last executing test programs: 11.135978187s ago: executing program 0 (id=2112): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000001680)={0x8, 0x9, {0xffffffffffffffff}, {0x0}, 0x9, 0x3}) sendmsg$AUDIT_SET(r2, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, 0x3e9, 0x2, 0x70bd2c, 0x25dfdbff, {0xf, 0x1, 0x1, r3, 0x8, 0x14e0, 0x4, 0x8, 0x0, 0x116, 0xfffffff5}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) r5 = dup(r0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000017c0)={&(0x7f0000001780)='itimer_expire\x00', r5, 0x0, 0x1}, 0x18) mount$9p_fd(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x91884, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0x1ff39d1a}}, {@aname={'aname', 0x3d, '.'}}, {@ignoreqv}, {@privport}, {@cache_mmap}, {@cache_none}], [{@seclabel}, {@euid_lt={'euid<', r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\'\\--}'}}, {@fowner_eq={'fowner', 0x3d, r4}}]}}) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001a00)={0x60, 0x1, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x801, &(0x7f0000001980)=[{0x400, 0xe, 0x7ff}, {0x4f, 0x3}, {0x8e6, 0x80000001, 0x43b}], 0x3, 0x3ff, 0x8a, 0x20, 0x10, 0x40}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x34, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x4010) sched_setscheduler(r3, 0x5, &(0x7f0000001b80)=0x8) pwritev2(r2, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="dc4a3236bafd2e6722074a92f48d587bad6a60f65ba64a2a32e50d6af505b37c03e7493cbb5d8ddbb6c8bfbeb36c364369f6786cd1dcd251", 0x38}, {&(0x7f0000001c00)="5824e7e64b36c7b12bd44caccaac03bb520d8674b962145e0d512478589b0a009be882229d74feb1fb3ce4a6160244d7e7215d17d625fcb53af33573518925b2d09b83a8a76260f483082fe3bc47bec45974c5eb49a6cb66189233ff93c963aabea68b678b0b41b097d1e3b685f76868b6234165331458ba2733d1c7daafbaadd3cdbc1f937f7ec92c1f68dd76bc8670b169c2a2baf7d12bc778e78d59a4103931eb11d96b478b20cdafa69cb16f971e9b34b30d72aa52df", 0xb8}, {&(0x7f0000001cc0)="eb8c5a4e413c1be4ebc1bb93d3f371cd8078d55e42cf1f51c333a1517c8c7c219506a510726ebf76089f63180afb05aa521adb3059935c063ee6e1d5502fce3239a1224adf48fd7baf896cf46bf0104f43b66cb48525d39590279c2efbd37057ad2fbef4d0a5c45452b22baaa7cd27b1f7b48f813ea8db18a03b7df9bc64507c5c7553a1fd750d1b5ac73a5836a0cebce5c06cc9c89edff26e6bdb996cc5b98f2e08db429f7ba9e8108d5edbf4ae5866a94c5d80d20bf31c18d5cee463d15044dbc296cec783491f0ad49063b30b031a12e8", 0xd2}], 0x3, 0x6, 0x3c, 0x1) preadv(r6, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/217, 0xd9}], 0x1, 0x5, 0x3) getpid() pipe(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r9, &(0x7f0000004100)=[{{&(0x7f0000002040)=@qipcrtr={0x2a, 0x2, 0x7fff}, 0x80, &(0x7f0000002440)=[{&(0x7f00000020c0)="5d3f3131a83fd271637a172e69a3efd7c9efbc2bd3279a4aba7d156f2f6b71f874918d73b6f942f9f485433c7bf64d7d80d0a6284bf44ddca6af27ab02572f7b4ea7095487ea585ebd00cd6d72cf65b6d19fbed0360886c5331ccfff1c8ca1037372dc299a9deb33ae8e94a323c73577c1de57123e125fb0e1435fc3beb3c4087ca10e007e2521ed86c53ea4328cc540116659da0b9794ad021ea173a2bde945d2d0be45575d1bbb8e16ba8c", 0xac}, {&(0x7f0000002180)="9fb6f75bde066eb6e9e060f630d1469ea740766c9b0efdcbbe8ce0469a496d647ec5e5b90e05d803ffe082ddb6f7be0142e23614ceee83a67f5196746acd0d22ad202328e365b0362863e9de10ef1419208a2dcf8215d304ed4da89beb0717870c153ab5eeb718f03c3406350f00946a67be5649603c0c59855c94e85cfb4f38209f1142fd0ad59477ad02f8ee8f5a12ee506b5c00768d3168c19171e23fd64ba049ce20deb2c9b977b080346fbeef5be2d767a564e1a976463b3bbc33182688a6aec68cb75af430483aed75767974f603a9fb7f7a5d1d5b5c2c90cdcbb82aa4", 0xe0}, {&(0x7f0000002280)="577ab4034bf48217eddbd32d603697bf9518cfdb3d590154d0cd1d498a11f7ca854ec69506f7d32f51378590e3311b136daf7f04e3c3043b28318808e66d632636d965d79cabb0fa4b2134b5331e0df3ee9550a554ace7f0103b92ec6c59a98b82714ec08f9a9b696b424e30df73f2fbe5beb12d337f486dbe6f74a21f1d3b9c161a7d38dc3c8c859113cc7dac8a09dc81c998413388d044328cf8af43a1e9c4e1224915d2886ebb2045e7d78ca5c38b0e8a7c0ff71822a99952e07c1378e3", 0xbf}, {&(0x7f0000002340)="30961eba702d19bf3e2c83a8df7bffc81e853a1df2c7af9e12aec625d29392798c7bf431c350abeb9e891ffc373b3943b09dee25ce7e29f16cc6f277d44f23cb6eaafa010c533cd022e7a6f27c6014de640c6209f550845faa39e331d55690cc2056a17075d054ed59be4dfe83d4f320ebb2c9b48568d275febb07a50f7325abc1de", 0x82}, {&(0x7f0000002400)="64fee6e44c", 0x5}], 0x5}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e24, @remote}, 0x80, 0x0, 0x0, &(0x7f00000037c0)=[{0x80, 0x6, 0x8, "1193dee9b585ac3a61a17df1f9221dfa6f3c628a6bd3b02c905c813d8bfe5059f0fa940c7bf594bb00f06bfe05c4b4bbf2d7dbb837d3d45c21dad78ad32091bef3744f1a388c1092d686d2d7f12c55eb00fea449964ccc5326c8a09373c445e01dafba22d74f5c541c9a8f628d98ad"}, {0x48, 0x109, 0x1, "7d3ddc0416afea6609f219ffc6149e72634639c0817380f9888901aa8cd8127990bcc3b511829126459a6e47f9c5c54295d67714d6f8f0"}, {0xd8, 0x119, 0x9, "75e8f1c9d54a9c3bdec08b8d33dd4d60a51806500cc1d6ab52e220da2e8e335cc6bd1091ae50a00de3293df74533c42f2349901ad81fbb6ed051dc4c70133950080d3af448184b65407693da549b292dd0663ca7547e95d1d573afbbe405ef60b5d86aaf8ab015554dddd0d3cfea27253acb09c5eadf1e08d20b9bd33b450ed306ad4e721e89afc1b3c74c6a7432a61fdbd2099315c6fab4fd819d12f10a552f585654cb405692be633c31254e90a3d308aa69632bca34719149042fdaa7b7a5af2741"}, {0x10, 0x88, 0xe}, {0xc0, 0x107, 0x19, "0a0b5c63885074f2c2c952a055bde2dc1bc7518299790021c0922c685316823e9f8eef5bc511b6d33ed6f3f0c9596388c536dd76166f7a89109799239435096712294407d989a02db1cd111f30257efb9309dc6772e7d58b8754bea3b0fdc97e738ee0dcd32d18903b2d5d7a3a91a1785241b62f7ef1fd1224bdc974bac5665fd1fe91407b3726b30dadd4e5931c48ea69098efa3535ef49f441e9df73530d31b8bc1adc92762f1c2b14"}], 0x270}}, {{&(0x7f0000003b00)=@l2={0x1f, 0x626b, @any, 0x4, 0x1}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)="b3f81af3fd1e54f5ea3370e60633f334a2ac648584fc706f50d96b4d506333c9f3ac2aed724067c53844389d6298df09d6f8bc7f28feb81b9163afaf61f41f56a0bf5b86ca41b43b6fab5b2353fcf42103d297b4067965d948f39d35a3435a4d3e7ccaa85a71303cadf3b0887513d657b1dfb67ba49f18742b887d232063bccc9a704a60838ad84d625d3c", 0x8b}, {&(0x7f0000003d40)="f07ef7be866a71bc6c01f1ddfed7952e82030c3936322d720234efccbe7a9776799355732a167f796136c2815074dd54d11b6e924822fe6bfaadc7318ce0132c776a2a3a11ac89bef7d4fd647cdc68ac8cda154f5230d87edfa2a8fcb8cc54ffc7a105e891a35f8e4104c811d4a0461b8d448df5de3ef24bf7a5906a9bbb1097522c0aae8c24cf64903ccb76bac5a4aae3f1fe2120f36660cf9d87e11599abcb9dc46a6bfe6ba4a2be58c34a68f566d752a47035", 0xb4}, {&(0x7f0000003e00)}, {&(0x7f0000003ec0)="322d9f8482b82c4e21b8f90837927b6ebb8a226d5eff66311c03a56bbedcfdafdcdd431a2dcc241d7c809c173ca1e0a6179c23483db8559f826d1979b397880dede87bb4c01db30071b25dc0c645947732a8f3787383a497e5b04e9e3670a72b27ddbddf", 0x64}], 0x5, &(0x7f0000003fc0)=[{0x30, 0x11, 0x4, "97f36dfd90d7ed169639ef451cccf760ee755ae07085e30fd82c58"}, {0xb0, 0x108, 0x2, "9fa6d0006713f592ba0f4f3e525cb574b26f150b9356aaf7b0ff1fadb2712763e489069fd11a19a86f4c8cd14e9e36b34f14a684a3edae10d748fc02895e17c6d7d4ac0a2d88f6ef0c038532597761e83a72e5e238b16e2e4d35655b48f27a8cd9e74604f636626ea7f2c1d16e34c00f9f8e1f46ee07ce4ac7b4a6dcf2ce1c190b9e9dcec112eb538f8e39ec9d091aa0b83c461f275576ef87ccf56f"}, {0x58, 0x101, 0x8000, "c97fea1493824895095486790ee706cbc69551abfb6568fd883e5454270aea349b6f857aff603875f019aa8b435244f7d2e3c0ec9afaf4d04a96235e9473e5217b4da4d83eb857"}], 0x138}}], 0x3, 0x240088c0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4799}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) connect$tipc(r0, &(0x7f00000042c0)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000004300)=0x8) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f0000004340)={0x20, 0x9, 0x80, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000043c0)={&(0x7f0000004380)=[0x0, 0x0], 0x2, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000004400)={r10}) mkdir(&(0x7f0000004440)='./file0\x00', 0x1) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f0000004540)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)=@delrng={0x10, 0x14, 0x8, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004012) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000045c0)={0x3, &(0x7f0000004580)=[{0xf, 0xd, 0xfc, 0x2}, {0x6, 0x14, 0x0, 0x4}, {0x0, 0x7, 0x2, 0xfffffff8}]}) bind$inet6(r5, &(0x7f0000004600)={0xa, 0x4e21, 0xd, @mcast1, 0x80}, 0x1c) io_setup(0x6, &(0x7f0000004640)) 10.822354236s ago: executing program 0 (id=2114): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) unshare(0x40000000) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000001c0)={0xc, @private=0xa010100, 0x4e23, 0x1, 'lc\x00', 0x20, 0x30, 0x61}, 0x2c) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{}, {r4, r5+10000000}}, 0x0) 7.224257585s ago: executing program 3 (id=2122): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 7.216360328s ago: executing program 3 (id=2123): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x4) listen(0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 7.025218134s ago: executing program 0 (id=2124): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000001680)={0x8, 0x9, {0xffffffffffffffff}, {0x0}, 0x9, 0x3}) sendmsg$AUDIT_SET(r2, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, 0x3e9, 0x2, 0x70bd2c, 0x25dfdbff, {0xf, 0x1, 0x1, r3, 0x8, 0x14e0, 0x4, 0x8, 0x0, 0x116, 0xfffffff5}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) r5 = dup(r0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000017c0)={&(0x7f0000001780)='itimer_expire\x00', r5, 0x0, 0x1}, 0x18) mount$9p_fd(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x91884, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0x1ff39d1a}}, {@aname={'aname', 0x3d, '.'}}, {@ignoreqv}, {@privport}, {@cache_mmap}, {@cache_none}], [{@seclabel}, {@euid_lt={'euid<', r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\'\\--}'}}, {@fowner_eq={'fowner', 0x3d, r4}}]}}) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001a00)={0x60, 0x1, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x801, &(0x7f0000001980)=[{0x400, 0xe, 0x7ff}, {0x4f, 0x3}, {0x8e6, 0x80000001, 0x43b}], 0x3, 0x3ff, 0x8a, 0x20, 0x10, 0x40}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x34, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x4010) sched_setscheduler(r3, 0x5, &(0x7f0000001b80)=0x8) pwritev2(r2, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="dc4a3236bafd2e6722074a92f48d587bad6a60f65ba64a2a32e50d6af505b37c03e7493cbb5d8ddbb6c8bfbeb36c364369f6786cd1dcd251", 0x38}, {&(0x7f0000001c00)="5824e7e64b36c7b12bd44caccaac03bb520d8674b962145e0d512478589b0a009be882229d74feb1fb3ce4a6160244d7e7215d17d625fcb53af33573518925b2d09b83a8a76260f483082fe3bc47bec45974c5eb49a6cb66189233ff93c963aabea68b678b0b41b097d1e3b685f76868b6234165331458ba2733d1c7daafbaadd3cdbc1f937f7ec92c1f68dd76bc8670b169c2a2baf7d12bc778e78d59a4103931eb11d96b478b20cdafa69cb16f971e9b34b30d72aa52df", 0xb8}, {&(0x7f0000001cc0)="eb8c5a4e413c1be4ebc1bb93d3f371cd8078d55e42cf1f51c333a1517c8c7c219506a510726ebf76089f63180afb05aa521adb3059935c063ee6e1d5502fce3239a1224adf48fd7baf896cf46bf0104f43b66cb48525d39590279c2efbd37057ad2fbef4d0a5c45452b22baaa7cd27b1f7b48f813ea8db18a03b7df9bc64507c5c7553a1fd750d1b5ac73a5836a0cebce5c06cc9c89edff26e6bdb996cc5b98f2e08db429f7ba9e8108d5edbf4ae5866a94c5d80d20bf31c18d5cee463d15044dbc296cec783491f0ad49063b30b031a12e8", 0xd2}], 0x3, 0x6, 0x3c, 0x1) preadv(r6, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/217, 0xd9}], 0x1, 0x5, 0x3) getpid() pipe(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r9, &(0x7f0000004100)=[{{&(0x7f0000002040)=@qipcrtr={0x2a, 0x2, 0x7fff}, 0x80, &(0x7f0000002440)=[{&(0x7f00000020c0)="5d3f3131a83fd271637a172e69a3efd7c9efbc2bd3279a4aba7d156f2f6b71f874918d73b6f942f9f485433c7bf64d7d80d0a6284bf44ddca6af27ab02572f7b4ea7095487ea585ebd00cd6d72cf65b6d19fbed0360886c5331ccfff1c8ca1037372dc299a9deb33ae8e94a323c73577c1de57123e125fb0e1435fc3beb3c4087ca10e007e2521ed86c53ea4328cc540116659da0b9794ad021ea173a2bde945d2d0be45575d1bbb8e16ba8c", 0xac}, {&(0x7f0000002180)="9fb6f75bde066eb6e9e060f630d1469ea740766c9b0efdcbbe8ce0469a496d647ec5e5b90e05d803ffe082ddb6f7be0142e23614ceee83a67f5196746acd0d22ad202328e365b0362863e9de10ef1419208a2dcf8215d304ed4da89beb0717870c153ab5eeb718f03c3406350f00946a67be5649603c0c59855c94e85cfb4f38209f1142fd0ad59477ad02f8ee8f5a12ee506b5c00768d3168c19171e23fd64ba049ce20deb2c9b977b080346fbeef5be2d767a564e1a976463b3bbc33182688a6aec68cb75af430483aed75767974f603a9fb7f7a5d1d5b5c2c90cdcbb82aa4", 0xe0}, {&(0x7f0000002280)="577ab4034bf48217eddbd32d603697bf9518cfdb3d590154d0cd1d498a11f7ca854ec69506f7d32f51378590e3311b136daf7f04e3c3043b28318808e66d632636d965d79cabb0fa4b2134b5331e0df3ee9550a554ace7f0103b92ec6c59a98b82714ec08f9a9b696b424e30df73f2fbe5beb12d337f486dbe6f74a21f1d3b9c161a7d38dc3c8c859113cc7dac8a09dc81c998413388d044328cf8af43a1e9c4e1224915d2886ebb2045e7d78ca5c38b0e8a7c0ff71822a99952e07c1378e3", 0xbf}, {&(0x7f0000002340)="30961eba702d19bf3e2c83a8df7bffc81e853a1df2c7af9e12aec625d29392798c7bf431c350abeb9e891ffc373b3943b09dee25ce7e29f16cc6f277d44f23cb6eaafa010c533cd022e7a6f27c6014de640c6209f550845faa39e331d55690cc2056a17075d054ed59be4dfe83d4f320ebb2c9b48568d275febb07a50f7325abc1de", 0x82}, {&(0x7f0000002400)="64fee6e44c", 0x5}], 0x5}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e24, @remote}, 0x80, 0x0, 0x0, &(0x7f00000037c0)=[{0x80, 0x6, 0x8, "1193dee9b585ac3a61a17df1f9221dfa6f3c628a6bd3b02c905c813d8bfe5059f0fa940c7bf594bb00f06bfe05c4b4bbf2d7dbb837d3d45c21dad78ad32091bef3744f1a388c1092d686d2d7f12c55eb00fea449964ccc5326c8a09373c445e01dafba22d74f5c541c9a8f628d98ad"}, {0x48, 0x109, 0x1, "7d3ddc0416afea6609f219ffc6149e72634639c0817380f9888901aa8cd8127990bcc3b511829126459a6e47f9c5c54295d67714d6f8f0"}, {0xd8, 0x119, 0x9, "75e8f1c9d54a9c3bdec08b8d33dd4d60a51806500cc1d6ab52e220da2e8e335cc6bd1091ae50a00de3293df74533c42f2349901ad81fbb6ed051dc4c70133950080d3af448184b65407693da549b292dd0663ca7547e95d1d573afbbe405ef60b5d86aaf8ab015554dddd0d3cfea27253acb09c5eadf1e08d20b9bd33b450ed306ad4e721e89afc1b3c74c6a7432a61fdbd2099315c6fab4fd819d12f10a552f585654cb405692be633c31254e90a3d308aa69632bca34719149042fdaa7b7a5af2741"}, {0x10, 0x88, 0xe}, {0xc0, 0x107, 0x19, "0a0b5c63885074f2c2c952a055bde2dc1bc7518299790021c0922c685316823e9f8eef5bc511b6d33ed6f3f0c9596388c536dd76166f7a89109799239435096712294407d989a02db1cd111f30257efb9309dc6772e7d58b8754bea3b0fdc97e738ee0dcd32d18903b2d5d7a3a91a1785241b62f7ef1fd1224bdc974bac5665fd1fe91407b3726b30dadd4e5931c48ea69098efa3535ef49f441e9df73530d31b8bc1adc92762f1c2b14"}], 0x270}}, {{&(0x7f0000003b00)=@l2={0x1f, 0x626b, @any, 0x4, 0x1}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)="b3f81af3fd1e54f5ea3370e60633f334a2ac648584fc706f50d96b4d506333c9f3ac2aed724067c53844389d6298df09d6f8bc7f28feb81b9163afaf61f41f56a0bf5b86ca41b43b6fab5b2353fcf42103d297b4067965d948f39d35a3435a4d3e7ccaa85a71303cadf3b0887513d657b1dfb67ba49f18742b887d232063bccc9a704a60838ad84d625d3c", 0x8b}, {&(0x7f0000003d40)="f07ef7be866a71bc6c01f1ddfed7952e82030c3936322d720234efccbe7a9776799355732a167f796136c2815074dd54d11b6e924822fe6bfaadc7318ce0132c776a2a3a11ac89bef7d4fd647cdc68ac8cda154f5230d87edfa2a8fcb8cc54ffc7a105e891a35f8e4104c811d4a0461b8d448df5de3ef24bf7a5906a9bbb1097522c0aae8c24cf64903ccb76bac5a4aae3f1fe2120f36660cf9d87e11599abcb9dc46a6bfe6ba4a2be58c34a68f566d752a47035", 0xb4}, {&(0x7f0000003e00)}, {&(0x7f0000003ec0)="322d9f8482b82c4e21b8f90837927b6ebb8a226d5eff66311c03a56bbedcfdafdcdd431a2dcc241d7c809c173ca1e0a6179c23483db8559f826d1979b397880dede87bb4c01db30071b25dc0c645947732a8f3787383a497e5b04e9e3670a72b27ddbddf", 0x64}], 0x5, &(0x7f0000003fc0)=[{0x30, 0x11, 0x4, "97f36dfd90d7ed169639ef451cccf760ee755ae07085e30fd82c58"}, {0xb0, 0x108, 0x2, "9fa6d0006713f592ba0f4f3e525cb574b26f150b9356aaf7b0ff1fadb2712763e489069fd11a19a86f4c8cd14e9e36b34f14a684a3edae10d748fc02895e17c6d7d4ac0a2d88f6ef0c038532597761e83a72e5e238b16e2e4d35655b48f27a8cd9e74604f636626ea7f2c1d16e34c00f9f8e1f46ee07ce4ac7b4a6dcf2ce1c190b9e9dcec112eb538f8e39ec9d091aa0b83c461f275576ef87ccf56f"}, {0x58, 0x101, 0x8000, "c97fea1493824895095486790ee706cbc69551abfb6568fd883e5454270aea349b6f857aff603875f019aa8b435244f7d2e3c0ec9afaf4d04a96235e9473e5217b4da4d83eb857"}], 0x138}}], 0x3, 0x240088c0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4799}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) connect$tipc(r0, &(0x7f00000042c0)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000004300)=0x8) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f0000004340)={0x20, 0x9, 0x80, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000043c0)={&(0x7f0000004380)=[0x0, 0x0], 0x2, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000004400)={r10}) mkdir(&(0x7f0000004440)='./file0\x00', 0x1) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f0000004540)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)=@delrng={0x10, 0x14, 0x8, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004012) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000045c0)={0x3, &(0x7f0000004580)=[{0xf, 0xd, 0xfc, 0x2}, {0x6, 0x14, 0x0, 0x4}, {0x0, 0x7, 0x2, 0xfffffff8}]}) bind$inet6(r5, &(0x7f0000004600)={0xa, 0x4e21, 0xd, @mcast1, 0x80}, 0x1c) io_setup(0x6, &(0x7f0000004640)) 6.773601254s ago: executing program 0 (id=2125): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x12}, 0x0) 6.586168237s ago: executing program 0 (id=2127): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200007, 0x482181) fsetxattr$security_capability(r0, 0x0, &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x40084) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x3231564e, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0x0, 0x3) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) 5.882840837s ago: executing program 3 (id=2130): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x12}, 0x0) 5.727783395s ago: executing program 2 (id=2131): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x138, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x121, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\xbb\xf6\r@\xba\x93\xf7\x14\xcd\xcb\xb6\xb9\xbb\xc4\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaa\xc5Ql\x7f\tKt\fc\x1f\x17]\xdd\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83[>m\x84;\xca\xfa\x9b^}\x02dv\x83Z\x9b\xcdDgv4\x89\x1f9w@\xb0\xcd;\x04G)J\x0f\rW\x97\xc0\xa3b\xef\x93\xacr\xca\x97M9\xf6%\xf0\x05\x98\xb6\xf2\xe8\xe8\xc5Tt\xae\bT\x1c7\x18\xf5\xdd\xaf\xce\xc6\xf0\xca\x96b\t\xb4+\x91H>\x86\x06'}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000880}, 0x4008804) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rpcb_setport\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e04}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x54) ioctl$FS_IOC_GETFSMAP(r6, 0xc0105872, &(0x7f00000004c0)=ANY=[@ANYRESOCT]) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000020800000000000005becb5aef7a830b168f694e111a2e00"/43], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r5], 0x9) mq_open(&(0x7f00000003c0)='\xa1\xbd\xe3\xd1\x16\xde\x162sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd\xebr\x96\xce0\xfa\\t\xaf\xe4\x94\v\x00\b\x00\x00\x00\x98\xe6r\x7fo\xff\xdc\xb8', 0x80, 0x62, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000240), 0x0) setns(0xffffffffffffffff, 0x2000000) pread64(0xffffffffffffffff, &(0x7f0000033240)=""/102386, 0x18ff2, 0x9f) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5.727086952s ago: executing program 3 (id=2132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000004500000000000000180000000000000000000000000000009500000000000000970300000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xa, &(0x7f0000000100)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff77aaaaaaaabb080600010800060400010180c200000100000000ffffffffffffffffffff"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x28, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000340), 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01001a2bc87f1b359e3d004ef4ffffdbdf252b0000000e0005006e657464657673697464657673696d3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00a\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) 5.150954534s ago: executing program 1 (id=2134): r0 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x29eb, &(0x7f0000000080)={0x0, 0x77c9, 0x80, 0x2, 0x81}, &(0x7f0000000100), &(0x7f00000001c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0xe0801) r2 = epoll_create(0xb46d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) writev(r1, &(0x7f0000001140)=[{&(0x7f000009df80)="c5", 0x1}], 0x1) r6 = gettid() r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0xe, &(0x7f0000001000)={0x21, 0x8, 0x900}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, 0x0, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r9 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r10, 0x0, 0x0) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r11, &(0x7f000001b000)=""/102400, 0x19000) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x40c0) 5.089508141s ago: executing program 4 (id=2135): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_page_scan_activity={{0x8}, {0x7, 0x7, 0xffc}}}}, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) r1 = socket$unix(0x1, 0x2, 0x0) socket(0x0, 0x3, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2(0x0, 0x4080) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=no%e') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(r2) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 4.743793247s ago: executing program 2 (id=2136): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000001680)={0x8, 0x9, {0xffffffffffffffff}, {0x0}, 0x9, 0x3}) sendmsg$AUDIT_SET(r2, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, 0x3e9, 0x2, 0x70bd2c, 0x25dfdbff, {0xf, 0x1, 0x1, r3, 0x8, 0x14e0, 0x4, 0x8, 0x0, 0x116, 0xfffffff5}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) r5 = dup(r0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000017c0)={&(0x7f0000001780)='itimer_expire\x00', r5, 0x0, 0x1}, 0x18) mount$9p_fd(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x91884, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0x1ff39d1a}}, {@aname={'aname', 0x3d, '.'}}, {@ignoreqv}, {@privport}, {@cache_mmap}, {@cache_none}], [{@seclabel}, {@euid_lt={'euid<', r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\'\\--}'}}, {@fowner_eq={'fowner', 0x3d, r4}}]}}) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001a00)={0x60, 0x1, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x801, &(0x7f0000001980)=[{0x400, 0xe, 0x7ff}, {0x4f, 0x3}, {0x8e6, 0x80000001, 0x43b}], 0x3, 0x3ff, 0x8a, 0x20, 0x10, 0x40}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x34, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x4010) sched_setscheduler(r3, 0x5, &(0x7f0000001b80)=0x8) pwritev2(r2, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="dc4a3236bafd2e6722074a92f48d587bad6a60f65ba64a2a32e50d6af505b37c03e7493cbb5d8ddbb6c8bfbeb36c364369f6786cd1dcd251", 0x38}, {&(0x7f0000001c00)="5824e7e64b36c7b12bd44caccaac03bb520d8674b962145e0d512478589b0a009be882229d74feb1fb3ce4a6160244d7e7215d17d625fcb53af33573518925b2d09b83a8a76260f483082fe3bc47bec45974c5eb49a6cb66189233ff93c963aabea68b678b0b41b097d1e3b685f76868b6234165331458ba2733d1c7daafbaadd3cdbc1f937f7ec92c1f68dd76bc8670b169c2a2baf7d12bc778e78d59a4103931eb11d96b478b20cdafa69cb16f971e9b34b30d72aa52df", 0xb8}, {&(0x7f0000001cc0)="eb8c5a4e413c1be4ebc1bb93d3f371cd8078d55e42cf1f51c333a1517c8c7c219506a510726ebf76089f63180afb05aa521adb3059935c063ee6e1d5502fce3239a1224adf48fd7baf896cf46bf0104f43b66cb48525d39590279c2efbd37057ad2fbef4d0a5c45452b22baaa7cd27b1f7b48f813ea8db18a03b7df9bc64507c5c7553a1fd750d1b5ac73a5836a0cebce5c06cc9c89edff26e6bdb996cc5b98f2e08db429f7ba9e8108d5edbf4ae5866a94c5d80d20bf31c18d5cee463d15044dbc296cec783491f0ad49063b30b031a12e8", 0xd2}], 0x3, 0x6, 0x3c, 0x1) preadv(r6, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/217, 0xd9}], 0x1, 0x5, 0x3) getpid() pipe(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r9, &(0x7f0000004100)=[{{&(0x7f0000002040)=@qipcrtr={0x2a, 0x2, 0x7fff}, 0x80, &(0x7f0000002440)=[{&(0x7f00000020c0)="5d3f3131a83fd271637a172e69a3efd7c9efbc2bd3279a4aba7d156f2f6b71f874918d73b6f942f9f485433c7bf64d7d80d0a6284bf44ddca6af27ab02572f7b4ea7095487ea585ebd00cd6d72cf65b6d19fbed0360886c5331ccfff1c8ca1037372dc299a9deb33ae8e94a323c73577c1de57123e125fb0e1435fc3beb3c4087ca10e007e2521ed86c53ea4328cc540116659da0b9794ad021ea173a2bde945d2d0be45575d1bbb8e16ba8c", 0xac}, {&(0x7f0000002180)="9fb6f75bde066eb6e9e060f630d1469ea740766c9b0efdcbbe8ce0469a496d647ec5e5b90e05d803ffe082ddb6f7be0142e23614ceee83a67f5196746acd0d22ad202328e365b0362863e9de10ef1419208a2dcf8215d304ed4da89beb0717870c153ab5eeb718f03c3406350f00946a67be5649603c0c59855c94e85cfb4f38209f1142fd0ad59477ad02f8ee8f5a12ee506b5c00768d3168c19171e23fd64ba049ce20deb2c9b977b080346fbeef5be2d767a564e1a976463b3bbc33182688a6aec68cb75af430483aed75767974f603a9fb7f7a5d1d5b5c2c90cdcbb82aa4", 0xe0}, {&(0x7f0000002280)="577ab4034bf48217eddbd32d603697bf9518cfdb3d590154d0cd1d498a11f7ca854ec69506f7d32f51378590e3311b136daf7f04e3c3043b28318808e66d632636d965d79cabb0fa4b2134b5331e0df3ee9550a554ace7f0103b92ec6c59a98b82714ec08f9a9b696b424e30df73f2fbe5beb12d337f486dbe6f74a21f1d3b9c161a7d38dc3c8c859113cc7dac8a09dc81c998413388d044328cf8af43a1e9c4e1224915d2886ebb2045e7d78ca5c38b0e8a7c0ff71822a99952e07c1378e3", 0xbf}, {&(0x7f0000002340)="30961eba702d19bf3e2c83a8df7bffc81e853a1df2c7af9e12aec625d29392798c7bf431c350abeb9e891ffc373b3943b09dee25ce7e29f16cc6f277d44f23cb6eaafa010c533cd022e7a6f27c6014de640c6209f550845faa39e331d55690cc2056a17075d054ed59be4dfe83d4f320ebb2c9b48568d275febb07a50f7325abc1de", 0x82}, {&(0x7f0000002400)="64fee6e44c", 0x5}], 0x5}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e24, @remote}, 0x80, 0x0, 0x0, &(0x7f00000037c0)=[{0x80, 0x6, 0x8, "1193dee9b585ac3a61a17df1f9221dfa6f3c628a6bd3b02c905c813d8bfe5059f0fa940c7bf594bb00f06bfe05c4b4bbf2d7dbb837d3d45c21dad78ad32091bef3744f1a388c1092d686d2d7f12c55eb00fea449964ccc5326c8a09373c445e01dafba22d74f5c541c9a8f628d98ad"}, {0x48, 0x109, 0x1, "7d3ddc0416afea6609f219ffc6149e72634639c0817380f9888901aa8cd8127990bcc3b511829126459a6e47f9c5c54295d67714d6f8f0"}, {0xd8, 0x119, 0x9, "75e8f1c9d54a9c3bdec08b8d33dd4d60a51806500cc1d6ab52e220da2e8e335cc6bd1091ae50a00de3293df74533c42f2349901ad81fbb6ed051dc4c70133950080d3af448184b65407693da549b292dd0663ca7547e95d1d573afbbe405ef60b5d86aaf8ab015554dddd0d3cfea27253acb09c5eadf1e08d20b9bd33b450ed306ad4e721e89afc1b3c74c6a7432a61fdbd2099315c6fab4fd819d12f10a552f585654cb405692be633c31254e90a3d308aa69632bca34719149042fdaa7b7a5af2741"}, {0x10, 0x88, 0xe}, {0xc0, 0x107, 0x19, "0a0b5c63885074f2c2c952a055bde2dc1bc7518299790021c0922c685316823e9f8eef5bc511b6d33ed6f3f0c9596388c536dd76166f7a89109799239435096712294407d989a02db1cd111f30257efb9309dc6772e7d58b8754bea3b0fdc97e738ee0dcd32d18903b2d5d7a3a91a1785241b62f7ef1fd1224bdc974bac5665fd1fe91407b3726b30dadd4e5931c48ea69098efa3535ef49f441e9df73530d31b8bc1adc92762f1c2b14"}], 0x270}}, {{&(0x7f0000003b00)=@l2={0x1f, 0x626b, @any, 0x4, 0x1}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)="b3f81af3fd1e54f5ea3370e60633f334a2ac648584fc706f50d96b4d506333c9f3ac2aed724067c53844389d6298df09d6f8bc7f28feb81b9163afaf61f41f56a0bf5b86ca41b43b6fab5b2353fcf42103d297b4067965d948f39d35a3435a4d3e7ccaa85a71303cadf3b0887513d657b1dfb67ba49f18742b887d232063bccc9a704a60838ad84d625d3c", 0x8b}, {&(0x7f0000003d40)="f07ef7be866a71bc6c01f1ddfed7952e82030c3936322d720234efccbe7a9776799355732a167f796136c2815074dd54d11b6e924822fe6bfaadc7318ce0132c776a2a3a11ac89bef7d4fd647cdc68ac8cda154f5230d87edfa2a8fcb8cc54ffc7a105e891a35f8e4104c811d4a0461b8d448df5de3ef24bf7a5906a9bbb1097522c0aae8c24cf64903ccb76bac5a4aae3f1fe2120f36660cf9d87e11599abcb9dc46a6bfe6ba4a2be58c34a68f566d752a47035", 0xb4}, {&(0x7f0000003e00)}, {&(0x7f0000003ec0)="322d9f8482b82c4e21b8f90837927b6ebb8a226d5eff66311c03a56bbedcfdafdcdd431a2dcc241d7c809c173ca1e0a6179c23483db8559f826d1979b397880dede87bb4c01db30071b25dc0c645947732a8f3787383a497e5b04e9e3670a72b27ddbddf", 0x64}], 0x5, &(0x7f0000003fc0)=[{0x30, 0x11, 0x4, "97f36dfd90d7ed169639ef451cccf760ee755ae07085e30fd82c58"}, {0xb0, 0x108, 0x2, "9fa6d0006713f592ba0f4f3e525cb574b26f150b9356aaf7b0ff1fadb2712763e489069fd11a19a86f4c8cd14e9e36b34f14a684a3edae10d748fc02895e17c6d7d4ac0a2d88f6ef0c038532597761e83a72e5e238b16e2e4d35655b48f27a8cd9e74604f636626ea7f2c1d16e34c00f9f8e1f46ee07ce4ac7b4a6dcf2ce1c190b9e9dcec112eb538f8e39ec9d091aa0b83c461f275576ef87ccf56f"}, {0x58, 0x101, 0x8000, "c97fea1493824895095486790ee706cbc69551abfb6568fd883e5454270aea349b6f857aff603875f019aa8b435244f7d2e3c0ec9afaf4d04a96235e9473e5217b4da4d83eb857"}], 0x138}}], 0x3, 0x240088c0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4799}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) connect$tipc(r0, &(0x7f00000042c0)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000004300)=0x8) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f0000004340)={0x20, 0x9, 0x80, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000043c0)={&(0x7f0000004380)=[0x0, 0x0], 0x2, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000004400)={r10}) mkdir(&(0x7f0000004440)='./file0\x00', 0x1) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f0000004540)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)=@delrng={0x10, 0x14, 0x8, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004012) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000045c0)={0x3, &(0x7f0000004580)=[{0xf, 0xd, 0xfc, 0x2}, {0x6, 0x14, 0x0, 0x4}, {0x0, 0x7, 0x2, 0xfffffff8}]}) bind$inet6(r5, &(0x7f0000004600)={0xa, 0x4e21, 0xd, @mcast1, 0x80}, 0x1c) io_setup(0x6, &(0x7f0000004640)) 4.063658102s ago: executing program 3 (id=2137): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x4c200) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000500)={0xffffffffffffffff, 0x82b, {0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x18, 0x8, "1ea949c3f3fd1a92831b8e6f2a139c31068dc388eeecfd941d5d30c1dab1e627d2376fce8a5c31c4ac3def4541e57ca046af76d9587931f3dea9e518e805c2b5", "23ee1f4870b7ff17d12de03e12c4ae1115012249e2a4e0aae37d821eca600f827a9a2cf5968ddc59e40b8d6f63c811df111b945bf03337b27a41c477f4492075", "ebdb4a1aea965da05378f7519d2c41e9bdb2b59c6b505aa9ad6bf2bac9111ec2", [0x3b17, 0x5]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0101000000000000"]) 4.024713268s ago: executing program 1 (id=2138): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x27, 0x4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503002b00000020e918b74e811318000000007ad99e6463663d4d0086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000b72793f1b500e76535b8edb0f05800000000000000000000000000009704bd26b6a73075f62fb7dc4424d377156465488b416e1ad9fbbb3a0468b5aac4a05b02be1097b15a029ae09ee86fd29ea3d0f84a81da7027b830194cb99aa1cf5a2484f9943edec378ac7112b4cf220b1e8678e9b5a030cfe5ed9c7ecc349322f0927c68e16f51ac731c2e027acbac481322d9467c906bd891bcb3b7917bc99539c2f3a41a6dc3c3e976e74bc685bfbf99cdb3d7c6a5df68618e9d544a6757924d97e74343dbaeca8a922764e75976de475efffbd63b501322d118fd645a779a7abc774b6e58145c2b2d13f7a1b373a0208e82441ca5661cbaf661ac96a95cfc387603b108fff644b9c8bfd3d580f1b305dfeba251c3fea76a85a22d8fff24b17a99"], 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) semget$private(0x0, 0x3, 0x555) r7 = semget$private(0x0, 0x0, 0x587) semop(r7, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000280)=0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000180)=0x4) 3.938258124s ago: executing program 2 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x42fffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000e90000343c00000000000000236f017ac4b346378be4dd724b67629e83538f0c37f52b11b1c57c3235bc3b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="183000000000000000000000030000009500000000017c783a3921d2b595dd0000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8a4be11", @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f000000040005802400078008000200070000020c0004000d000000000000000c000300c300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 3.698828024s ago: executing program 4 (id=2140): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0xe4f6, @mcast2, 0x8}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x80000000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r1], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000300)=""/64, &(0x7f0000000080)=0x40) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 3.6474218s ago: executing program 1 (id=2141): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x4) listen(0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.501327744s ago: executing program 2 (id=2142): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x1800, 0xffffffff}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.823861501s ago: executing program 2 (id=2143): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006e80)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xf05, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.796426068s ago: executing program 4 (id=2144): syz_open_dev$video4linux(&(0x7f0000000180), 0x407, 0x103000) syz_io_uring_complete(0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x34, 0x0, 0x1, 0xd7, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0xe, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r0, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0x8011, 0x31324d59, 0x7, 0x9, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x0, 0x8}, {0x6}, {0x0, 0x9}, {0xaa}], 0x7f, 0x0, 0x1, 0x0, 0x2}}) 2.743519998s ago: executing program 0 (id=2145): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000030000000b0000000800", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100002800508005000209000000000800030001ac0f00090001007ee5d52ffd000000050009000000289140b48416061815089e8b1e7471a3453b6fabbd7fd9eab5c34b4ee21f498fc46a58d5766092f8dc6f52b86daebdd093c6b3c4c211b93b147f802072dae0eaabcb23a9b1a6"], 0x50}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) read$dsp(r4, &(0x7f00000000c0)=""/191, 0xbf) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x4}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) accept4$packet(r1, 0x0, 0x0, 0x80000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.742774804s ago: executing program 1 (id=2146): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4c092, r2, 0x0) fallocate(r2, 0x3, 0x8dc, 0xfffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000300)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xb8000003, 0x71, 0x10, 0xaa}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff) 1.739528893s ago: executing program 2 (id=2147): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0x149a82, 0xc2) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = memfd_create(&(0x7f00000017c0)='@\x1f)\x03\n*)\\\x00\xb6\xf0\xa3\xce2ho\x8dq\xe4F\x1a\xed\xa2C\xa6\x8a`\xfcE\b\x00\xe3R\xd6\xb8\xa8\x9d\x04\xfd\xaf\xb8vS\xceV\xa5\t\x00S~\x11\xd3\xa3`o\xa9z\xc8\xc9r\x99\x96\\\x8e\xa0\xef\xe6\x8a\xa3\xe5\xa7\xd5r\x96\x0f\x8c\xa61Nud\x14[\xa7\xb1\x1a\x14\xd5\x91T\xec\xfeb\x94\xf7\xec\x12I\x88\'#\xd4L\xf6\"o\xb6\f\x95\x9b\xa8\x02\xaf\x91\xc5(O|\xe7\xee\x90\x86\x9d\x1bP>\xd9\xd7T\x8cg\x91\x99\xd9$\xa3\x008\tn>\x14\x8a\x9a\xb2va\x1c\x88\x03\xdd,\x18\xdc\x8a\x00'/168, 0x2) unshare(0x2a020400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) syz_usb_disconnect(r4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x45c}}, 0x0) r5 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x7b, @loopback}, 0x1c) socket$kcm(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000200)}, 0xffb7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffffff0000eaffffff0000c3000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.736807046s ago: executing program 4 (id=2148): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="49275b361c180000000000000000000000000000008500000061000000950000d710443d6fcd52bd936596471ba09a8212066a889f1286e83649068f23fd798649a282a89c77217add380ef8483abe12a3b9f2d619baf291af5bba3007000000f365"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xe0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802440000fcffffef00000000000000008500005267656d4ee8a9d40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000004000000000000000000000fd0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000100000000000000004001e0000002000000000000000000000000ffff000000000000002c200002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40046f41, 0x20000502) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000100)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x44084) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0, 0x8010, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x0, &(0x7f0000000280), 0x0, 0x4) 1.515989788s ago: executing program 4 (id=2149): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x200000d0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=0x0) sendmmsg$sock(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)=@nfc={0x27, r5, 0x0, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="25d9b14f4474f1e340eb88e185a445043cb2532fec26494356351fcaacf567a907e82bf9d257e2cfc3f718bedca2d57b91544bb5618cb3c236fe", 0x3a}], 0x1, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}, {{&(0x7f0000000200)=@phonet={0x23, 0x74, 0x4, 0x8}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)="f2b1e343cfc2043f86fc09fc83dd66cc1110965443a4a381e00049714bf952c68328a11cebb582223f229cf907dc5b0c4c6ba8ebe8984d0bc6fc5f1fab380e007d26d865df5414d7350bfacd9f3c3586cf14fd4defa99effb6a4a1a578697376b2769bf9a9eafae0256b23546a3d4c752ee1d544f06d94282957306a5ad52e1450da4cddb2d199cbc94ad14a46770dd38ecaa49fc63759139efb2826d5109680aa7f777e854898f2f004731072d22566002c00375a08", 0xb6}, {&(0x7f0000000340)="4024fc2ab5de6f9d8f4f5ef1dd08cd96b70ff9981a870f12e901d83d6aa366526b801ec7a236223fded904e2900f0b3ad2a61b0477645c9365003cb8e9587d56de1965834d450649c601d60422c93b48c697342c2cb88ffdabc58abe90d1c7dab2726b9da850b299333798540706c3fbc5988443b605ba411e18299ed4e40d9724e3f8311439817ec45fbdff1689264c0a2380a9f5a65b59509022c934ab5146e5b5e370ab6322dc01f2a08f5347a23420fc027894350fc288e6191684b64952e54d54c2eeec4a0b06e7437ff1", 0xcd}, {&(0x7f0000000440)="192b553dd921af00a7e06f7946e61946eaa7feb0a701753a1f04ab8af09c8b1ddd08531c607dcc4d3cc139780e", 0x2d}, {&(0x7f0000000480)="b2256fa2af210bfe9d563b32762128e80e1cd334a558fccc0822e422722421babc093102ff18c01efe113db2e9d4668cde63e495f9a5034c56a8e89ced9bbb455fac586a49eb5640d450891d3e8e9e8292906d9470738f49a0fc", 0x5a}, {&(0x7f0000000500)="1731e54fafc22eff849b5fc0a3dd489b33a6436b06bd20fe350474d03241b19a3e204a3ae969432d5b4f75cb3614cd63adfe42c8f48b5e5dd60c412f6ac9c6087656cd74642c27fbab980c3c9360e4ce73314e4fe238c0d77774337356364433d528a27d9148fbca5bb83863a5d1cf98a7f56befdf54301efb38b6b3f1cfdbccfc980e8d38d68d4bd99ed5d80dbfc48e1d1b2541b7473ae52dd08a376df45429f05230be8381bd90d62f42e9366b2473", 0xb0}, {&(0x7f00000005c0)="7e068facef244fedd4e247a8c79f4a7f197877a863baa9d718e6d5b6bc3eed6b8c0650a90fd3a78bc29ed7750bfc7361b50439f52c7a4f83c3", 0x39}, {&(0x7f0000000600)="35df8bc0b9701f2a90b0eb82410baa91ec0e5cdfa78fba2272df101e98feedfea97dade8f54947ddb50e96856199e047", 0x30}, {&(0x7f0000000640)="12c48ace60572175e24dd515d1c0a578f3f155eee0a78aeeb57607effe26e103dc5c2e77d8a46320d343056eeb9044be1d65a99159df8ba944d2c652f0b6964de3c0ba7fe1108911a86b0cab3d4af6d1ed3b02d4fe00859cd7508d43a6b4a63f194fe710696aa079fd1570f1e665f349a3310de1cc33a733ef66fbd7f36fe06401da2428f2", 0x85}, {&(0x7f0000000700)="d27cd7fd489bcb24722c", 0xa}], 0x9, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0xe000}}, @timestamping={{0x14, 0x1, 0x25, 0xc0000000}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="ca12bb50b7885f1b9cd585d7138ab7f7aa850dc78f6d28c811971a506a09219972f9c78c45fd4e3c09033a3de62813ce4c9bae89d87c3e21b214f76afc7ac3607b6eac18417d215f22ca376af1274b47f5", 0x51}], 0x1, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x1412a939}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x34}}], 0xd8}}, {{&(0x7f0000000a80)=@nfc_llcp={0x27, r8, 0x0, 0x2, 0x8, 0x9, "a753b2e8080ddb466e4076e1a968de37f95cbbc1bd075e34dd78ccb46f83c6dfa567a02eb3e413e4ff6a123c7d29b21c301ec36ea20475bcc670abd8fc5cfa", 0x33}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000b00)="e348a4f32e3513e9599c82fc012b69e8945e764ced39b7fbc68f5ac49d257b10453584c252b864c7d8d4ecc6b270a23bb0c3b121c22b073db84475d502f29c88836b1f2506c0fd9410e27323261b2445c5fe1633de9e1036c37142d15b1a9d01ef326d1457c790b44467af9e4d4255de31a1b866a7e3f73da448bf7450e7b7800cceb091113ce9a30b2527ec35c85c5245bfbc634f9cb0aa1e5714058d9f74ff4b03c8f7fbf0a86f9d44b8de329f8bf74bb6ef7e7eeaf45f3261c585ed8c4905716ffe638188578e453685b3ebd2604924afd6cac83d1ad8276798b8146822108636d5b6963bb583ef6e64f4f5887bba", 0xf0}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="68aa4075eb76adbb9aa3ab466bf78ed77acefea05376b9973a88fa74d7f4be1437e3f11c4bee612d04e80558bb9666708685a38956ca8a508d8f7fbead13e093aac209816292d7000f24314e44ab2e72b75a86845c4e7b55c080e66041175b0d5cf8644be532f725c0baed79057b2b32e00e511ae9c08b0e8729a23a8ec21f6d5e895d8bb3473c0aef14b13d137a8c54f6c93b58bca30b82bddf5029fc5977361e95e8ee45692d", 0xa7}, {&(0x7f0000001cc0)="0739d0714da218541795519a8122d481902fcb5828ccdf70d0e648aeb181a3a9c242302235ae5e2114233a2137f779794d4e6e00c3be0559c950579049ff", 0x3e}, {&(0x7f0000001d00)="bdcf931a79e9b4fb870844978248d69a3c10a6b46686bfe05fe283010c5f9d9842bc5ec7d86dc4758e4a53530cd0a4e3c0beb2fff763746c42719615b71cc4511a03a96ab78e0f682994e0e67641c1710875657232b8745e66b68b260dd5b360a03ee9d2f7e52c12b78fc893642b7dc34edcdd1bb789b00f6d25c9c3c1716aa5350867c19be68336fd014e82091d46d59a355bc05dc4b4b32cd1b25ff1a154b71c4273f6c0bf9c3e2071920565dc5d21afa04ba1d5d75ede6df33db82e25ba4f53d9d4ffb9d5f18d682c15732f1d0c5dc38c34cb66ad1cee2965f73b", 0xdc}, {&(0x7f0000001e00)="3214cfb452fc148119bbe96126467502a8946e614b30e8912c5d74c331b73473c4b809eaa48009baa0d958ad7b685634d030a9dfd405f2e7f5f9f4280bf0f51ceb3c12a4864c3efca79df869c520ffc51db1d66c81ca496e47b020402e93e5c2b97ac94abacee73e7c3ab85ac6600cb4c761d20c6606da9e8849232aaebc9789c187889753a590e2a8e26072e43a4b92308c0b5b913ba225a1fd2e3d832d08d7c32e456ab59585885163e3df60fe4a6bdf7c29c77cf87ed7a081ec637c86f2239e90309ccc47e3683e09f75c02ed81211365302207a082c91da1b34993148a0dab655bcfbd582f5de33a", 0xea}, {&(0x7f0000001f00)="79ae0c1b906b34e15bb1393c729b243b34e90a85623fb866ab75ff36d8eaf105c286d624c1d7ee21b185710ccc02266b165a263fbb0ffab542fa23eae8018045ef96849dc1128021c316f2a9e542855a4ba75e6ea1a1f782ec5a097c4693754bdf71854bb6953b7165bc0ee3f04ca9ea68cac1084ed30c1ae0ec5d9282d15837a70d3210287a8c09c027b18ed4cb01590440", 0x92}, {&(0x7f0000001fc0)="f4ec864fbad526908dbbadf69332c6d12d3cfdda6470428b65627f43d7e4d5edead333feff17b3ec50814a53d2ec9782e14562190af2cac2f9f9977dc29c85e326947e0b08e6003462d3d9bd47642b14f6a3cf85bb42cff5951d6ad7a0e1c1524e021aeccc9581ad6946aebf924d5c8843768647093fcb0803803003e3544124f82ccfc8dfe7373ec01d2e597abea4bbbe00162b6029", 0x96}], 0x8, &(0x7f0000002100)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}], 0x4, 0x20040001) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 756.962125ms ago: executing program 3 (id=2150): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000029ac0)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000010ac0)=""/102392, 0x18ff8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x1}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x800) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406e05e600000000010902240001000000060904000001030000000921000000012207000905810300044000000000"], 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000200)={0xff, "0b1640f15da702ef85fd7aae316d2f4d8f21aedc2d817c9683a09def59956944", 0x1, 0x7fffffff, 0x0, 0x2000000, 0x4}) 721.658861ms ago: executing program 4 (id=2151): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x62, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001080)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xfffffe2b}, 0x1, 0x2000000, 0x0, 0x9010}, 0x6004840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 685.444895ms ago: executing program 1 (id=2152): unshare(0x2a020400) r0 = inotify_init1(0x80800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (fail_nth: 2) 0s ago: executing program 1 (id=2153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xff00, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r8, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) shutdown(r8, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) kernel console output (not intermixed with test programs): b 5-1: Manufacturer: syz [ 384.971467][ T44] usb 5-1: SerialNumber: syz [ 385.023336][ T9431] overlayfs: missing 'lowerdir' [ 385.424272][ T44] usb 5-1: config 0 descriptor?? [ 385.457066][ T9402] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 385.466110][ T44] hub 5-1:0.0: bad descriptor, ignoring hub [ 385.472071][ T44] hub 5-1:0.0: probe with driver hub failed with error -5 [ 385.731205][ T9444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 385.740604][ T9441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 385.804732][ T977] usb 5-1: USB disconnect, device number 34 [ 385.924646][ T5997] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 385.976874][ T9448] lo speed is unknown, defaulting to 1000 [ 386.108459][ T5997] usb 1-1: config 0 has an invalid interface number: 80 but max is 1 [ 386.121378][ T5997] usb 1-1: config 0 has an invalid interface number: 13 but max is 1 [ 386.129942][ T5997] usb 1-1: config 0 has no interface number 0 [ 386.139278][ T5997] usb 1-1: config 0 has no interface number 1 [ 386.146053][ T5997] usb 1-1: config 0 interface 13 has no altsetting 0 [ 386.819237][ T5997] usb 1-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=2e.7e [ 386.836478][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.974455][ T5997] usb 1-1: Product: syz [ 386.978713][ T5997] usb 1-1: Manufacturer: syz [ 386.983320][ T5997] usb 1-1: SerialNumber: syz [ 386.996183][ T5997] usb 1-1: config 0 descriptor?? [ 387.339327][ T5997] cdc_ether 1-1:0.80: More than one union descriptor, skipping ... [ 387.365998][ T5997] usb 1-1: bad CDC descriptors [ 387.398061][ T5997] usb 1-1: USB disconnect, device number 27 [ 388.079663][ T30] audit: type=1326 audit(1750053515.525:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9478 comm="syz.4.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18098e929 code=0x0 [ 388.312245][ T9486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.965'. [ 388.418714][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 388.708496][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 388.748644][ T977] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 389.047506][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 389.204748][ T977] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.213391][ T977] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 389.231078][ T977] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 389.260982][ T977] usb 3-1: can't read configurations, error -61 [ 389.269113][ T9502] lo speed is unknown, defaulting to 1000 [ 389.414927][ T977] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 389.603288][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 389.640105][ T977] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.663060][ T977] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 389.889437][ T977] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 389.897587][ T977] usb 3-1: can't read configurations, error -61 [ 389.905621][ T977] usb usb3-port1: attempt power cycle [ 390.738114][ T977] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 391.223636][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 391.920404][ T977] usb 3-1: device descriptor read/all, error -71 [ 394.223058][ T9541] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 394.578110][ T9560] lo speed is unknown, defaulting to 1000 [ 396.190290][ T9570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.987'. [ 396.906961][ T9589] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.994'. [ 398.257717][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.997'. [ 399.949486][ T9638] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 400.008538][ T9636] lo speed is unknown, defaulting to 1000 [ 400.283570][ T9648] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.292626][ T9648] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 400.304519][ T9648] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 403.095170][ T9669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.112083][ T9669] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 403.671144][ T9669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.685280][ T9669] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 403.693034][ T9669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.702230][ T9669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 403.722860][ T9669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.737389][ T9669] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 403.980303][ T9682] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 403.995201][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 403.999544][ T9682] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 404.514767][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 404.526022][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.542265][ T10] usb 5-1: config 8 has an invalid interface number: 121 but max is 0 [ 404.551832][ T10] usb 5-1: config 8 has no interface number 0 [ 404.563981][ T10] usb 5-1: config 8 interface 121 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.574836][ T10] usb 5-1: config 8 interface 121 has no altsetting 0 [ 404.589453][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f0.98 [ 404.600262][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.608839][ T10] usb 5-1: Product: syz [ 404.614188][ T10] usb 5-1: Manufacturer: syz [ 404.622546][ T10] usb 5-1: SerialNumber: syz [ 404.785045][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 404.856173][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.878683][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.744650][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 405.750955][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 405.751991][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 406.154579][ T10] radio-si470x 5-1:8.121: this is not a si470x device. [ 406.214875][ T10] radio-raremono 5-1:8.121: this is not Thanko's Raremono. [ 406.264782][ T10] usb 5-1: USB disconnect, device number 35 [ 406.874422][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 406.985902][ T9709] lo speed is unknown, defaulting to 1000 [ 407.824606][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 407.831180][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 407.837400][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 409.932513][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 412.706427][ T9745] syz_tun: entered allmulticast mode [ 412.809507][ T9745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1033'. [ 413.097423][ T9744] syz_tun: left allmulticast mode [ 414.550620][ T9768] lo speed is unknown, defaulting to 1000 [ 415.976346][ T30] audit: type=1326 audit(1750053543.545:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9790 comm="syz.1.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936378e929 code=0x0 [ 416.094639][ T9801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1046'. [ 416.260309][ T5887] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 416.275288][ T5997] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 416.434462][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 416.439726][ T5997] usb 1-1: Using ep0 maxpacket: 8 [ 416.476012][ T5887] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 417.123303][ T5997] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 417.160959][ T5887] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.243963][ T5997] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.273345][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.291012][ T5997] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.301527][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.314011][ T5997] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.325166][ T5887] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.338651][ T5997] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.354573][ T5887] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 417.364472][ T5997] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 417.373838][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.386552][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.465419][ T5997] usb 1-1: usb_control_msg returned -32 [ 418.503539][ T5997] usbtmc 1-1:16.0: can't read capabilities [ 418.778803][ T5887] usb 4-1: usb_control_msg returned -32 [ 418.784916][ T5887] usbtmc 4-1:16.0: can't read capabilities [ 419.432989][ T9835] loop2: detected capacity change from 0 to 7 [ 419.938321][ T9835] Dev loop2: unable to read RDB block 7 [ 419.955432][ T9835] loop2: AHDI p2 p3 [ 419.963286][ T9835] loop2: partition table partially beyond EOD, truncated [ 419.972309][ T9835] loop2: p2 size 150995456 extends beyond EOD, truncated [ 419.997636][ T977] usb 1-1: USB disconnect, device number 28 [ 420.263962][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 420.355271][ T5986] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 420.375113][ T30] audit: type=1326 audit(1750053547.945:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz.0.1063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f065e38e929 code=0x0 [ 420.410075][ T9851] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 420.491771][ T9856] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1063'. [ 420.529555][ T5986] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 420.537374][ T5986] usb 5-1: can't read configurations, error -61 [ 420.590888][ T977] usb 4-1: USB disconnect, device number 28 [ 420.684720][ T5986] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 421.499176][ T5986] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 421.507474][ T5986] usb 5-1: can't read configurations, error -61 [ 421.516273][ T5986] usb usb5-port1: attempt power cycle [ 422.324975][ T5986] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 422.360735][ T5986] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 422.371813][ T5986] usb 5-1: can't read configurations, error -61 [ 422.931100][ T5986] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 425.651798][ T5986] usb 5-1: device descriptor read/8, error -71 [ 425.778298][ T5986] usb usb5-port1: unable to enumerate USB device [ 426.500276][ T30] audit: type=1326 audit(1750053554.055:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9906 comm="syz.4.1078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18098e929 code=0x0 [ 426.599741][ T9913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1078'. [ 427.763244][ T9923] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 429.402118][ T9957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.419944][ T5887] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 430.094984][ T5997] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 430.114192][ T5887] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 430.123098][ T5887] usb 4-1: can't read configurations, error -61 [ 430.244586][ T5997] usb 1-1: device descriptor read/64, error -71 [ 430.255313][ T5887] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 430.299319][ T30] audit: type=1326 audit(1750053557.865:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9972 comm="syz.4.1094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18098e929 code=0x0 [ 430.407950][ T9975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1094'. [ 430.482711][ T5887] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 430.495784][ T5887] usb 4-1: can't read configurations, error -61 [ 430.506452][ T5887] usb usb4-port1: attempt power cycle [ 430.529020][ T5997] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 431.074781][ T5997] usb 1-1: device descriptor read/64, error -71 [ 431.081215][ T5887] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 431.123869][ T5887] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 431.132788][ T5887] usb 4-1: can't read configurations, error -61 [ 431.210143][ T5997] usb usb1-port1: attempt power cycle [ 431.228885][ T9989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1099'. [ 431.274778][ T5887] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 431.443960][ T9993] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 431.479670][ T5887] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 431.487810][ T5887] usb 4-1: can't read configurations, error -61 [ 431.495321][ T5887] usb usb4-port1: unable to enumerate USB device [ 432.049966][ T5997] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 432.086619][ T5997] usb 1-1: device descriptor read/8, error -71 [ 432.487199][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1105'. [ 432.634461][ T5997] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 432.874805][ T5997] usb 1-1: device not accepting address 32, error -71 [ 432.884584][ T5997] usb usb1-port1: unable to enumerate USB device [ 433.139242][T10018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.444025][ T30] audit: type=1326 audit(1750053561.005:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc02d8e929 code=0x0 [ 433.552850][T10029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1109'. [ 435.545345][T10048] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 435.657792][T10054] cgroup: none used incorrectly [ 438.436132][T10070] sg_write: data in/out 768/265 bytes for SCSI command 0xb1-- guessing data in; [ 438.436132][T10070] program syz.2.1120 not setting count and/or reply_len properly [ 438.784658][ T5986] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 438.827819][T10087] netlink: 'syz.3.1123': attribute type 12 has an invalid length. [ 439.251607][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 439.273525][ T5986] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 439.320874][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 439.444985][ T5986] usb 3-1: Product: syz [ 439.449265][ T5986] usb 3-1: Manufacturer: syz [ 439.453883][ T5986] usb 3-1: SerialNumber: syz [ 439.467640][T10085] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 439.470678][ T5986] usb 3-1: config 0 descriptor?? [ 439.539801][T10071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.548651][ T5986] hub 3-1:0.0: bad descriptor, ignoring hub [ 439.557028][ T5986] hub 3-1:0.0: probe with driver hub failed with error -5 [ 439.877541][ T2080] usb 3-1: USB disconnect, device number 18 [ 440.067060][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.759778][T10107] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 441.378441][T10109] random: crng reseeded on system resumption [ 445.294430][T10162] loop2: detected capacity change from 0 to 7 [ 445.562130][T10162] Dev loop2: unable to read RDB block 7 [ 445.567988][T10162] loop2: AHDI p2 p3 [ 445.571974][T10162] loop2: partition table partially beyond EOD, truncated [ 446.280663][T10162] loop2: p2 size 150995456 extends beyond EOD, truncated [ 446.437744][T10172] netlink: 'syz.0.1148': attribute type 21 has an invalid length. [ 446.469679][T10172] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1148'. [ 446.554791][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 447.354963][ T10] usb 2-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 447.411981][ T10] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 447.421962][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 447.449449][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.368344][ T977] usb 2-1: USB disconnect, device number 37 [ 449.473443][T10211] netlink: 'syz.1.1161': attribute type 21 has an invalid length. [ 449.493290][T10211] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1161'. [ 455.746097][T10307] netlink: 'syz.2.1183': attribute type 39 has an invalid length. [ 457.335733][T10318] block device autoloading is deprecated and will be removed. [ 458.685240][T10325] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 459.319760][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1198'. [ 459.684484][ T5887] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 459.859622][ T5887] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 459.872520][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.922696][ T5887] usb 3-1: config 0 descriptor?? [ 459.957929][ T5887] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 460.592634][ T5887] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 461.170656][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.170933][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.180462][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 461.202856][ T5887] gspca_cpia1: usb_control_msg 05, error -71 [ 461.202882][ T5887] cpia1 3-1:0.0: unexpected systemstate: 00 [ 461.207494][ T5887] usb 3-1: USB disconnect, device number 19 [ 461.349893][T10369] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 461.713848][ T30] audit: type=1800 audit(1750053589.275:331): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1205" name="bus" dev="overlay" ino=1198 res=0 errno=0 [ 461.840092][T10373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.905367][T10379] lo speed is unknown, defaulting to 1000 [ 462.017064][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 465.184697][ T5938] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 465.793602][ T5938] usb 2-1: config index 0 descriptor too short (expected 31881, got 27) [ 465.809305][ T5938] usb 2-1: config 185 has too many interfaces: 149, using maximum allowed: 32 [ 465.827334][ T5938] usb 2-1: config 185 has an invalid interface number: 252 but max is 148 [ 465.836205][ T5938] usb 2-1: config 185 has 1 interface, different from the descriptor's value: 149 [ 465.847091][ T5938] usb 2-1: config 185 has no interface number 0 [ 465.853798][ T5938] usb 2-1: config 185 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 465.868212][ T5938] usb 2-1: config 185 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 465.893307][ T5938] usb 2-1: config 185 interface 252 has no altsetting 0 [ 465.937207][ T5938] usb 2-1: string descriptor 0 read error: -22 [ 465.963327][T10398] sctp: failed to load transform for md5: -4 [ 465.971482][ T5938] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 466.046699][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.091674][ T5938] usb 2-1: can't set config #185, error -71 [ 466.121504][ T5938] usb 2-1: USB disconnect, device number 38 [ 467.446360][T10433] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 467.484686][T10433] netlink: 'syz.3.1222': attribute type 11 has an invalid length. [ 467.496633][T10433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1222'. [ 467.531093][T10440] kAFS: No cell specified [ 467.662727][ T30] audit: type=1326 audit(1750053595.225:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10436 comm="syz.1.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936378e929 code=0x0 [ 468.376617][T10452] tipc: Invalid UDP bearer configuration [ 468.376673][T10452] tipc: Enabling of bearer rejected, failed to enable media [ 471.333929][T10482] syz.4.1236: attempt to access beyond end of device [ 471.333929][T10482] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 471.402602][T10482] syz.4.1236: attempt to access beyond end of device [ 471.402602][T10482] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 471.476294][T10490] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 471.476294][T10490] program syz.1.1238 not setting count and/or reply_len properly [ 471.644637][ T44] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 472.254933][ T5880] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 472.468682][ T44] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 472.497538][ T44] usb 5-1: config 0 has no interface number 0 [ 472.530596][ T44] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 472.560729][T10496] tipc: Invalid UDP bearer configuration [ 472.560786][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 472.724741][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.733842][ T44] usb 5-1: Product: syz [ 472.738436][ T44] usb 5-1: Manufacturer: syz [ 472.743153][ T44] usb 5-1: SerialNumber: syz [ 472.777919][ T44] usb 5-1: config 0 descriptor?? [ 472.912881][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 473.265293][ T44] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 473.267646][ T5880] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.294575][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.303163][ T5880] usb 2-1: Product: syz [ 473.307719][ T5880] usb 2-1: Manufacturer: syz [ 473.312428][ T5880] usb 2-1: SerialNumber: syz [ 473.326446][ T5880] usb 2-1: config 0 descriptor?? [ 473.339993][T10490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 473.354089][ T5880] hub 2-1:0.0: bad descriptor, ignoring hub [ 473.361212][ T5880] hub 2-1:0.0: probe with driver hub failed with error -5 [ 474.066888][ T44] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 474.096153][ T44] dib0700: firmware download failed at 7 with -22 [ 474.167636][ T44] usb 5-1: USB disconnect, device number 40 [ 474.210812][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 474.225810][ T5938] usb 2-1: USB disconnect, device number 39 [ 474.402032][ T30] audit: type=1326 audit(1750053601.965:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10511 comm="syz.3.1245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc02d8e929 code=0x0 [ 474.402594][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 474.423096][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.477696][T10517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1245'. [ 474.699397][T10523] loop2: detected capacity change from 0 to 7 [ 474.708105][T10523] Dev loop2: unable to read RDB block 7 [ 474.713744][T10523] loop2: AHDI p2 p3 [ 474.717710][T10523] loop2: partition table partially beyond EOD, truncated [ 474.724910][T10523] loop2: p2 size 150995456 extends beyond EOD, truncated [ 479.612658][T10588] sg_write: data in/out 768/343 bytes for SCSI command 0xb1-- guessing data in; [ 479.612658][T10588] program syz.2.1265 not setting count and/or reply_len properly [ 481.558499][ T5880] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 483.065985][ T5880] usb 3-1: device descriptor read/all, error -71 [ 484.932571][T10627] veth0: entered promiscuous mode [ 484.943514][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 485.508977][ T5880] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 485.704500][ T5880] usb 3-1: device descriptor read/64, error -71 [ 487.384758][T10648] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 487.475646][ T5880] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 487.552016][T10652] sg_write: data in/out 768/343 bytes for SCSI command 0xb1-- guessing data in; [ 487.552016][T10652] program syz.1.1283 not setting count and/or reply_len properly [ 487.744829][ T5880] usb 3-1: device descriptor read/64, error -71 [ 488.031529][T10659] netlink: 'syz.2.1286': attribute type 21 has an invalid length. [ 488.049796][ T5880] usb usb3-port1: attempt power cycle [ 488.055394][ T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 488.064773][T10659] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1286'. [ 488.974512][ T5986] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 489.043501][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 489.088028][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 489.114391][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 489.122743][ T10] usb 2-1: Product: syz [ 489.154408][ T10] usb 2-1: Manufacturer: syz [ 489.159088][ T10] usb 2-1: SerialNumber: syz [ 489.184782][ T10] usb 2-1: config 0 descriptor?? [ 489.193976][T10652] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 489.205341][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 489.221744][ T5986] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.247204][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 489.253334][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 489.274526][ T5986] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.283721][ T5986] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 489.343536][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.367383][ T5986] usb 5-1: config 0 descriptor?? [ 489.554705][ T10] usb 2-1: USB disconnect, device number 40 [ 489.629862][ T44] usb 5-1: USB disconnect, device number 41 [ 490.016685][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 490.193840][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 490.263701][T10694] netlink: 'syz.4.1298': attribute type 21 has an invalid length. [ 490.275107][T10694] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1298'. [ 490.354662][T10697] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 491.599972][T10715] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1302'. [ 491.633290][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.641156][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.759045][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 491.800723][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 491.855563][T10725] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 491.909342][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 492.138452][T10737] netlink: 'syz.3.1312': attribute type 21 has an invalid length. [ 492.148864][T10737] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1312'. [ 492.194657][ T5938] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 492.614451][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 492.622153][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 492.642346][ T5938] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 492.657184][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.666845][ T5938] usb 5-1: Product: syz [ 492.671351][ T5938] usb 5-1: Manufacturer: syz [ 492.676410][ T5938] usb 5-1: SerialNumber: syz [ 492.682819][ T5938] usb 5-1: config 0 descriptor?? [ 492.697848][ T5938] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 493.554477][ T5938] gspca_zc3xx: reg_w_i err -110 [ 494.164590][ T5938] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 494.172810][ T5938] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 494.998088][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 495.828258][ T5938] usb 5-1: USB disconnect, device number 42 [ 500.493732][T10817] cgroup: none used incorrectly [ 500.578293][T10818] bridge0: entered promiscuous mode [ 500.584579][T10818] macvlan2: entered promiscuous mode [ 501.634986][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.501774][T10872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.846342][T10881] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1348'. [ 506.940514][T10881] syz.2.1348: attempt to access beyond end of device [ 506.940514][T10881] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 506.955255][T10881] hpfs: hpfs_map_sector(): read error [ 512.257863][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 512.465698][T10929] overlay: ./file0 is not a directory [ 512.499685][T10925] loop2: detected capacity change from 0 to 7 [ 512.508976][T10925] Dev loop2: unable to read RDB block 7 [ 512.514753][T10925] loop2: AHDI p2 p3 [ 512.518753][T10925] loop2: partition table partially beyond EOD, truncated [ 512.525889][T10925] loop2: p2 size 150995456 extends beyond EOD, truncated [ 515.074462][ T5986] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 515.244597][ T5986] usb 4-1: Using ep0 maxpacket: 16 [ 515.252726][ T5986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.252754][ T5986] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.252791][ T5986] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 515.542136][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.403087][ T5986] usb 4-1: config 0 descriptor?? [ 519.952851][ T5997] usb 4-1: USB disconnect, device number 33 [ 521.591787][ T30] audit: type=1326 audit(1750053649.155:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11003 comm="syz.1.1380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936378e929 code=0x0 [ 521.722237][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1380'. [ 522.214436][ T30] audit: type=1326 audit(1750053649.745:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11007 comm="syz.2.1382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c0d38e929 code=0x0 [ 522.246187][T11017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1382'. [ 522.933052][T11027] vlan2: entered promiscuous mode [ 522.942576][T11027] bridge0: entered promiscuous mode [ 522.968075][T11027] vlan2: entered allmulticast mode [ 522.973264][T11027] bridge0: entered allmulticast mode [ 523.608744][T11035] bridge_slave_0: left allmulticast mode [ 523.614968][T11035] bridge_slave_0: left promiscuous mode [ 523.843057][T11035] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.876255][T11035] bridge_slave_1: left allmulticast mode [ 523.892469][T11035] bridge_slave_1: left promiscuous mode [ 523.906239][T11035] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.370522][T11035] bond0: (slave bond_slave_0): Releasing backup interface [ 524.462582][T11055] loop2: detected capacity change from 0 to 7 [ 524.469756][T11035] bond0: (slave bond_slave_1): Releasing backup interface [ 524.490347][T11055] Dev loop2: unable to read RDB block 7 [ 524.496104][T11055] loop2: AHDI p2 p3 [ 524.500063][T11055] loop2: partition table partially beyond EOD, truncated [ 524.507207][T11055] loop2: p2 size 150995456 extends beyond EOD, truncated [ 524.559943][ T5986] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 524.575363][T11035] team0: Port device team_slave_0 removed [ 524.672159][T11035] team0: Port device team_slave_1 removed [ 524.689274][T11035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.707786][T11035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.720366][T11035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.728545][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 524.739904][T11035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.781852][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 524.801241][ T5986] usb 5-1: Using ep0 maxpacket: 8 [ 524.839701][ T5986] usb 5-1: unable to get BOS descriptor or descriptor too short [ 524.849953][ T5986] usb 5-1: config 4 interface 0 has no altsetting 0 [ 524.861972][ T5986] usb 5-1: string descriptor 0 read error: -22 [ 524.869793][ T5986] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 524.933404][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.971763][ T5986] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 524.997872][ T5986] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 525.020856][ T5986] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 525.037233][ T5986] usb 5-1: media controller created [ 525.084966][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.389845][ T5986] zl10353_read_register: readreg error (reg=127, ret==0) [ 525.456542][ T5986] usb 5-1: USB disconnect, device number 43 [ 525.502119][ T30] audit: type=1326 audit(1750053653.065:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.1.1396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936378e929 code=0x0 [ 525.693352][T11071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1396'. [ 526.325687][T11083] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 526.328497][T11080] netlink: 'syz.2.1400': attribute type 4 has an invalid length. [ 526.364963][T11080] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1400'. [ 526.374653][T11077] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 526.402870][T11085] tmpfs: Unknown parameter 'usruuoaœ¥ÜšCFû«&î‡@óo¨®âu8U{NGè _ÍN¸R%Âó>f› ¯¿£D(¬v'6' [ 526.455480][T11080] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 526.504468][T11077] overlayfs: overlapping lowerdir path [ 526.559437][T11088] macvlan3: entered promiscuous mode [ 526.734457][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 526.898689][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.918802][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.942114][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 526.962574][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.983613][ T10] usb 3-1: config 0 descriptor?? [ 527.406482][ T10] steelseries 0003:1038:12B6.0002: item fetching failed at offset 5/7 [ 527.418460][T11107] loop2: detected capacity change from 0 to 7 [ 527.426131][T11107] Dev loop2: unable to read RDB block 7 [ 527.431733][T11107] loop2: AHDI p2 p3 [ 527.435783][T11107] loop2: partition table partially beyond EOD, truncated [ 527.442903][T11107] loop2: p2 size 150995456 extends beyond EOD, truncated [ 527.451365][ T10] steelseries 0003:1038:12B6.0002: probe with driver steelseries failed with error -22 [ 527.880848][ T30] audit: type=1326 audit(1750053655.445:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11113 comm="syz.1.1412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936378e929 code=0x0 [ 527.982515][T11119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1412'. [ 527.988186][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 528.640913][ T5880] usb 3-1: USB disconnect, device number 25 [ 528.695525][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 528.711099][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 528.733423][ T10] usb 5-1: config 4 interface 0 has no altsetting 0 [ 528.749881][ T10] usb 5-1: string descriptor 0 read error: -22 [ 528.772884][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 528.810895][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.828281][ T10] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 528.845611][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 528.859414][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 528.867329][ T10] usb 5-1: media controller created [ 528.901895][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.038562][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 529.646362][ T10] usb 5-1: USB disconnect, device number 44 [ 529.792559][T11137] tipc: Invalid UDP bearer configuration [ 529.792614][T11137] tipc: Enabling of bearer rejected, failed to enable media [ 530.415734][T11143] : entered promiscuous mode [ 530.484377][ T44] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 530.644568][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 530.778839][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.986089][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 531.110513][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.118652][ T44] usb 4-1: Product: syz [ 531.122832][ T44] usb 4-1: Manufacturer: syz [ 531.133348][ T44] usb 4-1: SerialNumber: syz [ 532.646873][ T44] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 532.860957][ T44] cdc_ncm 4-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 532.928345][ T44] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 536.064738][ T44] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 536.117756][ T44] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 536.174028][ T44] usb 4-1: USB disconnect, device number 34 [ 536.189822][T11174] cgroup: none used incorrectly [ 536.220456][ T44] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 537.791629][T11204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1438'. [ 539.486089][T11226] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 539.704805][ T5880] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 540.394364][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 540.404386][ T5880] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 540.417963][ T5880] usb 5-1: config 1 has no interface number 0 [ 540.424198][ T5880] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 540.437253][ T5880] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 540.447822][ T5880] usb 5-1: config 1 interface 105 has no altsetting 0 [ 540.457613][ T5880] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 540.582567][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.590932][ T5880] usb 5-1: Product: syz [ 540.595159][ T5880] usb 5-1: Manufacturer: syz [ 540.599777][ T5880] usb 5-1: SerialNumber: syz [ 540.609022][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 540.616458][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 540.958986][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1449'. [ 541.510957][T11251] netlink: 'syz.0.1449': attribute type 4 has an invalid length. [ 541.825736][T11257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.857751][T11257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 543.253512][T11225] lo speed is unknown, defaulting to 1000 [ 543.737994][T11285] tmpfs: Unknown parameter 'hug߯åŽver' [ 544.644120][ T5880] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 544.674624][ T5880] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 544.723494][ T5880] usb 5-1: USB disconnect, device number 45 [ 544.835171][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 544.913374][T11305] loop2: detected capacity change from 0 to 7 [ 544.954672][T11305] Dev loop2: unable to read RDB block 7 [ 544.960700][T11305] loop2: AHDI p2 p3 [ 544.965373][T11305] loop2: partition table partially beyond EOD, truncated [ 544.973649][T11305] loop2: p2 size 150995456 extends beyond EOD, truncated [ 545.457600][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 545.476753][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.503642][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 545.568319][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 545.851141][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.993244][T11316] netlink: 'syz.3.1469': attribute type 21 has an invalid length. [ 546.002460][ T10] usb 3-1: config 0 descriptor?? [ 546.820610][T11316] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1469'. [ 548.653579][ T10] usb 3-1: USB disconnect, device number 26 [ 548.806136][T11342] netlink: 'syz.0.1475': attribute type 21 has an invalid length. [ 548.815375][T11342] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1475'. [ 552.096883][T11395] netlink: 'syz.1.1490': attribute type 21 has an invalid length. [ 552.143907][T11395] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1490'. [ 552.450303][T11401] kernel profiling enabled (shift: 17) [ 554.211670][T11424] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 555.499163][T11435] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1498'. [ 557.065558][T11444] netlink: 'syz.4.1503': attribute type 21 has an invalid length. [ 557.074868][T11444] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1503'. [ 558.028808][T11450] syz.1.1506 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 559.218570][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 559.238506][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 560.649489][T11497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1518'. [ 560.726739][T11500] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1515'. [ 561.799009][T11488] syz.2.1516: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 561.817183][T11488] CPU: 0 UID: 0 PID: 11488 Comm: syz.2.1516 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 561.817211][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.817228][T11488] Call Trace: [ 561.817242][T11488] [ 561.817251][T11488] dump_stack_lvl+0x189/0x250 [ 561.817290][T11488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.817320][T11488] ? __pfx__printk+0x10/0x10 [ 561.817340][T11488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 561.817374][T11488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 561.817408][T11488] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 561.817444][T11488] warn_alloc+0x214/0x310 [ 561.817478][T11488] ? __pfx_warn_alloc+0x10/0x10 [ 561.817515][T11488] ? __get_vm_area_node+0x28f/0x300 [ 561.817541][T11488] ? translate_table+0x19b/0x2040 [ 561.817571][T11488] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 561.817629][T11488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 561.817661][T11488] ? rcu_is_watching+0x15/0xb0 [ 561.817690][T11488] ? translate_table+0x19b/0x2040 [ 561.817714][T11488] ? translate_table+0x19b/0x2040 [ 561.817742][T11488] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 561.817775][T11488] ? translate_table+0x19b/0x2040 [ 561.817798][T11488] ? xt_alloc_table_info+0x3b/0xa0 [ 561.817834][T11488] translate_table+0x19b/0x2040 [ 561.817874][T11488] ? __lock_acquire+0xab9/0xd20 [ 561.817909][T11488] ? __pfx_translate_table+0x10/0x10 [ 561.817937][T11488] ? __might_fault+0xb0/0x130 [ 561.817982][T11488] ? _copy_from_user+0x94/0xb0 [ 561.818007][T11488] do_ip6t_set_ctl+0x970/0xce0 [ 561.818039][T11488] ? rcu_is_watching+0x15/0xb0 [ 561.818066][T11488] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 561.818112][T11488] ? __pfx___mutex_lock+0x10/0x10 [ 561.818143][T11488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 561.818181][T11488] ? __pfx_futex_wait+0x10/0x10 [ 561.818215][T11488] nf_setsockopt+0x26f/0x290 [ 561.818247][T11488] rawv6_setsockopt+0x23b/0x5b0 [ 561.818275][T11488] ? __lock_acquire+0xab9/0xd20 [ 561.818302][T11488] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 561.818334][T11488] ? sock_common_setsockopt+0x36/0xc0 [ 561.818354][T11488] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 561.818376][T11488] do_sock_setsockopt+0x257/0x3e0 [ 561.818404][T11488] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 561.818432][T11488] ? __fget_files+0x2a/0x420 [ 561.818467][T11488] __x64_sys_setsockopt+0x18b/0x220 [ 561.818497][T11488] do_syscall_64+0xfa/0x3b0 [ 561.818527][T11488] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.818555][T11488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.818575][T11488] ? clear_bhb_loop+0x60/0xb0 [ 561.818599][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.818619][T11488] RIP: 0033:0x7f6c0d38e929 [ 561.818637][T11488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.818655][T11488] RSP: 002b:00007f6c0e23d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 561.818676][T11488] RAX: ffffffffffffffda RBX: 00007f6c0d5b6160 RCX: 00007f6c0d38e929 [ 561.818691][T11488] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 561.818703][T11488] RBP: 00007f6c0d410b39 R08: 0000000000000410 R09: 0000000000000000 [ 561.818716][T11488] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.818729][T11488] R13: 0000000000000000 R14: 00007f6c0d5b6160 R15: 00007ffcb7c85e78 [ 561.818766][T11488] [ 561.818777][T11488] Mem-Info: [ 562.157306][T11488] active_anon:1174 inactive_anon:5259 isolated_anon:0 [ 562.157306][T11488] active_file:6713 inactive_file:45160 isolated_file:0 [ 562.157306][T11488] unevictable:768 dirty:135 writeback:0 [ 562.157306][T11488] slab_reclaimable:10731 slab_unreclaimable:97981 [ 562.157306][T11488] mapped:33072 shmem:2299 pagetables:1187 [ 562.157306][T11488] sec_pagetables:0 bounce:0 [ 562.157306][T11488] kernel_misc_reclaimable:0 [ 562.157306][T11488] free:1287122 free_pcp:17002 free_cma:0 [ 562.293733][T11488] Node 0 active_anon:3496kB inactive_anon:20836kB active_file:26652kB inactive_file:180640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132288kB dirty:540kB writeback:0kB shmem:6360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:11744kB pagetables:4692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 562.328164][T11488] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 562.370199][T11488] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.403192][T11488] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 562.423163][T11488] Node 0 DMA32 free:1228396kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:992kB inactive_anon:20692kB active_file:24892kB inactive_file:180572kB unevictable:1536kB writepending:540kB present:3129332kB managed:2561484kB mlocked:0kB bounce:0kB free_pcp:58596kB local_pcp:25636kB free_cma:0kB [ 562.485475][T11488] lowmem_reserve[]: 0 0 1 1 1 [ 562.490218][T11488] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1760kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 562.550106][T11488] lowmem_reserve[]: 0 0 0 0 0 [ 562.559833][T11488] Node 1 Normal free:3904712kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14400kB local_pcp:5984kB free_cma:0kB [ 562.617429][T11488] lowmem_reserve[]: 0 0 0 0 0 [ 562.649144][T11488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 562.662094][T11488] Node 0 DMA32: 55*4kB (UME) 37*8kB (ME) 373*16kB (ME) 220*32kB (M) 290*64kB (UME) 21*128kB (UME) 3*256kB (M) 1*512kB (M) 4*1024kB (UME) 7*2048kB (M) 284*4096kB (UM) = 1217748kB [ 562.730620][T11488] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 562.864580][T11488] Node 1 Normal: 214*4kB (UME) 50*8kB (UME) 50*16kB (UME) 180*32kB (UME) 51*64kB (UME) 13*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3904712kB [ 562.864783][T11488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.864801][T11488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.864818][T11488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.864835][T11488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.864852][T11488] 53232 total pagecache pages [ 562.864869][T11488] 0 pages in swap cache [ 562.864878][T11488] Free swap = 124996kB [ 562.864914][T11488] Total swap = 124996kB [ 562.864924][T11488] 2097051 pages RAM [ 562.864932][T11488] 0 pages HighMem/MovableOnly [ 562.864941][T11488] 424573 pages reserved [ 562.864954][T11488] 0 pages cma reserved [ 562.953215][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.625200][ T9971] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 565.795628][ T9971] usb 4-1: Using ep0 maxpacket: 8 [ 565.819453][ T9971] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 565.850808][ T9971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.875506][ T9971] usb 4-1: Product: syz [ 565.885514][ T9971] usb 4-1: Manufacturer: syz [ 565.901131][ T9971] usb 4-1: SerialNumber: syz [ 565.928492][ T9971] usb 4-1: config 0 descriptor?? [ 565.951033][ T9971] gspca_main: sq930x-2.14.0 probing 2770:930c [ 566.356670][T11561] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 566.385029][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.392451][T11561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.415865][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.434709][T11561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.758394][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.773804][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.918191][T11575] sg_write: data in/out 768/412 bytes for SCSI command 0xb1-- guessing data in; [ 566.918191][T11575] program syz.0.1540 not setting count and/or reply_len properly [ 567.255044][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.434744][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.464474][T11567] lo speed is unknown, defaulting to 1000 [ 567.785920][ T9971] gspca_sq930x: reg_w 0105 0e00 failed -71 [ 568.007220][ T9971] gspca_sq930x: Sensor ov9630 not yet treated [ 568.207124][ T9971] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 568.384889][ T5836] Bluetooth: hci0: command tx timeout [ 568.495255][ T9971] usb 4-1: USB disconnect, device number 35 [ 569.384550][ T9971] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 569.433656][T11605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1548'. [ 569.545140][ T9971] usb 4-1: Using ep0 maxpacket: 16 [ 569.556295][ T9971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.577700][ T9971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.598118][ T9971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 569.608261][ T9971] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 569.625396][ T9971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.656812][ T9971] usb 4-1: config 0 descriptor?? [ 569.914403][ T5887] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 570.504075][ T9971] hid (null): bogus close delimiter [ 570.522988][ T9971] hid (null): global environment stack underflow [ 570.838577][ T5887] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 570.999293][ T5887] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 571.057536][ T5887] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 571.222115][ T5887] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 571.243172][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.040938][ T5887] usb 3-1: string descriptor 0 read error: -71 [ 572.398666][ T5887] usb 3-1: USB disconnect, device number 27 [ 572.427447][ T9971] usb 4-1: USB disconnect, device number 36 [ 572.646422][T11650] sctp: [Deprecated]: syz.3.1561 (pid 11650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.646422][T11650] Use struct sctp_sack_info instead [ 573.995214][T11674] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1567'. [ 576.154672][ T5986] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 578.831041][T11749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1585'. [ 578.948951][T11749] input: syz0 as /devices/virtual/input/input11 [ 579.308471][ T5880] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 579.498038][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 579.534841][T11754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 579.542533][T11754] IPv6: NLM_F_CREATE should be set when creating new route [ 579.563532][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 579.576804][ T5880] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 579.586404][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.607036][ T5880] usb 5-1: config 0 descriptor?? [ 579.621618][T11754] lo: entered allmulticast mode [ 579.645535][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 579.652140][T11757] netlink: 'syz.2.1588': attribute type 21 has an invalid length. [ 579.673126][T11754] tunl0: entered allmulticast mode [ 579.719591][T11754] gre0: entered allmulticast mode [ 579.804496][T11754] gretap0: entered allmulticast mode [ 579.835316][T11754] erspan0: entered allmulticast mode [ 579.850216][T11754] ip_vti0: entered allmulticast mode [ 579.866765][T11754] ip6_vti0: entered allmulticast mode [ 579.890388][T11754] sit0: entered allmulticast mode [ 579.966893][T11754] ip6tnl0: entered allmulticast mode [ 579.985061][T11754] ip6gre0: entered allmulticast mode [ 580.029463][T11754] ip6gretap0: entered allmulticast mode [ 580.038766][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.046252][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.069018][T11754] bridge0: entered allmulticast mode [ 580.087782][T11754] vcan0: entered allmulticast mode [ 580.155347][T11754] bond0: entered allmulticast mode [ 580.173987][T11754] bond_slave_0: entered allmulticast mode [ 580.210815][T11754] bond_slave_1: entered allmulticast mode [ 580.223174][T11754] batadv0: entered allmulticast mode [ 580.238899][T11754] team0: entered allmulticast mode [ 580.245525][T11754] team_slave_0: entered allmulticast mode [ 580.251305][T11754] team_slave_1: entered allmulticast mode [ 580.266031][T11754] dummy0: entered allmulticast mode [ 580.284419][T11754] nlmon0: entered allmulticast mode [ 580.307906][T11754] caif0: entered allmulticast mode [ 580.355407][T11754] vxcan0: entered allmulticast mode [ 580.364180][T11754] vxcan1: entered allmulticast mode [ 580.371284][T11754] veth0: entered allmulticast mode [ 580.380355][T11787] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 580.383890][T11754] veth1: entered allmulticast mode [ 580.414534][T11787] netlink: 'syz.1.1592': attribute type 2 has an invalid length. [ 580.429607][ T5880] bcm5974 5-1:0.0: could not read from device [ 580.457042][T11754] wg0: entered allmulticast mode [ 580.473741][ T5177] bcm5974 5-1:0.0: could not read from device [ 580.497013][T11754] wg1: entered allmulticast mode [ 580.532542][ T5880] input: failed to attach handler mousedev to device input12, error: -5 [ 580.556681][ T5177] bcm5974 5-1:0.0: could not read from device [ 580.578204][ T5880] usb 5-1: USB disconnect, device number 47 [ 580.602416][T11754] wg2: entered allmulticast mode [ 580.610351][T11754] veth0_to_bridge: entered allmulticast mode [ 580.646116][T11754] veth1_to_bridge: entered allmulticast mode [ 580.678792][T11754] veth0_to_bond: entered allmulticast mode [ 580.699479][T11754] veth1_to_bond: entered allmulticast mode [ 580.720057][T11754] veth0_to_team: entered allmulticast mode [ 580.752383][T11754] veth1_to_team: entered allmulticast mode [ 580.770793][T11754] veth0_to_batadv: entered allmulticast mode [ 580.823181][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.848618][T11754] batadv_slave_0: entered allmulticast mode [ 580.863006][T11754] veth1_to_batadv: entered allmulticast mode [ 580.879818][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.896150][T11754] batadv_slave_1: entered allmulticast mode [ 580.925928][T11754] xfrm0: entered allmulticast mode [ 580.940245][T11754] veth0_to_hsr: entered allmulticast mode [ 580.954385][T11754] hsr_slave_0: entered allmulticast mode [ 580.962278][T11754] veth1_to_hsr: entered allmulticast mode [ 581.428925][T11754] hsr_slave_1: entered allmulticast mode [ 581.492076][T11754] hsr0: entered allmulticast mode [ 581.516808][T11754] veth1_virt_wifi: entered allmulticast mode [ 581.546278][T11754] veth0_virt_wifi: entered allmulticast mode [ 581.554879][T11754] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 581.563161][T11754] veth1_vlan: entered allmulticast mode [ 581.575679][T11754] veth0_vlan: entered allmulticast mode [ 581.603173][T11754] vlan0: entered allmulticast mode [ 581.610270][T11754] vlan1: entered allmulticast mode [ 581.648325][T11754] macvlan0: entered allmulticast mode [ 581.655487][T11754] macvlan1: entered allmulticast mode [ 581.673959][T11754] ipvlan0: entered allmulticast mode [ 581.691646][T11754] ipvlan1: entered allmulticast mode [ 581.711499][T11754] veth1_macvtap: entered allmulticast mode [ 581.734231][T11754] veth0_macvtap: entered allmulticast mode [ 581.747965][T11754] macvtap0: entered allmulticast mode [ 581.787416][T11754] macsec0: entered allmulticast mode [ 581.829891][T11754] geneve0: entered allmulticast mode [ 581.956521][T11754] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.174568][T11754] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.198515][T11754] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.241950][T11754] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.364420][T11754] geneve1: entered allmulticast mode [ 582.432858][T11754] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 582.459305][T11754] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 582.488682][T11754] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 582.531113][T11754] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 582.737032][T11754] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 582.746330][T11754] batadv0.8: entered allmulticast mode [ 582.751996][T11754] bond1: entered allmulticast mode [ 583.352027][T11818] netlink: 'syz.4.1597': attribute type 21 has an invalid length. [ 583.406441][T11818] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1597'. [ 584.574418][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 584.748912][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 584.762411][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 584.783117][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 584.810753][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 584.842188][T11838] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.875126][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.922241][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.967235][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 585.000604][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.229711][T11848] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1609'. [ 585.239049][T11848] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1609'. [ 585.248243][ T10] usb 5-1: usb_control_msg returned -32 [ 585.258379][ T10] usbtmc 5-1:16.0: can't read capabilities [ 585.584635][T11772] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 585.744583][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 585.754693][T11772] usb 4-1: Using ep0 maxpacket: 32 [ 585.761674][T11772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.785035][T11772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 585.794053][T11772] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 585.833188][T11772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.845223][T11772] usb 4-1: config 0 descriptor?? [ 585.901297][ T10] usb 3-1: config index 0 descriptor too short (expected 64974, got 72) [ 585.927396][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 585.942700][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.953618][ T10] usb 3-1: Product: syz [ 585.959818][ T10] usb 3-1: Manufacturer: syz [ 585.978991][ T10] usb 3-1: SerialNumber: syz [ 585.991324][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 586.040774][ T5880] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 586.623784][T11772] usb 5-1: USB disconnect, device number 48 [ 586.647210][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 586.692519][ T10] usb 4-1: USB disconnect, device number 37 [ 586.875264][T11781] usb 3-1: USB disconnect, device number 28 [ 587.107208][ T5880] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 587.122862][ T5880] ath9k_htc: Failed to initialize the device [ 587.139949][T11781] usb 3-1: ath9k_htc: USB layer deinitialized [ 588.694492][T11766] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 588.864479][T11766] usb 4-1: Using ep0 maxpacket: 16 [ 588.886037][T11766] usb 4-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 588.902758][T11766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.912917][T11766] usb 4-1: Product: syz [ 588.923170][T11766] usb 4-1: Manufacturer: syz [ 588.933402][T11766] usb 4-1: SerialNumber: syz [ 588.981070][T11766] usb 4-1: config 0 descriptor?? [ 589.750498][T11923] gtp0: entered promiscuous mode [ 590.132840][T11766] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 590.133862][T11931] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 590.141070][T11766] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 590.170219][T11766] usb 4-1: USB disconnect, device number 38 [ 590.514897][T11781] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 591.874111][T11781] usb 5-1: Using ep0 maxpacket: 8 [ 592.017548][T11781] usb 5-1: config 0 has an invalid interface number: 22 but max is 3 [ 592.101054][T11781] usb 5-1: config 0 has an invalid interface number: 40 but max is 3 [ 592.278186][T11781] usb 5-1: config 0 has an invalid interface number: 122 but max is 3 [ 592.412237][T11781] usb 5-1: config 0 has an invalid interface number: 40 but max is 3 [ 592.568384][T11781] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 592.702837][T11781] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 592.808967][T11781] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 592.969217][T11781] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 593.099046][T11781] usb 5-1: config 0 has no interface number 0 [ 593.113808][T11781] usb 5-1: config 0 has no interface number 1 [ 593.131554][T11781] usb 5-1: config 0 has no interface number 2 [ 593.150289][T11781] usb 5-1: config 0 interface 22 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 593.175590][T11781] usb 5-1: config 0 interface 22 altsetting 3 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 593.204584][T11781] usb 5-1: config 0 interface 22 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 593.224473][T11781] usb 5-1: config 0 interface 22 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 10 [ 593.252290][T11781] usb 5-1: config 0 interface 40 altsetting 166 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 593.294598][T11781] usb 5-1: config 0 interface 40 altsetting 166 has an invalid descriptor for endpoint zero, skipping [ 593.314381][T11781] usb 5-1: config 0 interface 40 altsetting 166 bulk endpoint 0x7 has invalid maxpacket 16 [ 593.336570][T11781] usb 5-1: config 0 interface 40 altsetting 166 has a duplicate endpoint with address 0xF, skipping [ 593.350573][T11781] usb 5-1: config 0 interface 40 altsetting 166 has 6 endpoint descriptors, different from the interface descriptor's value: 22 [ 593.364846][T11781] usb 5-1: config 0 interface 40 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 593.378302][T11781] usb 5-1: config 0 interface 22 has no altsetting 0 [ 593.385159][T11781] usb 5-1: config 0 interface 40 has no altsetting 0 [ 593.392064][T11781] usb 5-1: config 0 interface 40 has no altsetting 1 [ 593.416410][T11781] usb 5-1: config 0 interface 122 has no altsetting 0 [ 593.434181][T11781] usb 5-1: string descriptor 0 read error: -71 [ 593.451202][T11781] usb 5-1: New USB device found, idVendor=0403, idProduct=b810, bcdDevice=36.a1 [ 593.468979][T11781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.482388][T11781] usb 5-1: config 0 descriptor?? [ 593.507139][T11781] usb 5-1: can't set config #0, error -71 [ 593.530601][T11781] usb 5-1: USB disconnect, device number 49 [ 593.545752][ T44] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 593.551869][T11951] netlink: 'syz.1.1638': attribute type 21 has an invalid length. [ 593.563647][T11951] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1638'. [ 593.724463][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 593.739308][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.750526][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.760035][ T44] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 593.769486][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.156141][ T44] usb 3-1: config 0 descriptor?? [ 594.354565][T11781] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 595.154336][T11781] usb 5-1: Using ep0 maxpacket: 32 [ 595.415311][T11781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.484519][T11781] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.503212][T11781] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 595.537977][ T5880] usb 3-1: USB disconnect, device number 29 [ 595.544326][T11781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.559025][T11781] usb 5-1: config 0 descriptor?? [ 595.599431][T11969] program syz.3.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.788781][T11766] usb 5-1: USB disconnect, device number 50 [ 597.111021][T11983] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 597.121624][T11985] netlink: 'syz.0.1649': attribute type 21 has an invalid length. [ 597.142895][T11986] macvlan4: entered promiscuous mode [ 597.153600][T11985] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1649'. [ 597.557471][ T5880] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 598.568579][ T5880] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 598.583600][T12001] loop2: detected capacity change from 0 to 7 [ 598.593524][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.605534][T12001] loop2: [ 598.614455][T12001] loop2: partition table partially beyond EOD, truncated [ 598.622710][ T5880] usb 5-1: config 0 descriptor?? [ 598.645064][ T5880] cp210x 5-1:0.0: cp210x converter detected [ 599.394687][ T5880] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 599.591744][T12011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.600718][T12011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.674350][ T5880] cp210x 5-1:0.0: querying part number failed [ 599.688156][ T5880] usb 5-1: cp210x converter now attached to ttyUSB0 [ 599.803524][T12021] netlink: 'syz.2.1660': attribute type 6 has an invalid length. [ 599.957460][T12022] syz.2.1660 (12022): attempted to duplicate a private mapping with mremap. This is not supported. [ 600.039141][ T30] audit: type=1326 audit(1750053727.605:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12017 comm="syz.2.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0d38e929 code=0x7ffc0000 [ 600.112407][ T30] audit: type=1326 audit(1750053727.605:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12017 comm="syz.2.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0d38e929 code=0x7ffc0000 [ 600.265481][ T30] audit: type=1326 audit(1750053727.605:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12017 comm="syz.2.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f6c0d38e929 code=0x7ffc0000 [ 600.403975][T12028] netlink: 'syz.0.1662': attribute type 21 has an invalid length. [ 600.441372][ T30] audit: type=1326 audit(1750053728.005:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12017 comm="syz.2.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0d38e929 code=0x7ffc0000 [ 600.441526][T12028] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1662'. [ 600.522312][ T30] audit: type=1326 audit(1750053728.005:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12017 comm="syz.2.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0d38e929 code=0x7ffc0000 [ 600.639468][T12033] program syz.3.1661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.983402][T12037] macvlan2: entered promiscuous mode [ 600.988856][T12037] bridge0: entered promiscuous mode [ 601.345151][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 601.661691][ T44] usb 5-1: USB disconnect, device number 51 [ 601.711623][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 602.074417][ T5880] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 602.082877][ T44] cp210x 5-1:0.0: device disconnected [ 603.012153][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 603.056135][ T5880] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 603.059925][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 603.080616][T12063] sg_write: data in/out 768/419 bytes for SCSI command 0xb1-- guessing data in; [ 603.080616][T12063] program syz.2.1671 not setting count and/or reply_len properly [ 603.152909][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.175960][ T5880] usb 4-1: config 0 descriptor?? [ 603.366458][ T5880] gspca_main: sq930x-2.14.0 probing 041e:403c [ 603.576427][T12055] lo speed is unknown, defaulting to 1000 [ 603.674792][T11781] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 603.733093][T12071] netlink: 'syz.1.1673': attribute type 6 has an invalid length. [ 603.855426][T12074] netlink: 'syz.0.1674': attribute type 21 has an invalid length. [ 603.880324][T12074] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1674'. [ 603.888421][T11781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 603.910338][T11781] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 603.943072][T11781] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 603.960794][T11781] usb 3-1: Product: syz [ 603.971512][T11781] usb 3-1: Manufacturer: syz [ 603.988837][T11781] usb 3-1: SerialNumber: syz [ 603.998369][T11781] usb 3-1: config 0 descriptor?? [ 604.007233][T12063] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 604.017001][T11781] hub 3-1:0.0: bad descriptor, ignoring hub [ 604.023001][T11781] hub 3-1:0.0: probe with driver hub failed with error -5 [ 604.286310][T12080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1676'. [ 604.437965][T12080] input: syz0 as /devices/virtual/input/input13 [ 604.680826][ T5880] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 604.744539][ T5880] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 604.756475][ T5880] usb 4-1: USB disconnect, device number 39 [ 604.794839][T11766] usb 3-1: USB disconnect, device number 30 [ 605.875171][T12094] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 606.149371][T11781] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 606.285385][T12102] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1682'. [ 606.366437][T12102] input: syz0 as /devices/virtual/input/input14 [ 606.439060][T11781] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 606.558987][T11781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.719988][T11781] usb 5-1: config 0 descriptor?? [ 606.726883][T11781] cp210x 5-1:0.0: cp210x converter detected [ 607.621975][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.632198][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.866465][T11781] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 607.883062][T11781] cp210x 5-1:0.0: querying part number failed [ 608.016895][T11781] usb 5-1: cp210x converter now attached to ttyUSB0 [ 609.547622][ T44] usb 5-1: USB disconnect, device number 52 [ 609.569216][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 609.594867][ T44] cp210x 5-1:0.0: device disconnected [ 610.585197][T12144] sg_write: data in/out 768/420 bytes for SCSI command 0xb1-- guessing data in; [ 610.585197][T12144] program syz.2.1693 not setting count and/or reply_len properly [ 611.014591][ T30] audit: type=1326 audit(1750053738.495:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12142 comm="syz.0.1694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f065e38e929 code=0x0 [ 611.035676][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.062606][T12150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1694'. [ 611.083645][T12152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1697'. [ 611.092773][T12152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1697'. [ 611.138013][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 611.147705][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 611.158535][T12154] netlink: 'syz.3.1697': attribute type 14 has an invalid length. [ 611.214783][T11781] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 611.294546][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 611.398296][T11781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 611.414100][T11781] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 611.427281][T11781] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 611.436064][T11781] usb 3-1: Product: syz [ 611.440451][T11781] usb 3-1: Manufacturer: syz [ 611.447593][T11781] usb 3-1: SerialNumber: syz [ 611.454314][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 611.459879][T11781] usb 3-1: config 0 descriptor?? [ 611.468104][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.480205][T12144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.510459][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.538530][T11781] hub 3-1:0.0: bad descriptor, ignoring hub [ 611.545484][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 611.554708][T11781] hub 3-1:0.0: probe with driver hub failed with error -5 [ 611.564318][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.576041][ T10] usb 5-1: config 0 descriptor?? [ 611.846283][ T10] usb 3-1: USB disconnect, device number 31 [ 612.368538][ T44] usb 5-1: USB disconnect, device number 53 [ 612.622123][T12168] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 612.865116][ T44] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 613.137055][ T44] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 613.146765][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.159774][ T44] usb 3-1: config 0 descriptor?? [ 613.170698][ T44] cp210x 3-1:0.0: cp210x converter detected [ 613.815248][ T44] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 614.014150][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.024208][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.535890][T12187] lo speed is unknown, defaulting to 1000 [ 614.542656][T12187] lo speed is unknown, defaulting to 1000 [ 614.561433][T12187] lo speed is unknown, defaulting to 1000 [ 614.850209][T12187] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 614.941821][ T44] cp210x 3-1:0.0: querying part number failed [ 614.949684][T12187] lo speed is unknown, defaulting to 1000 [ 614.957400][T12187] lo speed is unknown, defaulting to 1000 [ 614.964943][T12187] lo speed is unknown, defaulting to 1000 [ 614.973230][T12187] lo speed is unknown, defaulting to 1000 [ 614.982785][T12187] lo speed is unknown, defaulting to 1000 [ 615.149659][ T44] usb 3-1: cp210x converter now attached to ttyUSB0 [ 615.207261][T12193] ipvlan2: entered promiscuous mode [ 615.217033][T12193] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 615.224932][T12193] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 615.750524][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 616.114998][T11781] usb 3-1: USB disconnect, device number 32 [ 616.166925][T11781] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 616.185076][T11781] cp210x 3-1:0.0: device disconnected [ 616.299325][ T30] audit: type=1326 audit(1750053743.865:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12198 comm="syz.2.1709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c0d38e929 code=0x0 [ 616.320556][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.349436][T12210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1709'. [ 616.418235][T12212] sg_write: data in/out 768/420 bytes for SCSI command 0xb1-- guessing data in; [ 616.418235][T12212] program syz.0.1711 not setting count and/or reply_len properly [ 616.814434][T12215] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1712'. [ 617.157032][T12223] netlink: 'syz.4.1716': attribute type 21 has an invalid length. [ 617.167338][T12223] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1716'. [ 617.479449][T12228] sctp: [Deprecated]: syz.4.1718 (pid 12228) Use of int in max_burst socket option. [ 617.479449][T12228] Use struct sctp_assoc_value instead [ 617.531096][T12233] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 617.669804][T12239] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1722'. [ 617.877524][T11766] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 618.138545][T11766] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 618.169977][T11766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.210436][T11766] usb 3-1: config 0 descriptor?? [ 618.240332][T11766] cp210x 3-1:0.0: cp210x converter detected [ 618.803617][T11766] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 618.811623][T11766] cp210x 3-1:0.0: querying part number failed [ 618.842292][T11766] usb 3-1: cp210x converter now attached to ttyUSB0 [ 619.008711][T12263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.018959][T12263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.299748][T12267] netlink: 'syz.4.1729': attribute type 21 has an invalid length. [ 619.308971][T12267] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1729'. [ 620.874587][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 620.905006][T11766] usb 3-1: USB disconnect, device number 33 [ 621.375094][T11766] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 621.383298][T11766] cp210x 3-1:0.0: device disconnected [ 622.410181][T12293] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 623.261111][T12313] netlink: 'syz.1.1743': attribute type 21 has an invalid length. [ 623.277264][T12313] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1743'. [ 624.427309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.142348][T12329] loop2: detected capacity change from 0 to 7 [ 625.149195][T12329] Dev loop2: unable to read RDB block 7 [ 625.155015][T12329] loop2: AHDI p2 p3 [ 625.158906][T12329] loop2: partition table partially beyond EOD, truncated [ 625.166131][T12329] loop2: p2 size 150995456 extends beyond EOD, truncated [ 628.364969][T12370] loop2: detected capacity change from 0 to 7 [ 628.383023][T12370] Dev loop2: unable to read RDB block 7 [ 628.388700][T12370] loop2: AHDI p2 p3 [ 628.392639][T12370] loop2: partition table partially beyond EOD, truncated [ 628.400001][T12370] loop2: p2 size 150995456 extends beyond EOD, truncated [ 628.427439][T12373] IPv6: Can't replace route, no match found [ 629.036371][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 629.253701][T12389] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1763'. [ 630.004535][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 630.192289][T12401] Failed to get privilege flags for destination (handle=0x2:0x7) [ 630.378957][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 630.413974][T12401] use of bytesused == 0 is deprecated and will be removed in the future, [ 630.422910][T12401] use the actual size instead. [ 631.674381][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 631.692495][ T24] usb 5-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 631.707163][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.724313][ T24] usb 5-1: Product: syz [ 631.728535][ T24] usb 5-1: Manufacturer: syz [ 631.736400][ T24] usb 5-1: SerialNumber: syz [ 631.747427][ T24] usb 5-1: config 0 descriptor?? [ 631.958515][T11766] usb 5-1: USB disconnect, device number 54 [ 632.094613][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 632.208192][T12423] FAULT_INJECTION: forcing a failure. [ 632.208192][T12423] name failslab, interval 1, probability 0, space 0, times 0 [ 632.221057][T12423] CPU: 1 UID: 0 PID: 12423 Comm: syz.0.1774 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 632.221084][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.221096][T12423] Call Trace: [ 632.221104][T12423] [ 632.221112][T12423] dump_stack_lvl+0x189/0x250 [ 632.221146][T12423] ? __pfx____ratelimit+0x10/0x10 [ 632.221175][T12423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.221203][T12423] ? __pfx__printk+0x10/0x10 [ 632.221225][T12423] ? __pfx___might_resched+0x10/0x10 [ 632.221253][T12423] ? fs_reclaim_acquire+0x7d/0x100 [ 632.221286][T12423] should_fail_ex+0x414/0x560 [ 632.221314][T12423] should_failslab+0xa8/0x100 [ 632.221341][T12423] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 632.221364][T12423] ? trace_sched_exit_tp+0x38/0x120 [ 632.221385][T12423] ? __alloc_skb+0x112/0x2d0 [ 632.221411][T12423] __alloc_skb+0x112/0x2d0 [ 632.221436][T12423] alloc_skb_with_frags+0xca/0x890 [ 632.221464][T12423] ? trace_sched_exit_tp+0x38/0x120 [ 632.221485][T12423] ? preempt_schedule_irq+0xb5/0x150 [ 632.221512][T12423] ? __schedule+0x16c0/0x4cb0 [ 632.221541][T12423] sock_alloc_send_pskb+0x857/0x990 [ 632.221587][T12423] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 632.221613][T12423] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 632.221639][T12423] ? preempt_schedule_irq+0xde/0x150 [ 632.221665][T12423] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 632.221703][T12423] hci_sock_sendmsg+0x207/0xef0 [ 632.221733][T12423] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 632.221762][T12423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.221785][T12423] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 632.221809][T12423] __sock_sendmsg+0x21c/0x270 [ 632.221841][T12423] sock_write_iter+0x258/0x330 [ 632.221878][T12423] ? __pfx_sock_write_iter+0x10/0x10 [ 632.221916][T12423] ? bpf_lsm_file_permission+0x9/0x20 [ 632.221940][T12423] ? security_file_permission+0x75/0x290 [ 632.221971][T12423] vfs_write+0x54b/0xa90 [ 632.221998][T12423] ? __pfx_sock_write_iter+0x10/0x10 [ 632.222026][T12423] ? __pfx_vfs_write+0x10/0x10 [ 632.222058][T12423] ? __fget_files+0x2a/0x420 [ 632.222092][T12423] ksys_write+0x145/0x250 [ 632.222116][T12423] ? __pfx_ksys_write+0x10/0x10 [ 632.222144][T12423] ? do_syscall_64+0xbe/0x3b0 [ 632.222176][T12423] do_syscall_64+0xfa/0x3b0 [ 632.222206][T12423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.222225][T12423] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 632.222243][T12423] ? clear_bhb_loop+0x60/0xb0 [ 632.222267][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.222285][T12423] RIP: 0033:0x7f065e38e929 [ 632.222303][T12423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.222320][T12423] RSP: 002b:00007f065f275038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.222341][T12423] RAX: ffffffffffffffda RBX: 00007f065e5b6160 RCX: 00007f065e38e929 [ 632.222356][T12423] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000008 [ 632.222367][T12423] RBP: 00007f065f275090 R08: 0000000000000000 R09: 0000000000000000 [ 632.222380][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.222391][T12423] R13: 0000000000000000 R14: 00007f065e5b6160 R15: 00007fff2c1ab098 [ 632.222422][T12423] [ 632.540405][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.674909][T12427] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 632.674909][T12427] program syz.3.1775 not setting count and/or reply_len properly [ 632.824479][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 632.879308][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.889569][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.923360][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 632.960530][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.014873][T11781] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 633.177230][ T24] usb 3-1: config 0 descriptor?? [ 633.444405][T12437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1778'. [ 633.821328][T11781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 634.104720][T11781] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 634.119253][T11781] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 634.154355][T11781] usb 4-1: Product: syz [ 634.158621][T11781] usb 4-1: Manufacturer: syz [ 634.163244][T11781] usb 4-1: SerialNumber: syz [ 634.179306][T11781] usb 4-1: config 0 descriptor?? [ 634.207848][ T5880] usb 3-1: USB disconnect, device number 34 [ 634.231157][T12427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 634.257253][T11781] hub 4-1:0.0: bad descriptor, ignoring hub [ 634.263217][T11781] hub 4-1:0.0: probe with driver hub failed with error -5 [ 635.135641][T11763] usb 4-1: USB disconnect, device number 40 [ 635.856378][T11781] lo speed is unknown, defaulting to 1000 [ 636.067236][ T5880] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 637.269085][ T5880] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 637.276998][ T5880] usb 5-1: can't read configurations, error -61 [ 637.600176][ T5880] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 638.427031][ T5880] usb 5-1: device descriptor read/all, error -71 [ 638.921957][ T5880] usb usb5-port1: attempt power cycle [ 639.309098][T12504] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 639.309098][T12504] program syz.0.1797 not setting count and/or reply_len properly [ 639.694519][ T5880] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 639.820275][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 639.916988][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 639.932171][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.943244][ T5880] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.952609][ T5880] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 639.961901][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.063043][ T5880] usb 5-1: config 0 descriptor?? [ 640.084818][T12514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1801'. [ 640.970112][ T24] usb 5-1: USB disconnect, device number 57 [ 642.234960][ T5880] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 642.477999][ T5880] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 642.487448][ T5880] usb 5-1: can't read configurations, error -61 [ 642.624840][ T5880] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 642.816500][ T5880] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 642.894999][ T5880] usb 5-1: can't read configurations, error -61 [ 642.922347][ T5880] usb usb5-port1: attempt power cycle [ 643.274420][ T5880] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 643.317566][ T5880] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 643.325368][ T5880] usb 5-1: can't read configurations, error -61 [ 644.159522][ T5880] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 644.666827][ T5880] usb 5-1: device descriptor read/all, error -71 [ 644.678659][ T5880] usb usb5-port1: unable to enumerate USB device [ 645.139007][T12588] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 645.139007][T12588] program syz.4.1817 not setting count and/or reply_len properly [ 645.376567][T12594] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1818'. [ 645.509759][T12596] input: syz0 as /devices/virtual/input/input15 [ 645.601024][ T5880] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 646.007008][T12599] loop2: detected capacity change from 0 to 7 [ 646.033835][T12599] Dev loop2: unable to read RDB block 7 [ 646.039774][T12599] loop2: AHDI p2 p3 [ 646.043915][T12599] loop2: partition table partially beyond EOD, truncated [ 646.051480][T12599] loop2: p2 size 150995456 extends beyond EOD, truncated [ 646.259316][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 646.459240][ T5880] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 646.480132][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 646.499333][ T5880] usb 5-1: Product: syz [ 646.509876][ T5880] usb 5-1: Manufacturer: syz [ 646.763164][ T5880] usb 5-1: SerialNumber: syz [ 647.024831][ T5880] usb 5-1: config 0 descriptor?? [ 647.262648][T12589] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 647.689828][ T5880] hub 5-1:0.0: bad descriptor, ignoring hub [ 647.760184][ T5880] hub 5-1:0.0: probe with driver hub failed with error -5 [ 647.876550][T12614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.895496][ T5880] usb 5-1: USB disconnect, device number 62 [ 647.942758][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 648.754862][T12632] bridge0: entered promiscuous mode [ 648.760354][T12632] macvlan2: entered promiscuous mode [ 652.041392][ T30] audit: type=1326 audit(1750053779.585:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12699 comm="syz.0.1847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f065e38e929 code=0x0 [ 652.115168][T12706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1847'. [ 655.669190][T12756] macvlan5: entered promiscuous mode [ 655.744626][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 656.006404][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.030007][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.040065][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 656.654373][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.664200][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.691956][ T10] usb 3-1: config 0 descriptor?? [ 657.815653][ T10] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 658.001638][T12795] netlink: 'syz.0.1867': attribute type 30 has an invalid length. [ 658.009649][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 658.020071][T12795] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 658.281837][T12751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1859'. [ 658.388452][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 659.668878][ T5880] usb 3-1: USB disconnect, device number 35 [ 660.901928][T12841] binder: BINDER_SET_CONTEXT_MGR already set [ 660.912060][T12840] lo speed is unknown, defaulting to 1000 [ 660.919735][T12841] binder: 12839:12841 ioctl 4018620d 200000000040 returned -16 [ 660.932874][T12840] lo speed is unknown, defaulting to 1000 [ 660.962710][T12846] netlink: 'syz.0.1881': attribute type 12 has an invalid length. [ 661.099045][T12851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1882'. [ 661.245507][T12856] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 661.245507][T12856] program syz.0.1883 not setting count and/or reply_len properly [ 661.575422][T12858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1884'. [ 661.757708][T12859] input: syz0 as /devices/virtual/input/input16 [ 663.413836][T12879] lo speed is unknown, defaulting to 1000 [ 663.656090][T12879] lo speed is unknown, defaulting to 1000 [ 663.988230][ T5880] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 664.427977][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 664.444452][ T5880] usb 4-1: can't read configurations, error -61 [ 664.828491][T12891] lo speed is unknown, defaulting to 1000 [ 664.836322][T12891] lo speed is unknown, defaulting to 1000 [ 665.355704][ T5880] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 666.771691][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 666.795350][ T5880] usb 4-1: can't read configurations, error -71 [ 666.825734][ T5880] usb usb4-port1: attempt power cycle [ 667.269693][ T5880] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 667.504355][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.530294][ T5880] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 667.554297][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.575131][ T5880] usb 4-1: config 0 descriptor?? [ 667.849902][ T5880] itetech 0003:048D:8595.0005: unknown main item tag 0x0 [ 667.885924][ T5880] itetech 0003:048D:8595.0005: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.3-1/input0 [ 668.094698][ T5880] usb 4-1: USB disconnect, device number 43 [ 669.293057][T12958] loop2: detected capacity change from 0 to 7 [ 669.331287][T12958] Dev loop2: unable to read RDB block 7 [ 669.342800][T12958] loop2: AHDI p2 p3 [ 669.355057][T12958] loop2: partition table partially beyond EOD, truncated [ 669.362266][T12958] loop2: p2 size 150995456 extends beyond EOD, truncated [ 669.673498][T12965] loop2: detected capacity change from 0 to 7 [ 669.885686][T12965] Dev loop2: unable to read RDB block 7 [ 669.967311][T12965] loop2: AHDI p2 p3 [ 669.971301][T12965] loop2: partition table partially beyond EOD, truncated [ 669.999722][T12965] loop2: p2 size 150995456 extends beyond EOD, truncated [ 670.482998][T12976] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 671.191310][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 671.322055][T12993] netlink: 'syz.2.1927': attribute type 21 has an invalid length. [ 671.331851][T12993] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1927'. [ 671.546196][T13003] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1928'. [ 672.557363][T13012] vcan1: entered promiscuous mode [ 672.820914][T13031] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 673.437233][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 673.587643][ T44] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 673.754708][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 673.763561][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.782291][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 673.791675][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.804069][ T44] usb 5-1: config 0 descriptor?? [ 673.814942][ T44] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 675.665247][ T44] gspca_vc032x: reg_w err -71 [ 675.785590][ T44] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 675.799536][ T44] usb 5-1: USB disconnect, device number 63 [ 675.914341][T13076] futex_wake_op: syz.0.1956 tries to shift op by -1; fix this program [ 676.042026][T13082] lo speed is unknown, defaulting to 1000 [ 676.049841][T13082] lo speed is unknown, defaulting to 1000 [ 676.754473][ T5880] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 676.964946][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 677.034404][ T5880] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 677.065156][ T5880] usb 3-1: config 0 has no interface number 0 [ 677.190067][T13086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1959'. [ 677.349894][ T5880] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 677.858246][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.087626][ T5880] usb 3-1: Product: syz [ 678.092551][ T5880] usb 3-1: Manufacturer: syz [ 678.124450][ T5880] usb 3-1: SerialNumber: syz [ 678.352942][ T5880] usb 3-1: config 0 descriptor?? [ 679.000826][ T5880] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 679.057054][ T5880] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 679.340359][ T5880] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 679.348248][ T5880] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 679.357796][ T5880] usb 3-1: USB disconnect, device number 36 [ 679.748377][T13134] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1974'. [ 679.828103][ T44] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 680.125154][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 680.209670][ T44] usb 4-1: config 5 has an invalid interface number: 53 but max is 0 [ 680.233455][ T44] usb 4-1: config 5 has no interface number 0 [ 680.249933][ T44] usb 4-1: config 5 interface 53 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 680.276266][ T44] usb 4-1: config 5 interface 53 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 680.289222][ T44] usb 4-1: config 5 interface 53 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 680.329824][ T44] usb 4-1: config 5 interface 53 has no altsetting 0 [ 680.556579][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=f6.d7 [ 680.575599][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.585929][ T44] usb 4-1: Product: syz [ 680.590194][ T44] usb 4-1: Manufacturer: syz [ 680.597063][ T44] usb 4-1: SerialNumber: syz [ 681.630180][T13126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.750795][T13126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 682.526806][ T44] hdpvr 4-1:5.53: unexpected answer of status request, len -71 [ 682.544432][ T44] hdpvr 4-1:5.53: device init failed [ 682.562512][ T44] hdpvr 4-1:5.53: probe with driver hdpvr failed with error -12 [ 682.594618][ T44] usb 4-1: USB disconnect, device number 44 [ 682.815164][T13166] FAULT_INJECTION: forcing a failure. [ 682.815164][T13166] name failslab, interval 1, probability 0, space 0, times 0 [ 682.851899][T13166] CPU: 0 UID: 0 PID: 13166 Comm: syz.0.1984 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 682.851931][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 682.851943][T13166] Call Trace: [ 682.851951][T13166] [ 682.851960][T13166] dump_stack_lvl+0x189/0x250 [ 682.851994][T13166] ? __pfx____ratelimit+0x10/0x10 [ 682.852022][T13166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.852050][T13166] ? __pfx__printk+0x10/0x10 [ 682.852075][T13166] ? __pfx___might_resched+0x10/0x10 [ 682.852107][T13166] should_fail_ex+0x414/0x560 [ 682.852136][T13166] should_failslab+0xa8/0x100 [ 682.852162][T13166] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 682.852187][T13166] ? __alloc_skb+0x112/0x2d0 [ 682.852213][T13166] __alloc_skb+0x112/0x2d0 [ 682.852238][T13166] netlink_sendmsg+0x5c6/0xb30 [ 682.852271][T13166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.852302][T13166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.852325][T13166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.852348][T13166] __sock_sendmsg+0x21c/0x270 [ 682.852381][T13166] ____sys_sendmsg+0x505/0x830 [ 682.852411][T13166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.852444][T13166] ? import_iovec+0x74/0xa0 [ 682.852467][T13166] ___sys_sendmsg+0x21f/0x2a0 [ 682.852493][T13166] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.852554][T13166] ? __fget_files+0x2a/0x420 [ 682.852579][T13166] ? __fget_files+0x3a0/0x420 [ 682.852614][T13166] __x64_sys_sendmsg+0x19b/0x260 [ 682.852641][T13166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.852676][T13166] ? __pfx_ksys_write+0x10/0x10 [ 682.852696][T13166] ? rcu_is_watching+0x15/0xb0 [ 682.852729][T13166] ? do_syscall_64+0xbe/0x3b0 [ 682.852761][T13166] do_syscall_64+0xfa/0x3b0 [ 682.852788][T13166] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.852825][T13166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.852844][T13166] ? clear_bhb_loop+0x60/0xb0 [ 682.852868][T13166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.852887][T13166] RIP: 0033:0x7f065e38e929 [ 682.852905][T13166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.852921][T13166] RSP: 002b:00007f065f2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.852943][T13166] RAX: ffffffffffffffda RBX: 00007f065e5b5fa0 RCX: 00007f065e38e929 [ 682.852957][T13166] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000006 [ 682.852970][T13166] RBP: 00007f065f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 682.852982][T13166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.852994][T13166] R13: 0000000000000000 R14: 00007f065e5b5fa0 R15: 00007fff2c1ab098 [ 682.853024][T13166] [ 683.443213][T13173] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1985'. [ 683.994927][T13177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1986'. [ 684.508697][T13187] netlink: 'syz.1.1991': attribute type 21 has an invalid length. [ 684.527251][T13187] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1991'. [ 684.574333][ T5880] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 684.806782][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 684.815395][ T5880] usb 5-1: not running at top speed; connect to a high speed hub [ 684.823197][ T5880] usb 5-1: no configurations [ 684.834534][ T5880] usb 5-1: can't read configurations, error -22 [ 684.984403][ T5880] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 685.182356][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 685.242775][ T5880] usb 5-1: not running at top speed; connect to a high speed hub [ 685.277302][ T5880] usb 5-1: no configurations [ 685.282076][ T5880] usb 5-1: can't read configurations, error -22 [ 685.560446][ T5880] usb usb5-port1: attempt power cycle [ 685.845801][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.964397][ T5880] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 685.987239][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 686.017040][ T5880] usb 5-1: not running at top speed; connect to a high speed hub [ 686.026362][ T5880] usb 5-1: no configurations [ 686.050695][ T5880] usb 5-1: can't read configurations, error -22 [ 686.088946][T13204] lo speed is unknown, defaulting to 1000 [ 686.099189][T13204] lo speed is unknown, defaulting to 1000 [ 686.216928][ T5880] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 686.250197][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 686.273464][ T5880] usb 5-1: not running at top speed; connect to a high speed hub [ 686.286286][ T5880] usb 5-1: no configurations [ 686.290944][ T5880] usb 5-1: can't read configurations, error -22 [ 686.301437][ T5880] usb usb5-port1: unable to enumerate USB device [ 686.482050][T13220] FAULT_INJECTION: forcing a failure. [ 686.482050][T13220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.510230][T13220] CPU: 1 UID: 0 PID: 13220 Comm: syz.3.1999 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 686.510261][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 686.510273][T13220] Call Trace: [ 686.510280][T13220] [ 686.510289][T13220] dump_stack_lvl+0x189/0x250 [ 686.510321][T13220] ? __pfx____ratelimit+0x10/0x10 [ 686.510349][T13220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.510374][T13220] ? __pfx__printk+0x10/0x10 [ 686.510402][T13220] should_fail_ex+0x414/0x560 [ 686.510428][T13220] strncpy_from_user+0x36/0x290 [ 686.510452][T13220] getname_flags+0xf3/0x540 [ 686.510479][T13220] user_path_at+0x24/0x60 [ 686.510509][T13220] __se_sys_mount+0x2d3/0x410 [ 686.510539][T13220] ? __pfx___se_sys_mount+0x10/0x10 [ 686.510561][T13220] ? rcu_is_watching+0x15/0xb0 [ 686.510590][T13220] ? do_syscall_64+0xbe/0x3b0 [ 686.510616][T13220] ? __x64_sys_mount+0x20/0xc0 [ 686.510642][T13220] do_syscall_64+0xfa/0x3b0 [ 686.510666][T13220] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.510691][T13220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.510709][T13220] ? clear_bhb_loop+0x60/0xb0 [ 686.510732][T13220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.510750][T13220] RIP: 0033:0x7fdc02d8e929 [ 686.510767][T13220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.510783][T13220] RSP: 002b:00007fdc00bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 686.510803][T13220] RAX: ffffffffffffffda RBX: 00007fdc02fb5fa0 RCX: 00007fdc02d8e929 [ 686.510817][T13220] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 686.510829][T13220] RBP: 00007fdc00bf6090 R08: 0000200000000040 R09: 0000000000000000 [ 686.510840][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.510851][T13220] R13: 0000000000000000 R14: 00007fdc02fb5fa0 R15: 00007ffcfc0f7a38 [ 686.510881][T13220] [ 686.889521][T13225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2001'. [ 687.296895][T13226] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 687.296895][T13226] program syz.2.2000 not setting count and/or reply_len properly [ 687.721699][T13228] netlink: 'syz.1.2002': attribute type 21 has an invalid length. [ 687.736756][T13228] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2002'. [ 687.774393][ T5880] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 688.184477][ T5880] usb 3-1: device descriptor read/64, error -71 [ 688.506635][ T5880] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 688.784568][ T5880] usb 3-1: device descriptor read/64, error -71 [ 688.906959][ T5880] usb usb3-port1: attempt power cycle [ 689.254449][ T5880] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 689.285353][ T5880] usb 3-1: device descriptor read/8, error -71 [ 689.502816][T13251] netlink: 'syz.3.2010': attribute type 11 has an invalid length. [ 689.544369][ T5880] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 689.585126][ T5880] usb 3-1: device descriptor read/8, error -71 [ 689.721421][ T5880] usb usb3-port1: unable to enumerate USB device [ 690.960143][T13264] netlink: 'syz.0.2015': attribute type 21 has an invalid length. [ 691.046711][T13264] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2015'. [ 691.060323][T13272] macsec0: left allmulticast mode [ 691.799437][T13277] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 693.152426][T13296] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 693.152426][T13296] program syz.4.2024 not setting count and/or reply_len properly [ 693.622310][T13294] x_tables: duplicate underflow at hook 1 [ 693.666009][T11778] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 693.697644][T13303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2027'. [ 693.834547][T11778] usb 5-1: device descriptor read/64, error -71 [ 693.930770][ T30] audit: type=1326 audit(1750053821.495:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.1.2028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936378e929 code=0x0 [ 694.032719][T13308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2028'. [ 694.094344][T11778] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 694.264549][T11778] usb 5-1: device descriptor read/64, error -71 [ 694.385918][T11778] usb usb5-port1: attempt power cycle [ 694.433922][T13310] netlink: 'syz.3.2029': attribute type 21 has an invalid length. [ 694.442953][T13310] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2029'. [ 694.780279][T11778] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 694.815313][T13315] loop2: detected capacity change from 0 to 7 [ 694.822374][T11778] usb 5-1: device descriptor read/8, error -71 [ 694.829014][T13315] Dev loop2: unable to read RDB block 7 [ 694.834855][T13315] loop2: AHDI p2 p3 [ 694.838762][T13315] loop2: partition table partially beyond EOD, truncated [ 694.845892][T13315] loop2: p2 size 150995456 extends beyond EOD, truncated [ 695.724674][T11778] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 695.900490][T13329] 9pnet_virtio: no channels available for device 127.0.0.1 [ 695.964287][T11778] usb 5-1: device not accepting address 71, error -71 [ 695.990548][T11778] usb usb5-port1: unable to enumerate USB device [ 696.324734][T13337] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2038'. [ 697.434299][ T30] audit: type=1326 audit(1750053824.985:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.3.2042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc02d8e929 code=0x0 [ 697.533502][T13357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2042'. [ 698.071929][T13361] loop2: detected capacity change from 0 to 7 [ 698.211853][T13361] Dev loop2: unable to read RDB block 7 [ 698.301439][T13365] sg_write: data in/out 768/421 bytes for SCSI command 0xb1-- guessing data in; [ 698.301439][T13365] program syz.2.2045 not setting count and/or reply_len properly [ 698.588969][T13361] loop2: AHDI p2 p3 [ 698.594403][T13361] loop2: partition table partially beyond EOD, truncated [ 698.616544][T13361] loop2: p2 size 150995456 extends beyond EOD, truncated [ 698.984307][T11778] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 699.736479][T11778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.753595][T11778] usb 3-1: config 0 has no interfaces? [ 699.766319][T11778] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 699.775650][T11778] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 699.783876][T11778] usb 3-1: Product: syz [ 699.790341][T11778] usb 3-1: Manufacturer: syz [ 699.795022][T11778] usb 3-1: SerialNumber: syz [ 699.816172][T11778] usb 3-1: config 0 descriptor?? [ 699.960899][T13377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.063020][T11778] usb 3-1: USB disconnect, device number 41 [ 700.319468][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 700.533218][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2053'. [ 701.253061][ T30] audit: type=1326 audit(1750053828.815:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.0.2056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f065e38e929 code=0x0 [ 702.859143][T13410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2056'. [ 702.942994][T13413] netlink: 'syz.1.2061': attribute type 21 has an invalid length. [ 702.968643][T13413] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2061'. [ 706.333327][T13453] netlink: 'syz.4.2073': attribute type 21 has an invalid length. [ 706.355910][T13453] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2073'. [ 706.460701][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 707.156227][ T5980] bond2: (slave bridge1): link status up again after 0 ms [ 707.249167][ T30] audit: type=1326 audit(1750053834.815:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13456 comm="syz.4.2075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18098e929 code=0x0 [ 707.280492][ T5980] bond2: (slave bridge1): failed to get link speed/duplex [ 707.400636][T13462] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2075'. [ 707.467341][ T42] bond2: (slave bridge1): failed to get link speed/duplex [ 707.604421][ T42] bond2: (slave bridge1): failed to get link speed/duplex [ 707.783871][ T5981] bond2: (slave bridge1): failed to get link speed/duplex [ 707.987179][ T5980] bond2: (slave bridge1): failed to get link speed/duplex [ 708.831143][ T7623] bond2: (slave bridge1): failed to get link speed/duplex [ 708.994350][ T5980] bond2: (slave bridge1): failed to get link speed/duplex [ 709.146607][ T7618] bond2: (slave bridge1): failed to get link speed/duplex [ 709.816143][ T7618] bond2: (slave bridge1): failed to get link speed/duplex [ 710.534435][T13492] (unnamed net_device) (uninitialized): option use_carrier: invalid value (170) [ 710.991158][T13500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2086'. [ 712.210639][ T5980] net_ratelimit: 17 callbacks suppressed [ 712.210661][ T5980] bond2: (slave bridge1): failed to get link speed/duplex [ 712.382945][ T7615] bond2: (slave bridge1): failed to get link speed/duplex [ 712.540944][T13524] macvlan2: entered promiscuous mode [ 712.764494][ T5981] bond2: (slave bridge1): failed to get link speed/duplex [ 713.271096][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 713.309965][T13529] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 713.486514][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2097'. [ 713.517677][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 713.620742][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 713.644411][ T5981] bond2: (slave bridge1): failed to get link speed/duplex [ 713.714143][T13533] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 713.769803][T13533] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 713.799015][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 713.926853][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 714.101690][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 714.239577][T13540] nbd: must specify an index to disconnect [ 714.722546][ T5981] bond2: (slave bridge1): failed to get link speed/duplex [ 715.204887][T13544] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 715.213643][T13544] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 715.303317][T13544] overlayfs: missing 'lowerdir' [ 715.335991][T13544] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 715.343824][T13544] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2102'. [ 715.360771][T13544] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 717.284751][ T7614] net_ratelimit: 15 callbacks suppressed [ 717.284770][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 717.484343][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 717.598902][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 717.737774][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 717.981925][ T5980] bond2: (slave bridge1): failed to get link speed/duplex [ 718.117052][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 718.965990][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 719.112759][ T42] bond2: (slave bridge1): failed to get link speed/duplex [ 719.914407][ T7615] bond2: (slave bridge1): failed to get link speed/duplex [ 720.027562][T13589] lo speed is unknown, defaulting to 1000 [ 720.088230][T13589] lo speed is unknown, defaulting to 1000 [ 720.104155][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 720.832675][T13629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2125'. [ 720.843579][T13629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2125'. [ 720.863531][T13631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.892942][T13632] xt_hashlimit: max too large, truncated to 1048576 [ 721.706054][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'. [ 721.716172][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'. [ 722.295221][ T7614] net_ratelimit: 14 callbacks suppressed [ 722.295243][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 722.435481][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 722.481949][ T5836] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 722.574373][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 722.736377][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 722.891098][T13667] bad cache= option: no%e [ 722.891098][T13667] [ 722.898075][T13667] CIFS: VFS: bad cache= option: no%e [ 723.301043][T13656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 723.309311][T13656] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 723.318364][T13656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 723.324337][T13656] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 723.332869][T13656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 723.339521][T13656] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 723.347833][T13656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 723.353764][T13656] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 723.488558][ T5980] bond2: (slave bridge1): failed to get link speed/duplex [ 723.605026][ T5980] bond2: (slave bridge1): failed to get link speed/duplex [ 723.751739][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 723.896249][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 724.074065][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 724.160201][T13681] dummy0: entered promiscuous mode [ 724.181546][T13681] erspan0: entered promiscuous mode [ 724.346243][ T7614] bond2: (slave bridge1): failed to get link speed/duplex [ 724.561645][ T5981] bond2: (slave bridge1): failed to get link speed/duplex [ 725.045295][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2144'. [ 725.170625][T13695] macvlan3: entered promiscuous mode [ 726.858830][T11778] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 727.311950][T11778] usb 3-1: config 0 has no interfaces? [ 727.317897][T11778] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 727.330081][T11778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.445041][ T13] net_ratelimit: 13 callbacks suppressed [ 727.445062][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 727.462668][T11778] usb 3-1: config 0 descriptor?? [ 727.492846][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 727.678727][T13725] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.688671][T13725] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.733699][T13725] [ 727.736071][T13725] ============================================ [ 727.742225][T13725] WARNING: possible recursive locking detected [ 727.748385][T13725] 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 Not tainted [ 727.755500][T13725] -------------------------------------------- [ 727.761652][T13725] syz.4.2151/13725 is trying to acquire lock: [ 727.767721][T13725] ffff888058bacd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 727.778730][T13725] [ 727.778730][T13725] but task is already holding lock: [ 727.786098][T13725] ffff888058bacd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 727.795982][T13725] and the lock comparison function returns 0: [ 727.802048][T13725] [ 727.802048][T13725] other info that might help us debug this: [ 727.810109][T13725] Possible unsafe locking scenario: [ 727.810109][T13725] [ 727.817565][T13725] CPU0 [ 727.820843][T13725] ---- [ 727.824127][T13725] lock(&dev_instance_lock_key#20); [ 727.829437][T13725] lock(&dev_instance_lock_key#20); [ 727.834744][T13725] [ 727.834744][T13725] *** DEADLOCK *** [ 727.834744][T13725] [ 727.842888][T13725] May be due to missing lock nesting notation [ 727.842888][T13725] [ 727.851222][T13725] 2 locks held by syz.4.2151/13725: [ 727.856426][T13725] #0: ffffffff8f4fdec8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 727.865434][T13725] #1: ffff888058bacd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 727.875749][T13725] [ 727.875749][T13725] stack backtrace: [ 727.881645][T13725] CPU: 0 UID: 0 PID: 13725 Comm: syz.4.2151 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 727.881674][T13725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.881687][T13725] Call Trace: [ 727.881698][T13725] [ 727.881707][T13725] dump_stack_lvl+0x189/0x250 [ 727.881741][T13725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.881769][T13725] ? __pfx__printk+0x10/0x10 [ 727.881790][T13725] ? print_lock_name+0xde/0x100 [ 727.881822][T13725] print_deadlock_bug+0x28b/0x2a0 [ 727.881853][T13725] validate_chain+0x1a3f/0x2140 [ 727.881882][T13725] ? rcu_is_watching+0x15/0xb0 [ 727.881910][T13725] ? trace_sched_exit_tp+0x38/0x120 [ 727.881933][T13725] ? __schedule+0x16c0/0x4cb0 [ 727.881966][T13725] __lock_acquire+0xab9/0xd20 [ 727.881994][T13725] ? __netdev_update_features+0xcb1/0x1a20 [ 727.882020][T13725] lock_acquire+0x120/0x360 [ 727.882044][T13725] ? __netdev_update_features+0xcb1/0x1a20 [ 727.882076][T13725] __mutex_lock+0x182/0xe80 [ 727.882104][T13725] ? __netdev_update_features+0xcb1/0x1a20 [ 727.882129][T13725] ? rcu_is_watching+0x15/0xb0 [ 727.882157][T13725] ? trace_irq_disable+0x37/0x110 [ 727.882180][T13725] ? preempt_schedule_irq+0xde/0x150 [ 727.882206][T13725] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 727.882234][T13725] ? __netdev_update_features+0xcb1/0x1a20 [ 727.882261][T13725] ? __pfx___mutex_lock+0x10/0x10 [ 727.882290][T13725] ? bond_fix_features+0x191/0x1d0 [ 727.882316][T13725] __netdev_update_features+0xcb1/0x1a20 [ 727.882341][T13725] ? find_lowest_rq+0x12e/0x760 [ 727.882371][T13725] ? __pfx___netdev_update_features+0x10/0x10 [ 727.882407][T13725] ? finish_task_switch+0x26b/0x950 [ 727.882432][T13725] ? rcu_is_watching+0x15/0xb0 [ 727.882459][T13725] ? trace_sched_exit_tp+0x38/0x120 [ 727.882482][T13725] ? __schedule+0x16c0/0x4cb0 [ 727.882512][T13725] netdev_change_features+0x72/0xd0 [ 727.882537][T13725] ? __pfx_netdev_change_features+0x10/0x10 [ 727.882563][T13725] ? preempt_schedule_irq+0xb5/0x150 [ 727.882592][T13725] ? netif_set_tso_max_size+0x10e/0x1d0 [ 727.882617][T13725] bond_compute_features+0x615/0x680 [ 727.882647][T13725] ? __pfx_bond_compute_features+0x10/0x10 [ 727.882677][T13725] bond_netdev_event+0x72e/0xe80 [ 727.882699][T13725] ? __pfx_bond_netdev_event+0x10/0x10 [ 727.882719][T13725] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.882749][T13725] ? __pfx_xsk_notifier+0x10/0x10 [ 727.882776][T13725] ? notifier_call_chain+0x164/0x3e0 [ 727.882807][T13725] notifier_call_chain+0x1b3/0x3e0 [ 727.882839][T13725] netdev_features_change+0x85/0xc0 [ 727.882858][T13725] ? __pfx_netdev_features_change+0x10/0x10 [ 727.882882][T13725] dev_ethtool+0x1520/0x1990 [ 727.882906][T13725] ? rcu_is_watching+0x15/0xb0 [ 727.882939][T13725] ? __pfx_dev_ethtool+0x10/0x10 [ 727.882964][T13725] ? dev_load+0x21/0x1f0 [ 727.882986][T13725] ? __rcu_read_unlock+0x84/0xe0 [ 727.883008][T13725] ? dev_load+0x21/0x1f0 [ 727.883025][T13725] dev_ioctl+0x392/0x1150 [ 727.883045][T13725] sock_do_ioctl+0x22c/0x300 [ 727.883074][T13725] ? __pfx_sock_do_ioctl+0x10/0x10 [ 727.883101][T13725] ? __lock_acquire+0xab9/0xd20 [ 727.883127][T13725] ? __asan_memset+0x22/0x50 [ 727.883145][T13725] ? smack_file_ioctl+0x24a/0x340 [ 727.883171][T13725] sock_ioctl+0x576/0x790 [ 727.883199][T13725] ? __pfx_sock_ioctl+0x10/0x10 [ 727.883225][T13725] ? __fget_files+0x2a/0x420 [ 727.883251][T13725] ? __fget_files+0x3a0/0x420 [ 727.883276][T13725] ? __fget_files+0x2a/0x420 [ 727.883302][T13725] ? bpf_lsm_file_ioctl+0x9/0x20 [ 727.883329][T13725] ? __pfx_sock_ioctl+0x10/0x10 [ 727.883354][T13725] __se_sys_ioctl+0xfc/0x170 [ 727.883376][T13725] do_syscall_64+0xfa/0x3b0 [ 727.883411][T13725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.883430][T13725] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 727.883450][T13725] ? clear_bhb_loop+0x60/0xb0 [ 727.883472][T13725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.883491][T13725] RIP: 0033:0x7ff18098e929 [ 727.883511][T13725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.883529][T13725] RSP: 002b:00007ff17e7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.883551][T13725] RAX: ffffffffffffffda RBX: 00007ff180bb6160 RCX: 00007ff18098e929 [ 727.883567][T13725] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 727.883580][T13725] RBP: 00007ff180a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 727.883594][T13725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.883607][T13725] R13: 0000000000000000 R14: 00007ff180bb6160 R15: 00007ffdc93a1d28 [ 727.883629][T13725] [ 728.330504][T11781] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 728.373121][T11778] usb 3-1: USB disconnect, device number 42 [ 728.506218][T11781] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 728.513909][T11781] usb 4-1: can't read configurations, error -61 [ 728.644267][T11781] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 728.806810][T11781] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 728.814559][T11781] usb 4-1: can't read configurations, error -61 [ 728.821146][T11781] usb usb4-port1: attempt power cycle [ 729.184406][T11781] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 729.206326][T11781] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 729.213948][T11781] usb 4-1: can't read configurations, error -61 [ 729.344663][T11781] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 729.376945][T11781] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 729.384751][T11781] usb 4-1: can't read configurations, error -61 [ 729.391389][T11781] usb usb4-port1: unable to enumerate USB device