0xe947, 0x9}, {0x1, 0xf}, {0x8, 0x200}, {0x8000, 0x3}, {0x9, 0xad}, {0x6, 0x88}, {0x3, 0xd98}, {0x7e1c}, {0x81, 0x7f}, {0xe, 0x5}, {0x9, 0x66}, {0x9, 0x2}, {0x400, 0x6}, {0xb4, 0xc}, {0x4, 0xc}, {0x6f20, 0x8000}, {0x6, 0x3}, {0x9, 0x1}, {0x9, 0x7c}, {0x6, 0xa06a}, {0x9, 0x9}, {0x9, 0x1000}, {0x0, 0x7}, {0x7b, 0x7}, {0x7ff, 0x7fffffffffffffff}, {0xfffffffffffffff0, 0x1}, {0x2, 0x7}, {0xfffffffffffffffa, 0xfffffffffffffff9}, {0x2, 0x800}, {0xfffffffffffffff5, 0x4}, {0x8000000000000000, 0x6}, {0x1, 0x5}, {0x6, 0x3ff}, {0x8, 0xdfdb}, {0x9f7, 0x9}, {0xcaf7, 0x5}, {0x1c8440, 0x9}, {0x8001, 0xe}, {0x1, 0x5759}, {0x7, 0x3}, {0x8, 0x2a}, {0x6, 0x5}, {0x4, 0x281}, {0x89a, 0x8}, {0xe68, 0x7d}, {0x7f, 0x3}, {0x5, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x7, 0xde}, {0x2, 0xd}, {0x5, 0x8}, {0x4}, {0x0, 0xf3a}, {0xe4a8, 0x8}, {0x8000000000000001, 0x22d1}, {0x48, 0x1}, {0x9, 0x4}, {0xff, 0x80000001}, {0x5, 0x1}, {0x3, 0x74}, {0xffff, 0x7}, {0xeb43, 0x9}, {0x37, 0x100000000}, {0x3, 0x2}, {0x5, 0x3}, {0x7f, 0x1}, {0x6, 0x4}, {0x80000001, 0x4}, {0x80, 0x1}, {0x2, 0x7}, {0x0, 0x4}, {0xa792, 0x1}, {0x6, 0x7}, {0xfc}, {0x2, 0x1ff}, {0x7, 0x2}, {0xe}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0xfffffffffffffffa}, {0x5, 0x80000000}, {0x7, 0xffffffff00000001}, {0x6}, {0xbb, 0x9}, {0x100, 0x2}, {0x7, 0x8}, {0x2b, 0x45}, {0x7, 0xe555}, {0x4, 0x3}, {0x8000, 0x400}, {}, {0x27b, 0x7f}, {0x9, 0x5}, {0x2, 0x8}, {0x430, 0x9}, {0x9, 0x6e69}, {0x7f, 0x10}, {0x2, 0x49f}, {0x1, 0x778d}, {0xfffffffffffffffb, 0x6}, {0x5259, 0x7c4}, {0x6fb9798d, 0x800}, {0x8, 0x5}, {0x8, 0x79}, {0x10000, 0x898}, {0x7, 0x9}, {0x0, 0x100000001}, {0x7, 0x2}, {0x0, 0x474df364}, {0x3, 0x4}, {0x8, 0x8}, {0x6, 0x983f}, {0x7f, 0x6}, {0x100, 0x5a00000000000000}, {0xb0, 0x3}, {0xb4}, {0x1, 0x4}, {0x100000000, 0x7}, {0x8, 0x3}, {0x4, 0x74da}, {0x8, 0x4}, {0x9, 0x3}, {0x3, 0xffffffffffffffff}, {0x0, 0x9}, {0x7, 0xdf4}, {0x8, 0xfffffffffffffff6}, {0x3, 0x7fff}, {0x800, 0x3}, {0xfff}, {0x9, 0x1}, {0xa59, 0x53}, {0x80000000, 0x1612}, {0x4, 0xd}, {0x1, 0x100}, {0x7, 0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x101, 0x1}, {0x4ec, 0x8d}, {0x5, 0x6}, {0x7, 0x10000}, {0x5, 0x10}, {0x1bc1, 0x8}, {0x6, 0xfffffffffffffff9}, {0x10001, 0x1}, {0x2, 0x2}, {0x3, 0x60000000000}, {0x6, 0xe7c}, {0x544, 0x8000000000000000}, {0x8, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x9, 0xd}, {0x4, 0xc2c}, {0x100, 0x8}, {0x1bf, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0xff, 0x3}, {0x8b42, 0x100}, {0x7, 0x8}, {0x300, 0x8}, {0x400, 0x5}, {0x5, 0x100000001}, {0x7ff, 0xffffffffffffffff}, {0xfffffffffffffff2, 0x1}, {0x401, 0x100}, {0x2, 0x8}, {0x3, 0x7ff}, {0x8, 0x4}, {0x4ba4, 0x2}, {0x90d, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x100}, {0x6, 0xfffffffffffffffb}, {0xb, 0x9}, {0x6, 0x8}, {0x9, 0x3}, {0x7, 0x9}, {0x40, 0x8000}, {0xa1, 0x8}, {0x7, 0xff}, {0x6, 0x8}, {0xfffffffffffffff8, 0x4}, {0x7, 0xb7}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x200}, {0x7fffffffffffffff, 0x1d1a}, {0x5e5, 0x490}, {0xb4a, 0x8}, {0x7, 0x81}, {0x400000000000000, 0xfffffffffffffff8}, {0x7}, {0x0, 0x9}, {0x6908, 0x8}, {0x200, 0x8}, {0x3, 0x4}, {0x5, 0x9}, {0x3, 0xfffffffffffff666}, {0x6, 0x7}, {0x9}, {0x9, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x5, 0xffffffff}, {0xa4ce, 0x7}, {0xff, 0x3}, {0x6, 0x5}, {0x4, 0x5eca}, {0xfffffffffffffffb, 0x80000001}, {0x8000000000000000, 0x7}, {0xbf7, 0x6}, {0x3b, 0x3}, {0x622, 0x3}, {0x9, 0x8}, {0x7, 0x5}, {0xc7c3, 0x516}, {0xc, 0x5}, {0x2, 0x1}, {0x40, 0x80000001}, {0x8000000000000000, 0x3}, {0x0, 0xfffffffffffffffd}, {0x3, 0x9}, {0x7, 0xc}, {0xfffffffeffffffff, 0x400}, {0xe11, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x6ac, 0x1ff}, {0x6, 0x7}, {0x4b51, 0x2}, {0x8, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x12c}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) umount2(&(0x7f0000000100)='./file0\x00', 0x8) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x4}, 0x8) kernel console output (not intermixed with test programs): Product: syz [ 257.409029][ T5852] usb 1-1: Manufacturer: syz [ 257.409044][ T5852] usb 1-1: SerialNumber: syz [ 257.466982][ T5852] usb 1-1: config 0 descriptor?? [ 257.851374][ T1233] usb 3-1: USB disconnect, device number 28 [ 257.964155][ T5852] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 257.964185][ T5852] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 258.170708][ T5852] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 258.171024][ T5852] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 258.375490][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 259.511377][ T5852] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 259.671411][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 259.679907][ T5852] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 259.684448][ T5852] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 259.684476][ T5852] usb 4-1: config 0 has no interface number 0 [ 259.729726][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.729755][ T5852] usb 4-1: Product: syz [ 259.729771][ T5852] usb 4-1: Manufacturer: syz [ 259.729786][ T5852] usb 4-1: SerialNumber: syz [ 259.782865][ T5852] usb 4-1: config 0 descriptor?? [ 260.815974][ T996] usb 1-1: USB disconnect, device number 21 [ 261.042066][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 261.042099][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.247481][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 261.247792][ T5852] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 261.518969][ T7307] FAULT_INJECTION: forcing a failure. [ 261.518969][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.519003][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 261.519029][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.519041][ T7307] Call Trace: [ 261.519049][ T7307] [ 261.519058][ T7307] dump_stack_lvl+0xe8/0x150 [ 261.519093][ T7307] should_fail_ex+0x46b/0x600 [ 261.519125][ T7307] _copy_from_user+0x2d/0xb0 [ 261.519155][ T7307] __sys_connect+0x155/0x470 [ 261.519178][ T7307] ? __pfx___sys_connect+0x10/0x10 [ 261.519207][ T7307] ? __pfx_ksys_write+0x10/0x10 [ 261.519242][ T7307] __x64_sys_connect+0x7a/0x90 [ 261.519262][ T7307] do_syscall_64+0x166/0x520 [ 261.519284][ T7307] ? trace_irq_disable+0x3b/0x140 [ 261.519303][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.519323][ T7307] ? clear_bhb_loop+0x70/0xc0 [ 261.519348][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.519368][ T7307] RIP: 0033:0x7f10abb8e0d9 [ 261.519384][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.519402][ T7307] RSP: 002b:00007f10a9da4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 261.519424][ T7307] RAX: ffffffffffffffda RBX: 00007f10abe16180 RCX: 00007f10abb8e0d9 [ 261.519439][ T7307] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000005 [ 261.519451][ T7307] RBP: 00007f10a9da4090 R08: 0000000000000000 R09: 0000000000000000 [ 261.519462][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.519474][ T7307] R13: 00007f10abe16218 R14: 00007f10abe16180 R15: 00007ffd9da3ecd8 [ 261.519504][ T7307] [ 262.259737][ T5852] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 262.442077][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 262.496559][ T5852] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.543230][ T5852] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.543272][ T5852] usb 2-1: config 0 has no interface number 0 [ 262.658719][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.658796][ T5852] usb 2-1: Product: syz [ 262.658812][ T5852] usb 2-1: Manufacturer: syz [ 262.658868][ T5852] usb 2-1: SerialNumber: syz [ 263.068498][ T31] usb 4-1: USB disconnect, device number 19 [ 263.228422][ T5852] usb 2-1: config 0 descriptor?? [ 263.698488][ T5852] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 263.698519][ T5852] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 263.849258][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 263.906847][ T5852] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 263.908087][ T5852] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 263.979282][ T5703] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 264.011777][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 264.012664][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 264.014674][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 264.014699][ T31] usb 1-1: config 0 has no interface number 0 [ 264.026222][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.026435][ T31] usb 1-1: Product: syz [ 264.026473][ T31] usb 1-1: Manufacturer: syz [ 264.026510][ T31] usb 1-1: SerialNumber: syz [ 264.080062][ T31] usb 1-1: config 0 descriptor?? [ 264.139235][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 264.141945][ T5703] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 264.144238][ T5703] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 264.144270][ T5703] usb 3-1: config 0 has no interface number 0 [ 264.146882][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.146907][ T5703] usb 3-1: Product: syz [ 264.146983][ T5703] usb 3-1: Manufacturer: syz [ 264.147000][ T5703] usb 3-1: SerialNumber: syz [ 264.206313][ T5703] usb 3-1: config 0 descriptor?? [ 264.259255][ T5601] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 264.388046][ T7343] < [ 264.389067][ T7343] û÷Ï$0箿 [ 264.389067][ T7343] Êõ†> Øœí)Þ­ý^ÕÅøîÌÅÎv׫ÊéGs/-xÇÕ [ 264.409302][ T5601] usb 5-1: Using ep0 maxpacket: 32 [ 264.410134][ T5601] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 264.411948][ T5601] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 264.411973][ T5601] usb 5-1: config 0 has no interface number 0 [ 264.414945][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.414969][ T5601] usb 5-1: Product: syz [ 264.414985][ T5601] usb 5-1: Manufacturer: syz [ 264.415008][ T5601] usb 5-1: SerialNumber: syz [ 264.485838][ T5601] usb 5-1: config 0 descriptor?? [ 264.513993][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 264.514025][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 264.717141][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 264.718828][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 264.804452][ T5703] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 264.804485][ T5703] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 264.987494][ T5601] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 264.987528][ T5601] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 265.012504][ T5703] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 265.012811][ T5703] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 265.057257][ T6440] usb 3-1: USB disconnect, device number 29 [ 265.190282][ T10] usb 2-1: USB disconnect, device number 28 [ 265.215672][ T5601] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 265.215981][ T5601] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 265.264942][ T5601] usb 5-1: USB disconnect, device number 19 [ 265.718024][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.490'. [ 267.428962][ T996] usb 1-1: USB disconnect, device number 22 [ 269.969982][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 270.870268][ T6440] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 270.951501][ T7398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.147868][ T6440] usb 3-1: not running at top speed; connect to a high speed hub [ 271.148876][ T6440] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 271.218809][ T6440] usb 3-1: config 0 has no interfaces? [ 271.280353][ T7412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.505'. [ 271.294088][ T6440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.294157][ T6440] usb 3-1: Product: syz [ 271.294231][ T6440] usb 3-1: Manufacturer: syz [ 271.294292][ T6440] usb 3-1: SerialNumber: syz [ 271.583614][ T6440] usb 3-1: config 0 descriptor?? [ 271.948618][ T5601] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 272.129349][ T5601] usb 1-1: Using ep0 maxpacket: 32 [ 272.130164][ T5601] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.134855][ T5601] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 272.134882][ T5601] usb 1-1: config 0 has no interface number 0 [ 272.139950][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.139975][ T5601] usb 1-1: Product: syz [ 272.139990][ T5601] usb 1-1: Manufacturer: syz [ 272.140003][ T5601] usb 1-1: SerialNumber: syz [ 272.230053][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.230714][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.237475][ T5601] usb 1-1: config 0 descriptor?? [ 273.215217][ T5601] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 273.215252][ T5601] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.658006][ T5703] usb 3-1: USB disconnect, device number 30 [ 273.852437][ T7436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.249438][ T1233] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 274.411594][ T1233] usb 4-1: not running at top speed; connect to a high speed hub [ 274.411638][ T1233] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 274.415509][ T1233] usb 4-1: config 0 has no interfaces? [ 274.446555][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.446583][ T1233] usb 4-1: Product: syz [ 274.446884][ T1233] usb 4-1: Manufacturer: syz [ 274.446901][ T1233] usb 4-1: SerialNumber: syz [ 274.498321][ T1233] usb 4-1: config 0 descriptor?? [ 274.743208][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.746666][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.817532][ T5601] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 274.817770][ T5601] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 274.857134][ T5601] usb 1-1: USB disconnect, device number 23 [ 275.123861][ T7452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.519'. [ 276.022900][ T7459] FAULT_INJECTION: forcing a failure. [ 276.022900][ T7459] name failslab, interval 1, probability 0, space 0, times 0 [ 276.022936][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: syz.4.523 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 276.022961][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.022973][ T7459] Call Trace: [ 276.022981][ T7459] [ 276.022990][ T7459] dump_stack_lvl+0xe8/0x150 [ 276.023027][ T7459] should_fail_ex+0x46b/0x600 [ 276.023063][ T7459] should_failslab+0xa8/0x100 [ 276.023093][ T7459] __kmalloc_noprof+0xfe/0x780 [ 276.023118][ T7459] ? copy_splice_read+0x16f/0xab0 [ 276.023144][ T7459] ? copy_splice_read+0x16f/0xab0 [ 276.023180][ T7459] copy_splice_read+0x16f/0xab0 [ 276.023207][ T7459] ? kstrtouint+0x6e/0xe0 [ 276.023239][ T7459] ? __pfx_copy_splice_read+0x10/0x10 [ 276.023275][ T7459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.023304][ T7459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.023328][ T7459] ? mutex_lock_nested+0x152/0x1d0 [ 276.023359][ T7459] ? splice_file_to_pipe+0x3e/0x6c0 [ 276.023395][ T7459] ? __pfx_copy_splice_read+0x10/0x10 [ 276.023423][ T7459] splice_file_to_pipe+0x450/0x6c0 [ 276.023468][ T7459] do_sendfile+0x4e6/0x7e0 [ 276.023500][ T7459] ? __pfx_do_sendfile+0x10/0x10 [ 276.023537][ T7459] __se_sys_sendfile64+0x144/0x1a0 [ 276.023575][ T7459] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 276.023622][ T7459] do_syscall_64+0x166/0x520 [ 276.023645][ T7459] ? trace_irq_disable+0x3b/0x140 [ 276.023667][ T7459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.023688][ T7459] ? clear_bhb_loop+0x70/0xc0 [ 276.023710][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.023728][ T7459] RIP: 0033:0x7fe4811ae0d9 [ 276.023744][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.023799][ T7459] RSP: 002b:00007fe47f406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.023818][ T7459] RAX: ffffffffffffffda RBX: 00007fe481435fa0 RCX: 00007fe4811ae0d9 [ 276.023832][ T7459] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 276.023842][ T7459] RBP: 00007fe47f406090 R08: 0000000000000000 R09: 0000000000000000 [ 276.023853][ T7459] R10: 000000000010ffff R11: 0000000000000246 R12: 0000000000000001 [ 276.023872][ T7459] R13: 00007fe481436038 R14: 00007fe481435fa0 R15: 00007ffc19f301f8 [ 276.023900][ T7459] [ 278.440218][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 278.726108][ T5718] usb 4-1: USB disconnect, device number 20 [ 279.349337][ T5852] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 279.502530][ T5852] usb 5-1: not running at top speed; connect to a high speed hub [ 279.502569][ T5852] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 279.504030][ T5852] usb 5-1: config 0 has no interfaces? [ 279.558563][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.558590][ T5852] usb 5-1: Product: syz [ 279.558604][ T5852] usb 5-1: Manufacturer: syz [ 279.558619][ T5852] usb 5-1: SerialNumber: syz [ 279.611490][ T5852] usb 5-1: config 0 descriptor?? [ 279.840816][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.846235][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.072885][ T7477] bridge_slave_0: left allmulticast mode [ 280.072920][ T7477] bridge_slave_0: left promiscuous mode [ 280.073165][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.998453][ T7477] bridge_slave_1: left allmulticast mode [ 280.998487][ T7477] bridge_slave_1: left promiscuous mode [ 281.004497][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.229828][ T7477] bond0: (slave bond_slave_0): Releasing backup interface [ 281.315599][ T7477] bond0: (slave bond_slave_1): Releasing backup interface [ 281.319267][ T5852] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.457884][ T7477] team0: Port device team_slave_0 removed [ 281.483084][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 281.485388][ T5852] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 281.508958][ T5852] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 281.508986][ T5852] usb 4-1: config 0 has no interface number 0 [ 281.544391][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.544410][ T5852] usb 4-1: Product: syz [ 281.544420][ T5852] usb 4-1: Manufacturer: syz [ 281.544430][ T5852] usb 4-1: SerialNumber: syz [ 281.573364][ T5852] usb 4-1: config 0 descriptor?? [ 281.804870][ T7502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.535'. [ 282.365464][ T7477] team0: Port device team_slave_1 removed [ 282.367305][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 282.367334][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 282.402323][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.402346][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.482764][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.482792][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.540127][ T7477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.720226][ T31] usb 5-1: USB disconnect, device number 20 [ 284.271027][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 284.271241][ T5852] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 284.337670][ T5852] usb 4-1: USB disconnect, device number 21 [ 284.613832][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 285.587312][ T7525] FAULT_INJECTION: forcing a failure. [ 285.587312][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.587346][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.1.541 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.587370][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.587383][ T7525] Call Trace: [ 285.587391][ T7525] [ 285.587400][ T7525] dump_stack_lvl+0xe8/0x150 [ 285.587437][ T7525] should_fail_ex+0x46b/0x600 [ 285.587471][ T7525] _copy_to_user+0x31/0xb0 [ 285.587501][ T7525] simple_read_from_buffer+0xe1/0x170 [ 285.587527][ T7525] proc_fail_nth_read+0x1be/0x230 [ 285.587562][ T7525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.587589][ T7525] ? rw_verify_area+0x250/0x4d0 [ 285.587612][ T7525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.587635][ T7525] vfs_read+0x219/0xa90 [ 285.587663][ T7525] ? __pfx_vfs_read+0x10/0x10 [ 285.587687][ T7525] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 285.587709][ T7525] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 285.587727][ T7525] ? mutex_lock_nested+0x152/0x1d0 [ 285.587750][ T7525] ? fdget_pos+0x252/0x320 [ 285.587776][ T7525] ksys_read+0x156/0x270 [ 285.587800][ T7525] ? __pfx_ksys_read+0x10/0x10 [ 285.587834][ T7525] do_syscall_64+0x166/0x520 [ 285.587853][ T7525] ? trace_irq_disable+0x3b/0x140 [ 285.587869][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.587887][ T7525] ? clear_bhb_loop+0x70/0xc0 [ 285.587907][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.587924][ T7525] RIP: 0033:0x7f72fed1e90e [ 285.587940][ T7525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 285.587954][ T7525] RSP: 002b:00007f72fcfb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.587972][ T7525] RAX: ffffffffffffffda RBX: 00007f72fcfb66c0 RCX: 00007f72fed1e90e [ 285.587984][ T7525] RDX: 000000000000000f RSI: 00007f72fcfb60a0 RDI: 0000000000000003 [ 285.587994][ T7525] RBP: 00007f72fcfb6090 R08: 0000000000000000 R09: 0000000000000000 [ 285.588004][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.588014][ T7525] R13: 00007f72fefe6038 R14: 00007f72fefe5fa0 R15: 00007ffecc0a6308 [ 285.588041][ T7525] [ 285.604051][ T5703] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 285.699434][ T5718] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 285.849237][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 285.849246][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 285.852282][ T5703] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.854983][ T5718] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 285.855015][ T5703] usb 5-1: config 1 interface 0 altsetting 40 bulk endpoint 0x82 has invalid maxpacket 32 [ 285.855039][ T5703] usb 5-1: config 1 interface 0 altsetting 40 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 285.855063][ T5703] usb 5-1: config 1 interface 0 has no altsetting 0 [ 285.857067][ T5718] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 285.857089][ T5718] usb 3-1: config 0 has no interface number 0 [ 285.857952][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.857975][ T5703] usb 5-1: Product: syz [ 285.857990][ T5703] usb 5-1: Manufacturer: syz [ 285.858004][ T5703] usb 5-1: SerialNumber: syz [ 285.876581][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.876667][ T5718] usb 3-1: Product: syz [ 285.876722][ T5718] usb 3-1: Manufacturer: syz [ 285.876773][ T5718] usb 3-1: SerialNumber: syz [ 286.002307][ T5718] usb 3-1: config 0 descriptor?? [ 286.021477][ T7516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.021608][ T7516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.240170][ T5703] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 286.276402][ T5703] usb 5-1: USB disconnect, device number 21 [ 286.609759][ T6440] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 286.677738][ T5718] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 286.677769][ T5718] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 287.359205][ T6440] usb 2-1: Using ep0 maxpacket: 32 [ 287.361428][ T6440] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 287.364054][ T6440] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 287.364079][ T6440] usb 2-1: config 0 has no interface number 0 [ 287.364126][ T6440] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 287.364206][ T6440] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.364229][ T6440] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.364254][ T6440] usb 2-1: config 0 interface 196 has no altsetting 0 [ 287.418807][ T6440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.435571][ T6440] usb 2-1: Product: syz [ 287.435592][ T6440] usb 2-1: Manufacturer: syz [ 287.435606][ T6440] usb 2-1: SerialNumber: syz [ 287.504391][ T6440] usb 2-1: config 0 descriptor?? [ 287.508419][ T7536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.709426][ T7550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.786882][ T5718] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 287.787388][ T5718] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 287.799716][ T5601] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 287.834622][ T5718] usb 3-1: USB disconnect, device number 31 [ 287.991063][ T5601] usb 4-1: Using ep0 maxpacket: 32 [ 287.991797][ T5601] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 287.993184][ T5601] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.993204][ T5601] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.993271][ T5601] usb 4-1: config 0 interface 0 has no altsetting 0 [ 287.996105][ T5601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.996128][ T5601] usb 4-1: Product: syz [ 287.996138][ T5601] usb 4-1: Manufacturer: syz [ 287.996147][ T5601] usb 4-1: SerialNumber: syz [ 288.040941][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 288.062901][ T5601] usb 4-1: config 0 descriptor?? [ 288.240738][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 288.240780][ T10] usb 1-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 288.241509][ T10] usb 1-1: config 0 has no interfaces? [ 288.244299][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.244323][ T10] usb 1-1: Product: syz [ 288.244406][ T10] usb 1-1: Manufacturer: syz [ 288.244418][ T10] usb 1-1: SerialNumber: syz [ 288.308011][ T10] usb 1-1: config 0 descriptor?? [ 288.533314][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.578947][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.809283][ T5601] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 288.809381][ T5601] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 288.847643][ T5601] usb 4-1: USB disconnect, device number 22 [ 289.327803][ T7536] syz.1.544 (7536) used greatest stack depth: 18176 bytes left [ 289.376811][ T6440] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 289.377521][ T6440] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 289.459242][ T6440] usb 2-1: USB disconnect, device number 29 [ 290.129274][ T6440] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 290.644325][ T6440] usb 2-1: Using ep0 maxpacket: 32 [ 290.787944][ T6440] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 290.851540][ T6440] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 290.851578][ T6440] usb 2-1: config 0 has no interface number 0 [ 291.490896][ T6440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.490945][ T6440] usb 2-1: Product: syz [ 291.490962][ T6440] usb 2-1: Manufacturer: syz [ 291.491033][ T6440] usb 2-1: SerialNumber: syz [ 291.697665][ T6440] usb 2-1: config 0 descriptor?? [ 291.840356][ T5718] usb 1-1: USB disconnect, device number 24 [ 292.152355][ T6440] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 292.152387][ T6440] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 292.220993][ T7589] FAULT_INJECTION: forcing a failure. [ 292.220993][ T7589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.221031][ T7589] CPU: 1 UID: 0 PID: 7589 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 292.221057][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.221070][ T7589] Call Trace: [ 292.221080][ T7589] [ 292.221089][ T7589] dump_stack_lvl+0xe8/0x150 [ 292.221129][ T7589] should_fail_ex+0x46b/0x600 [ 292.221165][ T7589] _copy_from_user+0x2d/0xb0 [ 292.221198][ T7589] ___sys_sendmsg+0x1c6/0x360 [ 292.221226][ T7589] ? __lock_acquire+0x683/0x2ce0 [ 292.221256][ T7589] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.221321][ T7589] ? __fget_files+0x2a/0x420 [ 292.221358][ T7589] ? __fget_files+0x3a8/0x420 [ 292.221397][ T7589] __x64_sys_sendmsg+0x1b7/0x290 [ 292.221430][ T7589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.221480][ T7589] do_syscall_64+0x166/0x520 [ 292.221506][ T7589] ? trace_irq_disable+0x3b/0x140 [ 292.221529][ T7589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.221553][ T7589] ? clear_bhb_loop+0x70/0xc0 [ 292.221580][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.221603][ T7589] RIP: 0033:0x7f10abb8e0d9 [ 292.221623][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.221644][ T7589] RSP: 002b:00007f10a9de6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.221668][ T7589] RAX: ffffffffffffffda RBX: 00007f10abe15fa0 RCX: 00007f10abb8e0d9 [ 292.221685][ T7589] RDX: 0000000024004080 RSI: 0000200000000300 RDI: 0000000000000003 [ 292.221699][ T7589] RBP: 00007f10a9de6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.221731][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.221743][ T7589] R13: 00007f10abe16038 R14: 00007f10abe15fa0 R15: 00007ffd9da3ecd8 [ 292.221788][ T7589] [ 292.739247][ T5852] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 292.889228][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 292.890212][ T5852] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 292.897761][ T5852] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 292.897790][ T5852] usb 3-1: config 0 has no interface number 0 [ 292.936993][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.937021][ T5852] usb 3-1: Product: syz [ 292.937036][ T5852] usb 3-1: Manufacturer: syz [ 292.937051][ T5852] usb 3-1: SerialNumber: syz [ 292.966345][ T5852] usb 3-1: config 0 descriptor?? [ 293.368866][ T6440] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 293.380215][ T6440] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 293.398453][ T6440] usb 2-1: USB disconnect, device number 30 [ 293.422643][ T5852] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 293.422663][ T5852] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 294.040310][ T5852] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 294.040616][ T5852] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 294.106771][ T5852] usb 3-1: USB disconnect, device number 32 [ 294.155316][ T7612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.461260][ T6440] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 294.626909][ T6440] usb 5-1: not running at top speed; connect to a high speed hub [ 294.626948][ T6440] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 294.635582][ T6440] usb 5-1: config 0 has no interfaces? [ 294.658144][ T6440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.658170][ T6440] usb 5-1: Product: syz [ 294.658185][ T6440] usb 5-1: Manufacturer: syz [ 294.658200][ T6440] usb 5-1: SerialNumber: syz [ 294.706188][ T6440] usb 5-1: config 0 descriptor?? [ 294.830782][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 294.830813][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 294.830903][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 294.928485][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.945390][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.137329][ T7637] sctp: [Deprecated]: syz.2.578 (pid 7637) Use of int in max_burst socket option deprecated. [ 295.137329][ T7637] Use struct sctp_assoc_value instead [ 295.249723][ T6440] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 295.389228][ T6440] usb 4-1: device descriptor read/64, error -71 [ 297.529335][ T6440] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 297.576691][ T5718] usb 5-1: USB disconnect, device number 22 [ 297.669511][ T6440] usb 4-1: device descriptor read/64, error -71 [ 297.803476][ T6440] usb usb4-port1: attempt power cycle [ 297.978960][ T7648] capability: warning: `syz.2.583' uses 32-bit capabilities (legacy support in use) [ 298.499542][ T5907] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 298.859893][ T5907] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 298.864568][ T5907] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.864607][ T5907] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.933876][ T5907] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 298.933916][ T5907] usb 1-1: Product: syz [ 298.933975][ T5907] usb 1-1: Manufacturer: syz [ 299.573908][ T5907] hub 1-1:4.0: USB hub found [ 304.486690][ T5907] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 304.676706][ T5907] usb 1-1: USB disconnect, device number 25 [ 307.678983][ T7677] block nbd0: shutting down sockets [ 307.847260][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500000000 [ 307.894016][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 307.909495][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 307.912102][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 307.912674][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 307.918378][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 307.918468][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 308.005640][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 308.005723][ T7685] kvm: kvm [7683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 308.169265][ T6440] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 308.319336][ T6440] usb 4-1: Using ep0 maxpacket: 32 [ 308.321751][ T6440] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 308.328262][ T6440] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 308.328302][ T6440] usb 4-1: config 0 has no interface number 0 [ 308.361791][ T6440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.361816][ T6440] usb 4-1: Product: syz [ 308.361839][ T6440] usb 4-1: Manufacturer: syz [ 308.361854][ T6440] usb 4-1: SerialNumber: syz [ 308.406932][ T6440] usb 4-1: config 0 descriptor?? [ 308.449272][ T5718] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 308.696478][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 308.972277][ T5718] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.022437][ T5718] usb 3-1: config 1 interface 0 altsetting 40 bulk endpoint 0x82 has invalid maxpacket 32 [ 309.022616][ T5718] usb 3-1: config 1 interface 0 altsetting 40 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.022816][ T5718] usb 3-1: config 1 interface 0 has no altsetting 0 [ 309.659427][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.659447][ T5718] usb 3-1: Product: syz [ 309.659456][ T5718] usb 3-1: Manufacturer: syz [ 309.659466][ T5718] usb 3-1: SerialNumber: syz [ 309.738196][ T7700] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.738321][ T7700] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.945761][ T6440] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 309.946063][ T6440] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.971513][ T5718] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 310.011352][ T5718] usb 3-1: USB disconnect, device number 33 [ 310.084106][ T7712] netlink: 'syz.1.602': attribute type 2 has an invalid length. [ 310.084130][ T7712] netlink: 232 bytes leftover after parsing attributes in process `syz.1.602'. [ 310.774954][ T6440] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 310.775210][ T6440] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 313.267718][ T6440] usb 4-1: USB disconnect, device number 26 [ 315.589449][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 315.782044][ T5907] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 315.923689][ T5907] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 315.923875][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.045391][ T5907] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 316.049921][ T5907] usb 1-1: Manufacturer: syz [ 316.294971][ T5907] usb 1-1: config 0 descriptor?? [ 316.539319][ T5907] rc_core: IR keymap rc-hauppauge not found [ 316.539341][ T5907] Registered IR keymap rc-empty [ 316.546252][ T5907] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 316.593342][ T5907] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 316.655613][ T5907] usb 1-1: USB disconnect, device number 26 [ 316.727172][ T7746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.819372][ T5601] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 316.839205][ T6440] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 316.949225][ T5601] usb 2-1: device descriptor read/64, error -71 [ 316.999546][ T6440] usb 5-1: Using ep0 maxpacket: 8 [ 317.000725][ T6440] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.002279][ T6440] usb 5-1: config 1 interface 0 altsetting 40 bulk endpoint 0x82 has invalid maxpacket 32 [ 317.002308][ T6440] usb 5-1: config 1 interface 0 altsetting 40 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.002334][ T6440] usb 5-1: config 1 interface 0 has no altsetting 0 [ 317.006548][ T6440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.006572][ T6440] usb 5-1: Product: syz [ 317.006587][ T6440] usb 5-1: Manufacturer: syz [ 317.006602][ T6440] usb 5-1: SerialNumber: syz [ 317.087223][ T7748] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 317.087358][ T7748] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 317.229633][ T5601] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 317.369296][ T5601] usb 2-1: device descriptor read/64, error -71 [ 317.403891][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.403961][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.478740][ T6440] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 318.301027][ T5601] usb usb2-port1: attempt power cycle [ 318.322413][ T6440] usb 5-1: USB disconnect, device number 23 [ 318.649239][ T5601] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 318.807821][ T5601] usb 2-1: device descriptor read/8, error -71 [ 320.378287][ T5601] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 320.581003][ T5601] usb 2-1: device not accepting address 34, error -71 [ 320.583770][ T5601] usb usb2-port1: unable to enumerate USB device [ 321.009892][ T7800] FAULT_INJECTION: forcing a failure. [ 321.009892][ T7800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.009931][ T7800] CPU: 0 UID: 0 PID: 7800 Comm: syz.4.632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.009961][ T7800] Tainted: [L]=SOFTLOCKUP [ 321.009968][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.009994][ T7800] Call Trace: [ 321.010002][ T7800] [ 321.010011][ T7800] dump_stack_lvl+0xe8/0x150 [ 321.010049][ T7800] should_fail_ex+0x46b/0x600 [ 321.010083][ T7800] _copy_from_user+0x2d/0xb0 [ 321.010115][ T7800] __sys_bpf+0x2e7/0xd90 [ 321.010149][ T7800] ? __pfx___sys_bpf+0x10/0x10 [ 321.010175][ T7800] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 321.010207][ T7800] ? rt_mutex_slowunlock+0x219/0x460 [ 321.010259][ T7800] ? ksys_write+0x248/0x270 [ 321.010291][ T7800] ? __pfx_ksys_write+0x10/0x10 [ 321.010326][ T7800] __x64_sys_bpf+0xba/0xd0 [ 321.010350][ T7800] do_syscall_64+0x166/0x520 [ 321.010380][ T7800] ? trace_irq_disable+0x3b/0x140 [ 321.010418][ T7800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.010441][ T7800] ? clear_bhb_loop+0x70/0xc0 [ 321.010470][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.010493][ T7800] RIP: 0033:0x7fe4811ae0d9 [ 321.010512][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.010531][ T7800] RSP: 002b:00007fe47f406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 321.010555][ T7800] RAX: ffffffffffffffda RBX: 00007fe481435fa0 RCX: 00007fe4811ae0d9 [ 321.010581][ T7800] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 321.010596][ T7800] RBP: 00007fe47f406090 R08: 0000000000000000 R09: 0000000000000000 [ 321.010611][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.010624][ T7800] R13: 00007fe481436038 R14: 00007fe481435fa0 R15: 00007ffc19f301f8 [ 321.010660][ T7800] [ 321.336842][ T7810] FAULT_INJECTION: forcing a failure. [ 321.336842][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 321.336878][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.4.636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.336905][ T7810] Tainted: [L]=SOFTLOCKUP [ 321.336912][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.336924][ T7810] Call Trace: [ 321.336932][ T7810] [ 321.336940][ T7810] dump_stack_lvl+0xe8/0x150 [ 321.336975][ T7810] should_fail_ex+0x46b/0x600 [ 321.337006][ T7810] should_failslab+0xa8/0x100 [ 321.337034][ T7810] kmem_cache_alloc_node_noprof+0xae/0x670 [ 321.337058][ T7810] ? __alloc_skb+0x1db/0x7a0 [ 321.337076][ T7810] ? __alloc_skb+0x1db/0x7a0 [ 321.337109][ T7810] __alloc_skb+0x1db/0x7a0 [ 321.337133][ T7810] sock_omalloc+0xcb/0x1d0 [ 321.337162][ T7810] msg_zerocopy_realloc+0xd5/0x8b0 [ 321.337192][ T7810] tcp_sendmsg_locked+0x4b02/0x55c0 [ 321.337241][ T7810] ? __lock_acquire+0x683/0x2ce0 [ 321.337271][ T7810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 321.337297][ T7810] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 321.337319][ T7810] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 321.337358][ T7810] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 321.337393][ T7810] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 321.337417][ T7810] ? lockdep_hardirqs_on+0x7b/0x110 [ 321.337445][ T7810] tcp_sendmsg+0x2f/0x50 [ 321.337468][ T7810] ? __pfx_inet_sendmsg+0x10/0x10 [ 321.337487][ T7810] sock_sendmsg_nosec+0x10e/0x180 [ 321.337519][ T7810] __sys_sendto+0x41e/0x5d0 [ 321.337545][ T7810] ? __pfx___sys_sendto+0x10/0x10 [ 321.337593][ T7810] ? __pfx_ksys_write+0x10/0x10 [ 321.337626][ T7810] __x64_sys_sendto+0xde/0x100 [ 321.337651][ T7810] do_syscall_64+0x166/0x520 [ 321.337673][ T7810] ? trace_irq_disable+0x3b/0x140 [ 321.337697][ T7810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.337717][ T7810] ? clear_bhb_loop+0x70/0xc0 [ 321.337742][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.337762][ T7810] RIP: 0033:0x7fe4811ae0d9 [ 321.337781][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.337798][ T7810] RSP: 002b:00007fe47f406028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 321.337819][ T7810] RAX: ffffffffffffffda RBX: 00007fe481435fa0 RCX: 00007fe4811ae0d9 [ 321.337835][ T7810] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 321.337847][ T7810] RBP: 00007fe47f406090 R08: 0000000000000000 R09: 0000000000000000 [ 321.337859][ T7810] R10: 0000000004000085 R11: 0000000000000246 R12: 0000000000000001 [ 321.337871][ T7810] R13: 00007fe481436038 R14: 00007fe481435fa0 R15: 00007ffc19f301f8 [ 321.337903][ T7810] [ 321.666113][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'. [ 321.666148][ T7815] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 321.987886][ T5595] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 323.839244][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 323.955313][ T7849] binder: 7847:7849 ioctl c0306201 200000000580 returned -14 [ 324.000478][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 324.001525][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 324.003596][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 324.003619][ T31] usb 1-1: config 0 has no interface number 0 [ 324.006585][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.006611][ T31] usb 1-1: Product: syz [ 324.006626][ T31] usb 1-1: Manufacturer: syz [ 324.006641][ T31] usb 1-1: SerialNumber: syz [ 324.065448][ T31] usb 1-1: config 0 descriptor?? [ 324.253763][ T5595] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 324.359389][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 324.512506][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 324.512535][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 324.529198][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 324.553086][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 324.558481][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 324.558509][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 324.558534][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 324.558556][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 324.558581][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 324.733179][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.733254][ T10] usb 2-1: Product: syz [ 324.733311][ T10] usb 2-1: Manufacturer: syz [ 324.733365][ T10] usb 2-1: SerialNumber: syz [ 324.789391][ T10] usb 2-1: config 0 descriptor?? [ 324.979491][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 325.238540][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 325.238644][ T10] input input14: Device does not respond to id packet M [ 325.282564][ T10] input input14: Device does not respond to id packet P [ 325.375700][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 325.376013][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 325.489343][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.489409][ T10] input input14: Device does not respond to id packet B [ 325.490259][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.490304][ T10] input input14: Device does not respond to id packet N [ 325.490761][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.492662][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.492994][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.496551][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.633108][ T31] usb 1-1: USB disconnect, device number 27 [ 325.651503][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 326.125767][ T10] usb 2-1: USB disconnect, device number 35 [ 326.422293][ T5852] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 326.672036][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 326.675207][ T5852] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 326.711463][ T5852] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 326.711493][ T5852] usb 4-1: config 0 has no interface number 0 [ 326.811709][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.811806][ T5852] usb 4-1: Product: syz [ 326.811949][ T5852] usb 4-1: Manufacturer: syz [ 326.812004][ T5852] usb 4-1: SerialNumber: syz [ 327.174655][ T5852] usb 4-1: config 0 descriptor?? [ 327.821501][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 327.821531][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 328.362802][ T5595] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 328.658813][ T5852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 328.670476][ T5852] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 328.696537][ T5852] usb 4-1: USB disconnect, device number 27 [ 328.889218][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 329.748014][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 329.758498][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'. [ 330.164656][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 330.183010][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 330.183036][ T31] usb 5-1: config 0 has no interface number 0 [ 330.188036][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.188058][ T31] usb 5-1: Product: syz [ 330.188071][ T31] usb 5-1: Manufacturer: syz [ 330.188084][ T31] usb 5-1: SerialNumber: syz [ 330.251720][ T31] usb 5-1: config 0 descriptor?? [ 330.686973][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 330.686997][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 331.104253][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 331.104546][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 331.140491][ T31] usb 5-1: USB disconnect, device number 24 [ 331.147931][ T7927] FAULT_INJECTION: forcing a failure. [ 331.147931][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.147964][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.0.674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.147989][ T7927] Tainted: [L]=SOFTLOCKUP [ 331.147996][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.148008][ T7927] Call Trace: [ 331.148015][ T7927] [ 331.148024][ T7927] dump_stack_lvl+0xe8/0x150 [ 331.148057][ T7927] should_fail_ex+0x46b/0x600 [ 331.148087][ T7927] _copy_from_user+0x2d/0xb0 [ 331.148115][ T7927] __sys_bpf+0x2e7/0xd90 [ 331.148144][ T7927] ? __pfx___sys_bpf+0x10/0x10 [ 331.148167][ T7927] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.148194][ T7927] ? rt_mutex_slowunlock+0x219/0x460 [ 331.148239][ T7927] ? ksys_write+0x248/0x270 [ 331.148266][ T7927] ? __pfx_ksys_write+0x10/0x10 [ 331.148297][ T7927] __x64_sys_bpf+0xba/0xd0 [ 331.148318][ T7927] do_syscall_64+0x166/0x520 [ 331.148339][ T7927] ? trace_irq_disable+0x3b/0x140 [ 331.148357][ T7927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.148377][ T7927] ? clear_bhb_loop+0x70/0xc0 [ 331.148399][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.148418][ T7927] RIP: 0033:0x7f10abb8e0d9 [ 331.148435][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.148451][ T7927] RSP: 002b:00007f10a9de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.148470][ T7927] RAX: ffffffffffffffda RBX: 00007f10abe15fa0 RCX: 00007f10abb8e0d9 [ 331.148484][ T7927] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 331.148496][ T7927] RBP: 00007f10a9de6090 R08: 0000000000000000 R09: 0000000000000000 [ 331.148507][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.148518][ T7927] R13: 00007f10abe16038 R14: 00007f10abe15fa0 R15: 00007ffd9da3ecd8 [ 331.148548][ T7927] [ 331.309224][ T5852] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 331.464772][ T5852] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.464828][ T5852] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 331.492498][ T5852] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 331.495989][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.496014][ T5852] usb 2-1: Product: syz [ 331.496029][ T5852] usb 2-1: Manufacturer: syz [ 331.496043][ T5852] usb 2-1: SerialNumber: syz [ 331.919350][ T5703] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 332.022141][ T5852] usb 2-1: unit 4 not found! [ 332.089207][ T5703] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 332.091606][ T5703] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 332.091665][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.098811][ T5703] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 332.098836][ T5703] usb 3-1: Manufacturer: syz [ 332.155567][ T5703] usb 3-1: config 0 descriptor?? [ 332.286523][ T5852] usb 2-1: USB disconnect, device number 36 [ 332.319288][ T5703] rc_core: IR keymap rc-hauppauge not found [ 332.319305][ T5703] Registered IR keymap rc-empty [ 332.365214][ T5703] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 332.392795][ T5703] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 332.523557][ T6597] udevd[6597]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 332.553812][ T10] usb 3-1: USB disconnect, device number 34 [ 333.031518][ T7955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.684'. [ 333.420398][ T7937] comedi comedi1: reset error (fatal) [ 334.712527][ T5595] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 336.150460][ T5718] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 336.309218][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 336.309897][ T5718] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 336.311340][ T5718] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 336.311366][ T5718] usb 4-1: config 0 has no interface number 0 [ 336.313945][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.313970][ T5718] usb 4-1: Product: syz [ 336.313984][ T5718] usb 4-1: Manufacturer: syz [ 336.313999][ T5718] usb 4-1: SerialNumber: syz [ 336.375934][ T5718] usb 4-1: config 0 descriptor?? [ 336.422719][ T7995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.520166][ T1233] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 336.571873][ T7998] FAULT_INJECTION: forcing a failure. [ 336.571873][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.571906][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.2.699 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.571933][ T7998] Tainted: [L]=SOFTLOCKUP [ 336.571939][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.571950][ T7998] Call Trace: [ 336.571958][ T7998] [ 336.571966][ T7998] dump_stack_lvl+0xe8/0x150 [ 336.571999][ T7998] should_fail_ex+0x46b/0x600 [ 336.572029][ T7998] strncpy_from_user+0x36/0x2c0 [ 336.572074][ T7998] __se_sys_add_key+0xdb/0x420 [ 336.572100][ T7998] ? __pfx___se_sys_add_key+0x10/0x10 [ 336.572139][ T7998] ? __x64_sys_add_key+0x20/0xc0 [ 336.572164][ T7998] do_syscall_64+0x166/0x520 [ 336.572188][ T7998] ? trace_irq_disable+0x3b/0x140 [ 336.572207][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.572228][ T7998] ? clear_bhb_loop+0x70/0xc0 [ 336.572253][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.572273][ T7998] RIP: 0033:0x7f2702ffe0d9 [ 336.572292][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.572310][ T7998] RSP: 002b:00007f2701256028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 336.572331][ T7998] RAX: ffffffffffffffda RBX: 00007f2703285fa0 RCX: 00007f2702ffe0d9 [ 336.572346][ T7998] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 336.572360][ T7998] RBP: 00007f2701256090 R08: fffffffffffffffe R09: 0000000000000000 [ 336.572374][ T7998] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 336.572386][ T7998] R13: 00007f2703286038 R14: 00007f2703285fa0 R15: 00007ffda426ed48 [ 336.572417][ T7998] [ 336.781021][ T1233] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 336.782342][ T1233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.782393][ T1233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.782476][ T1233] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 336.782500][ T1233] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.782540][ T1233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.841744][ T5718] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 336.841777][ T5718] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 336.887819][ T8002] loop8: detected capacity change from 0 to 7 [ 336.914091][ T8002] Dev loop8: unable to read RDB block 7 [ 336.914201][ T8002] loop8: unable to read partition table [ 336.914444][ T8002] loop8: partition table beyond EOD, truncated [ 336.916163][ T8002] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 336.939216][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 337.029315][ T5703] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 337.110972][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 337.111002][ T10] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 337.111740][ T10] usb 5-1: config 0 has no interfaces? [ 337.114693][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.114710][ T10] usb 5-1: Product: syz [ 337.114720][ T10] usb 5-1: Manufacturer: syz [ 337.114729][ T10] usb 5-1: SerialNumber: syz [ 337.167653][ T10] usb 5-1: config 0 descriptor?? [ 337.179235][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 337.181110][ T5703] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 337.182681][ T5703] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 337.182706][ T5703] usb 1-1: config 0 has no interface number 0 [ 337.186438][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.186462][ T5703] usb 1-1: Product: syz [ 337.186476][ T5703] usb 1-1: Manufacturer: syz [ 337.186491][ T5703] usb 1-1: SerialNumber: syz [ 337.232188][ T5703] usb 1-1: config 0 descriptor?? [ 337.425018][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.426069][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.843146][ T5703] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 337.843180][ T5703] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 339.306491][ T5718] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 339.306779][ T5718] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 339.347215][ T5703] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 339.347474][ T5703] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 339.378936][ T5718] usb 4-1: USB disconnect, device number 28 [ 339.419216][ T5703] usb 1-1: USB disconnect, device number 28 [ 339.592585][ T5852] usb 5-1: USB disconnect, device number 25 [ 339.794204][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 339.843593][ T8026] FAULT_INJECTION: forcing a failure. [ 339.843593][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.843630][ T8026] CPU: 1 UID: 0 PID: 8026 Comm: syz.3.709 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.843658][ T8026] Tainted: [L]=SOFTLOCKUP [ 339.843665][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.843678][ T8026] Call Trace: [ 339.843685][ T8026] [ 339.843694][ T8026] dump_stack_lvl+0xe8/0x150 [ 339.843728][ T8026] should_fail_ex+0x46b/0x600 [ 339.843761][ T8026] _copy_from_user+0x2d/0xb0 [ 339.843791][ T8026] io_submit_one+0xd2/0x13d0 [ 339.843830][ T8026] ? lockdep_hardirqs_on+0x7b/0x110 [ 339.843854][ T8026] ? irqentry_exit+0x218/0x910 [ 339.843880][ T8026] ? __pfx_io_submit_one+0x10/0x10 [ 339.843913][ T8026] ? __might_fault+0xaf/0x130 [ 339.843947][ T8026] ? __might_fault+0xaf/0x130 [ 339.843973][ T8026] __se_sys_io_submit+0x195/0x340 [ 339.844008][ T8026] ? __pfx___se_sys_io_submit+0x10/0x10 [ 339.844034][ T8026] ? ksys_write+0x248/0x270 [ 339.844077][ T8026] do_syscall_64+0x166/0x520 [ 339.844099][ T8026] ? trace_irq_disable+0x3b/0x140 [ 339.844120][ T8026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.844141][ T8026] ? clear_bhb_loop+0x70/0xc0 [ 339.844165][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.844186][ T8026] RIP: 0033:0x7f0b21a5e0d9 [ 339.844205][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.844223][ T8026] RSP: 002b:00007f0b1fcb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 339.844243][ T8026] RAX: ffffffffffffffda RBX: 00007f0b21ce5fa0 RCX: 00007f0b21a5e0d9 [ 339.844265][ T8026] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 00007f0b22820000 [ 339.844279][ T8026] RBP: 00007f0b1fcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.844292][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.844304][ T8026] R13: 00007f0b21ce6038 R14: 00007f0b21ce5fa0 R15: 00007ffe0dbcaad8 [ 339.844335][ T8026] [ 340.252379][ T8035] FAULT_INJECTION: forcing a failure. [ 340.252379][ T8035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.252418][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.3.714 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.252448][ T8035] Tainted: [L]=SOFTLOCKUP [ 340.252456][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.252469][ T8035] Call Trace: [ 340.252476][ T8035] [ 340.252485][ T8035] dump_stack_lvl+0xe8/0x150 [ 340.252524][ T8035] should_fail_ex+0x46b/0x600 [ 340.252558][ T8035] _copy_from_user+0x2d/0xb0 [ 340.252602][ T8035] __sys_bpf+0x2e7/0xd90 [ 340.252633][ T8035] ? __pfx___sys_bpf+0x10/0x10 [ 340.252658][ T8035] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.252686][ T8035] ? rt_mutex_slowunlock+0x219/0x460 [ 340.252742][ T8035] ? ksys_write+0x248/0x270 [ 340.252773][ T8035] ? __pfx_ksys_write+0x10/0x10 [ 340.252821][ T8035] __x64_sys_bpf+0xba/0xd0 [ 340.252844][ T8035] do_syscall_64+0x166/0x520 [ 340.252867][ T8035] ? trace_irq_disable+0x3b/0x140 [ 340.252887][ T8035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.252907][ T8035] ? clear_bhb_loop+0x70/0xc0 [ 340.252932][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.252953][ T8035] RIP: 0033:0x7f0b21a5e0d9 [ 340.252971][ T8035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.252988][ T8035] RSP: 002b:00007f0b1fcb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.253010][ T8035] RAX: ffffffffffffffda RBX: 00007f0b21ce5fa0 RCX: 00007f0b21a5e0d9 [ 340.253024][ T8035] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000013 [ 340.253037][ T8035] RBP: 00007f0b1fcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.253050][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.253062][ T8035] R13: 00007f0b21ce6038 R14: 00007f0b21ce5fa0 R15: 00007ffe0dbcaad8 [ 340.253096][ T8035] [ 341.140751][ T5718] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 341.289397][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 341.291280][ T5718] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 341.294653][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.294715][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 341.294739][ T5718] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0 [ 341.294764][ T5718] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.294792][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 341.388090][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.388121][ T5718] usb 5-1: Product: syz [ 341.388137][ T5718] usb 5-1: Manufacturer: syz [ 341.388152][ T5718] usb 5-1: SerialNumber: syz [ 341.424822][ T5718] usb 5-1: config 0 descriptor?? [ 341.452020][ T5718] gs_usb 5-1:0.0: Required endpoints not found [ 341.510371][ T8052] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 341.618547][ T8055] netlink: 120 bytes leftover after parsing attributes in process `syz.3.719'. [ 341.650413][ T8052] FAULT_INJECTION: forcing a failure. [ 341.650413][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 341.650441][ T8052] CPU: 1 UID: 0 PID: 8052 Comm: syz.0.718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.650465][ T8052] Tainted: [L]=SOFTLOCKUP [ 341.650474][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.650484][ T8052] Call Trace: [ 341.650489][ T8052] [ 341.650496][ T8052] dump_stack_lvl+0xe8/0x150 [ 341.650561][ T8052] should_fail_ex+0x46b/0x600 [ 341.650596][ T8052] should_failslab+0xa8/0x100 [ 341.650625][ T8052] __kmalloc_noprof+0xfe/0x780 [ 341.650651][ T8052] ? rcu_is_watching+0x16/0xb0 [ 341.650672][ T8052] ? tomoyo_realpath_from_path+0xef/0x640 [ 341.650694][ T8052] ? tomoyo_realpath_from_path+0xef/0x640 [ 341.650722][ T8052] tomoyo_realpath_from_path+0xef/0x640 [ 341.650752][ T8052] ? tomoyo_path_number_perm+0x219/0x5f0 [ 341.650771][ T8052] tomoyo_path_number_perm+0x246/0x5f0 [ 341.650791][ T8052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 341.650809][ T8052] ? __lock_acquire+0x683/0x2ce0 [ 341.650837][ T8052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 341.650855][ T8052] ? hook_file_ioctl+0x1f3/0x600 [ 341.650896][ T8052] ? __fget_files+0x2a/0x420 [ 341.650918][ T8052] ? __fget_files+0x2a/0x420 [ 341.650936][ T8052] ? __fget_files+0x3a8/0x420 [ 341.650955][ T8052] ? __fget_files+0x2a/0x420 [ 341.650978][ T8052] security_file_ioctl+0xc3/0x2a0 [ 341.650999][ T8052] __se_sys_ioctl+0x47/0x170 [ 341.651026][ T8052] do_syscall_64+0x166/0x520 [ 341.651044][ T8052] ? trace_irq_disable+0x3b/0x140 [ 341.651059][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.651076][ T8052] ? clear_bhb_loop+0x70/0xc0 [ 341.651096][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.651112][ T8052] RIP: 0033:0x7f10abb8e0d9 [ 341.651132][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.651147][ T8052] RSP: 002b:00007f10a9dc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.651163][ T8052] RAX: ffffffffffffffda RBX: 00007f10abe16090 RCX: 00007f10abb8e0d9 [ 341.651175][ T8052] RDX: 0000200000000080 RSI: 000000000000ae71 RDI: 0000000000000004 [ 341.651186][ T8052] RBP: 00007f10a9dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 341.651196][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.651205][ T8052] R13: 00007f10abe16128 R14: 00007f10abe16090 R15: 00007ffd9da3ecd8 [ 341.651230][ T8052] [ 341.663182][ T8052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.208949][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.248244][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.285014][ T8058] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 342.392703][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.397741][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.834250][ T1233] usb 5-1: USB disconnect, device number 26 [ 343.962496][ T5595] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 343.979279][ T996] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 344.152124][ T996] usb 3-1: Using ep0 maxpacket: 16 [ 344.213359][ T996] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 344.244742][ T996] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 344.290285][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.290360][ T996] usb 3-1: Product: syz [ 344.290376][ T996] usb 3-1: Manufacturer: syz [ 344.290433][ T996] usb 3-1: SerialNumber: syz [ 344.660256][ T996] r8152-cfgselector 3-1: Unknown version 0x0000 [ 344.660285][ T996] r8152-cfgselector 3-1: config 0 descriptor?? [ 344.942352][ T996] r8152-cfgselector 3-1: Unknown version 0x0000 [ 345.043785][ T996] r8152-cfgselector 3-1: No union descriptors [ 345.390377][ T996] r8152-cfgselector 3-1: USB disconnect, device number 35 [ 346.247142][ T8078] FAULT_INJECTION: forcing a failure. [ 346.247142][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 346.247193][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.0.727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.247223][ T8078] Tainted: [L]=SOFTLOCKUP [ 346.247231][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.247243][ T8078] Call Trace: [ 346.247252][ T8078] [ 346.247261][ T8078] dump_stack_lvl+0xe8/0x150 [ 346.247296][ T8078] should_fail_ex+0x46b/0x600 [ 346.247330][ T8078] should_failslab+0xa8/0x100 [ 346.247359][ T8078] kmem_cache_alloc_node_noprof+0xae/0x670 [ 346.247402][ T8078] ? percpu_ref_put+0x1e/0x230 [ 346.247453][ T8078] ? zswap_store+0xc25/0x2050 [ 346.247484][ T8078] ? zswap_store+0xc25/0x2050 [ 346.247522][ T8078] zswap_store+0xc25/0x2050 [ 346.247558][ T8078] ? zswap_store+0x76b/0x2050 [ 346.247605][ T8078] ? __pfx_zswap_store+0x10/0x10 [ 346.247642][ T8078] ? rt_spin_unlock+0x159/0x200 [ 346.247681][ T8078] ? rt_spin_unlock+0x165/0x200 [ 346.247716][ T8078] swap_writeout+0x9d8/0x15b0 [ 346.247755][ T8078] ? rt_spin_unlock+0x165/0x200 [ 346.247789][ T8078] shmem_writeout+0x10ae/0x1370 [ 346.247812][ T8078] ? try_to_unmap+0x17d/0x230 [ 346.247854][ T8078] ? __pfx_shmem_writeout+0x10/0x10 [ 346.247887][ T8078] ? try_to_unmap_flush_dirty+0x96/0x100 [ 346.247917][ T8078] shrink_folio_list+0x33c8/0x50f0 [ 346.247980][ T8078] ? __pfx_shrink_folio_list+0x10/0x10 [ 346.248022][ T8078] ? do_raw_spin_lock+0x12b/0x2f0 [ 346.248083][ T8078] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 346.248145][ T8078] reclaim_folio_list+0x100/0x430 [ 346.248196][ T8078] ? __pfx_reclaim_folio_list+0x10/0x10 [ 346.248227][ T8078] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.248257][ T8078] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 346.248293][ T8078] reclaim_pages+0x452/0x530 [ 346.248319][ T8078] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 346.248360][ T8078] ? __pfx_reclaim_pages+0x10/0x10 [ 346.248390][ T8078] ? madvise_cold_or_pageout_pte_range+0x1715/0x1980 [ 346.248426][ T8078] madvise_cold_or_pageout_pte_range+0x173a/0x1980 [ 346.248477][ T8078] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 346.248512][ T8078] ? update_load_avg+0x1bd/0x1920 [ 346.248560][ T8078] walk_pgd_range+0xece/0x1c80 [ 346.248635][ T8078] ? __pfx_walk_pgd_range+0x10/0x10 [ 346.248680][ T8078] __walk_page_range+0x16d/0x730 [ 346.248736][ T8078] walk_page_range_vma_unsafe+0x309/0x410 [ 346.248780][ T8078] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 346.248814][ T8078] ? rt_spin_unlock+0x159/0x200 [ 346.248851][ T8078] ? rt_spin_unlock+0x165/0x200 [ 346.248887][ T8078] ? walk_page_range_vma+0x6b/0x90 [ 346.248925][ T8078] madvise_vma_behavior+0x28de/0x42b0 [ 346.248965][ T8078] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 346.248993][ T8078] ? clockevents_program_event+0x491/0x630 [ 346.249027][ T8078] ? __pfx_clockevents_program_event+0x10/0x10 [ 346.249071][ T8078] ? __lock_acquire+0x683/0x2ce0 [ 346.249101][ T8078] ? rcu_is_watching+0x16/0xb0 [ 346.249132][ T8078] ? __lock_acquire+0x683/0x2ce0 [ 346.249192][ T8078] ? do_raw_spin_lock+0x12b/0x2f0 [ 346.249224][ T8078] ? lock_acquire+0x106/0x350 [ 346.249259][ T8078] ? do_raw_spin_unlock+0xf5/0x200 [ 346.249316][ T8078] ? mas_prev_slot+0xb79/0xc00 [ 346.249359][ T8078] ? find_vma_prev+0x123/0x1b0 [ 346.249382][ T8078] ? trace_sched_exit_tp+0x3a/0x130 [ 346.249404][ T8078] ? __pfx_find_vma_prev+0x10/0x10 [ 346.249424][ T8078] ? __schedule+0x16f5/0x5510 [ 346.249456][ T8078] ? __lock_acquire+0x683/0x2ce0 [ 346.249487][ T8078] madvise_walk_vmas+0x576/0xb00 [ 346.249530][ T8078] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 346.249564][ T8078] ? blk_start_plug+0x6e/0x1b0 [ 346.249591][ T8078] madvise_do_behavior+0x385/0x540 [ 346.249626][ T8078] ? __pfx_madvise_do_behavior+0x10/0x10 [ 346.249652][ T8078] ? down_read+0x156/0x200 [ 346.249699][ T8078] do_madvise+0x26f/0x330 [ 346.249736][ T8078] ? __pfx_do_madvise+0x10/0x10 [ 346.249776][ T8078] ? rcu_is_watching+0x16/0xb0 [ 346.249811][ T8078] __x64_sys_madvise+0xa6/0xc0 [ 346.249843][ T8078] do_syscall_64+0x166/0x520 [ 346.249879][ T8078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.249901][ T8078] ? clear_bhb_loop+0x70/0xc0 [ 346.249927][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.249949][ T8078] RIP: 0033:0x7f10abb8e0d9 [ 346.249968][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.249986][ T8078] RSP: 002b:00007f10a9de6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 346.250008][ T8078] RAX: ffffffffffffffda RBX: 00007f10abe15fa0 RCX: 00007f10abb8e0d9 [ 346.250024][ T8078] RDX: 0000000000000015 RSI: 0000000000c00304 RDI: 0000200000000000 [ 346.250037][ T8078] RBP: 00007f10a9de6090 R08: 0000000000000000 R09: 0000000000000000 [ 346.250050][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.250062][ T8078] R13: 00007f10abe16038 R14: 00007f10abe15fa0 R15: 00007ffd9da3ecd8 [ 346.250094][ T8078] [ 348.110976][ T5595] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 348.111254][ T5595] Bluetooth: hci2: Injecting HCI hardware error event [ 348.114170][ T5599] Bluetooth: hci2: hardware error 0x00 [ 348.223647][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'. [ 348.483186][ T996] usb 2-1: USB disconnect, device number 37 [ 348.669373][ T5718] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 348.703682][ T5907] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 348.804452][ T5595] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 348.819312][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 348.820238][ T5718] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 348.822482][ T5718] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 348.822509][ T5718] usb 4-1: config 0 has no interface number 0 [ 348.822553][ T5718] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.822578][ T5718] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 348.822605][ T5718] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.822634][ T5718] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.822677][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.849146][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 348.870999][ T5907] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 348.924017][ T5907] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 348.924091][ T5907] usb 5-1: config 0 has no interface number 0 [ 348.953441][ T5718] usb 4-1: config 0 descriptor?? [ 348.956717][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.956741][ T5907] usb 5-1: Product: syz [ 348.956755][ T5907] usb 5-1: Manufacturer: syz [ 348.956770][ T5907] usb 5-1: SerialNumber: syz [ 349.009387][ T5907] usb 5-1: config 0 descriptor?? [ 349.110880][ T5718] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 349.479000][ T5907] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 349.479031][ T5907] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 350.558174][ T5599] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 350.749292][ T1233] usb 4-1: USB disconnect, device number 29 [ 350.858653][ T1233] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 350.957210][ T8122] FAULT_INJECTION: forcing a failure. [ 350.957210][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 350.957251][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.3.740 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.957295][ T8122] Tainted: [L]=SOFTLOCKUP [ 350.957302][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.957315][ T8122] Call Trace: [ 350.957379][ T8122] [ 350.957424][ T8122] dump_stack_lvl+0xe8/0x150 [ 350.957657][ T8122] should_fail_ex+0x46b/0x600 [ 350.957819][ T8122] should_failslab+0xa8/0x100 [ 350.957893][ T8122] kmem_cache_alloc_noprof+0xa4/0x660 [ 350.957934][ T8122] ? do_getname+0x2e/0x250 [ 350.958029][ T8122] ? do_getname+0x2e/0x250 [ 350.958046][ T8122] ? rt_mutex_slowunlock+0x219/0x460 [ 350.958157][ T8122] do_getname+0x2e/0x250 [ 350.958178][ T8122] ? getname_flags+0x11/0x20 [ 350.958202][ T8122] do_sys_openat2+0xcc/0x200 [ 350.958249][ T8122] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.958273][ T8122] ? ksys_write+0x248/0x270 [ 350.958303][ T8122] ? __pfx_ksys_write+0x10/0x10 [ 350.958336][ T8122] __x64_sys_creat+0x8f/0xc0 [ 350.958362][ T8122] do_syscall_64+0x166/0x520 [ 350.958407][ T8122] ? trace_irq_disable+0x3b/0x140 [ 350.958461][ T8122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.958497][ T8122] ? clear_bhb_loop+0x70/0xc0 [ 350.958522][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.958539][ T8122] RIP: 0033:0x7f0b21a5e0d9 [ 350.958560][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.958575][ T8122] RSP: 002b:00007f0b1fcb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 350.958598][ T8122] RAX: ffffffffffffffda RBX: 00007f0b21ce5fa0 RCX: 00007f0b21a5e0d9 [ 350.958610][ T8122] RDX: 0000000000000000 RSI: 0000000000000120 RDI: 00002000000001c0 [ 350.958620][ T8122] RBP: 00007f0b1fcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.958633][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.958645][ T8122] R13: 00007f0b21ce6038 R14: 00007f0b21ce5fa0 R15: 00007ffe0dbcaad8 [ 350.958677][ T8122] [ 351.057170][ T5907] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 351.057842][ T5907] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 351.235799][ T5907] usb 5-1: USB disconnect, device number 27 [ 351.465676][ T8131] FAULT_INJECTION: forcing a failure. [ 351.465676][ T8131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.465782][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.3.743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.465813][ T8131] Tainted: [L]=SOFTLOCKUP [ 351.465820][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.465832][ T8131] Call Trace: [ 351.465840][ T8131] [ 351.465848][ T8131] dump_stack_lvl+0xe8/0x150 [ 351.465885][ T8131] should_fail_ex+0x46b/0x600 [ 351.465917][ T8131] copy_fpstate_to_sigframe+0xac0/0xd80 [ 351.466086][ T8131] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 351.466122][ T8131] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.466214][ T8131] ? try_to_wake_up+0x63/0x1430 [ 351.466285][ T8131] ? fpu__alloc_mathframe+0xac/0x130 [ 351.466315][ T8131] get_sigframe+0x603/0x830 [ 351.466396][ T8131] ? __pfx_get_sigframe+0x10/0x10 [ 351.466425][ T8131] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 351.466456][ T8131] ? rt_spin_lock+0x1e2/0x400 [ 351.466491][ T8131] x64_setup_rt_frame+0x164/0xc50 [ 351.466518][ T8131] ? rt_spin_unlock+0x159/0x200 [ 351.466552][ T8131] ? rt_spin_unlock+0x165/0x200 [ 351.466584][ T8131] ? get_signal+0x10de/0x12c0 [ 351.466648][ T8131] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 351.466686][ T8131] arch_do_signal_or_restart+0x45b/0x860 [ 351.466718][ T8131] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 351.466754][ T8131] ? ksys_write+0x248/0x270 [ 351.466791][ T8131] exit_to_user_mode_loop+0x10e/0x770 [ 351.466847][ T8131] ? rcu_is_watching+0x16/0xb0 [ 351.466932][ T8131] do_syscall_64+0x328/0x520 [ 351.466958][ T8131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.466982][ T8131] ? clear_bhb_loop+0x70/0xc0 [ 351.467009][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.467031][ T8131] RIP: 0033:0x7f0b21a1e90e [ 351.467052][ T8131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.467072][ T8131] RSP: 002b:00007f0b1fc94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.467095][ T8131] RAX: 0000000000000001 RBX: 00007f0b1fc956c0 RCX: 00007f0b21a1e90e [ 351.467110][ T8131] RDX: 0000000000000001 RSI: 00007f0b1fc95090 RDI: 0000000000000005 [ 351.467124][ T8131] RBP: 00007f0b1fc95090 R08: 0000000000000000 R09: 0000000000000000 [ 351.467137][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.467151][ T8131] R13: 00007f0b21ce6128 R14: 00007f0b21ce6090 R15: 00007ffe0dbcaad8 [ 351.467185][ T8131] [ 351.468503][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 351.908615][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 352.053227][ T5599] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 352.835475][ T5599] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 352.862559][ T5599] Bluetooth: hci3: Injecting HCI hardware error event [ 352.920521][ T5599] Bluetooth: hci3: hardware error 0x00 [ 355.352976][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 355.399257][ T996] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 355.529277][ T996] usb 4-1: device descriptor read/64, error -71 [ 355.622131][ T5595] Bluetooth: hci4: unexpected event for opcode 0x001c [ 355.736993][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 355.769169][ T996] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 356.039813][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 356.128067][ T996] usb 4-1: device descriptor read/64, error -71 [ 356.315174][ T996] usb usb4-port1: attempt power cycle [ 357.009261][ T996] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 357.032893][ T996] usb 4-1: device descriptor read/8, error -71 [ 357.206431][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 357.269201][ T996] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 357.291232][ T996] usb 4-1: device descriptor read/8, error -71 [ 357.309269][ T5599] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 357.401023][ T996] usb usb4-port1: unable to enumerate USB device [ 360.521847][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 360.723186][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 361.450909][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 361.884379][ T6440] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 363.240636][ T6440] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 363.244102][ T6440] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 363.244175][ T6440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.246608][ T6440] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 363.246634][ T6440] usb 3-1: Manufacturer: syz [ 363.275648][ T6440] usb 3-1: config 0 descriptor?? [ 363.398690][ T5599] Bluetooth: hci1: unexpected event for opcode 0x001c [ 363.449448][ T6440] rc_core: IR keymap rc-hauppauge not found [ 363.449469][ T6440] Registered IR keymap rc-empty [ 363.462969][ T6440] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 363.488119][ T6440] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 363.623606][ T6440] usb 3-1: USB disconnect, device number 36 [ 363.752530][ T8285] binder: 8283:8285 ioctl 4018620d 0 returned -22 [ 366.156307][ T5907] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 366.335109][ T5907] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 366.336804][ T5907] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 366.336856][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.370017][ T5907] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 366.370043][ T5907] usb 4-1: Manufacturer: syz [ 366.554060][ T5907] usb 4-1: config 0 descriptor?? [ 366.559349][ T5718] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 366.730071][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 366.746949][ T5718] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.808918][ T5718] usb 2-1: config 1 interface 0 altsetting 40 bulk endpoint 0x82 has invalid maxpacket 32 [ 366.808965][ T5718] usb 2-1: config 1 interface 0 altsetting 40 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.809028][ T5718] usb 2-1: config 1 interface 0 has no altsetting 0 [ 366.995578][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.995608][ T5718] usb 2-1: Product: syz [ 366.995623][ T5718] usb 2-1: Manufacturer: syz [ 366.995672][ T5718] usb 2-1: SerialNumber: syz [ 367.392353][ T8328] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 367.507633][ T8328] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 369.310312][ T5907] rc_core: IR keymap rc-hauppauge not found [ 369.310335][ T5907] Registered IR keymap rc-empty [ 369.385771][ T5907] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 369.402609][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 369.406599][ T5907] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 369.407574][ T5718] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 369.474798][ T5718] usb 2-1: USB disconnect, device number 38 [ 369.534855][ T5907] usb 4-1: USB disconnect, device number 34 [ 369.549249][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 369.550172][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 369.552324][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 369.552347][ T10] usb 3-1: config 0 has no interface number 0 [ 369.557002][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.557023][ T10] usb 3-1: Product: syz [ 369.557037][ T10] usb 3-1: Manufacturer: syz [ 369.557051][ T10] usb 3-1: SerialNumber: syz [ 369.623769][ T10] usb 3-1: config 0 descriptor?? [ 369.698958][ T8348] bond0: entered allmulticast mode [ 369.734687][ T8348] bridge0: port 1(bond0) entered blocking state [ 369.734941][ T8348] bridge0: port 1(bond0) entered disabled state [ 369.834088][ T10] usb 3-1: can't set config #0, error -71 [ 369.972235][ T5599] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 370.010315][ T10] usb 3-1: USB disconnect, device number 37 [ 370.033508][ T8348] bond0: entered promiscuous mode [ 370.052149][ T8347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.218024][ T8375] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5590] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8375] [ 371.252672][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 372.639498][ T1233] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 372.729275][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 372.792441][ T1233] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 372.795245][ T1233] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 372.795301][ T1233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.797160][ T1233] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 372.797196][ T1233] usb 5-1: Manufacturer: syz [ 372.842042][ T1233] usb 5-1: config 0 descriptor?? [ 372.900683][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 372.903641][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 372.908259][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 372.908283][ T10] usb 1-1: config 0 has no interface number 0 [ 372.938936][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.938961][ T10] usb 1-1: Product: syz [ 372.938975][ T10] usb 1-1: Manufacturer: syz [ 372.938989][ T10] usb 1-1: SerialNumber: syz [ 372.994558][ T10] usb 1-1: config 0 descriptor?? [ 373.023122][ T1233] rc_core: IR keymap rc-hauppauge not found [ 373.023136][ T1233] Registered IR keymap rc-empty [ 373.045038][ T1233] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 373.047863][ T1233] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 374.067708][ T5703] usb 5-1: USB disconnect, device number 28 [ 374.261910][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 374.261941][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 374.344630][ T8405] ptrace attach of ""[8406] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8405] [ 374.477830][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 374.478099][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 374.521376][ T10] usb 1-1: USB disconnect, device number 29 [ 374.659175][ T996] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 374.764091][ T8419] binder: BC_ACQUIRE_RESULT not supported [ 374.764106][ T8419] binder: 8415:8419 ioctl c0306201 200000004a40 returned -22 [ 374.809185][ T996] usb 3-1: Using ep0 maxpacket: 32 [ 374.809985][ T996] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 374.813096][ T996] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 374.813120][ T996] usb 3-1: config 0 has no interface number 0 [ 374.834561][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.834585][ T996] usb 3-1: Product: syz [ 374.834599][ T996] usb 3-1: Manufacturer: syz [ 374.834614][ T996] usb 3-1: SerialNumber: syz [ 374.889374][ T996] usb 3-1: config 0 descriptor?? [ 375.513177][ T996] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 375.513211][ T996] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 375.653850][ T8431] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5593] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8431] [ 376.530993][ T996] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 376.531301][ T996] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 376.545284][ T5599] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 377.705498][ T996] usb 3-1: USB disconnect, device number 38 [ 377.799186][ T5703] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 377.952816][ T5703] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 377.977344][ T5703] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 377.977406][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.986123][ T5703] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 377.986196][ T5703] usb 4-1: Manufacturer: syz [ 378.039851][ T5703] usb 4-1: config 0 descriptor?? [ 378.191658][ T5599] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 378.279502][ T5703] rc_core: IR keymap rc-hauppauge not found [ 378.279523][ T5703] Registered IR keymap rc-empty [ 378.302143][ T5703] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 378.326142][ T5703] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 378.503947][ T5703] usb 4-1: USB disconnect, device number 35 [ 378.514308][ T8463] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8463] [ 379.011392][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.011470][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.863857][ T8531] batadv_slave_1: entered promiscuous mode [ 382.881822][ T8533] FAULT_INJECTION: forcing a failure. [ 382.881822][ T8533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.881860][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.4.879 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.881888][ T8533] Tainted: [L]=SOFTLOCKUP [ 382.881896][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.881908][ T8533] Call Trace: [ 382.881915][ T8533] [ 382.881925][ T8533] dump_stack_lvl+0xe8/0x150 [ 382.881962][ T8533] should_fail_ex+0x46b/0x600 [ 382.881997][ T8533] _copy_from_user+0x2d/0xb0 [ 382.882135][ T8533] __sys_bpf+0x2e7/0xd90 [ 382.882202][ T8533] ? __pfx___sys_bpf+0x10/0x10 [ 382.882229][ T8533] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.882259][ T8533] ? rt_mutex_slowunlock+0x219/0x460 [ 382.882308][ T8533] ? ksys_write+0x248/0x270 [ 382.882339][ T8533] ? __pfx_ksys_write+0x10/0x10 [ 382.882372][ T8533] __x64_sys_bpf+0xba/0xd0 [ 382.882396][ T8533] do_syscall_64+0x166/0x520 [ 382.882419][ T8533] ? trace_irq_disable+0x3b/0x140 [ 382.882439][ T8533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.882461][ T8533] ? clear_bhb_loop+0x70/0xc0 [ 382.882487][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.882508][ T8533] RIP: 0033:0x7fe4811ae0d9 [ 382.882528][ T8533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.882545][ T8533] RSP: 002b:00007fe47f406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.882567][ T8533] RAX: ffffffffffffffda RBX: 00007fe481435fa0 RCX: 00007fe4811ae0d9 [ 382.882583][ T8533] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 382.882595][ T8533] RBP: 00007fe47f406090 R08: 0000000000000000 R09: 0000000000000000 [ 382.882608][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.882621][ T8533] R13: 00007fe481436038 R14: 00007fe481435fa0 R15: 00007ffc19f301f8 [ 382.882661][ T8533] [ 384.132879][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880617a3400: rx timeout, send abort [ 384.141284][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880617a3400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 384.296061][ T8526] batadv_slave_1: left promiscuous mode [ 385.841730][ T8552] bridge_slave_0: left allmulticast mode [ 385.841775][ T8552] bridge_slave_0: left promiscuous mode [ 385.841993][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.171142][ T6440] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 386.346499][ T8570] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5593] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8570] [ 387.091979][ T6440] usb 2-1: not running at top speed; connect to a high speed hub [ 387.092020][ T6440] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 387.093603][ T6440] usb 2-1: config 0 has no interfaces? [ 387.101694][ T6440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.101758][ T6440] usb 2-1: Product: syz [ 387.101797][ T6440] usb 2-1: Manufacturer: syz [ 387.101830][ T6440] usb 2-1: SerialNumber: syz [ 387.155951][ T8552] bridge_slave_1: left allmulticast mode [ 387.155983][ T8552] bridge_slave_1: left promiscuous mode [ 387.156244][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.194540][ T6440] usb 2-1: config 0 descriptor?? [ 387.445184][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.445766][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.511607][ T8579] FAULT_INJECTION: forcing a failure. [ 387.511607][ T8579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.511660][ T8579] CPU: 0 UID: 0 PID: 8579 Comm: syz.0.890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.511691][ T8579] Tainted: [L]=SOFTLOCKUP [ 387.511700][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.511725][ T8579] Call Trace: [ 387.511733][ T8579] [ 387.511742][ T8579] dump_stack_lvl+0xe8/0x150 [ 387.511797][ T8579] should_fail_ex+0x46b/0x600 [ 387.511830][ T8579] _copy_from_user+0x2d/0xb0 [ 387.511860][ T8579] ___sys_recvmsg+0x173/0x5a0 [ 387.512060][ T8579] ? __pfx____sys_recvmsg+0x10/0x10 [ 387.512092][ T8579] ? __fget_files+0x2a/0x420 [ 387.512166][ T8579] ? __fget_files+0x3a8/0x420 [ 387.512204][ T8579] do_recvmmsg+0x320/0x7f0 [ 387.512238][ T8579] ? __pfx_do_recvmmsg+0x10/0x10 [ 387.512264][ T8579] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 387.512301][ T8579] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 387.512347][ T8579] __x64_sys_recvmmsg+0x198/0x250 [ 387.512378][ T8579] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 387.512420][ T8579] do_syscall_64+0x166/0x520 [ 387.512445][ T8579] ? trace_irq_disable+0x3b/0x140 [ 387.512466][ T8579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.512488][ T8579] ? clear_bhb_loop+0x70/0xc0 [ 387.512515][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.512537][ T8579] RIP: 0033:0x7f10abb8e0d9 [ 387.512558][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.512576][ T8579] RSP: 002b:00007f10a9de6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 387.512598][ T8579] RAX: ffffffffffffffda RBX: 00007f10abe15fa0 RCX: 00007f10abb8e0d9 [ 387.512614][ T8579] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 387.512628][ T8579] RBP: 00007f10a9de6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.512641][ T8579] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 387.512654][ T8579] R13: 00007f10abe16038 R14: 00007f10abe15fa0 R15: 00007ffd9da3ecd8 [ 387.512687][ T8579] [ 387.865195][ T8552] bond0: (slave bond_slave_0): Releasing backup interface [ 387.993229][ T8552] bond0: (slave bond_slave_1): Releasing backup interface [ 388.212487][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.894'. [ 389.295305][ T8552] team0: Port device team_slave_0 removed [ 389.336315][ T8552] team0: Port device team_slave_1 removed [ 389.338522][ T8552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.338547][ T8552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.375180][ T8552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.556641][ T996] usb 2-1: USB disconnect, device number 39 [ 389.591923][ T8595] bond0: left promiscuous mode [ 389.606389][ T8595] bridge0: port 1(bond0) entered disabled state [ 389.798718][ T8595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.881312][ T5718] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 390.041233][ T5718] usb 4-1: not running at top speed; connect to a high speed hub [ 390.041277][ T5718] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 390.042654][ T5718] usb 4-1: config 0 has no interfaces? [ 390.048260][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.048285][ T5718] usb 4-1: Product: syz [ 390.048299][ T5718] usb 4-1: Manufacturer: syz [ 390.048313][ T5718] usb 4-1: SerialNumber: syz [ 390.054996][ T5718] usb 4-1: config 0 descriptor?? [ 390.178294][ T996] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 390.285075][ T8614] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5590] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8614] [ 391.227206][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.227630][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.515514][ T8618] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5592] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8618] [ 391.659191][ T996] usb 5-1: Using ep0 maxpacket: 32 [ 391.660829][ T996] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 391.668459][ T996] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 391.668488][ T996] usb 5-1: config 0 has no interface number 0 [ 391.680153][ T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.680179][ T996] usb 5-1: Product: syz [ 391.680194][ T996] usb 5-1: Manufacturer: syz [ 391.680209][ T996] usb 5-1: SerialNumber: syz [ 391.868761][ T996] usb 5-1: config 0 descriptor?? [ 392.380694][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 392.990931][ T996] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 392.990963][ T996] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 393.198822][ T996] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 393.202371][ T996] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 393.279439][ T5907] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 393.322159][ T996] usb 4-1: USB disconnect, device number 36 [ 393.426410][ T8637] FAULT_INJECTION: forcing a failure. [ 393.426410][ T8637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.426435][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.1.915 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.426456][ T8637] Tainted: [L]=SOFTLOCKUP [ 393.426478][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.426488][ T8637] Call Trace: [ 393.426494][ T8637] [ 393.426500][ T8637] dump_stack_lvl+0xe8/0x150 [ 393.426528][ T8637] should_fail_ex+0x46b/0x600 [ 393.426553][ T8637] _copy_from_user+0x2d/0xb0 [ 393.426576][ T8637] do_tcp_setsockopt+0x504/0x1f80 [ 393.426691][ T8637] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 393.426720][ T8637] ? __fget_files+0x2a/0x420 [ 393.426742][ T8637] ? sock_common_setsockopt+0x36/0xc0 [ 393.426789][ T8637] ? tcp_setsockopt+0x3d/0xe0 [ 393.426810][ T8637] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 393.426835][ T8637] do_sock_setsockopt+0x17c/0x1b0 [ 393.426856][ T8637] __x64_sys_setsockopt+0x143/0x1b0 [ 393.426877][ T8637] do_syscall_64+0x166/0x520 [ 393.426894][ T8637] ? trace_irq_disable+0x3b/0x140 [ 393.426909][ T8637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.426925][ T8637] ? clear_bhb_loop+0x70/0xc0 [ 393.426944][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.426960][ T8637] RIP: 0033:0x7f72fed5e0d9 [ 393.426974][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.426988][ T8637] RSP: 002b:00007f72fcfb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.427004][ T8637] RAX: ffffffffffffffda RBX: 00007f72fefe5fa0 RCX: 00007f72fed5e0d9 [ 393.427016][ T8637] RDX: 0000000000000016 RSI: 0000000000000006 RDI: 0000000000000003 [ 393.427025][ T8637] RBP: 00007f72fcfb6090 R08: 0000000020000328 R09: 0000000000000000 [ 393.427035][ T8637] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.427045][ T8637] R13: 00007f72fefe6038 R14: 00007f72fefe5fa0 R15: 00007ffecc0a6308 [ 393.427068][ T8637] [ 393.455148][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 393.457692][ T5907] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 393.601202][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 393.601271][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 393.601338][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 393.601429][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 393.601504][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 393.676862][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.676887][ T5907] usb 1-1: Product: syz [ 393.676901][ T5907] usb 1-1: Manufacturer: syz [ 393.676914][ T5907] usb 1-1: SerialNumber: syz [ 393.726144][ T5907] usb 1-1: config 0 descriptor?? [ 394.254572][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 394.254707][ T5907] input input20: Device does not respond to id packet M [ 394.295436][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 394.295485][ T5907] input input20: Device does not respond to id packet P [ 394.297604][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 394.297651][ T5907] input input20: Device does not respond to id packet B [ 394.298353][ T5907] input input20: Limiting number of effects to 32 (device reports 85) [ 394.365085][ T8651] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5592] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8651] [ 394.682460][ T8628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.912'. [ 394.682570][ T8628] netlink: 43 bytes leftover after parsing attributes in process `syz.0.912'. [ 394.746401][ T8628] netlink: 'syz.0.912': attribute type 6 has an invalid length. [ 394.746580][ T8628] netlink: 'syz.0.912': attribute type 5 has an invalid length. [ 394.746626][ T8628] netlink: 43 bytes leftover after parsing attributes in process `syz.0.912'. [ 395.317106][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 395.318490][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 395.318931][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 395.322370][ T5907] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 395.353251][ T5907] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 395.490019][ T10] usb 5-1: USB disconnect, device number 29 [ 395.553352][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:0) [ 395.586977][ T5907] usb 1-1: USB disconnect, device number 30 [ 397.843980][ T8672] FAULT_INJECTION: forcing a failure. [ 397.843980][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 397.844021][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.3.928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.844051][ T8672] Tainted: [L]=SOFTLOCKUP [ 397.844059][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.844071][ T8672] Call Trace: [ 397.844080][ T8672] [ 397.844089][ T8672] dump_stack_lvl+0xe8/0x150 [ 397.844127][ T8672] should_fail_ex+0x46b/0x600 [ 397.844164][ T8672] should_failslab+0xa8/0x100 [ 397.844194][ T8672] kmem_cache_alloc_noprof+0xa4/0x660 [ 397.844218][ T8672] ? taskstats_exit+0x19e/0xe10 [ 397.844385][ T8672] ? taskstats_exit+0x19e/0xe10 [ 397.844422][ T8672] taskstats_exit+0x19e/0xe10 [ 397.844453][ T8672] ? acct_update_integrals+0x342/0x410 [ 397.844489][ T8672] ? acct_update_integrals+0x38a/0x410 [ 397.844525][ T8672] ? __pfx_taskstats_exit+0x10/0x10 [ 397.844565][ T8672] ? seccomp_filter_release+0x18a/0x2d0 [ 397.844593][ T8672] do_exit+0x6ad/0x2360 [ 397.844682][ T8672] ? __pfx_do_exit+0x10/0x10 [ 397.844713][ T8672] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 397.844743][ T8672] ? rt_spin_lock+0x1e2/0x400 [ 397.844780][ T8672] ? rt_spin_unlock+0x159/0x200 [ 397.844813][ T8672] do_group_exit+0x22d/0x2f0 [ 397.844844][ T8672] ? rt_spin_unlock+0x165/0x200 [ 397.844876][ T8672] get_signal+0x121b/0x12c0 [ 397.844919][ T8672] arch_do_signal_or_restart+0xbb/0x860 [ 397.844951][ T8672] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.844986][ T8672] ? ksys_write+0x248/0x270 [ 397.845023][ T8672] exit_to_user_mode_loop+0x10e/0x770 [ 397.845045][ T8672] ? rcu_is_watching+0x16/0xb0 [ 397.845074][ T8672] do_syscall_64+0x328/0x520 [ 397.845097][ T8672] ? trace_irq_disable+0x3b/0x140 [ 397.845116][ T8672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.845138][ T8672] ? clear_bhb_loop+0x70/0xc0 [ 397.845163][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.845184][ T8672] RIP: 0033:0x7f0b21a5e0d9 [ 397.845202][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.845221][ T8672] RSP: 002b:00007f0b1fcb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 397.845250][ T8672] RAX: 0000000007fffffe RBX: 00007f0b21ce5fa0 RCX: 00007f0b21a5e0d9 [ 397.845264][ T8672] RDX: 0000000000000005 RSI: 0000000007fffffe RDI: 0000000000000003 [ 397.845277][ T8672] RBP: 00007f0b1fcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.845289][ T8672] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 397.845301][ T8672] R13: 00007f0b21ce6038 R14: 00007f0b21ce5fa0 R15: 00007ffe0dbcaad8 [ 397.845333][ T8672] [ 398.664910][ T8698] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8698] [ 400.413556][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 400.569192][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 400.571218][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 400.575153][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.575203][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 400.575231][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.575257][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.658022][ T10] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 400.658052][ T10] usb 4-1: Product: syz [ 400.658068][ T10] usb 4-1: Manufacturer: syz [ 400.658083][ T10] usb 4-1: SerialNumber: syz [ 400.690293][ T10] usb 4-1: config 0 descriptor?? [ 400.792454][ T10] rc_core: IR keymap rc-imon-rsc not found [ 400.792478][ T10] Registered IR keymap rc-empty [ 400.795135][ T10] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 400.830218][ T10] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 400.849103][ T10] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 400.941362][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 400.960579][ T10] usb 4-1: USB disconnect, device number 37 [ 402.159131][ T8745] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5593] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8745] [ 402.934961][ T8743] netlink: 'syz.1.953': attribute type 7 has an invalid length. [ 402.934986][ T8743] netlink: 'syz.1.953': attribute type 8 has an invalid length. [ 418.263469][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.326570][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.337229][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.355358][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.368453][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.768772][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.811814][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.842562][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 418.848252][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 418.857335][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 419.325276][ T5603] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 419.384270][ T5603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 419.422318][ T5606] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 419.427410][ T5603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 419.447379][ T5603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 419.448052][ T5603] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 419.474050][ T5603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 419.486359][ T5603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 419.503121][ T5595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 419.503931][ T5595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.509289][ T5599] Bluetooth: hci5: command tx timeout [ 421.000775][ T5599] Bluetooth: hci6: command tx timeout [ 421.629226][ T5599] Bluetooth: hci8: command tx timeout [ 421.802620][ T5599] Bluetooth: hci7: command tx timeout [ 422.589245][ T5599] Bluetooth: hci5: command tx timeout [ 423.069892][ T5599] Bluetooth: hci6: command tx timeout [ 423.711002][ T5599] Bluetooth: hci8: command tx timeout [ 423.869197][ T5599] Bluetooth: hci7: command tx timeout [ 423.872216][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.872622][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.872785][ T8768] bridge_slave_0: entered allmulticast mode [ 423.878767][ T8768] bridge_slave_0: entered promiscuous mode [ 423.952193][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.952549][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.953091][ T8768] bridge_slave_1: entered allmulticast mode [ 423.955720][ T8768] bridge_slave_1: entered promiscuous mode [ 424.199855][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.200013][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.200211][ T8763] bridge_slave_0: entered allmulticast mode [ 424.235322][ T8763] bridge_slave_0: entered promiscuous mode [ 424.288265][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.321278][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.321498][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.321701][ T8763] bridge_slave_1: entered allmulticast mode [ 424.324782][ T8763] bridge_slave_1: entered promiscuous mode [ 424.326344][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.326458][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.326630][ T8772] bridge_slave_0: entered allmulticast mode [ 424.388630][ T8772] bridge_slave_0: entered promiscuous mode [ 424.402382][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.443803][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.444043][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.444563][ T8772] bridge_slave_1: entered allmulticast mode [ 424.464995][ T8772] bridge_slave_1: entered promiscuous mode [ 424.650706][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.679382][ T5599] Bluetooth: hci5: command tx timeout [ 424.686914][ T8768] team0: Port device team_slave_0 added [ 424.688403][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.688548][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.688718][ T8773] bridge_slave_0: entered allmulticast mode [ 424.736620][ T8773] bridge_slave_0: entered promiscuous mode [ 424.751104][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.762967][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.785547][ T8768] team0: Port device team_slave_1 added [ 424.785876][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.786004][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.786164][ T8773] bridge_slave_1: entered allmulticast mode [ 424.788982][ T8773] bridge_slave_1: entered promiscuous mode [ 424.871213][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.149275][ T5599] Bluetooth: hci6: command tx timeout [ 425.487476][ T5595] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 425.530409][ T5595] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.534162][ T5595] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.574292][ T5595] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.575063][ T5595] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.801803][ T5599] Bluetooth: hci8: command tx timeout [ 425.959152][ T5599] Bluetooth: hci7: command tx timeout [ 426.749397][ T5599] Bluetooth: hci5: command tx timeout [ 427.229272][ T5599] Bluetooth: hci6: command tx timeout [ 427.709206][ T5599] Bluetooth: hci9: command tx timeout [ 427.879461][ T5599] Bluetooth: hci8: command tx timeout [ 428.039240][ T5599] Bluetooth: hci7: command tx timeout [ 429.789322][ T5599] Bluetooth: hci9: command tx timeout [ 431.869469][ T5599] Bluetooth: hci9: command tx timeout [ 433.959305][ T5599] Bluetooth: hci9: command tx timeout [ 478.267644][ T5595] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 478.315177][ T5595] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 478.344640][ T5595] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 478.346915][ T5595] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 478.371758][ T5595] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 478.494509][ T5595] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 478.551903][ T5595] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 478.571306][ T5595] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 478.574027][ T5595] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 478.600051][ T5595] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 479.414178][ T5595] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 479.453241][ T5595] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 479.463248][ T5595] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 479.498814][ T5595] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 479.507221][ T5595] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 479.715885][ T5595] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 479.765353][ T5595] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 479.766709][ T5595] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 479.819368][ T5595] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 479.846772][ T5595] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 480.429348][ T5599] Bluetooth: hci10: command tx timeout [ 480.749185][ T5599] Bluetooth: hci11: command tx timeout [ 481.719487][ T5599] Bluetooth: hci12: command tx timeout [ 482.029453][ T5599] Bluetooth: hci13: command tx timeout [ 482.509243][ T5599] Bluetooth: hci10: command tx timeout [ 482.829317][ T5599] Bluetooth: hci11: command tx timeout [ 483.789286][ T5599] Bluetooth: hci12: command tx timeout [ 484.119431][ T5599] Bluetooth: hci13: command tx timeout [ 484.589478][ T5599] Bluetooth: hci10: command tx timeout [ 484.909449][ T5599] Bluetooth: hci11: command tx timeout [ 485.871126][ T5599] Bluetooth: hci12: command tx timeout [ 486.011323][ T5595] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 486.055979][ T5595] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 486.075742][ T5595] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 486.095522][ T5595] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 486.098531][ T5595] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 486.199759][ T5595] Bluetooth: hci13: command tx timeout [ 486.669262][ T5595] Bluetooth: hci10: command tx timeout [ 486.999339][ T5595] Bluetooth: hci11: command tx timeout [ 487.949252][ T5595] Bluetooth: hci12: command tx timeout [ 488.199453][ T5595] Bluetooth: hci14: command tx timeout [ 488.269310][ T5595] Bluetooth: hci13: command tx timeout [ 490.270915][ T5595] Bluetooth: hci14: command tx timeout [ 492.349131][ T5595] Bluetooth: hci14: command tx timeout [ 494.429280][ T5595] Bluetooth: hci14: command tx timeout [ 537.587609][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.587686][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.252888][ T5599] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 538.297642][ T5599] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 538.353679][ T5599] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 538.354978][ T5599] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 538.386947][ T5599] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 539.406855][ T5603] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 539.466316][ T5603] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 539.477766][ T5603] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 539.504004][ T5603] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 539.546387][ T5603] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 539.549614][ T5603] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 539.571224][ T5603] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 539.571688][ T5603] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 539.600880][ T5595] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 539.602711][ T5595] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 540.326039][ T5595] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 540.367035][ T5595] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 540.380888][ T5595] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 540.386154][ T5595] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 540.387367][ T5595] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 540.510645][ T5599] Bluetooth: hci15: command tx timeout [ 541.629320][ T5599] Bluetooth: hci16: command tx timeout [ 541.799204][ T5599] Bluetooth: hci17: command tx timeout [ 542.509278][ T5599] Bluetooth: hci18: command tx timeout [ 542.594880][ T8893] Bluetooth: hci15: command tx timeout [ 543.709140][ T5603] Bluetooth: hci16: command tx timeout [ 543.869382][ T5603] Bluetooth: hci17: command tx timeout [ 544.589165][ T5603] Bluetooth: hci18: command tx timeout [ 544.679565][ T5603] Bluetooth: hci8: command 0x0406 tx timeout [ 544.679744][ T5603] Bluetooth: hci6: command 0x0406 tx timeout [ 544.679769][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 544.679905][ T5603] Bluetooth: hci7: command 0x0406 tx timeout [ 544.680031][ T5603] Bluetooth: hci15: command tx timeout [ 545.789202][ T8903] Bluetooth: hci16: command tx timeout [ 545.949193][ T8903] Bluetooth: hci17: command tx timeout [ 546.584039][ T5603] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 546.622689][ T5603] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 546.654449][ T5603] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 546.669201][ T5603] Bluetooth: hci18: command tx timeout [ 546.672888][ T5603] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 546.673817][ T5603] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 546.752705][ T8903] Bluetooth: hci15: command tx timeout [ 547.879248][ T8909] Bluetooth: hci16: command tx timeout [ 548.039426][ T8909] Bluetooth: hci17: command tx timeout [ 548.749185][ T8909] Bluetooth: hci18: command tx timeout [ 549.793767][ T8909] Bluetooth: hci9: command 0x0406 tx timeout [ 564.349259][ T37] INFO: task syz.0.957:8758 blocked for more than 143 seconds. [ 564.349291][ T37] Tainted: G L syzkaller #0 [ 564.349302][ T37] Blocked by coredump. [ 564.349308][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.349318][ T37] task:syz.0.957 state:D stack:25544 pid:8758 tgid:8757 ppid:5591 task_flags:0x40054c flags:0x00080000 [ 564.349392][ T37] Call Trace: [ 564.349400][ T37] [ 564.349415][ T37] __schedule+0x16df/0x5510 [ 564.349451][ T37] ? exit_aio+0x219/0x3e0 [ 564.349590][ T37] ? do_group_exit+0x22d/0x2f0 [ 564.349626][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.349661][ T37] ? register_lock_class+0x31/0x2e0 [ 564.349688][ T37] ? __pfx___schedule+0x10/0x10 [ 564.349720][ T37] ? schedule+0x90/0x2b0 [ 564.349745][ T37] schedule+0x164/0x2b0 [ 564.349769][ T37] schedule_timeout+0xc0/0x2c0 [ 564.349791][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 564.349814][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.349856][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.349881][ T37] ? wait_for_completion+0x272/0x5e0 [ 564.349905][ T37] wait_for_completion+0x2ca/0x5e0 [ 564.349941][ T37] ? __pfx_wait_for_completion+0x10/0x10 [ 564.349970][ T37] ? kill_ioctx+0x2b0/0x3d0 [ 564.350002][ T37] exit_aio+0x310/0x3e0 [ 564.350035][ T37] ? __pfx_exit_aio+0x10/0x10 [ 564.350075][ T37] ? uprobe_clear_state+0x2a7/0x3e0 [ 564.350157][ T37] __mmput+0x68/0x3d0 [ 564.350183][ T37] exit_mm+0x186/0x240 [ 564.350215][ T37] do_exit+0x6cd/0x2360 [ 564.350256][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.350285][ T37] ? __pfx_do_exit+0x10/0x10 [ 564.350316][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 564.350344][ T37] ? rt_spin_lock+0x1e2/0x400 [ 564.350381][ T37] ? rt_spin_unlock+0x159/0x200 [ 564.350414][ T37] do_group_exit+0x22d/0x2f0 [ 564.350445][ T37] ? rt_spin_unlock+0x165/0x200 [ 564.350479][ T37] get_signal+0x121b/0x12c0 [ 564.350603][ T37] arch_do_signal_or_restart+0xbb/0x860 [ 564.350672][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 564.350725][ T37] exit_to_user_mode_loop+0x10e/0x770 [ 564.350751][ T37] ? rcu_is_watching+0x16/0xb0 [ 564.350785][ T37] do_syscall_64+0x328/0x520 [ 564.350811][ T37] ? trace_irq_disable+0x3b/0x140 [ 564.350834][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.350869][ T37] ? clear_bhb_loop+0x70/0xc0 [ 564.350898][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.350927][ T37] RIP: 0033:0x7f10abb8e0d9 [ 564.350947][ T37] RSP: 002b:00007f10a9de60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 564.350970][ T37] RAX: fffffffffffffe00 RBX: 00007f10abe15fa8 RCX: 00007f10abb8e0d9 [ 564.350987][ T37] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f10abe15fa8 [ 564.351001][ T37] RBP: 00007f10abe15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 564.351016][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.351030][ T37] R13: 00007f10abe16038 R14: 00007ffd9da3ebf0 R15: 00007ffd9da3ecd8 [ 564.351065][ T37] [ 564.351103][ T37] [ 564.351103][ T37] Showing all locks held in the system: [ 564.351113][ T37] locks held by kworker/u8:0/12: 3, on CPU#0: [ 564.351167][ T37] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.351271][ T37] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.351329][ T37] #2: ffff8880646608d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 564.351462][ T37] locks held by ktimers/1/29: 5, last CPU#1: [ 564.351505][ T37] #0: ffffffff8e0591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 564.351583][ T37] #1: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 564.351639][ T37] #2: ffff8880b87284f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7d/0x2e0 [ 564.351747][ T37] #3: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 564.351807][ T37] #4: ffff888032ccf400 (&q->current_entry_lock){+...}-{3:3}, at: advance_sched+0xc8/0xc90 [ 564.351940][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 564.351954][ T37] #0: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 564.352045][ T37] locks held by kworker/u8:6/773: 3, on CPU#1: [ 564.352060][ T37] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352113][ T37] #1: ffffc900053bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352165][ T37] #2: ffff8880629508d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 564.352227][ T37] locks held by kworker/u8:9/1379: 3, on CPU#0: [ 564.352247][ T37] #0: ffff888032103938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352299][ T37] #1: ffffc90006a87c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352353][ T37] #2: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 564.352435][ T37] locks held by kworker/u8:10/1440: 3, on CPU#0: [ 564.352450][ T37] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352503][ T37] #1: ffffc90006c27c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352556][ T37] #2: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 564.352661][ T37] locks held by kworker/u8:17/3386: 3, on CPU#0: [ 564.352676][ T37] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352728][ T37] #1: ffffc9000f9dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.352780][ T37] #2: ffff888063b108d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 564.352839][ T37] locks held by getty/5341: 2, on CPU#1: [ 564.352853][ T37] #0: ffff88803597c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 564.352946][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 564.353026][ T37] locks held by kworker/u9:2/5595: 5, on CPU#0: [ 564.353040][ T37] #0: ffff888063feb938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.353101][ T37] #1: ffffc9000524fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.353151][ T37] #2: ffff88804d5b0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 564.353337][ T37] #3: ffff88804d5b00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 564.353392][ T37] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 564.353544][ T37] locks held by kworker/u9:4/5599: 6, on CPU#0: [ 564.353558][ T37] #0: ffff88803a098138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.353610][ T37] #1: ffffc9000528fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.353663][ T37] #2: ffff888063024f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 564.353740][ T37] #3: ffff8880630240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 564.353799][ T37] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 564.353856][ T37] #5: ffff88806461e370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 564.353946][ T37] locks held by kworker/u9:5/5603: 4, on CPU#0: [ 564.353962][ T37] #0: ffff88802a10e938 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.354024][ T37] #1: ffffc900052cfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.354080][ T37] #2: ffff88807c8e00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 564.354133][ T37] #3: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 564.354188][ T37] locks held by kworker/u9:7/5606: 5, on CPU#0: [ 564.354203][ T37] #0: ffff888063a8d138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.354265][ T37] #1: ffffc900052ffc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.354320][ T37] #2: ffff888032f88f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 564.354382][ T37] #3: ffff888032f880b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 564.354439][ T37] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 564.354504][ T37] locks held by syz.4.956/8752: 3, on CPU#0: [ 564.354518][ T37] #0: ffff88803d721db8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 564.354585][ T37] #1: ffffffff8f61db20 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 564.354669][ T37] #2: ffff888031e14cc8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 564.354790][ T37] locks held by syz-executor/8763: 2, on CPU#0: [ 564.354805][ T37] #0: ffffffff8ed12e68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 564.354858][ T37] #1: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 564.354905][ T37] locks held by syz-executor/8768: 2, on CPU#0: [ 564.354919][ T37] #0: ffffffff8ed12e68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 564.354973][ T37] #1: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 564.355020][ T37] locks held by syz-executor/8772: 2, on CPU#0: [ 564.355035][ T37] #0: ffffffff8ed12e68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 564.355088][ T37] #1: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 564.355136][ T37] locks held by syz-executor/8773: 2, on CPU#0: [ 564.355151][ T37] #0: ffffffff8ed12e68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 564.355204][ T37] #1: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 564.355259][ T37] locks held by syz-executor/8835: 1, on CPU#0: [ 564.355273][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.355354][ T37] locks held by dhcpcd/8842: 1, on CPU#0: [ 564.355368][ T37] #0: ffff888064da4358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 564.355474][ T37] locks held by dhcpcd/8843: 1, on CPU#0: [ 564.355487][ T37] #0: ffff88802a2a0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 564.355542][ T37] locks held by dhcpcd/8844: 1, on CPU#0: [ 564.355556][ T37] #0: ffff88803548e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 564.355611][ T37] locks held by dhcpcd/8845: 1, on CPU#0: [ 564.355625][ T37] #0: ffff88803c85e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 564.355680][ T37] locks held by dhcpcd/8846: 1, on CPU#0: [ 564.355694][ T37] #0: ffff88805f940358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 564.355749][ T37] locks held by dhcpcd/8847: 1, on CPU#0: [ 564.355763][ T37] #0: ffff888035534358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 564.355816][ T37] locks held by syz-executor/8850: 1, on CPU#0: [ 564.355831][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.355889][ T37] locks held by syz-executor/8852: 1, on CPU#0: [ 564.355903][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.355961][ T37] locks held by syz-executor/8864: 1, on CPU#0: [ 564.355976][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356033][ T37] locks held by syz-executor/8865: 1, on CPU#0: [ 564.356047][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356105][ T37] locks held by syz-executor/8873: 1, on CPU#0: [ 564.356119][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356178][ T37] locks held by syz-executor/8880: 1, on CPU#0: [ 564.356193][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356258][ T37] locks held by syz-executor/8889: 1, on CPU#0: [ 564.356272][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356332][ T37] locks held by syz-executor/8891: 1, on CPU#0: [ 564.356347][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356406][ T37] locks held by kworker/u9:0/8893: 5, on CPU#0: [ 564.356420][ T37] #0: ffff888063a8b938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.356472][ T37] #1: ffffc9001dae7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.356526][ T37] #2: ffff888032f3cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 564.356594][ T37] #3: ffff888032f3c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 564.356665][ T37] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 564.356718][ T37] locks held by syz-executor/8899: 1, on CPU#0: [ 564.356732][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356791][ T37] locks held by syz-executor/8905: 1, on CPU#0: [ 564.356806][ T37] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 564.356864][ T37] locks held by kworker/u9:3/8907: 5, on CPU#0: [ 564.356878][ T37] #0: ffff88803a2bb138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.356929][ T37] #1: ffffc9001d9c7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 564.356984][ T37] #2: ffff888078e94f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 564.357044][ T37] #3: ffff888078e940b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 564.357097][ T37] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 564.357153][ T37] [ 564.357158][ T37] ============================================= [ 564.357158][ T37] [ 564.357173][ T37] NMI backtrace for cpu 0 [ 564.357196][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.357247][ T37] Tainted: [L]=SOFTLOCKUP [ 564.357253][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.357264][ T37] Call Trace: [ 564.357272][ T37] [ 564.357281][ T37] dump_stack_lvl+0xe8/0x150 [ 564.357312][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 564.357373][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 564.357453][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 564.357486][ T37] sys_info+0x135/0x170 [ 564.357547][ T37] watchdog+0xfd7/0x1030 [ 564.357577][ T37] ? watchdog+0x1c7/0x1030 [ 564.357604][ T37] kthread+0x38b/0x470 [ 564.357654][ T37] ? __pfx_watchdog+0x10/0x10 [ 564.357672][ T37] ? __pfx_kthread+0x10/0x10 [ 564.357703][ T37] ret_from_fork+0x514/0xb70 [ 564.357759][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 564.357787][ T37] ? __switch_to+0xc89/0x1420 [ 564.357815][ T37] ? __pfx_kthread+0x10/0x10 [ 564.357846][ T37] ret_from_fork_asm+0x1a/0x30 [ 564.357893][ T37] [ 564.357906][ T37] Sending NMI from CPU 0 to CPUs 1: [ 564.357934][ C1] NMI backtrace for cpu 1 [ 564.357950][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.357973][ C1] Tainted: [L]=SOFTLOCKUP [ 564.357980][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.357990][ C1] RIP: 0010:__lock_acquire+0x59b/0x2ce0 [ 564.358011][ C1] Code: c9 0f b6 81 c4 00 00 00 84 c0 0f 84 77 ff ff ff 41 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80 b9 c6 00 00 00 02 0f 84 60 ff ff ff <89> d0 e9 59 ff ff ff 48 c7 c7 10 09 09 8e 4c 89 fe e8 ff 5a 60 03 [ 564.358027][ C1] RSP: 0018:ffffc90000a3f838 EFLAGS: 00000097 [ 564.358042][ C1] RAX: 0000000000000003 RBX: ffff88801d2b4a30 RCX: ffffffff93465118 [ 564.358055][ C1] RDX: 0000000000000003 RSI: 0000000000000005 RDI: 0000000000000000 [ 564.358065][ C1] RBP: 0000000000000001 R08: ffffffff8954f2c8 R09: 0000000000000000 [ 564.358076][ C1] R10: 0000000000000000 R11: ffff888032ccf400 R12: ffffffffffffff05 [ 564.358088][ C1] R13: ffff88801d2b4ab0 R14: ffff88801d2b3e00 R15: 0000000000000000 [ 564.358101][ C1] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 564.358114][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.358126][ C1] CR2: 00007ffedefeb128 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 564.358142][ C1] Call Trace: [ 564.358148][ C1] [ 564.358162][ C1] ? __lock_acquire+0x683/0x2ce0 [ 564.358181][ C1] ? advance_sched+0xc8/0xc90 [ 564.358201][ C1] lock_acquire+0x106/0x350 [ 564.358217][ C1] ? advance_sched+0xc8/0xc90 [ 564.358241][ C1] ? __lock_acquire+0x683/0x2ce0 [ 564.358260][ C1] rt_spin_lock+0x83/0x400 [ 564.358284][ C1] ? advance_sched+0xc8/0xc90 [ 564.358305][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 564.358329][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.358353][ C1] ? lock_acquire+0x106/0x350 [ 564.358370][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 564.358395][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 564.358421][ C1] advance_sched+0xc8/0xc90 [ 564.358446][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.358465][ C1] ? __pfx_advance_sched+0x10/0x10 [ 564.358486][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 564.358519][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 564.358546][ C1] handle_softirqs+0x1da/0x6d0 [ 564.358571][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 564.358627][ C1] run_ktimerd+0x6a/0x100 [ 564.358649][ C1] smpboot_thread_fn+0x565/0xa70 [ 564.358672][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 564.358697][ C1] kthread+0x38b/0x470 [ 564.358721][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 564.358747][ C1] ? __pfx_kthread+0x10/0x10 [ 564.358772][ C1] ret_from_fork+0x514/0xb70 [ 564.358797][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 564.358822][ C1] ? __switch_to+0xc89/0x1420 [ 564.358843][ C1] ? __pfx_kthread+0x10/0x10 [ 564.358868][ C1] ret_from_fork_asm+0x1a/0x30 [ 564.358900][ C1] [ 564.358939][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 564.358960][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.358986][ T37] Tainted: [L]=SOFTLOCKUP [ 564.358994][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.359005][ T37] Call Trace: [ 564.359012][ T37] [ 564.359020][ T37] vpanic+0x56d/0xa60 [ 564.359056][ T37] ? __pfx_vpanic+0x10/0x10 [ 564.359102][ T37] panic+0xc5/0xd0 [ 564.359153][ T37] ? __pfx_panic+0x10/0x10 [ 564.359192][ T37] ? wq_watchdog_touch+0xf9/0x160 [ 564.359219][ T37] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 564.359268][ T37] watchdog+0x1030/0x1030 [ 564.359299][ T37] ? watchdog+0x1c7/0x1030 [ 564.359330][ T37] kthread+0x38b/0x470 [ 564.359362][ T37] ? __pfx_watchdog+0x10/0x10 [ 564.359382][ T37] ? __pfx_kthread+0x10/0x10 [ 564.359417][ T37] ret_from_fork+0x514/0xb70 [ 564.359453][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 564.359486][ T37] ? __switch_to+0xc89/0x1420 [ 564.359518][ T37] ? __pfx_kthread+0x10/0x10 [ 564.359554][ T37] ret_from_fork_asm+0x1a/0x30 [ 564.359606][ T37] [ 564.360198][ T37] Kernel Offset: disabled