last executing test programs: 7.379598597s ago: executing program 3 (id=1198): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="74187a851d156a68b89a0e73cdc781698a469a4ba0b7c438a42097f4e50b258fb6a9d8719aacbd9ebc682c584d9de352aa", 0x31}], 0x1}], 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x37, &(0x7f0000000a40)=@framed={{}, [@ldst={0xf6859560af16b905, 0x2, 0x2, 0x6, 0x4, 0x2, 0xffffffffffffffff}, @kfunc, @ringbuf_output, @snprintf, @btf_id, @snprintf, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c052}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000001340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001600)={'ip6_vti0\x00', &(0x7f0000001580)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x5, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8007, 0x800, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003c80)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = dup3(r10, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r11, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="d8e20ac9c6d09a4fe75978babac4bbb8881442940d41632c1740abba9eb0a95edc50cf6583d120b360cedaed108f35db7512b498bb319bd62afdb33f5d555d69fa40fe5425ba2a5fd11ce16484209c65affc2f72ab9f4fb254962bf480ac00f7cb9a11b5ead978a4f2d8bf1d774ebec283fa9f61a55e642ddf189bc379bfad44bab874040485c2e878a4640ce711221ace6066682b617475b404192d7f0f49be62efa27cddac6e3ba10b104b4004595cb73d9aa9624b2b80176b259adfbe0bb9f5c66c2ce3a0f17e3d7fafc0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r12}, 0x90) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 7.171215101s ago: executing program 3 (id=1200): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4}, &(0x7f00000006c0)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r5}, 0x14) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x20000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/35, @ANYRES32], 0xb8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/41], 0xb8}}, 0x0) 6.564713135s ago: executing program 0 (id=1202): r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x17) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000002080)=0x64, 0x23b) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x1, 0x3e, &(0x7f0000000080)="3a0dc768", 0x4) bind$inet6(r3, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 6.470871248s ago: executing program 4 (id=1203): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xde) close(0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f000001c8c0)=""/102386, 0x18ff2}], 0x1, 0x0, 0xfffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x480e4) r3 = socket(0x22, 0x2, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x101, 0xfffffbff, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x83) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x100000000000000) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000a06010200000000000000000000000004000880080009400000000005000100070000000900020073797a3000000000100008"], 0x44}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.095881891s ago: executing program 0 (id=1206): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000030701"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ppoll(&(0x7f0000000300)=[{r1, 0x4}, {r1, 0x222}], 0x2, 0x0, 0x0, 0xfffffffffffffe0c) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.921066232s ago: executing program 3 (id=1207): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000bbff02005eba57f52f67c95fdd0f7f8bc0dcd5c200000000000000000c00bdb461cad1ade6967a76e4d59e000001890090780000000000000000000000000000ffff"], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40014) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000117, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x0, 0x4, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @remote}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x39}, r3}, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x84140, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) 5.690701567s ago: executing program 4 (id=1209): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0000000f0a00000000000004000000400000000500000000000000ff03000000000000000000000000000000000000000000000000000000e60000070000000500000000000000000000003c15000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/314]) r1 = syz_usb_connect(0x6, 0x3f, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x7}}, 0x967177dfd39d5e5c) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="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", 0x10e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a", 0x43}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258", 0x60}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ff"], 0xa0}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x238}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001b40)="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", 0x1a9}, {&(0x7f0000000680)="ece3b209145c8481fc2a40bf12df10bde78072cea4af58fd0641bc8b0c0b44a9a462087860d933ff8d2a005a2e90e36de684", 0x32}, {&(0x7f00000019c0)="d677a937856c1f62307b08899551d711fc3a65279d649788088b6cd568d6c31cc06128c4d04ecf3df54589c1fe31351335d073cb15f75c7a1c5d80862ab051b0107da0628b668d115e3e6d8578925b708141f8637e6443ef56d15f523c13c6535e31c0d858947b4589c8fb78a04206e675a37d0f8d0d14a8fe8f971252c22ab12f3e37089066fcd1da76213cf43df50f1e5c88fe674c89e36fabdb65ed3765f9894ffc4681e61f91ac1ca39b1c152260d1ac7bcff429fa3baed8c2416d46a8430af1f5194809904de092eb4dea968b47ca848e6f9cdad12b7a52d0109d62973d338ce620d3c1c3a06b", 0xe9}, {&(0x7f00000007c0)="a4ac2d27e3dc71b1685b082d9b19388436725ddefa9ba17062069b051a22134b87b1fa7a985ee8858d70a62675231f3dee41391f10b2e2e767f4db56c61bdac593b096725150b9f9b8bd300449afc5b04063f7459d344c5b6f9b96ddfcf827af820fe4e0854fe236c7b8e06506e8dcdd1796cc16267cd2e76e04c57022eab4e1d662", 0x82}], 0x4, &(0x7f0000000b80)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "34aeee295b724fb3e706138cfd202580ab919289bebcf59eb9aa77ae43f4ceb32af0a638"}, @iv={0x58, 0x117, 0x2, 0x3e, "00ac7a07befd53228eea08a991b9ebb8bc40f64af377c12032b995db3c913f5a591f5b006a56798398d7fe3138d2179a82475cb3700cd3509271a3efbc24"}], 0xc0, 0x24004000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="a3d0ba80f0786e858d365a51be1e4cae1af0ed81fea28a1743d1e1bd1345686caec6c693656644ac90867ace9101c8c4db5c3e6e4790ed49d19103baa7dec129163e8cd5667595f1de855e9dcec384371c0c2b44f9d6036b08b0f528f0e2255b4208ca71198c9e9033e87d317457867e7c6093fabc5eb6847dd29dbcdb04e43e71c09859549fad0b92e67852979d7742af0e14063e", 0x95}], 0x1, 0x0, 0x0, 0x400c010}], 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000005c0)=@ccm_128={{0x303}, "92d234a59387f742", "bd7c5a256e26f8b2e444aedda3e3fb08", "321cbc67", "b3afd8d3817e373e"}, 0x28) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.037787642s ago: executing program 0 (id=1211): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5435, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) sendto(0xffffffffffffffff, &(0x7f00000002c0)="8c2c53f35612d6d19c7248241e756b6f6b39e7da20030827083d046b0c5b68eb4a79b2315847eca7f27bfeb95737774cad3d2d5dfe59c2edc04012fb1de6b03e4bc5259eb6b0ff29f1af8ab996d175e3f29f0a197864a348264da02ab1ec637894b86f35467a2565c18223a0b230cbc86e8a666416e8c28bbe3a0080e75db9ee73a3e76e49aa01f7ae68e1898c794e0b3cda1d45d897cd2b7c4349b6050da5b962b3b5b14556cb867f69ccad2595f6afe7800af4140913e8aae2cdcc2649a20e8984532e0da712dc1af0", 0xca, 0x40088d0, &(0x7f00000003c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, 0x4}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000020000850000007d0000009522319dd70c244acf92a78d31578b2b96fcf0191a0f4fbcb2c135"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000065c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x0, 0x8, 0x7f02ae, 0x328, 0x200, 0x430, 0x2e8, 0x2e8, 0x430, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}}}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00', r1}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfffffffffffffe00}, {0x3}}, {{@in=@multicast1, 0x4d2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000680001000000000004000000020000000000000004000400"], 0x1c}}, 0x0) 4.918553636s ago: executing program 2 (id=1212): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000010040)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="0a0002000180c201000000000a0001000d"], 0x54}}, 0x0) (async) open_tree(0xffffffffffffff9c, 0x0, 0x81000) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 4.841674455s ago: executing program 3 (id=1213): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xac, 0xad, 0xb, 0x8, 0xb05, 0x17d0, 0x39e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9f, 0x9, 0x90, 0xa, [{{0x9, 0x4, 0x14, 0xe, 0x0, 0x2f, 0xbd, 0x15, 0x8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0x4ef1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6}]}]}, 0x28}}, 0x0) 4.701739801s ago: executing program 2 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000180)={{@local}, {@local}, 0x400, "60d3ab8522eb2364cdf5fe0cef0022c6fe7cc16c97ad63b2dd6c65991c445dab0e8907f9b93c9ff6943681b5ad65bca94cb3a66b723dd3b9abeb1a8eee08a9bc82ca5a19d6dd9d572f525141bab651cc847e4766f40729e6bde6bddc404237408e8990bf6062d6998ac8548932692e0cf2a1e94b7273275e70dc564e1430b41861b882d105c286cbb60e07299528fb02c3dd0a4f651def5acaa7874106081ad5610d8153effa97e87aae0dd7b2ecc6a4f12c521cb30208e5cc571a1026a8c54399658f3ce26eabd87830c88ed74584473b2e2b5c4b7fba03f888c780b051b25b48b8d4e12620716d4fc28c991eec94e5ed68a38d84f579fdb95b189584abf3e7bf7d6bbe2bb81fa0a66700bfc01a915559c5e5adb3e063c02b6ba8758fb887d764e5ed988a13b40d8650bc05132e8690f80462bd2d33adabd449a3fb4a4ab8fd7902dcd9776b9ea631f4836c22562877f898e3c6f61cbe2b41a12500f40db72329314be793cb6fda1994b7c3b02f18f316d116fe079da3a133ebfb185ed6c66f1ad6ed855706d2b59cea741cc4ec07c870d4a60ae3d17a992922c99b951f8e7305fe73652e7c1f0a956de23b2279184e298f351a6ea5c4c67ee815c0c418346b21ba0014b53d6b7058f0d049965994b099c593d4bbac4d407a8cc83979fbe9df6bb68f30e3f652d485fe2734d7c1b2b2459a01b885389b6994b6835ae8afc5b29a216f9377e4c29b10b06b071afd0794d5c1e7e53bb8659e1c3f1dcdc3a5de5173ae1842555a2987077eb9f97c75a723c0e6834e7f2c68cd39d8cea28d6ba365810536fc9d7d8265768b05df7f9065cdabb4e08f5b0380f531206baa193e12884ba41e05b11a808b203fae140117d4b69feb9ee295f77e4c467e2dd4080ddb277c1dcad03aa79337d8b5a1a87d1b7f1322c1425fc32abf7da0b67862256da98993cbed7ce78029a9ec7b648452e7ec12f24c64686d5762ddf15249227d5ab9a6d7b94f957c453e4e8ed272472af225270d0b057288dd9cdb4dae3ee47a4b71f6681c9698974178044f82b55e6275fdacbc7506f44dd3501c7b0d402e3cf29614c0c7eef0b31c211517a18d3547af54b7deec3d23967fc98ff22ac091afe041a1fa64fec953e791ddcfe4cef51348ec1a809f0a63c10f5d210fcefe694b2ed1efdb95c7a96ef199b790c571ed8f225190ce2492bbf2167a3cc18f21898b7278244b16730c487aa4275d31e02bc4ab936c4d3051d1e514daacf6c9b53ecd89ee389c8c8329f64904049d038341028f9dd42cdedbf703e75267817cb0ebf23618f815ff9ab9cb61d0f17123239ab94de4a2227791e398a5ac6a4b117b58910a0a15443e33f834dc317b71a916f952964dd078eeb857331fe7723989ead01ef06140fdfa905c795a9239c6c1cb02d08214e2ca0e267a6a12daa126191e4a7ef0e802"}, 0x418}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002"], 0xb8}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 4.611768904s ago: executing program 2 (id=1215): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x3f, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x7}}, 0x967177dfd39d5e5c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000001ac0), 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB='u'], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="400000000000000017010000020000002b0000000b8a5280d153938c470130e8937400d34b3a7c6ddaf6f0180d18cb0f6fc80d2139e199d5b8735e710c4ccb0018000000000000001701000004000000000000000000000000010000800000001701000002000000e90000000e357e30b49f2ca7d25094ee2a0280b566d775d66c6784475d8d01d3f172da9e3d5da02f23a62c655f05c3fd313b6243b2018f55b187f98470d679bfb6362c852bc9268845e5d20ada2820b3c89b0b6d881287ab635af2d706b60ce3884d9ba356773c02638e0e7033c3e39038e814340aa7fb9120ffbf28813443827b359b75309a43d87fb5f31e5181c8a83a3d0c0080c00f39f0583023eef376ed05bf167ea61c7fcab20200dbb58fe9860b017fb8df5cb81b05a2de63336a575cde30880100880ac072fdd341437509be6c90967c7b074e612e5ce00d1525385acc7311356f42b2ea756bcc35e0c8bccc0488c8001701000002000000cb000000440097b861392735e48c474413d5c2a036e8fadd576b157597a1bebf44b17f3ac29905fc6cbe2113cb5cc8bf6a5521fa5ad2193810647575368f92a31be63d2ad263d3fdd1f7764a71366ff185f6d5be0d79b2c33836dfa96aef51b8bc46bcd9f1e6bd3f96d110b23e3763477f97020f1a5ea458b05310c82c2034b352c9ccf5a0dd43262ec9c0e35d3ff7eb8f6729f8daad178d5869a2ad0ad72d5a2e57537c9484d574dd947958f00beb320e722aca3684c0357aa062a49c8d67635ab634ecffc1cbfe41be683b87028d0000000000"], 0x238}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001b40)="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", 0x1a9}, {&(0x7f0000000680)="ece3b209145c8481fc2a40bf12df10bde78072cea4af58fd0641bc8b0c0b44a9a462087860d933ff8d2a005a2e90e36de684", 0x32}, {&(0x7f00000019c0)="d677a937856c1f62307b08899551d711fc3a65279d649788088b6cd568d6c31cc06128c4d04ecf3df54589c1fe31351335d073cb15f75c7a1c5d80862ab051b0107da0628b668d115e3e6d8578925b708141f8637e6443ef56d15f523c13c6535e31c0d858947b4589c8fb78a04206e675a37d0f8d0d14a8fe8f971252c22ab12f3e37089066fcd1da76213cf43df50f1e5c88fe674c89e36fabdb65ed3765f9894ffc4681e61f91ac1ca39b1c152260d1ac7bcff429fa3baed8c2416d46a8430af1f5194809904de092eb4dea968b47ca848e6f9cdad12b7a52d0109d62973d338ce620d3c1c3a06b", 0xe9}, {&(0x7f00000007c0)="a4ac2d27e3dc71b1685b082d9b19388436725ddefa9ba17062069b051a22134b87b1fa7a985ee8858d70a62675231f3dee41391f10b2e2e767f4db56c61bdac593b096725150b9f9b8bd300449afc5b04063f7459d344c5b6f9b96ddfcf827af820fe4e0854fe236c7b8e06506e8dcdd1796cc16267cd2e76e04c57022eab4e1d662", 0x82}], 0x4, &(0x7f0000000b80)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "34aeee295b724fb3e706138cfd202580ab919289bebcf59eb9aa77ae43f4ceb32af0a638"}, @iv={0x58, 0x117, 0x2, 0x3e, "00ac7a07befd53228eea08a991b9ebb8bc40f64af377c12032b995db3c913f5a591f5b006a56798398d7fe3138d2179a82475cb3700cd3509271a3efbc24"}], 0xc0, 0x24004000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="a3d0ba80f0786e858d365a51be1e4cae1af0ed81fea28a1743d1e1bd1345686caec6c693656644ac90867ace9101c8c4db5c3e6e4790ed49d19103baa7dec129163e8cd5667595f1de855e9dcec384371c0c2b44f9d6036b08b0f528f0e2255b4208ca71198c9e9033e87d317457867e7c6093fabc5eb6847dd29dbcdb04e43e71c09859549fad0b92e67852979d7742af0e14063e", 0x95}], 0x1, 0x0, 0x0, 0x400c010}], 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000005c0)=@ccm_128={{0x303}, "92d234a59387f742", "bd7c5a256e26f8b2e444aedda3e3fb08", "321cbc67", "b3afd8d3817e373e"}, 0x28) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.429902162s ago: executing program 1 (id=1217): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010f00000000000000000500000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x6cdc, &(0x7f00000003c0)={0x0, 0x2aa5, 0x2000, 0xfffffffe, 0x31d, 0x0, r6}, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 3.271428726s ago: executing program 1 (id=1218): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user\x00'}, 0x1b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x30, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}}, 0x10) 2.745294955s ago: executing program 1 (id=1219): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x4000, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.504631367s ago: executing program 4 (id=1220): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0xfffffffffffffc64) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) listen(r4, 0x0) listen(r4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x97, &(0x7f0000000300)={@local, @remote, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0xfb, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9095, 0x0, 0x1}], @llc={@snap={0x1, 0x1, '%', "850e3b", 0x883e, "6539a37036bca1d3c175177023326e3ebc55db43939ef28868b87656512af4d3123ed2aa32be7e98d77177096a6dca02a884e979d17b5e45ded03c6897b756c22b0934b970d9c34912a89aabae6cddcbf1a874e8762227f551675008f0f5caf92cd7c1246d08dfb1cf"}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x5000002, 0x4) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001a00)=0x4, 0x4) poll(0x0, 0x0, 0x800) shutdown(r5, 0x0) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r5, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.411835546s ago: executing program 3 (id=1221): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000030701"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ppoll(&(0x7f0000000300)=[{r1, 0x4}, {r1, 0x222}], 0x2, 0x0, 0x0, 0xfffffffffffffe0c) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.185464596s ago: executing program 0 (id=1222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr/sockcreate\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0xfdfdffff}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) set_mempolicy(0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffffffff, 0x1}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x8000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 2.09744845s ago: executing program 4 (id=1223): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000bbff02005eba57f52f67c95fdd0f7f8bc0dcd5c200000000000000000c00bdb461cad1ade6967a76e4d59e000001890090780000000000000000000000000000ffff"], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40014) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000117, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x0, 0x4, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @remote}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x39}, r3}, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x84140, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) 1.630905319s ago: executing program 1 (id=1224): r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x17) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x1, 0x3e, &(0x7f0000000080)="3a0dc768", 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) 1.439398561s ago: executing program 2 (id=1225): r0 = socket(0x840000000002, 0x3, 0xff) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000900)={0x7, @vbi={0x3, 0x8, 0x10000, 0x36314d4e, [0xc698, 0x7], [0x4, 0xfffffffe], 0x108}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x0, 0x4, 0x2) fanotify_mark(0xffffffffffffffff, 0x105, 0x44001033, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc1}) chdir(&(0x7f0000000000)='./bus\x00') link(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9, @ANYBLOB="00b0dc05e1ac01327a83000000", @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', r9, 0x618ba0daf520f797, 0x40, 0x5, 0x7, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0x10, [@remote]}, @rr={0x7, 0x17, 0xf6, [@multicast1, @private=0xa010102, @local, @private=0xa010100, @remote]}]}}}}}) futex(&(0x7f0000002500)=0x1, 0x6, 0x0, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.386027792s ago: executing program 3 (id=1226): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)=ANY=[]) r1 = syz_usb_connect(0x6, 0x3f, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x7}}, 0x967177dfd39d5e5c) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be42", 0x118}, {&(0x7f0000000f00)="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", 0x10e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a", 0x43}, {0x0}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ff"], 0xa0}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB='u'], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="400000000000000017010000020000002b0000000b8a5280d153938c470130e8937400d34b3a7c6ddaf6f0180d18cb0f6fc80d2139e199d5b8735e710c4ccb0018000000000000001701000004000000000000000000000000010000800000001701000002000000e90000000e357e30b49f2ca7d25094ee2a0280b566d775d66c6784475d8d01d3f172da9e3d5da02f23a62c655f05c3fd313b6243b2018f55b187f98470d679bfb6362c852bc9268845e5d20ada2820b3c89b0b6d881287ab635af2d706b60ce3884d9ba356773c02638e0e7033c3e39038e814340aa7fb9120ffbf28813443827b359b75309a43d87fb5f31e5181c8a83a3d0c0080c00f39f0583023eef376ed05bf167ea61c7fcab20200dbb58fe9860b017fb8df5cb81b05a2de63336a575cde30880100880ac072fdd341437509be6c90967c7b074e612e5ce00d1525385acc7311356f42b2ea756bcc35e0c8bccc0488c8001701000002000000cb000000440097b861392735e48c474413d5c2a036e8fadd576b157597a1bebf44b17f3ac29905fc6cbe2113cb5cc8bf6a5521fa5ad2193810647575368f92a31be63d2ad263d3fdd1f7764a71366ff185f6d5be0d79b2c33836dfa96aef51b8bc46bcd9f1e6bd3f96d110b23e3763477f97020f1a5ea458b05310c82c2034b352c9ccf5a0dd43262ec9c0e35d3ff7eb8f6729f8daad178d5869a2ad0ad72d5a2e57537c9484d574dd947958f00beb320e722aca3684c0357aa062a49c8d67635ab634ecffc1cbfe41be683b87028d0000000000"], 0x238}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001b40)="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", 0x1a9}, {&(0x7f0000000680)="ece3b209145c8481fc2a40bf12df10bde78072cea4af58fd0641bc8b0c0b44a9a462087860d933ff8d2a005a2e90e36de684", 0x32}, {&(0x7f00000019c0)="d677a937856c1f62307b08899551d711fc3a65279d649788088b6cd568d6c31cc06128c4d04ecf3df54589c1fe31351335d073cb15f75c7a1c5d80862ab051b0107da0628b668d115e3e6d8578925b708141f8637e6443ef56d15f523c13c6535e31c0d858947b4589c8fb78a04206e675a37d0f8d0d14a8fe8f971252c22ab12f3e37089066fcd1da76213cf43df50f1e5c88fe674c89e36fabdb65ed3765f9894ffc4681e61f91ac1ca39b1c152260d1ac7bcff429fa3baed8c2416d46a8430af1f5194809904de092eb4dea968b47ca848e6f9cdad12b7a52d0109d62973d338ce620d3c1c3a06b", 0xe9}, {&(0x7f00000007c0)="a4ac2d27e3dc71b1685b082d9b19388436725ddefa9ba17062069b051a22134b87b1fa7a985ee8858d70a62675231f3dee41391f10b2e2e767f4db56c61bdac593b096725150b9f9b8bd300449afc5b04063f7459d344c5b6f9b96ddfcf827af820fe4e0854fe236c7b8e06506e8dcdd1796cc16267cd2e76e04c57022eab4e1d662", 0x82}], 0x4, &(0x7f0000000b80)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "34aeee295b724fb3e706138cfd202580ab919289bebcf59eb9aa77ae43f4ceb32af0a638"}, @iv={0x58, 0x117, 0x2, 0x3e, "00ac7a07befd53228eea08a991b9ebb8bc40f64af377c12032b995db3c913f5a591f5b006a56798398d7fe3138d2179a82475cb3700cd3509271a3efbc24"}], 0xc0, 0x24004000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="a3d0ba80f0786e858d365a51be1e4cae1af0ed81fea28a1743d1e1bd1345686caec6c693656644ac90867ace9101c8c4db5c3e6e4790ed49d19103baa7dec129163e8cd5667595f1de855e9dcec384371c0c2b44f9d6036b08b0f528f0e2255b4208ca71198c9e9033e87d317457867e7c6093fabc5eb6847dd29dbcdb04e43e71c09859549fad0b92e67852979d7742af0e14063e", 0x95}], 0x1, 0x0, 0x0, 0x400c010}], 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000005c0)=@ccm_128={{0x303}, "92d234a59387f742", "bd7c5a256e26f8b2e444aedda3e3fb08", "321cbc67", "b3afd8d3817e373e"}, 0x28) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.144311845s ago: executing program 0 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x40000) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x2, 0x200, 0x6, 0x771, 0x100, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0224000002b400000000000077673000000000000000000000000000080029005eb50300a0c26c6422ea51164c96add1ee48e748d61ed3b2ba73a6f252957b31ac24943f6d2dae545c85ccb91784c881"], 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1.053287174s ago: executing program 1 (id=1228): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3}, &(0x7f00000006c0)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r4}, 0x14) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x20000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/35, @ANYRES32], 0xb8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/41], 0xb8}}, 0x0) 1.052404996s ago: executing program 4 (id=1229): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user\x00'}, 0x1b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x30, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}}, 0x10) 847.447844ms ago: executing program 0 (id=1230): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0000000f0a00000000000004000000400000000500000000000000ff03000000000000000000000000000000000000000000000000000000e60000070000000500000000000000000000003c15000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/316]) r1 = syz_usb_connect(0x6, 0x3f, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x7}}, 0x967177dfd39d5e5c) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="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", 0x10e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a", 0x43}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258", 0x60}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ff"], 0xa0}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x238}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001b40)="e063da59dea51013ab18c55effcce079371ab3526766fc95cc4cdefe8f9a2c32f8e3f713aedb12b1fa8892a1806ef70bef41168ca8fbcd6e14bffbd27aa75e8f0978137e7c4dfb48dbfe8bfa33cfd35d4ce7fad22e041487268bb3039f21fee8da116bc6f37901407d8ca86ac031fc72101c9c5c92af099465c3b9556e236542ebb733871a1cf38d6094faa2c83089f41275d188f63b684243175211a9291ffe122f8f43ebb12869efb76e0514d3012105d1fa4a586db68c4589f747c291b3f4bbf58b814563ae0e9f7a4d6b004857c9a96eabf8bc31c0118fe63f0a06c46ba445200fe11147eccdefdfd5208bb119ff9feae38e9acd3a51a7d35ec9effd1934b41a61bd4dd8c0bd5c4af77bbb25315d137c293dbea1abee32b65c90c21a46ef2e47ee611e009d47a6d2a5590312070187afda2217ab1ef82ba3b427650c4a5c8a3935a39fec97e1799384936f1088e025576f31d47360104ea2d17ab76b1444c64e41bfd0bf33e13ca2dbce9951dd07273b87f36e4d7788f157d1c59870de41dadf79745df1ad4425fece8be2d79f18c6f9d03da9e114fb4f8a002deafbeb34a7c3e4a63dfd0de6ed", 0x1a9}, {&(0x7f0000000680)="ece3b209145c8481fc2a40bf12df10bde78072cea4af58fd0641bc8b0c0b44a9a462087860d933ff8d2a005a2e90e36de684", 0x32}, {&(0x7f00000019c0)="d677a937856c1f62307b08899551d711fc3a65279d649788088b6cd568d6c31cc06128c4d04ecf3df54589c1fe31351335d073cb15f75c7a1c5d80862ab051b0107da0628b668d115e3e6d8578925b708141f8637e6443ef56d15f523c13c6535e31c0d858947b4589c8fb78a04206e675a37d0f8d0d14a8fe8f971252c22ab12f3e37089066fcd1da76213cf43df50f1e5c88fe674c89e36fabdb65ed3765f9894ffc4681e61f91ac1ca39b1c152260d1ac7bcff429fa3baed8c2416d46a8430af1f5194809904de092eb4dea968b47ca848e6f9cdad12b7a52d0109d62973d338ce620d3c1c3a06b", 0xe9}, {&(0x7f00000007c0)="a4ac2d27e3dc71b1685b082d9b19388436725ddefa9ba17062069b051a22134b87b1fa7a985ee8858d70a62675231f3dee41391f10b2e2e767f4db56c61bdac593b096725150b9f9b8bd300449afc5b04063f7459d344c5b6f9b96ddfcf827af820fe4e0854fe236c7b8e06506e8dcdd1796cc16267cd2e76e04c57022eab4e1d662", 0x82}], 0x4, &(0x7f0000000b80)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "34aeee295b724fb3e706138cfd202580ab919289bebcf59eb9aa77ae43f4ceb32af0a638"}, @iv={0x58, 0x117, 0x2, 0x3e, "00ac7a07befd53228eea08a991b9ebb8bc40f64af377c12032b995db3c913f5a591f5b006a56798398d7fe3138d2179a82475cb3700cd3509271a3efbc24"}], 0xc0, 0x24004000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="a3d0ba80f0786e858d365a51be1e4cae1af0ed81fea28a1743d1e1bd1345686caec6c693656644ac90867ace9101c8c4db5c3e6e4790ed49d19103baa7dec129163e8cd5667595f1de855e9dcec384371c0c2b44f9d6036b08b0f528f0e2255b4208ca71198c9e9033e87d317457867e7c6093fabc5eb6847dd29dbcdb04e43e71c09859549fad0b92e67852979d7742af0e14063e", 0x95}], 0x1, 0x0, 0x0, 0x400c010}], 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000005c0)=@ccm_128={{0x303}, "92d234a59387f742", "bd7c5a256e26f8b2e444aedda3e3fb08", "321cbc67", "b3afd8d3817e373e"}, 0x28) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 818.506272ms ago: executing program 4 (id=1231): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xac, 0xad, 0xb, 0x8, 0xb05, 0x17d0, 0x39e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9f, 0x9, 0x90, 0xa, [{{0x9, 0x4, 0x14, 0xe, 0x0, 0x2f, 0xbd, 0x15, 0x8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0x4ef1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6}]}]}, 0x28}}, 0x0) 395.042492ms ago: executing program 2 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, 0xffffffffffffffff, 0x8, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000003c000480380001800c0001006269747769736500280002800800034000000002080002400000001008000140000000160400078008000640000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000af0d1585353ea775cc5d767482b12b31699bcc637d187c6cad59dc3356fcf07b4a9240a7d1fa4e78e8af1a993b5d62829"], 0x90}}, 0x0) r5 = fsopen(&(0x7f0000000100)='nfsd\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e2208001800", @ANYRES32], 0x2c}}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket(0x29, 0x3, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) 161.538736ms ago: executing program 2 (id=1233): prctl$PR_SET_THP_DISABLE(0x41, 0x3) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000016, 0x11012, r0, 0x0) 0s ago: executing program 1 (id=1234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x2, 0x0, 0xffff, 0x7, 0x3, 0x6b]}, &(0x7f0000000040)=0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca", 0x21}, {&(0x7f0000000500)="fc", 0x1}], 0x2}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 457.320531][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.328614][ T1849] usb 4-1: Product: syz [ 457.348230][ T1849] usb 4-1: Manufacturer: syz [ 457.353370][ T1849] usb 4-1: SerialNumber: syz [ 457.388156][T10049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.398774][ T1849] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 457.432610][ T5230] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 457.452853][ T4619] Bluetooth: hci4: command tx timeout [ 457.777092][T10024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.937838][ T2925] hsr_slave_0: left promiscuous mode [ 457.956838][ T2925] hsr_slave_1: left promiscuous mode [ 457.979596][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.020379][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.055922][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.072652][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.169162][ T2925] hsr_slave_0: left promiscuous mode [ 458.186606][ T2925] hsr_slave_1: left promiscuous mode [ 458.390856][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.398545][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.458969][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.635814][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.755645][ T5230] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 458.775243][ T1849] usb 4-1: USB disconnect, device number 51 [ 458.787000][ T5230] ath9k_htc: Failed to initialize the device [ 458.808183][ T1849] usb 4-1: ath9k_htc: USB layer deinitialized [ 458.869085][ T2925] veth1_macvtap: left promiscuous mode [ 458.874964][ T2925] veth0_macvtap: left promiscuous mode [ 458.881787][ T2925] veth1_vlan: left promiscuous mode [ 458.887297][ T2925] veth0_vlan: left promiscuous mode [ 458.897574][ T2925] veth1_macvtap: left promiscuous mode [ 458.908540][ T2925] veth0_macvtap: left promiscuous mode [ 458.929701][ T2925] veth1_vlan: left promiscuous mode [ 458.950068][ T2925] veth0_vlan: left promiscuous mode [ 459.540429][ T4619] Bluetooth: hci4: command tx timeout [ 459.874328][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 459.929261][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 460.979505][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 461.035154][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 461.552945][T10024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.620927][ T4619] Bluetooth: hci4: command tx timeout [ 461.704975][T10024] team0: Port device team_slave_0 added [ 461.738283][T10024] team0: Port device team_slave_1 added [ 461.800536][ T9902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 461.939475][T10024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.970264][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.012043][T10024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.159278][ T9902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 462.188823][T10024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.199436][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.243889][T10024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.287618][ T9902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 462.457624][ T9902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 462.647713][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.665899][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 462.677594][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.698028][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.709239][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 462.721250][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.799315][T10024] hsr_slave_0: entered promiscuous mode [ 462.823644][T10024] hsr_slave_1: entered promiscuous mode [ 462.834843][T10024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.843001][T10024] Cannot create hsr debugfs directory [ 463.542494][ T9890] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 463.563970][ T9890] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 463.650061][ T9890] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.665153][ T9890] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.716331][T10081] chnl_net:caif_netlink_parms(): no params data found [ 463.846694][ T2925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.025079][ T2925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.089610][ T2925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.113918][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.124604][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.132546][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.139780][T10081] bridge_slave_0: entered allmulticast mode [ 464.149210][T10081] bridge_slave_0: entered promiscuous mode [ 464.202503][ T2925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.247037][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.260723][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.267854][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.275866][T10081] bridge_slave_1: entered allmulticast mode [ 464.284157][T10081] bridge_slave_1: entered promiscuous mode [ 464.369860][T10024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.398221][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.424136][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.431398][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.469512][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.498769][T10024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.520059][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.527262][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.581533][T10024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.655214][T10081] team0: Port device team_slave_0 added [ 464.742639][T10024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.772293][T10081] team0: Port device team_slave_1 added [ 464.811124][ T5237] Bluetooth: hci1: command tx timeout [ 464.878006][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.885140][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.912188][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.949838][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.957712][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.990559][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.077749][ T2925] bridge_slave_1: left allmulticast mode [ 465.088302][ T2925] bridge_slave_1: left promiscuous mode [ 465.096670][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.119421][ T2925] bridge_slave_0: left allmulticast mode [ 465.125350][ T2925] bridge_slave_0: left promiscuous mode [ 465.131637][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.143244][ T2925] bridge_slave_1: left allmulticast mode [ 465.149381][ T2925] bridge_slave_1: left promiscuous mode [ 465.160433][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.176123][ T2925] bridge_slave_0: left allmulticast mode [ 465.182006][ T2925] bridge_slave_0: left promiscuous mode [ 465.187749][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.929443][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.947522][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.958661][ T2925] bond0 (unregistering): Released all slaves [ 466.118982][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.130809][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.142673][ T2925] bond0 (unregistering): Released all slaves [ 466.179872][T10081] hsr_slave_0: entered promiscuous mode [ 466.186988][T10081] hsr_slave_1: entered promiscuous mode [ 466.197238][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.205473][T10081] Cannot create hsr debugfs directory [ 466.342778][ T2925] tipc: Disabling bearer [ 466.348856][ T2925] tipc: Left network mode [ 466.467553][ T9954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.490077][ T9954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.544025][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.566246][ T9954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.587279][ T9954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.693401][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.785307][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.806629][T10024] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 466.833528][T10024] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 466.900516][ T5237] Bluetooth: hci1: command tx timeout [ 466.902019][T10024] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.921543][T10024] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 466.964708][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.971977][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.027492][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.034669][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.263323][ T9902] veth0_vlan: entered promiscuous mode [ 467.282540][ T2925] hsr_slave_0: left promiscuous mode [ 467.288854][ T2925] hsr_slave_1: left promiscuous mode [ 467.297771][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.305478][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.314542][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.323377][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.338616][ T2925] hsr_slave_0: left promiscuous mode [ 467.345498][ T2925] hsr_slave_1: left promiscuous mode [ 467.357334][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.365677][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.374891][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.382810][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.420320][ T2925] veth1_macvtap: left promiscuous mode [ 467.425952][ T2925] veth0_macvtap: left promiscuous mode [ 467.432705][ T2925] veth1_vlan: left promiscuous mode [ 467.438119][ T2925] veth0_vlan: left promiscuous mode [ 467.444777][ T2925] veth1_macvtap: left promiscuous mode [ 467.452439][ T2925] veth0_macvtap: left promiscuous mode [ 467.458177][ T2925] veth1_vlan: left promiscuous mode [ 467.463655][ T2925] veth0_vlan: left promiscuous mode [ 468.189638][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 468.244825][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 468.972880][ T5237] Bluetooth: hci1: command tx timeout [ 469.226310][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 469.275243][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 469.895681][ T9902] veth1_vlan: entered promiscuous mode [ 469.962707][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.118891][ T9902] veth0_macvtap: entered promiscuous mode [ 470.168107][ T9902] veth1_macvtap: entered promiscuous mode [ 470.187515][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.286694][T10024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.345437][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.352717][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.396578][ T9890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.436220][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.453622][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.504698][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.512032][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.584594][ T9902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.599884][ T9902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.608788][ T9902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.617578][ T9902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.653387][T10081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.693493][T10081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.759812][T10024] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.792524][T10081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.825769][ T8879] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.833027][ T8879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.879449][T10081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.969555][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.976918][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.051146][ T5237] Bluetooth: hci1: command tx timeout [ 471.211442][ T9890] veth0_vlan: entered promiscuous mode [ 471.221866][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.229724][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.315321][ T9890] veth1_vlan: entered promiscuous mode [ 471.416612][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.448369][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.498176][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.552999][T10024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.618736][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.693460][ T9890] veth0_macvtap: entered promiscuous mode [ 471.777499][ T9890] veth1_macvtap: entered promiscuous mode [ 471.871425][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.889821][ T9954] veth0_vlan: entered promiscuous mode [ 471.898644][T10024] veth0_vlan: entered promiscuous mode [ 471.936941][ T9890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.959757][ T9890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.993400][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.028078][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.035515][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.109310][ T9890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.145976][ T9890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.168984][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.198299][T10024] veth1_vlan: entered promiscuous mode [ 472.215457][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.222725][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.246789][ T9954] veth1_vlan: entered promiscuous mode [ 472.269020][ T9890] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.281740][ T9890] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.296936][ T9890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.306885][ T9890] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.468728][T10024] veth0_macvtap: entered promiscuous mode [ 472.546887][ T9954] veth0_macvtap: entered promiscuous mode [ 472.572524][T10024] veth1_macvtap: entered promiscuous mode [ 472.609793][T10081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.628672][T10081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.673935][ T9954] veth1_macvtap: entered promiscuous mode [ 472.784391][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.808875][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.826001][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.851195][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.876896][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.889332][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.932800][T10024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.950873][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.973245][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.984158][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.995798][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.006309][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.021187][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.042211][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.072548][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.084129][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.098083][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.108991][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.123598][T10024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.184145][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.214966][T10024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.227552][T10024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.239433][T10024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.258171][T10024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.278711][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.291700][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.302349][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.313279][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.325734][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.337151][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.349544][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.360393][ T5283] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 473.368105][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.376937][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.410952][ T9954] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.419739][ T9954] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.434312][ T9954] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.443505][ T9954] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.571714][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 473.612726][ T5283] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 473.631626][ T5283] usb 3-1: config 0 has no interface number 0 [ 473.658025][ T5283] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 473.707474][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.739164][ T5283] usb 3-1: Product: syz [ 473.745762][ T5283] usb 3-1: Manufacturer: syz [ 473.750911][ T5283] usb 3-1: SerialNumber: syz [ 473.758967][ T5283] usb 3-1: config 0 descriptor?? [ 473.776929][ T5283] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 473.867015][ T8879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.896641][ T8879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.928553][T10081] veth0_vlan: entered promiscuous mode [ 474.007438][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.027989][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.063627][T10081] veth1_vlan: entered promiscuous mode [ 474.202151][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.206230][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.224419][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.249421][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.445953][T10081] veth0_macvtap: entered promiscuous mode [ 474.485441][T10081] veth1_macvtap: entered promiscuous mode [ 474.667652][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.803551][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.815633][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.827610][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.838626][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.849452][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.859513][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.872531][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.946746][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.053118][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.075019][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.128995][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.159825][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.202738][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.317066][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.495650][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.527185][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.561024][ T5283] gspca_topro: reg_r err -71 [ 475.563037][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.565853][ T5283] gspca_topro: Sensor soi763a [ 475.664694][T10081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.701425][ T5283] usb 3-1: USB disconnect, device number 55 [ 475.742756][T10081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.817665][T10081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.864082][T10081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.396934][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.396965][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.539963][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.560423][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.600413][ T5284] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 476.800371][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 476.851931][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.912700][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 476.932062][ T5284] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 476.988217][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.071669][ T5284] usb 5-1: config 0 descriptor?? [ 477.565788][ T5284] kye 0003:0458:0138.0026: unknown main item tag 0x0 [ 477.595553][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 477.609180][ T5284] kye 0003:0458:0138.0026: unknown main item tag 0x0 [ 477.637377][ T5284] kye 0003:0458:0138.0026: unexpected long global item [ 477.680999][ T5284] kye 0003:0458:0138.0026: parse failed [ 477.696877][ T5284] kye 0003:0458:0138.0026: probe with driver kye failed with error -22 [ 477.810457][ T1849] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 478.024154][ T1849] usb 4-1: Using ep0 maxpacket: 16 [ 478.052608][ T1849] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.120522][ T1849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 478.150302][ T1849] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 478.192480][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.263687][ T1849] usb 4-1: config 0 descriptor?? [ 478.762228][ T1849] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 478.795915][ T1849] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 478.828450][ T1849] kye 0003:0458:0138.0027: unexpected long global item [ 478.856925][ T1849] kye 0003:0458:0138.0027: parse failed [ 478.869431][ T1849] kye 0003:0458:0138.0027: probe with driver kye failed with error -22 [ 478.920259][ T8] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 479.160223][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 479.205441][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 479.255542][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.284850][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.313444][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.349426][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.412782][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 479.440231][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.570348][ T1849] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 479.666784][ T5288] usb 5-1: USB disconnect, device number 47 [ 479.717069][ T8] usb 1-1: usb_control_msg returned -32 [ 479.749427][ T8] usbtmc 1-1:16.0: can't read capabilities [ 479.772023][ T1849] usb 2-1: Using ep0 maxpacket: 16 [ 479.815304][ T1849] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 479.882535][ T1849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.972013][ T1849] usb 2-1: Product: syz [ 479.984467][ T1849] usb 2-1: Manufacturer: syz [ 479.998801][ T1849] usb 2-1: SerialNumber: syz [ 480.020630][ T1849] usb 2-1: config 0 descriptor?? [ 480.036605][ T1849] as10x_usb: device has been detected [ 480.064428][ T1849] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 480.084250][T10268] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 480.122597][ T8] usb 1-1: USB disconnect, device number 42 [ 480.205636][ T1849] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 480.287238][ T1849] as10x_usb: error during firmware upload part1 [ 480.317707][ T1849] Registered device Sky IT Digital Key (green led) [ 480.334139][T10286] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 [ 480.557833][ T8] usb 4-1: USB disconnect, device number 52 [ 481.152166][T10315] trusted_key: encrypted_key: insufficient parameters specified [ 481.204404][T10315] trusted_key: encrypted_key: keylen parameter is missing [ 481.247200][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 481.604645][T10324] FAULT_INJECTION: forcing a failure. [ 481.604645][T10324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.680285][T10324] CPU: 0 UID: 0 PID: 10324 Comm: syz.3.1030 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 481.691130][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 481.701322][T10324] Call Trace: [ 481.704647][T10324] [ 481.707621][T10324] dump_stack_lvl+0x241/0x360 [ 481.712361][T10324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.717612][T10324] ? __pfx__printk+0x10/0x10 [ 481.722281][T10324] ? snprintf+0xda/0x120 [ 481.726584][T10324] should_fail_ex+0x3b0/0x4e0 [ 481.731320][T10324] _copy_to_user+0x2f/0xb0 [ 481.735801][T10324] simple_read_from_buffer+0xca/0x150 [ 481.741240][T10324] proc_fail_nth_read+0x1ec/0x260 [ 481.745211][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1029'. [ 481.746298][T10324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.746341][T10324] ? rw_verify_area+0x520/0x6b0 [ 481.765711][T10324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.771332][T10324] vfs_read+0x204/0xbc0 [ 481.775559][T10324] ? __pfx_vfs_read+0x10/0x10 [ 481.780319][T10324] ksys_read+0x1a0/0x2c0 [ 481.784625][T10324] ? __pfx_ksys_read+0x10/0x10 [ 481.789436][T10324] ? do_syscall_64+0x100/0x230 [ 481.794226][T10324] ? do_syscall_64+0xb6/0x230 [ 481.798922][T10324] do_syscall_64+0xf3/0x230 [ 481.803442][T10324] ? clear_bhb_loop+0x35/0x90 [ 481.808137][T10324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.814052][T10324] RIP: 0033:0x7f398757893c [ 481.818488][T10324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 481.838117][T10324] RSP: 002b:00007f39882f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.846554][T10324] RAX: ffffffffffffffda RBX: 00007f3987715f80 RCX: 00007f398757893c [ 481.854581][T10324] RDX: 000000000000000f RSI: 00007f39882f40a0 RDI: 0000000000000005 [ 481.862573][T10324] RBP: 00007f39882f4090 R08: 0000000000000000 R09: 0000000000000000 [ 481.870561][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.878546][T10324] R13: 0000000000000000 R14: 00007f3987715f80 R15: 00007f398783fa28 [ 481.886573][T10324] [ 481.925050][T10293] syz.4.1023 (10293): drop_caches: 2 [ 482.949907][T10337] syz.3.1032 (10337): drop_caches: 2 [ 483.055902][T10337] syz.3.1032 (10337): drop_caches: 2 [ 483.362391][T10335] syz.3.1032 (10335): drop_caches: 2 [ 483.508071][ T5230] usb 2-1: USB disconnect, device number 49 [ 483.599911][ T5230] Unregistered device Sky IT Digital Key (green led) [ 483.607975][ T5230] as10x_usb: device has been disconnected [ 483.915604][ T5284] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 484.087711][T10357] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1034'. [ 484.120843][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 484.123813][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.123854][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.124006][ T5284] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 484.124038][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.142495][ T5284] usb 4-1: config 0 descriptor?? [ 484.469516][T10359] FAULT_INJECTION: forcing a failure. [ 484.469516][T10359] name failslab, interval 1, probability 0, space 0, times 0 [ 484.482852][T10359] CPU: 1 UID: 0 PID: 10359 Comm: syz.0.1035 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 484.493679][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 484.503769][T10359] Call Trace: [ 484.507090][T10359] [ 484.510061][T10359] dump_stack_lvl+0x241/0x360 [ 484.514789][T10359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.520028][T10359] ? __pfx__printk+0x10/0x10 [ 484.524683][T10359] ? ref_tracker_alloc+0x332/0x490 [ 484.529910][T10359] should_fail_ex+0x3b0/0x4e0 [ 484.534626][T10359] ? skb_clone+0x20c/0x390 [ 484.539091][T10359] should_failslab+0xac/0x100 [ 484.543838][T10359] ? skb_clone+0x20c/0x390 [ 484.548297][T10359] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 484.553721][T10359] skb_clone+0x20c/0x390 [ 484.558015][T10359] __netlink_deliver_tap+0x3cc/0x7c0 [ 484.563340][T10359] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.568593][T10359] netlink_deliver_tap+0x19d/0x1b0 [ 484.573736][T10359] netlink_unicast+0x7c4/0x990 [ 484.578553][T10359] ? __pfx_netlink_unicast+0x10/0x10 [ 484.583887][T10359] ? __virt_addr_valid+0x183/0x530 [ 484.589031][T10359] ? __check_object_size+0x49c/0x900 [ 484.594342][T10359] ? bpf_lsm_netlink_send+0x9/0x10 [ 484.599493][T10359] netlink_sendmsg+0x8e4/0xcb0 [ 484.604288][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.609601][T10359] ? __import_iovec+0x536/0x820 [ 484.614478][T10359] ? aa_sock_msg_perm+0x91/0x160 [ 484.619490][T10359] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 484.624806][T10359] ? security_socket_sendmsg+0x87/0xb0 [ 484.630357][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.635675][T10359] __sock_sendmsg+0x221/0x270 [ 484.640455][T10359] ____sys_sendmsg+0x525/0x7d0 [ 484.645260][T10359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.650617][T10359] __sys_sendmmsg+0x3b2/0x740 [ 484.655353][T10359] ? __pfx___sys_sendmmsg+0x10/0x10 [ 484.660638][T10359] ? rcu_read_lock_any_held+0xb7/0x160 [ 484.666134][T10359] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 484.672056][T10359] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 484.677740][T10359] ? sb_end_write+0xe9/0x1c0 [ 484.682359][T10359] ? vfs_write+0x7c4/0xc90 [ 484.686828][T10359] ? __pfx_vfs_write+0x10/0x10 [ 484.691677][T10359] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.697691][T10359] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.704090][T10359] ? do_syscall_64+0x100/0x230 [ 484.708900][T10359] __x64_sys_sendmmsg+0xa0/0xb0 [ 484.713798][T10359] do_syscall_64+0xf3/0x230 [ 484.718333][T10359] ? clear_bhb_loop+0x35/0x90 [ 484.723052][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.728982][T10359] RIP: 0033:0x7f9463579ef9 [ 484.733438][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.753077][T10359] RSP: 002b:00007f94633f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 484.761519][T10359] RAX: ffffffffffffffda RBX: 00007f9463715f80 RCX: 00007f9463579ef9 [ 484.769630][T10359] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 484.777734][T10359] RBP: 00007f94633f8090 R08: 0000000000000000 R09: 0000000000000000 [ 484.785734][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.793737][T10359] R13: 0000000000000000 R14: 00007f9463715f80 R15: 00007f946383fa28 [ 484.801752][T10359] [ 484.804839][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.854261][ T5284] kye 0003:0458:4018.0028: item fetching failed at offset 0/2 [ 484.927057][ T5284] kye 0003:0458:4018.0028: parse failed [ 484.963674][ T5284] kye 0003:0458:4018.0028: probe with driver kye failed with error -22 [ 485.039047][ T5284] usb 4-1: USB disconnect, device number 53 [ 485.340317][ T5288] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 485.380449][ T5283] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 485.534577][ T5288] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 485.546609][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.558497][ T5288] usb 2-1: Product: syz [ 485.564857][ T5288] usb 2-1: Manufacturer: syz [ 485.574786][ T5288] usb 2-1: SerialNumber: syz [ 485.580401][ T5283] usb 1-1: Using ep0 maxpacket: 32 [ 485.592702][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.595443][ T5288] usb 2-1: config 0 descriptor?? [ 485.623463][ T5288] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 050 [ 485.639361][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.666162][ T5283] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 485.675883][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.695767][ T5283] usb 1-1: config 0 descriptor?? [ 485.866188][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1040'. [ 485.998525][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 486.025096][ T5288] (null): failure reading functionality [ 486.051716][ T5288] i2c i2c-1: connected i2c-tiny-usb device [ 486.146426][T10379] syz.2.1043 (10379): drop_caches: 2 [ 486.147951][ T5283] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 486.212063][T10379] syz.2.1043 (10379): drop_caches: 2 [ 486.221027][T10381] syz.2.1043 (10381): drop_caches: 2 [ 486.234595][T10381] syz.2.1043 (10381): drop_caches: 2 [ 486.269218][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.289917][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.319258][T10365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1037'. [ 486.332816][ T5283] ft260 0003:0403:6030.0029: chip code: 0000 0000 [ 486.505687][ T5295] usb 2-1: USB disconnect, device number 50 [ 486.533892][ T5283] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 486.644413][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 486.736499][ T5283] ft260 0003:0403:6030.0029: failed to retrieve status: -32, no wakeup [ 486.758228][ T5283] ft260 0003:0403:6030.0029: failed to retrieve status: -32 [ 486.900269][ T5284] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 486.950257][ T5288] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 487.026557][ T5295] usb 1-1: USB disconnect, device number 43 [ 487.115737][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.132712][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.147972][ T5284] usb 3-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 487.185499][ T5288] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 487.222500][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.243419][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.285067][ T5284] usb 3-1: config 0 descriptor?? [ 487.294642][ T5288] usb 5-1: Product: syz [ 487.299715][ T5288] usb 5-1: Manufacturer: syz [ 487.317101][ T5288] usb 5-1: SerialNumber: syz [ 487.359584][ T5288] usb 5-1: config 0 descriptor?? [ 487.399826][ T5288] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 048 [ 487.598207][ T5288] (null): failure setting delay to 10us [ 487.626557][ T5288] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 487.650773][ T5288] usb 5-1: USB disconnect, device number 48 [ 487.654374][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1050'. [ 487.738595][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.786030][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.745018][T10415] syz.1.1055 (10415): drop_caches: 2 [ 488.833616][T10415] syz.1.1055 (10415): drop_caches: 2 [ 488.859665][T10417] syz.1.1055 (10417): drop_caches: 2 [ 488.877246][T10417] syz.1.1055 (10417): drop_caches: 2 [ 489.139543][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.339873][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.515382][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.734541][ T5284] usbhid 3-1:0.0: can't add hid device: -71 [ 489.782513][ T5284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 489.784238][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.831562][ T5284] usb 3-1: USB disconnect, device number 56 [ 490.301713][ T5288] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 490.320629][ T35] bridge_slave_1: left allmulticast mode [ 490.326376][ T35] bridge_slave_1: left promiscuous mode [ 490.385109][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.434744][ T35] bridge_slave_0: left allmulticast mode [ 490.462259][ T35] bridge_slave_0: left promiscuous mode [ 490.477762][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.520298][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 490.553136][ T5288] usb 2-1: unable to get BOS descriptor or descriptor too short [ 490.611057][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.678975][ T5288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 490.720720][ T5288] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.800894][ T5288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.852400][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.884285][ T5288] usb 2-1: Product: syz [ 490.906174][ T4619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.918686][ T5288] usb 2-1: Manufacturer: syz [ 490.923562][ T5288] usb 2-1: SerialNumber: syz [ 490.930538][ T4619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.941045][ T4619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.949229][ T4619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.960064][ T4619] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 490.960241][ T5284] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 490.980431][ T4619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.202011][ T5288] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 491.210858][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 491.230014][ T5288] cdc_ncm 2-1:1.0: bind() failure [ 491.252457][ T5284] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 491.263029][ T5288] usb 2-1: USB disconnect, device number 51 [ 491.316603][T10449] FAULT_INJECTION: forcing a failure. [ 491.316603][T10449] name failslab, interval 1, probability 0, space 0, times 0 [ 491.329667][ T5284] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.346709][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.3.1066 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 491.358076][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 491.368804][T10449] Call Trace: [ 491.372312][T10449] [ 491.375381][T10449] dump_stack_lvl+0x241/0x360 [ 491.380297][T10449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.385559][T10449] ? __pfx__printk+0x10/0x10 [ 491.390398][T10449] ? ref_tracker_alloc+0x332/0x490 [ 491.395658][T10449] should_fail_ex+0x3b0/0x4e0 [ 491.400845][T10449] ? skb_clone+0x20c/0x390 [ 491.405321][T10449] should_failslab+0xac/0x100 [ 491.410256][T10449] ? skb_clone+0x20c/0x390 [ 491.414924][T10449] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 491.420726][T10449] skb_clone+0x20c/0x390 [ 491.425267][T10449] __netlink_deliver_tap+0x3cc/0x7c0 [ 491.430711][T10449] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.435969][T10449] netlink_deliver_tap+0x19d/0x1b0 [ 491.441161][T10449] netlink_unicast+0x7c4/0x990 [ 491.445996][T10449] ? __pfx_netlink_unicast+0x10/0x10 [ 491.451339][T10449] ? __virt_addr_valid+0x183/0x530 [ 491.456609][T10449] ? __check_object_size+0x49c/0x900 [ 491.462555][T10449] ? bpf_lsm_netlink_send+0x9/0x10 [ 491.467724][T10449] netlink_sendmsg+0x8e4/0xcb0 [ 491.472594][T10449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.477975][T10449] ? __import_iovec+0x536/0x820 [ 491.482894][T10449] ? aa_sock_msg_perm+0x91/0x160 [ 491.487900][T10449] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 491.493249][T10449] ? security_socket_sendmsg+0x87/0xb0 [ 491.498775][T10449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.504132][T10449] __sock_sendmsg+0x221/0x270 [ 491.509152][T10449] ____sys_sendmsg+0x525/0x7d0 [ 491.514029][T10449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.519481][T10449] __sys_sendmsg+0x2b0/0x3a0 [ 491.524266][T10449] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.529473][T10449] ? vfs_write+0x7c4/0xc90 [ 491.534001][T10449] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 491.540401][T10449] ? do_syscall_64+0x100/0x230 [ 491.545225][T10449] ? do_syscall_64+0xb6/0x230 [ 491.549962][T10449] do_syscall_64+0xf3/0x230 [ 491.554521][T10449] ? clear_bhb_loop+0x35/0x90 [ 491.559261][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.565214][T10449] RIP: 0033:0x7f3987579ef9 [ 491.569671][T10449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.589330][T10449] RSP: 002b:00007f39882f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.597801][T10449] RAX: ffffffffffffffda RBX: 00007f3987715f80 RCX: 00007f3987579ef9 [ 491.605803][T10449] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 491.613825][T10449] RBP: 00007f39882f4090 R08: 0000000000000000 R09: 0000000000000000 [ 491.621844][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.629865][T10449] R13: 0000000000000000 R14: 00007f3987715f80 R15: 00007f398783fa28 [ 491.637905][T10449] [ 491.646452][ T5284] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.656878][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.726501][ T5284] usbtmc 3-1:16.0: bulk endpoints not found [ 492.354398][T10465] syz.1.1067 (10465): drop_caches: 2 [ 492.370444][T10465] syz.1.1067 (10465): drop_caches: 2 [ 492.441587][T10462] syz.1.1067 (10462): drop_caches: 2 [ 492.495380][T10462] syz.1.1067 (10462): drop_caches: 2 [ 492.953962][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.008659][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.060526][ T4619] Bluetooth: hci0: command tx timeout [ 493.070920][ T35] bond0 (unregistering): Released all slaves [ 493.210800][ T5284] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 493.462387][ T5284] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 493.483560][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.514333][ T5284] usb 1-1: config 0 descriptor?? [ 493.680936][ T46] usb 3-1: USB disconnect, device number 57 [ 493.918641][ T35] hsr_slave_0: left promiscuous mode [ 493.920415][ T5283] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 493.962799][ T35] hsr_slave_1: left promiscuous mode [ 493.981501][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.004452][T10484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1073'. [ 494.006879][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.037187][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.071799][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.150345][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 494.162985][ T35] veth1_macvtap: left promiscuous mode [ 494.171805][ T35] veth0_macvtap: left promiscuous mode [ 494.181058][ T5283] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 494.192227][ T35] veth1_vlan: left promiscuous mode [ 494.197542][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.208816][ T35] veth0_vlan: left promiscuous mode [ 494.220587][ T5230] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 494.239332][ T5283] usb 4-1: Product: syz [ 494.269181][ T5283] usb 4-1: Manufacturer: syz [ 494.285261][ T5283] usb 4-1: SerialNumber: syz [ 494.298217][ T5283] usb 4-1: config 0 descriptor?? [ 494.325077][ T5283] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 494.457335][ T5230] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 494.483615][ T5230] usb 3-1: config 0 has no interface number 0 [ 494.498898][ T5230] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 494.532912][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.581090][ T5230] usb 3-1: config 0 descriptor?? [ 494.654057][ T5230] ttusbir 3-1:0.83: cannot find expected altsetting [ 494.793512][ T5283] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 494.814471][ T5230] usb 3-1: USB disconnect, device number 58 [ 494.836433][ T5283] visor 4-1:0.0: probe with driver visor failed with error -71 [ 494.899143][ T5283] usb 4-1: USB disconnect, device number 54 [ 495.133551][ T4619] Bluetooth: hci0: command tx timeout [ 495.372304][ T5284] pegasus 1-1:0.0: probe with driver pegasus failed with error -110 [ 495.926322][ T5284] usb 1-1: USB disconnect, device number 44 [ 496.525444][ T35] team0 (unregistering): Port device team_slave_1 removed [ 496.657118][ T35] team0 (unregistering): Port device team_slave_0 removed [ 496.952330][T10509] syz.2.1078 (10509): drop_caches: 2 [ 496.972904][T10509] syz.2.1078 (10509): drop_caches: 2 [ 497.031311][T10509] syz.2.1078 (10509): drop_caches: 2 [ 497.038033][T10509] syz.2.1078 (10509): drop_caches: 2 [ 497.212436][ T4619] Bluetooth: hci0: command tx timeout [ 497.235261][T10515] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 497.497650][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'. [ 498.001862][T10501] FAULT_INJECTION: forcing a failure. [ 498.001862][T10501] name failslab, interval 1, probability 0, space 0, times 0 [ 498.037343][T10501] CPU: 1 UID: 0 PID: 10501 Comm: syz.3.1075 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 498.048268][T10501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 498.058349][T10501] Call Trace: [ 498.061641][T10501] [ 498.064602][T10501] dump_stack_lvl+0x241/0x360 [ 498.069408][T10501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.074654][T10501] ? __pfx__printk+0x10/0x10 [ 498.079275][T10501] ? __kmalloc_node_noprof+0xb7/0x440 [ 498.084659][T10501] ? __pfx___might_resched+0x10/0x10 [ 498.089966][T10501] should_fail_ex+0x3b0/0x4e0 [ 498.094707][T10501] should_failslab+0xac/0x100 [ 498.099445][T10501] __kmalloc_node_noprof+0xdf/0x440 [ 498.104682][T10501] ? __kvmalloc_node_noprof+0x72/0x190 [ 498.110186][T10501] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 498.115869][T10501] __kvmalloc_node_noprof+0x72/0x190 [ 498.121209][T10501] alloc_netdev_mqs+0x9b/0x1000 [ 498.126263][T10501] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 498.131943][T10501] ? read_word_at_a_time+0xe/0x20 [ 498.137091][T10501] ? sized_strscpy+0x8d/0x220 [ 498.141814][T10501] ip6gre_tunnel_locate+0x191/0x330 [ 498.147100][T10501] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 498.152855][T10501] ? __might_fault+0xc6/0x120 [ 498.157691][T10501] ? ip6gre_tunnel_siocdevprivate+0xc9a/0x1460 [ 498.163898][T10501] ip6gre_tunnel_siocdevprivate+0xcc0/0x1460 [ 498.169930][T10501] ? __pfx_lock_acquire+0x10/0x10 [ 498.174989][T10501] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 498.181454][T10501] ? full_name_hash+0x93/0xe0 [ 498.186163][T10501] dev_ifsioc+0xaec/0xe70 [ 498.190526][T10501] ? __pfx_dev_ifsioc+0x10/0x10 [ 498.195431][T10501] ? dev_load+0x21/0x1f0 [ 498.199727][T10501] dev_ioctl+0x881/0x1340 [ 498.204120][T10501] sock_ioctl+0x7f2/0x8e0 [ 498.208479][T10501] ? __pfx_sock_ioctl+0x10/0x10 [ 498.213349][T10501] ? __fget_files+0x3f6/0x470 [ 498.218075][T10501] ? __fget_files+0x29/0x470 [ 498.222683][T10501] ? bpf_lsm_file_ioctl+0x9/0x10 [ 498.227732][T10501] ? security_file_ioctl+0x87/0xb0 [ 498.232865][T10501] ? __pfx_sock_ioctl+0x10/0x10 [ 498.237740][T10501] __se_sys_ioctl+0xfc/0x170 [ 498.242388][T10501] do_syscall_64+0xf3/0x230 [ 498.246955][T10501] ? clear_bhb_loop+0x35/0x90 [ 498.251696][T10501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.257634][T10501] RIP: 0033:0x7f3987579ef9 [ 498.262099][T10501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.281745][T10501] RSP: 002b:00007f39882f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.290198][T10501] RAX: ffffffffffffffda RBX: 00007f3987715f80 RCX: 00007f3987579ef9 [ 498.298546][T10501] RDX: 0000000020000300 RSI: 00000000000089f1 RDI: 0000000000000003 [ 498.306972][T10501] RBP: 00007f39882f4090 R08: 0000000000000000 R09: 0000000000000000 [ 498.314956][T10501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.322961][T10501] R13: 0000000000000000 R14: 00007f3987715f80 R15: 00007f398783fa28 [ 498.330979][T10501] [ 498.350578][T10513] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 498.430269][T10514] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 498.496483][T10521] syz.2.1080: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 498.578995][T10521] CPU: 1 UID: 0 PID: 10521 Comm: syz.2.1080 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 498.589868][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 498.599984][T10521] Call Trace: [ 498.603310][T10521] [ 498.606286][T10521] dump_stack_lvl+0x241/0x360 [ 498.611018][T10521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.616270][T10521] ? __pfx__printk+0x10/0x10 [ 498.620940][T10521] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 498.627415][T10521] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 498.633970][T10521] warn_alloc+0x278/0x410 [ 498.638339][T10521] ? __pfx_warn_alloc+0x10/0x10 [ 498.643221][T10521] ? fq_pie_init+0x429/0x820 [ 498.647835][T10521] ? __get_vm_area_node+0x23d/0x270 [ 498.653071][T10521] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 498.659011][T10521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 498.665361][T10521] ? rcu_is_watching+0x15/0xb0 [ 498.670156][T10521] ? trace_kmalloc+0x1f/0xd0 [ 498.674759][T10521] ? __kmalloc_node_noprof+0x247/0x440 [ 498.680242][T10521] ? __kvmalloc_node_noprof+0x72/0x190 [ 498.685750][T10521] __kvmalloc_node_noprof+0x142/0x190 [ 498.691158][T10521] ? fq_pie_init+0x429/0x820 [ 498.695779][T10521] fq_pie_init+0x429/0x820 [ 498.700225][T10521] ? qdisc_lookup+0x350/0x6b0 [ 498.704925][T10521] ? __pfx_fq_pie_init+0x10/0x10 [ 498.709883][T10521] qdisc_create+0x9d4/0x11a0 [ 498.714511][T10521] ? __pfx_qdisc_create+0x10/0x10 [ 498.719584][T10521] tc_modify_qdisc+0xa26/0x1e40 [ 498.724490][T10521] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 498.729832][T10521] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 498.735185][T10521] rtnetlink_rcv_msg+0x73f/0xcf0 [ 498.740152][T10521] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 498.745293][T10521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.750792][T10521] ? ref_tracker_free+0x643/0x7e0 [ 498.755846][T10521] netlink_rcv_skb+0x1e3/0x430 [ 498.760654][T10521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.766159][T10521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.771498][T10521] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.776710][T10521] netlink_unicast+0x7f6/0x990 [ 498.781510][T10521] ? __pfx_netlink_unicast+0x10/0x10 [ 498.786817][T10521] ? __virt_addr_valid+0x183/0x530 [ 498.792065][T10521] ? __check_object_size+0x49c/0x900 [ 498.797368][T10521] ? bpf_lsm_netlink_send+0x9/0x10 [ 498.802591][T10521] netlink_sendmsg+0x8e4/0xcb0 [ 498.807395][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.812791][T10521] ? __import_iovec+0x536/0x820 [ 498.817759][T10521] ? aa_sock_msg_perm+0x91/0x160 [ 498.822721][T10521] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 498.828029][T10521] ? security_socket_sendmsg+0x87/0xb0 [ 498.833551][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.838851][T10521] __sock_sendmsg+0x221/0x270 [ 498.843590][T10521] ____sys_sendmsg+0x525/0x7d0 [ 498.848430][T10521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.853853][T10521] ? __might_fault+0xaa/0x120 [ 498.858571][T10521] __sys_sendmmsg+0x3b2/0x740 [ 498.863285][T10521] ? __pfx___sys_sendmmsg+0x10/0x10 [ 498.868534][T10521] ? wake_up_q+0xdc/0x120 [ 498.872917][T10521] ? futex_wait+0x285/0x360 [ 498.877463][T10521] ? __pfx_futex_wait+0x10/0x10 [ 498.882364][T10521] ? do_futex+0x33b/0x560 [ 498.886761][T10521] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.892776][T10521] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 498.899131][T10521] ? do_syscall_64+0x100/0x230 [ 498.903913][T10521] __x64_sys_sendmmsg+0xa0/0xb0 [ 498.908791][T10521] do_syscall_64+0xf3/0x230 [ 498.913305][T10521] ? clear_bhb_loop+0x35/0x90 [ 498.918002][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.924004][T10521] RIP: 0033:0x7f80bcd79ef9 [ 498.928461][T10521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.948171][T10521] RSP: 002b:00007f80bdbe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.956614][T10521] RAX: ffffffffffffffda RBX: 00007f80bcf16130 RCX: 00007f80bcd79ef9 [ 498.964608][T10521] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 498.972621][T10521] RBP: 00007f80bcde793e R08: 0000000000000000 R09: 0000000000000000 [ 498.980615][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.988602][T10521] R13: 0000000000000000 R14: 00007f80bcf16130 R15: 00007f80bd03fa28 [ 498.996713][T10521] [ 499.040973][T10521] Mem-Info: [ 499.046807][T10521] active_anon:4911 inactive_anon:0 isolated_anon:0 [ 499.046807][T10521] active_file:11995 inactive_file:38445 isolated_file:0 [ 499.046807][T10521] unevictable:768 dirty:446 writeback:0 [ 499.046807][T10521] slab_reclaimable:7160 slab_unreclaimable:96257 [ 499.046807][T10521] mapped:22770 shmem:1229 pagetables:845 [ 499.046807][T10521] sec_pagetables:0 bounce:0 [ 499.046807][T10521] kernel_misc_reclaimable:0 [ 499.046807][T10521] free:1378223 free_pcp:708 free_cma:0 [ 499.136014][T10521] Node 0 active_anon:19744kB inactive_anon:0kB active_file:47980kB inactive_file:153704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91080kB dirty:1784kB writeback:0kB shmem:3380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10072kB pagetables:3380kB sec_pagetables:0kB all_unreclaimable? no [ 499.193608][T10521] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 499.233013][T10521] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.271991][T10521] lowmem_reserve[]: 0 2561 2562 0 0 [ 499.277451][T10521] Node 0 DMA32 free:1544780kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:19736kB inactive_anon:0kB active_file:47980kB inactive_file:152384kB unevictable:1536kB writepending:1788kB present:3129332kB managed:2651248kB mlocked:0kB bounce:0kB free_pcp:1620kB local_pcp:724kB free_cma:0kB [ 499.330279][ T4619] Bluetooth: hci0: command tx timeout [ 499.346625][T10521] lowmem_reserve[]: 0 0 1 0 0 [ 499.359839][T10521] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 499.444942][T10521] lowmem_reserve[]: 0 0 0 0 0 [ 499.449841][T10521] Node 1 Normal free:3952524kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1012kB local_pcp:0kB free_cma:0kB [ 499.489640][ T5284] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 499.503599][T10521] lowmem_reserve[]: 0 0 0 0 0 [ 499.544083][T10521] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 499.558055][T10521] Node 0 DMA32: 1*4kB (M) 627*8kB (UME) 617*16kB (UME) 411*32kB (UME) 288*64kB (UME) 76*128kB (UME) 33*256kB (UME) 28*512kB (UME) 40*1024kB (UME) 15*2048kB (UM) 340*4096kB (UM) = 1543308kB [ 499.632537][T10521] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 499.666081][T10521] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 1*64kB (U) 0*128kB 3*256kB (UM) 4*512kB (UM) 3*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3952524kB [ 499.700005][T10521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.713804][ T5284] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 499.727144][ T5284] usb 2-1: config 0 has no interface number 0 [ 499.735618][T10521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 499.745348][ T5284] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 499.767536][T10521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.778759][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.811577][ T5284] usb 2-1: config 0 descriptor?? [ 499.816617][T10521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 499.838612][ T5284] ttusbir 2-1:0.83: cannot find expected altsetting [ 499.847560][T10521] 51669 total pagecache pages [ 499.888346][T10521] 0 pages in swap cache [ 499.892799][T10521] Free swap = 124152kB [ 499.897440][T10521] Total swap = 124996kB [ 499.910276][T10521] 2097051 pages RAM [ 499.916392][T10521] 0 pages HighMem/MovableOnly [ 499.922537][T10521] 402773 pages reserved [ 499.927692][T10521] 0 pages cma reserved [ 500.041610][ T5230] usb 2-1: USB disconnect, device number 52 [ 500.151821][T10446] chnl_net:caif_netlink_parms(): no params data found [ 500.594986][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 500.595009][ T29] audit: type=1326 audit(1724854867.644:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 500.644569][ T29] audit: type=1326 audit(1724854867.644:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 500.710236][ T29] audit: type=1326 audit(1724854867.694:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 500.803483][ T29] audit: type=1326 audit(1724854867.694:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 500.857537][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.870526][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.898887][ T29] audit: type=1326 audit(1724854867.704:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 500.922214][T10446] bridge_slave_0: entered allmulticast mode [ 500.931766][T10565] FAULT_INJECTION: forcing a failure. [ 500.931766][T10565] name failslab, interval 1, probability 0, space 0, times 0 [ 500.948870][T10446] bridge_slave_0: entered promiscuous mode [ 500.968389][T10565] CPU: 0 UID: 0 PID: 10565 Comm: syz.3.1090 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 500.979205][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 500.989270][T10565] Call Trace: [ 500.992560][T10565] [ 500.995498][T10565] dump_stack_lvl+0x241/0x360 [ 501.000202][T10565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.005422][T10565] ? __pfx__printk+0x10/0x10 [ 501.010056][T10565] ? __pfx_snprintf+0x10/0x10 [ 501.014757][T10565] should_fail_ex+0x3b0/0x4e0 [ 501.019459][T10565] ? aa_label_asxprint+0x6e/0x130 [ 501.024505][T10565] should_failslab+0xac/0x100 [ 501.029222][T10565] ? aa_label_asxprint+0x6e/0x130 [ 501.034281][T10565] __kmalloc_noprof+0xd8/0x400 [ 501.039085][T10565] aa_label_asxprint+0x6e/0x130 [ 501.043959][T10565] apparmor_secid_to_secctx+0xac/0x160 [ 501.049439][T10565] security_secid_to_secctx+0x75/0xb0 [ 501.054863][T10565] audit_log_task_context+0x11e/0x350 [ 501.060263][T10565] ? __pfx_audit_log_task_context+0x10/0x10 [ 501.066203][T10565] audit_log_task+0x198/0x2f0 [ 501.070915][T10565] ? __pfx_audit_log_task+0x10/0x10 [ 501.076122][T10565] ? __pfx___cant_migrate+0x10/0x10 [ 501.081337][T10565] audit_seccomp+0x7b/0x1f0 [ 501.085848][T10565] ? migrate_disable+0xce/0x180 [ 501.090712][T10565] __seccomp_filter+0xb38/0x1fe0 [ 501.095676][T10565] ? vfs_write+0x7c4/0xc90 [ 501.100124][T10565] ? __pfx___seccomp_filter+0x10/0x10 [ 501.105533][T10565] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.111534][T10565] ? __fget_files+0x3f6/0x470 [ 501.116247][T10565] ? __secure_computing+0x125/0x370 [ 501.121480][T10565] syscall_trace_enter+0xa8/0x150 [ 501.126518][T10565] do_syscall_64+0xcc/0x230 [ 501.131144][T10565] ? clear_bhb_loop+0x35/0x90 [ 501.135859][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.141784][T10565] RIP: 0033:0x7f3987579ef9 [ 501.146207][T10565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.165855][T10565] RSP: 002b:00007f39882f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 501.174282][T10565] RAX: ffffffffffffffda RBX: 00007f3987715f80 RCX: 00007f3987579ef9 [ 501.182261][T10565] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000000 [ 501.190265][T10565] RBP: 00007f39882f4090 R08: 0000000020000000 R09: 0000000000000000 [ 501.198272][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.206250][T10565] R13: 0000000000000000 R14: 00007f3987715f80 R15: 00007f398783fa28 [ 501.214251][T10565] [ 501.222125][ T29] audit: type=1326 audit(1724854867.704:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 501.244748][ T29] audit: type=1326 audit(1724854867.704:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 501.268018][ T29] audit: type=1326 audit(1724854867.704:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 501.269505][T10565] audit: error in audit_log_task_context [ 501.337027][ T29] audit: type=1326 audit(1724854867.704:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3987579ef9 code=0x7ffc0000 [ 501.372475][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.380853][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.388583][T10446] bridge_slave_1: entered allmulticast mode [ 501.407593][T10446] bridge_slave_1: entered promiscuous mode [ 501.480252][ T5284] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 501.690314][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 501.697404][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.712580][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.740738][ T5284] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 501.749868][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.796544][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.803963][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.826989][ T5284] usb 2-1: config 0 descriptor?? [ 501.883241][T10446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.027134][ T2955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.105987][T10446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.279249][ T5284] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 502.452685][ T5284] ft260 0003:0403:6030.002A: chip code: 0000 0000 [ 502.514386][ T2955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.665184][ T5284] ft260 0003:0403:6030.002A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 502.670427][T10446] team0: Port device team_slave_0 added [ 502.714015][T10446] team0: Port device team_slave_1 added [ 502.757892][ T2955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.866773][ T5284] ft260 0003:0403:6030.002A: failed to retrieve status: -32, no wakeup [ 502.900369][ T5284] ft260 0003:0403:6030.002A: failed to retrieve status: -32 [ 502.928615][ T5284] ft260 0003:0403:6030.002A: failed to reset I2C controller: -71 [ 502.943262][ T2955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.992134][ T5284] usb 2-1: USB disconnect, device number 53 [ 503.105882][T10446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.115303][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.154619][T10446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.196216][T10446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.207442][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.246007][T10446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.300442][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.318731][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.331313][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.339683][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.347943][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 503.355759][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.715396][T10446] hsr_slave_0: entered promiscuous mode [ 503.742905][T10595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1099'. [ 503.762433][T10446] hsr_slave_1: entered promiscuous mode [ 503.807182][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 504.348212][ T2955] bridge_slave_1: left allmulticast mode [ 504.373711][ T2955] bridge_slave_1: left promiscuous mode [ 504.400698][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.426202][ T2955] bridge_slave_0: left allmulticast mode [ 504.441438][ T2955] bridge_slave_0: left promiscuous mode [ 504.457886][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.500974][ T939] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 504.689021][T10615] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 504.696185][T10615] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 504.713873][ T939] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 504.723038][ T939] usb 3-1: config 0 has no interface number 0 [ 504.735154][T10615] vhci_hcd vhci_hcd.0: Device attached [ 504.747516][ T939] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 504.759934][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.811101][ T939] usb 3-1: config 0 descriptor?? [ 504.829812][ T939] ttusbir 3-1:0.83: cannot find expected altsetting [ 505.043308][ T939] usb 3-1: USB disconnect, device number 59 [ 505.105899][ T5288] usb 10-1: SetAddress Request (2) to port 0 [ 505.126932][ T5288] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 505.425311][T10616] vhci_hcd: connection reset by peer [ 505.447085][ T11] vhci_hcd: stop threads [ 505.452056][ T5237] Bluetooth: hci1: command tx timeout [ 505.483821][ T11] vhci_hcd: release socket [ 505.498276][ T11] vhci_hcd: disconnect device [ 505.547812][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.562825][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.582033][ T2955] bond0 (unregistering): Released all slaves [ 506.268855][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 506.412189][ T2955] hsr_slave_0: left promiscuous mode [ 506.437331][ T2955] hsr_slave_1: left promiscuous mode [ 506.455730][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.466542][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.477168][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.500363][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.546309][ T2955] veth1_macvtap: left promiscuous mode [ 506.552323][ T2955] veth0_macvtap: left promiscuous mode [ 506.559298][ T2955] veth1_vlan: left promiscuous mode [ 506.568713][ T2955] veth0_vlan: left promiscuous mode [ 507.036028][T10648] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 507.276603][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 507.542667][ T5237] Bluetooth: hci1: command tx timeout [ 507.856430][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 507.946454][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 508.936163][T10646] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 508.956658][T10647] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 509.006428][T10588] chnl_net:caif_netlink_parms(): no params data found [ 509.348613][T10654] syz.2.1108 (10654): drop_caches: 2 [ 509.411707][T10654] syz.2.1108 (10654): drop_caches: 2 [ 509.620244][ T5237] Bluetooth: hci1: command tx timeout [ 510.211164][T10682] trusted_key: encrypted_key: keylen parameter is missing [ 510.270869][ T5288] usb 10-1: device descriptor read/8, error -110 [ 510.299741][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.328837][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.362147][T10588] bridge_slave_0: entered allmulticast mode [ 510.374069][T10588] bridge_slave_0: entered promiscuous mode [ 510.385350][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.393276][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.403800][T10588] bridge_slave_1: entered allmulticast mode [ 510.424756][T10588] bridge_slave_1: entered promiscuous mode [ 510.602782][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.634824][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.680055][T10692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 510.763001][ T5288] usb usb10-port1: attempt power cycle [ 510.775786][T10588] team0: Port device team_slave_0 added [ 510.858877][T10588] team0: Port device team_slave_1 added [ 510.916058][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.924259][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.957487][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.973957][T10446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 510.996117][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.006405][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.034203][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.061728][T10446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 511.105333][T10446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 511.144645][T10446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 511.206857][T10588] hsr_slave_0: entered promiscuous mode [ 511.224816][T10588] hsr_slave_1: entered promiscuous mode [ 511.250435][T10588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.258157][T10588] Cannot create hsr debugfs directory [ 511.452340][ T5288] usb usb10-port1: unable to enumerate USB device [ 511.690530][ T5237] Bluetooth: hci1: command tx timeout [ 512.235046][T10446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.401653][T10446] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.523953][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.531214][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.616928][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.624211][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.649661][T10704] syz.1.1118 (10704): drop_caches: 2 [ 512.677248][T10704] syz.1.1118 (10704): drop_caches: 2 [ 513.057252][T10588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 513.119013][T10588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 513.144510][T10588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.196370][T10588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 513.554335][T10446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.827135][T10720] trusted_key: encrypted_key: keylen parameter is missing [ 513.839211][T10588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.889613][T10446] veth0_vlan: entered promiscuous mode [ 514.113331][T10446] veth1_vlan: entered promiscuous mode [ 514.152086][T10588] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.246101][ T8879] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.253465][ T8879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.300726][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.307962][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.377798][T10446] veth0_macvtap: entered promiscuous mode [ 514.469707][T10446] veth1_macvtap: entered promiscuous mode [ 514.598402][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.618444][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.636475][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.647821][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.659495][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.674783][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.689868][T10446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.736658][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.749361][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.761628][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.773666][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.784566][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.801705][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.819577][T10446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.865561][T10446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.889975][T10446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.903344][T10446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.912757][T10446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.920261][ T5288] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 515.038653][T10588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.154213][ T5288] usb 1-1: config 2 has no interfaces? [ 515.214478][ T5288] usb 1-1: New USB device found, idVendor=83cc, idProduct=3852, bcdDevice=fc.05 [ 515.242908][ T5288] usb 1-1: New USB device strings: Mfr=211, Product=170, SerialNumber=0 [ 515.289993][ T5288] usb 1-1: Product: syz [ 515.300717][ T5288] usb 1-1: Manufacturer: syz [ 515.322057][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.367970][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.487953][T10756] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1126'. [ 515.516226][T10588] veth0_vlan: entered promiscuous mode [ 515.534186][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.571006][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.593855][T10588] veth1_vlan: entered promiscuous mode [ 515.760973][T10588] veth0_macvtap: entered promiscuous mode [ 515.822396][T10588] veth1_macvtap: entered promiscuous mode [ 515.863136][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.889945][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.937055][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.971137][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.996323][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.040468][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.071892][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.090282][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.125378][T10588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.209442][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.238569][T10781] syz.4.1128 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 516.266814][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.295883][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.325861][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.354081][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.383072][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.405321][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.429512][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.447580][T10588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.524127][T10588] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.604159][T10588] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.621580][T10588] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.638495][T10588] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.655078][T10790] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 516.943006][ T2888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.976350][ T2888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.044744][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.064416][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.831513][ T1849] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 517.939913][ T5283] usb 1-1: USB disconnect, device number 45 [ 518.061380][ T1849] usb 3-1: Using ep0 maxpacket: 32 [ 518.084607][ T1849] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 518.128368][ T1849] usb 3-1: config 0 has no interface number 0 [ 518.161682][ T1849] usb 3-1: New USB device found, idVendor=05ac, idProduct=b0c5, bcdDevice=61.c8 [ 518.187934][ T1849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.217526][ T1849] usb 3-1: Product: syz [ 518.232921][ T1849] usb 3-1: Manufacturer: syz [ 518.257014][ T1849] usb 3-1: SerialNumber: syz [ 518.291350][ T1849] usb 3-1: config 0 descriptor?? [ 518.355427][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1136'. [ 518.391666][T10825] FAULT_INJECTION: forcing a failure. [ 518.391666][T10825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.431449][T10825] CPU: 0 UID: 0 PID: 10825 Comm: syz.0.1135 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 518.442283][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 518.452379][T10825] Call Trace: [ 518.455671][T10825] [ 518.458648][T10825] dump_stack_lvl+0x241/0x360 [ 518.463353][T10825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.468575][T10825] ? __pfx__printk+0x10/0x10 [ 518.473191][T10825] ? __pfx_lock_release+0x10/0x10 [ 518.478243][T10825] ? validate_chain+0x11e/0x5900 [ 518.483201][T10825] should_fail_ex+0x3b0/0x4e0 [ 518.487912][T10825] _copy_from_user+0x2f/0xe0 [ 518.492536][T10825] binder_ioctl_write_read+0xce5/0x8d00 [ 518.498203][T10825] ? __pfx_validate_chain+0x10/0x10 [ 518.503424][T10825] ? kernel_text_address+0xa7/0xe0 [ 518.508586][T10825] ? __pfx_stack_trace_save+0x10/0x10 [ 518.513997][T10825] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 518.520014][T10825] ? __lock_acquire+0x137a/0x2040 [ 518.525110][T10825] ? __pfx_lock_release+0x10/0x10 [ 518.530171][T10825] ? do_raw_spin_unlock+0x13c/0x8b0 [ 518.535573][T10825] ? _raw_spin_unlock+0x28/0x50 [ 518.540443][T10825] ? binder_get_thread+0x178/0x6c0 [ 518.545583][T10825] binder_ioctl+0x43d/0x1c70 [ 518.550207][T10825] ? tomoyo_path_number_perm+0x71a/0x880 [ 518.555868][T10825] ? tomoyo_path_number_perm+0x208/0x880 [ 518.561516][T10825] ? __pfx_binder_ioctl+0x10/0x10 [ 518.566595][T10825] ? __fget_files+0x29/0x470 [ 518.571215][T10825] ? __fget_files+0x3f6/0x470 [ 518.575920][T10825] ? __fget_files+0x29/0x470 [ 518.580539][T10825] ? bpf_lsm_file_ioctl+0x9/0x10 [ 518.585502][T10825] ? security_file_ioctl+0x87/0xb0 [ 518.590629][T10825] ? __pfx_binder_ioctl+0x10/0x10 [ 518.596036][T10825] __se_sys_ioctl+0xfc/0x170 [ 518.600659][T10825] do_syscall_64+0xf3/0x230 [ 518.605181][T10825] ? clear_bhb_loop+0x35/0x90 [ 518.609886][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.615888][T10825] RIP: 0033:0x7f9463579ef9 [ 518.620359][T10825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.640089][T10825] RSP: 002b:00007f94633d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.648670][T10825] RAX: ffffffffffffffda RBX: 00007f9463716058 RCX: 00007f9463579ef9 [ 518.656667][T10825] RDX: 0000000020000500 RSI: 00000000c0306201 RDI: 0000000000000005 [ 518.664682][T10825] RBP: 00007f94633d7090 R08: 0000000000000000 R09: 0000000000000000 [ 518.672755][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.680735][T10825] R13: 0000000000000000 R14: 00007f9463716058 R15: 00007f946383fa28 [ 518.688763][T10825] [ 518.749414][T10825] binder: 10822:10825 ioctl c0306201 20000500 returned -14 [ 518.840773][T10836] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 518.905695][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.915742][T10840] vhci_hcd: invalid port number 129 [ 518.921338][T10840] vhci_hcd: default hub control req: 2000 v0000 i0081 l0 [ 518.966310][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.133237][ T1849] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 519.148452][ T5283] usb 3-1: USB disconnect, device number 60 [ 519.330272][ T1849] usb 2-1: Using ep0 maxpacket: 16 [ 519.349324][ T1849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.383727][ T1849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.428395][ T1849] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 519.466822][ T1849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.501338][ T1849] usb 2-1: config 0 descriptor?? [ 519.596953][T10856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1141'. [ 519.729165][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 519.999007][ T1849] hid (null): invalid report_size 543716457 [ 520.036581][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 520.036603][ T29] audit: type=1400 audit(1724854887.094:190): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=E1355F172F2F26 pid=10864 comm="syz.4.1143" [ 520.175395][ T1849] usb 2-1: string descriptor 0 read error: -71 [ 520.210926][ T1849] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 520.227023][ T1849] letsketch 0003:6161:4D15.002B: probe with driver letsketch failed with error -32 [ 520.266941][ T1849] usb 2-1: USB disconnect, device number 54 [ 520.391226][ T5282] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 520.620228][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 520.639426][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.662912][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.686706][ T5282] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 520.719825][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.794341][ T5282] usb 3-1: config 0 descriptor?? [ 520.840878][ T5282] hub 3-1:0.0: USB hub found [ 521.002235][T10893] syz.0.1150 (10893): drop_caches: 2 [ 521.042961][ T5282] hub 3-1:0.0: 1 port detected [ 521.060475][T10893] syz.0.1150 (10893): drop_caches: 2 [ 521.119672][T10897] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 521.153356][T10893] syz.0.1150 (10893): drop_caches: 2 [ 521.172372][T10893] syz.0.1150 (10893): drop_caches: 2 [ 521.190485][ T5288] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 521.310609][ T5230] usb 3-1: USB disconnect, device number 61 [ 521.392495][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 521.427783][ T5288] usb 5-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.5f [ 521.448178][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.476727][ T5288] usb 5-1: Product: syz [ 521.492559][ T5288] usb 5-1: Manufacturer: syz [ 521.504245][T10911] syz.2.1152 (10911): drop_caches: 2 [ 521.507612][ T5288] usb 5-1: SerialNumber: syz [ 521.524650][T10911] syz.2.1152 (10911): drop_caches: 2 [ 521.544313][ T5288] usb 5-1: config 0 descriptor?? [ 521.560544][ T5288] usb-storage 5-1:0.0: USB Mass Storage device detected [ 521.580446][ T5288] usb-storage 5-1:0.0: Quirks match for vid 057b pid 0000: 1 [ 521.740271][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 521.908559][ T5288] usb 5-1: USB disconnect, device number 49 [ 521.925791][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 521.962116][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 521.981791][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.003337][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.073315][ T8] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 522.131512][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.205319][ T8] usb 1-1: config 0 descriptor?? [ 522.532686][ T5288] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 522.676172][ T8] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 522.720804][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'. [ 522.740579][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 522.754360][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.795204][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.851798][ T5288] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 522.861727][ T5295] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 522.877589][ T8] ft260 0003:0403:6030.002C: chip code: 0000 0000 [ 522.908748][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.948101][ T5288] usb 5-1: config 0 descriptor?? [ 523.072284][ T8] ft260 0003:0403:6030.002C: failed to retrieve system status [ 523.094799][ T5295] usb 4-1: Using ep0 maxpacket: 32 [ 523.113746][ T8] ft260 0003:0403:6030.002C: probe with driver ft260 failed with error -32 [ 523.137136][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.186294][ T5295] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.217585][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.245072][ T5295] usb 4-1: config 0 descriptor?? [ 523.259013][ T5295] hub 4-1:0.0: bad descriptor, ignoring hub [ 523.285911][ T5295] hub 4-1:0.0: probe with driver hub failed with error -5 [ 523.355155][ T5295] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 523.433200][ T5288] ft260 0003:0403:6030.002D: unknown main item tag 0x0 [ 523.594273][ T5288] ft260 0003:0403:6030.002D: chip code: 0000 0000 [ 523.603486][ T8] usb 4-1: USB disconnect, device number 55 [ 523.794611][ T5288] ft260 0003:0403:6030.002D: failed to retrieve system status [ 523.838492][ T5288] ft260 0003:0403:6030.002D: probe with driver ft260 failed with error -32 [ 523.970326][ T5295] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 524.180308][ T5295] usb 4-1: Using ep0 maxpacket: 32 [ 524.202095][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.233872][ T5295] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 524.271801][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.307984][ T5295] usb 4-1: config 0 descriptor?? [ 524.333578][ T5295] hub 4-1:0.0: bad descriptor, ignoring hub [ 524.353590][ T5295] hub 4-1:0.0: probe with driver hub failed with error -5 [ 524.400841][ T5295] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 524.613901][T10973] IPv6: NLM_F_REPLACE set, but no existing node found! [ 524.984084][ T8] usb 1-1: USB disconnect, device number 46 [ 525.224810][T10983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.475845][T10988] syz.0.1165 (10988): drop_caches: 2 [ 525.488280][T10988] syz.0.1165 (10988): drop_caches: 2 [ 525.677932][ T8] usb 5-1: USB disconnect, device number 50 [ 525.848171][T10998] team_slave_0: entered promiscuous mode [ 525.854036][T10998] team_slave_1: entered promiscuous mode [ 525.863723][ T5295] usb 4-1: USB disconnect, device number 56 [ 525.883050][T10998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.897428][ T5282] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 525.916786][T10998] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 525.985279][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 526.070702][ T5230] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 526.092251][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 526.106066][ T5282] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.116532][ T5282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 526.124282][ T5282] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 526.134775][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.147386][ T5282] usb 1-1: config 0 descriptor?? [ 526.210234][ T8] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 526.230279][ T5230] usb 3-1: device descriptor read/64, error -71 [ 526.392638][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.407833][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.420399][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 526.432961][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.465491][ T8] usb 5-1: config 0 descriptor?? [ 526.500545][ T5230] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 526.604654][ T5282] kye 0003:0458:0138.002E: unknown main item tag 0x0 [ 526.635982][ T5282] kye 0003:0458:0138.002E: unknown main item tag 0x0 [ 526.643700][ T5282] kye 0003:0458:0138.002E: unexpected long global item [ 526.660452][ T5282] kye 0003:0458:0138.002E: parse failed [ 526.674343][ T5230] usb 3-1: device descriptor read/64, error -71 [ 526.687093][ T5282] kye 0003:0458:0138.002E: probe with driver kye failed with error -22 [ 526.820793][ T5230] usb usb3-port1: attempt power cycle [ 526.898950][T10994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.926642][T10994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.043961][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 527.065546][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 527.087741][ T8] usb 5-1: USB disconnect, device number 51 [ 527.179871][ T5285] usb 1-1: USB disconnect, device number 47 [ 527.230267][ T5230] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 527.287689][ T5230] usb 3-1: device descriptor read/8, error -71 [ 527.560256][ T5230] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 527.621143][ T5230] usb 3-1: device descriptor read/8, error -71 [ 527.756442][ T5230] usb usb3-port1: unable to enumerate USB device [ 527.894053][T11019] FAULT_INJECTION: forcing a failure. [ 527.894053][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 527.910405][T11019] CPU: 1 UID: 0 PID: 11019 Comm: syz.3.1175 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 527.921270][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 527.931362][T11019] Call Trace: [ 527.934667][T11019] [ 527.937649][T11019] dump_stack_lvl+0x241/0x360 [ 527.942384][T11019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.947628][T11019] ? __pfx__printk+0x10/0x10 [ 527.952267][T11019] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 527.957795][T11019] ? __pfx___might_resched+0x10/0x10 [ 527.963152][T11019] should_fail_ex+0x3b0/0x4e0 [ 527.967921][T11019] should_failslab+0xac/0x100 [ 527.972629][T11019] ? snd_mixer_oss_put_volume1_sw+0xbd/0x3e0 [ 527.978654][T11019] __kmalloc_cache_noprof+0x6c/0x2c0 [ 527.984130][T11019] snd_mixer_oss_put_volume1_sw+0xbd/0x3e0 [ 527.989955][T11019] snd_mixer_oss_put_volume1+0x340/0x870 [ 527.995603][T11019] snd_mixer_oss_ioctl1+0x734/0x19f0 [ 528.000900][T11019] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 528.006638][T11019] ? __fget_files+0x29/0x470 [ 528.011262][T11019] ? __fget_files+0x3f6/0x470 [ 528.016089][T11019] ? __fget_files+0x29/0x470 [ 528.020795][T11019] snd_mixer_oss_ioctl+0x48/0x60 [ 528.025737][T11019] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 528.031384][T11019] __se_sys_ioctl+0xfc/0x170 [ 528.035994][T11019] do_syscall_64+0xf3/0x230 [ 528.040550][T11019] ? clear_bhb_loop+0x35/0x90 [ 528.045279][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.051192][T11019] RIP: 0033:0x7f39e0379ef9 [ 528.055635][T11019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.075311][T11019] RSP: 002b:00007f39e119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.083763][T11019] RAX: ffffffffffffffda RBX: 00007f39e0515f80 RCX: 00007f39e0379ef9 [ 528.091743][T11019] RDX: 0000000020000300 RSI: 000000004004f506 RDI: 0000000000000003 [ 528.099718][T11019] RBP: 00007f39e119a090 R08: 0000000000000000 R09: 0000000000000000 [ 528.107698][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.115683][T11019] R13: 0000000000000000 R14: 00007f39e0515f80 R15: 00007f39e063fa28 [ 528.123701][T11019] [ 528.171239][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 528.433534][T11025] syz.3.1176 (11025): drop_caches: 2 [ 528.493722][T11026] syz.3.1176 (11026): drop_caches: 2 [ 528.512013][T11026] syz.3.1176 (11026): drop_caches: 2 [ 528.519764][T11025] syz.3.1176 (11025): drop_caches: 2 [ 529.012031][T11030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'. [ 530.198622][T11043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1183'. [ 530.743068][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 531.058905][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 532.164793][T11064] syz.3.1188 (11064): drop_caches: 2 [ 532.202743][T11064] syz.3.1188 (11064): drop_caches: 2 [ 532.670315][ T5288] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 532.720510][ T5282] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 532.880472][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 532.895091][ T5288] usb 5-1: config index 0 descriptor too short (expected 29541, got 36) [ 532.910304][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 532.914294][ T5288] usb 5-1: config 0 has too many interfaces: 115, using maximum allowed: 32 [ 532.939242][ T5288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.939539][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.951809][ T5288] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 115 [ 532.971148][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 532.978219][ T5282] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 532.984234][ T5288] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 532.989581][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.003346][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.008585][ T5282] usb 3-1: config 0 descriptor?? [ 533.067318][ T5288] usb 5-1: config 0 descriptor?? [ 533.463950][ T5288] usb 5-1: USB disconnect, device number 52 [ 533.501895][ T5282] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 533.533411][ T5282] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 533.558361][ T5282] kye 0003:0458:0138.002F: unexpected long global item [ 533.611371][ T5282] kye 0003:0458:0138.002F: parse failed [ 533.640394][ T5282] kye 0003:0458:0138.002F: probe with driver kye failed with error -22 [ 533.809539][T11089] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 533.830671][T11089] team0: Port device virt_wifi0 added [ 534.054257][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1199'. [ 534.096759][T11096] netlink: 'syz.3.1200': attribute type 4 has an invalid length. [ 534.169474][T11100] FAULT_INJECTION: forcing a failure. [ 534.169474][T11100] name failslab, interval 1, probability 0, space 0, times 0 [ 534.185660][T11099] netlink: 'syz.3.1200': attribute type 4 has an invalid length. [ 534.200637][T11100] CPU: 0 UID: 0 PID: 11100 Comm: syz.4.1201 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 534.211474][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 534.221550][T11100] Call Trace: [ 534.224834][T11100] [ 534.227775][T11100] dump_stack_lvl+0x241/0x360 [ 534.232470][T11100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.237696][T11100] ? __pfx__printk+0x10/0x10 [ 534.242335][T11100] ? ref_tracker_alloc+0x332/0x490 [ 534.247470][T11100] should_fail_ex+0x3b0/0x4e0 [ 534.252159][T11100] ? skb_clone+0x20c/0x390 [ 534.256583][T11100] should_failslab+0xac/0x100 [ 534.261274][T11100] ? skb_clone+0x20c/0x390 [ 534.265710][T11100] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 534.271097][T11100] skb_clone+0x20c/0x390 [ 534.275354][T11100] __netlink_deliver_tap+0x3cc/0x7c0 [ 534.280654][T11100] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.285869][T11100] netlink_deliver_tap+0x19d/0x1b0 [ 534.291014][T11100] netlink_unicast+0x7c4/0x990 [ 534.295830][T11100] ? __pfx_netlink_unicast+0x10/0x10 [ 534.301146][T11100] ? __virt_addr_valid+0x183/0x530 [ 534.306467][T11100] ? __check_object_size+0x49c/0x900 [ 534.311777][T11100] ? bpf_lsm_netlink_send+0x9/0x10 [ 534.316908][T11100] netlink_sendmsg+0x8e4/0xcb0 [ 534.321700][T11100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.327081][T11100] ? __import_iovec+0x536/0x820 [ 534.331947][T11100] ? aa_sock_msg_perm+0x91/0x160 [ 534.336899][T11100] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 534.342197][T11100] ? security_socket_sendmsg+0x87/0xb0 [ 534.347668][T11100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.352958][T11100] __sock_sendmsg+0x221/0x270 [ 534.357655][T11100] ____sys_sendmsg+0x525/0x7d0 [ 534.362438][T11100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.367768][T11100] __sys_sendmsg+0x2b0/0x3a0 [ 534.372372][T11100] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.377507][T11100] ? vfs_write+0x7c4/0xc90 [ 534.381966][T11100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 534.388324][T11100] ? do_syscall_64+0x100/0x230 [ 534.393121][T11100] ? do_syscall_64+0xb6/0x230 [ 534.397833][T11100] do_syscall_64+0xf3/0x230 [ 534.402374][T11100] ? clear_bhb_loop+0x35/0x90 [ 534.407060][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.412971][T11100] RIP: 0033:0x7f8be5379ef9 [ 534.417428][T11100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.437045][T11100] RSP: 002b:00007f8be60a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.445467][T11100] RAX: ffffffffffffffda RBX: 00007f8be5515f80 RCX: 00007f8be5379ef9 [ 534.453446][T11100] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 534.461595][T11100] RBP: 00007f8be60a8090 R08: 0000000000000000 R09: 0000000000000000 [ 534.469597][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.477616][T11100] R13: 0000000000000000 R14: 00007f8be5515f80 R15: 00007f8be563fa28 [ 534.485634][T11100] [ 534.560547][T11100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1201'. [ 534.719969][T11096] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 534.743893][T11104] syz.0.1202 (11104): drop_caches: 2 [ 534.839739][T11104] syz.0.1202 (11104): drop_caches: 2 [ 534.928114][T11108] netlink: 'syz.4.1203': attribute type 10 has an invalid length. [ 535.004726][T11110] trusted_key: encrypted_key: keylen parameter is missing [ 535.017915][T11108] team0: Device ipvlan1 failed to register rx_handler [ 535.511437][T11126] FAULT_INJECTION: forcing a failure. [ 535.511437][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 535.524247][T11126] CPU: 0 UID: 0 PID: 11126 Comm: syz.2.1210 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 535.535027][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 535.545194][T11126] Call Trace: [ 535.548516][T11126] [ 535.551457][T11126] dump_stack_lvl+0x241/0x360 [ 535.556148][T11126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.561531][T11126] ? __pfx__printk+0x10/0x10 [ 535.566236][T11126] should_fail_ex+0x3b0/0x4e0 [ 535.570934][T11126] should_failslab+0xac/0x100 [ 535.575652][T11126] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 535.582005][T11126] ? nf_ct_ext_add+0x1a2/0x3e0 [ 535.586785][T11126] krealloc_noprof+0x7d/0x120 [ 535.591470][T11126] nf_ct_ext_add+0x1a2/0x3e0 [ 535.596079][T11126] init_conntrack+0x8bf/0x1310 [ 535.600854][T11126] ? __pfx_init_conntrack+0x10/0x10 [ 535.606085][T11126] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 535.612115][T11126] ? __local_bh_enable_ip+0x168/0x200 [ 535.617872][T11126] nf_conntrack_in+0xd5c/0x1890 [ 535.623360][T11126] ? __pfx_nf_conntrack_in+0x10/0x10 [ 535.628720][T11126] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 535.634273][T11126] nf_hook_slow+0xc3/0x220 [ 535.638720][T11126] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 535.643963][T11126] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 535.650524][T11126] NF_HOOK+0x29e/0x450 [ 535.655234][T11126] ? skb_orphan+0x4b/0xd0 [ 535.659689][T11126] ? NF_HOOK+0x9a/0x450 [ 535.664021][T11126] ? __pfx_NF_HOOK+0x10/0x10 [ 535.668614][T11126] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 535.673915][T11126] ? __pfx_ipv6_rcv+0x10/0x10 [ 535.678595][T11126] __netif_receive_skb+0x1ea/0x650 [ 535.683720][T11126] ? __pfx_lock_acquire+0x10/0x10 [ 535.688752][T11126] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 535.695130][T11126] ? __pfx___netif_receive_skb+0x10/0x10 [ 535.700890][T11126] ? __kasan_slab_alloc+0x66/0x80 [ 535.706184][T11126] ? read_tsc+0x9/0x20 [ 535.710300][T11126] ? timekeeping_get_ns+0x2c0/0x420 [ 535.715558][T11126] ? netif_receive_skb+0x131/0x890 [ 535.720719][T11126] ? netif_receive_skb+0x131/0x890 [ 535.725880][T11126] netif_receive_skb+0x1e8/0x890 [ 535.730842][T11126] ? tun_rx_batched+0x160/0x8f0 [ 535.735716][T11126] ? __pfx_netif_receive_skb+0x10/0x10 [ 535.741214][T11126] ? tun_rx_batched+0x160/0x8f0 [ 535.746072][T11126] tun_rx_batched+0x1b7/0x8f0 [ 535.750756][T11126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 535.757100][T11126] ? __pfx_lock_acquire+0x10/0x10 [ 535.762137][T11126] ? __pfx_tun_rx_batched+0x10/0x10 [ 535.767360][T11126] tun_get_user+0x2f84/0x4720 [ 535.772050][T11126] ? tun_get_user+0x2a78/0x4720 [ 535.776950][T11126] ? __lock_acquire+0x137a/0x2040 [ 535.782002][T11126] ? __pfx_tun_get_user+0x10/0x10 [ 535.787069][T11126] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 535.792567][T11126] ? tun_get+0x1e/0x2f0 [ 535.796733][T11126] ? __pfx_lock_release+0x10/0x10 [ 535.801782][T11126] ? tun_get+0x1e/0x2f0 [ 535.805944][T11126] ? tun_get+0x27d/0x2f0 [ 535.810202][T11126] tun_chr_write_iter+0x113/0x1f0 [ 535.815238][T11126] vfs_write+0xa72/0xc90 [ 535.819494][T11126] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 535.825164][T11126] ? __pfx_vfs_write+0x10/0x10 [ 535.829960][T11126] ksys_write+0x1a0/0x2c0 [ 535.834501][T11126] ? __pfx_ksys_write+0x10/0x10 [ 535.839365][T11126] ? do_syscall_64+0x100/0x230 [ 535.844196][T11126] ? do_syscall_64+0xb6/0x230 [ 535.849014][T11126] do_syscall_64+0xf3/0x230 [ 535.853579][T11126] ? clear_bhb_loop+0x35/0x90 [ 535.858306][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.864253][T11126] RIP: 0033:0x7f80bcd789df [ 535.868685][T11126] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 535.888328][T11126] RSP: 002b:00007f80bdc28000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 535.896759][T11126] RAX: ffffffffffffffda RBX: 00007f80bcf15f80 RCX: 00007f80bcd789df [ 535.904754][T11126] RDX: 000000000000008a RSI: 0000000020000040 RDI: 00000000000000c8 [ 535.912770][T11126] RBP: 00007f80bdc28090 R08: 0000000000000000 R09: 0000000000000000 [ 535.920974][T11126] R10: 000000000000008a R11: 0000000000000293 R12: 0000000000000001 [ 535.929453][T11126] R13: 0000000000000000 R14: 00007f80bcf15f80 R15: 00007f80bd03fa28 [ 535.937550][T11126] [ 535.940850][T11126] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 536.146520][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'. [ 536.213634][T11129] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 536.680432][ T5230] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 536.896657][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.910368][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.921343][ T5230] usb 4-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 536.935989][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.951215][ T5230] usb 4-1: config 0 descriptor?? [ 537.073455][T11129] warn_alloc: 1 callbacks suppressed [ 537.073479][T11129] syz.0.1211: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 537.141282][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.0.1211 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 537.152207][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 537.162350][T11129] Call Trace: [ 537.165691][T11129] [ 537.168697][T11129] dump_stack_lvl+0x241/0x360 [ 537.173436][T11129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.178705][T11129] ? __pfx__printk+0x10/0x10 [ 537.183363][T11129] ? __rcu_read_unlock+0xa1/0x110 [ 537.188630][T11129] warn_alloc+0x278/0x410 [ 537.193015][T11129] ? __pfx_warn_alloc+0x10/0x10 [ 537.197927][T11129] ? packet_set_ring+0x6da/0x2450 [ 537.203009][T11129] ? __get_vm_area_node+0x23d/0x270 [ 537.208294][T11129] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 537.214309][T11129] ? alloc_pages_mpol_noprof+0x417/0x680 [ 537.220042][T11129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 537.226448][T11129] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 537.232669][T11129] ? packet_set_ring+0x62b/0x2450 [ 537.237752][T11129] ? rcu_is_watching+0x15/0xb0 [ 537.242598][T11129] ? packet_set_ring+0x6da/0x2450 [ 537.247675][T11129] vzalloc_noprof+0x79/0x90 [ 537.252215][T11129] ? packet_set_ring+0x6da/0x2450 [ 537.257275][T11129] packet_set_ring+0x6da/0x2450 [ 537.262218][T11129] ? __pfx_packet_set_ring+0x10/0x10 [ 537.267597][T11129] ? __might_fault+0xaa/0x120 [ 537.272332][T11129] ? __might_fault+0xc6/0x120 [ 537.277070][T11129] packet_setsockopt+0x1140/0x1970 [ 537.282232][T11129] ? __pfx___might_resched+0x10/0x10 [ 537.287596][T11129] ? __pfx_packet_setsockopt+0x10/0x10 [ 537.293138][T11129] ? aa_sk_perm+0x96d/0xab0 [ 537.297810][T11129] ? __pfx_aa_sk_perm+0x10/0x10 [ 537.302700][T11129] ? __pfx_lock_acquire+0x10/0x10 [ 537.307784][T11129] ? aa_sock_opt_perm+0x79/0x120 [ 537.312764][T11129] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 537.318358][T11129] ? security_socket_setsockopt+0x87/0xb0 [ 537.324144][T11129] ? __pfx_packet_setsockopt+0x10/0x10 [ 537.329646][T11129] do_sock_setsockopt+0x3af/0x720 [ 537.334718][T11129] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 537.340301][T11129] ? __fget_files+0x29/0x470 [ 537.344948][T11129] ? __fget_files+0x3f6/0x470 [ 537.349687][T11129] __sys_setsockopt+0x1ae/0x250 [ 537.354587][T11129] __x64_sys_setsockopt+0xb5/0xd0 [ 537.359928][T11129] do_syscall_64+0xf3/0x230 [ 537.364481][T11129] ? clear_bhb_loop+0x35/0x90 [ 537.369192][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.375208][T11129] RIP: 0033:0x7f9463579ef9 [ 537.379658][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.399286][T11129] RSP: 002b:00007f94633f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 537.407745][T11129] RAX: ffffffffffffffda RBX: 00007f9463715f80 RCX: 00007f9463579ef9 [ 537.415761][T11129] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000008 [ 537.423776][T11129] RBP: 00007f94635e793e R08: 000000000000001c R09: 0000000000000000 [ 537.431778][T11129] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 537.440245][T11129] R13: 0000000000000000 R14: 00007f9463715f80 R15: 00007f946383fa28 [ 537.448294][T11129] [ 537.471652][T11129] Mem-Info: [ 537.474838][T11129] active_anon:4907 inactive_anon:0 isolated_anon:0 [ 537.474838][T11129] active_file:12699 inactive_file:38464 isolated_file:0 [ 537.474838][T11129] unevictable:768 dirty:200 writeback:0 [ 537.474838][T11129] slab_reclaimable:5509 slab_unreclaimable:99114 [ 537.474838][T11129] mapped:22785 shmem:1252 pagetables:929 [ 537.474838][T11129] sec_pagetables:0 bounce:0 [ 537.474838][T11129] kernel_misc_reclaimable:0 [ 537.474838][T11129] free:1364727 free_pcp:2502 free_cma:0 [ 537.588247][T11129] Node 0 active_anon:19672kB inactive_anon:0kB active_file:50796kB inactive_file:153780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91140kB dirty:816kB writeback:0kB shmem:3472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10124kB pagetables:3664kB sec_pagetables:0kB all_unreclaimable? no [ 537.626793][T11129] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 537.659376][T11129] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 537.675007][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 537.706470][T11129] lowmem_reserve[]: 0 2561 2562 0 0 [ 537.728597][T11129] Node 0 DMA32 free:1499424kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:19728kB inactive_anon:0kB active_file:50796kB inactive_file:152460kB unevictable:1536kB writepending:816kB present:3129332kB managed:2651248kB mlocked:0kB bounce:0kB free_pcp:680kB local_pcp:64kB free_cma:0kB [ 537.761602][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.781659][T11129] lowmem_reserve[]: 0 0 1 0 0 [ 537.786698][T11129] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 537.818443][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.830580][T11129] lowmem_reserve[]: 0 0 0 0 0 [ 537.840465][T11129] Node 1 Normal free:3953548kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 537.902229][T11129] lowmem_reserve[]: 0 0 0 0 0 [ 537.909751][T11129] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 537.927290][T11129] Node 0 DMA32: 175*4kB (UME) 804*8kB (UME) 694*16kB (UME) 509*32kB (UME) 242*64kB (UME) 23*128kB (UME) 10*256kB (UME) 5*512kB (UME) 18*1024kB (UME) 15*2048kB (UM) 340*4096kB (UM) = 1499868kB [ 537.949888][T11129] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 537.963547][T11129] Node 1 Normal: 9*4kB (UM) 3*8kB (UM) 7*16kB (UM) 9*32kB (UM) 3*64kB (U) 4*128kB (U) 3*256kB (UM) 4*512kB (UM) 3*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3953548kB [ 537.982643][T11129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 537.993012][T11129] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 538.009957][T11129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.028311][ T5230] usbhid 4-1:0.0: can't add hid device: -71 [ 538.036664][ T5230] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 538.051042][T11129] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 538.068681][ T5230] usb 4-1: USB disconnect, device number 57 [ 538.084380][T11129] 52415 total pagecache pages [ 538.106090][T11129] 0 pages in swap cache [ 538.118953][T11129] Free swap = 124152kB [ 538.125416][T11150] trusted_key: encrypted_key: keylen parameter is missing [ 538.132654][T11129] Total swap = 124996kB [ 538.132731][T11129] 2097051 pages RAM [ 538.132743][T11129] 0 pages HighMem/MovableOnly [ 538.132754][T11129] 402773 pages reserved [ 538.132766][T11129] 0 pages cma reserved [ 539.675488][T11175] syz.1.1224 (11175): drop_caches: 2 [ 539.747435][T11174] syz.1.1224 (11174): drop_caches: 2 [ 539.752470][T11175] syz.1.1224 (11175): drop_caches: 2 [ 539.811277][T11174] syz.1.1224 (11174): drop_caches: 2 [ 539.886829][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 539.981923][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1226'. [ 540.088915][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'. [ 540.197757][T11186] trusted_key: encrypted_key: keylen parameter is missing [ 540.283680][T11191] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 540.364045][T11191] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 540.447707][T11191] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 540.459716][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1230'. [ 540.700489][ T5230] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 540.903543][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.914816][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.927411][ T5230] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 540.942988][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.955280][ T5230] usb 5-1: config 0 descriptor?? [ 541.125008][T11199] ------------[ cut here ]------------ [ 541.131890][T11199] kernel BUG at mm/page_table_check.c:157! [ 541.142093][T11199] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 541.149102][T11199] CPU: 0 UID: 0 PID: 11199 Comm: syz.2.1233 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 541.159908][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 541.170883][T11199] RIP: 0010:__page_table_check_zero+0x274/0x350 [ 541.177421][T11199] Code: c1 0f 8c 39 fe ff ff 48 89 df e8 a7 c4 f4 ff e9 2c fe ff ff e8 fd 81 8d ff 90 0f 0b e8 f5 81 8d ff 90 0f 0b e8 ed 81 8d ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 b5 86 8d [ 541.197357][T11199] RSP: 0018:ffffc90008ed7938 EFLAGS: 00010283 [ 541.203648][T11199] RAX: ffffffff82060a43 RBX: dffffc0000000000 RCX: 0000000000040000 [ 541.211678][T11199] RDX: ffffc9001027a000 RSI: 000000000000bfc7 RDI: 000000000000bfc8 [ 541.221350][T11199] RBP: ffff88801897c04c R08: ffff88801897c04f R09: 1ffff1100312f809 [ 541.229456][T11199] R10: dffffc0000000000 R11: ffffed100312f80a R12: ffff88801897c000 [ 541.237465][T11199] R13: 1ffffffff29f3328 R14: 000000000000000a R15: 0000000000000000 [ 541.245463][T11199] FS: 00007f80bdc286c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 541.254437][T11199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.261054][T11199] CR2: 000000002005f000 CR3: 0000000058d32000 CR4: 00000000003506f0 [ 541.269058][T11199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.277055][T11199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.285080][T11199] Call Trace: [ 541.288386][T11199] [ 541.291342][T11199] ? __die_body+0x88/0xe0 [ 541.295708][T11199] ? die+0xcf/0x110 [ 541.299538][T11199] ? do_trap+0x15a/0x3a0 [ 541.303804][T11199] ? __page_table_check_zero+0x274/0x350 [ 541.309494][T11199] ? do_error_trap+0x1dc/0x2c0 [ 541.314331][T11199] ? __page_table_check_zero+0x274/0x350 [ 541.319969][T11199] ? __pfx_do_error_trap+0x10/0x10 [ 541.325107][T11199] ? handle_invalid_op+0x34/0x40 [ 541.330158][T11199] ? __page_table_check_zero+0x274/0x350 [ 541.335844][T11199] ? exc_invalid_op+0x38/0x50 [ 541.340557][T11199] ? asm_exc_invalid_op+0x1a/0x20 [ 541.345612][T11199] ? __page_table_check_zero+0x273/0x350 [ 541.351260][T11199] ? __page_table_check_zero+0x274/0x350 [ 541.356940][T11199] ? __page_table_check_zero+0x273/0x350 [ 541.362603][T11199] __free_pages_ok+0xb62/0xcc0 [ 541.367409][T11199] dec_usb_memory_use_count+0x259/0x350 [ 541.372978][T11199] ? __pfx_usbdev_vm_close+0x10/0x10 [ 541.378367][T11199] mmap_region+0x13b4/0x2090 [ 541.382995][T11199] ? mark_lock+0x9a/0x350 [ 541.387363][T11199] ? __pfx_mmap_region+0x10/0x10 [ 541.392346][T11199] ? thp_get_unmapped_area_vmflags+0x1bf/0x380 [ 541.398536][T11199] ? cap_mmap_addr+0x163/0x2c0 [ 541.403330][T11199] ? __get_unmapped_area+0x2f0/0x360 [ 541.408670][T11199] do_mmap+0x8f9/0x1010 [ 541.412876][T11199] ? __pfx_do_mmap+0x10/0x10 [ 541.417495][T11199] ? __pfx_down_write_killable+0x10/0x10 [ 541.423169][T11199] ? __pfx_ima_file_mmap+0x10/0x10 [ 541.428590][T11199] ? security_mmap_file+0x178/0x1a0 [ 541.433822][T11199] vm_mmap_pgoff+0x1dd/0x3d0 [ 541.438435][T11199] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 541.443575][T11199] ? __fget_files+0x29/0x470 [ 541.448227][T11199] ? __fget_files+0x3f6/0x470 [ 541.452960][T11199] ksys_mmap_pgoff+0x4f1/0x720 [ 541.457996][T11199] ? __x64_sys_mmap+0x7f/0x140 [ 541.462837][T11199] do_syscall_64+0xf3/0x230 [ 541.467400][T11199] ? clear_bhb_loop+0x35/0x90 [ 541.472143][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.478089][T11199] RIP: 0033:0x7f80bcd79ef9 [ 541.482544][T11199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.502212][T11199] RSP: 002b:00007f80bdc28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 541.510650][T11199] RAX: ffffffffffffffda RBX: 00007f80bcf15f80 RCX: 00007f80bcd79ef9 [ 541.518638][T11199] RDX: 0000000001000016 RSI: 0000000000400000 RDI: 0000000020000000 [ 541.526645][T11199] RBP: 00007f80bcde793e R08: 0000000000000003 R09: 0000000000000000 [ 541.534635][T11199] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000000 [ 541.542649][T11199] R13: 0000000000000000 R14: 00007f80bcf15f80 R15: 00007f80bd03fa28 [ 541.550650][T11199] [ 541.553669][T11199] Modules linked in: [ 541.611884][T11199] ---[ end trace 0000000000000000 ]--- [ 541.624906][T11199] RIP: 0010:__page_table_check_zero+0x274/0x350 [ 541.640293][T11199] Code: c1 0f 8c 39 fe ff ff 48 89 df e8 a7 c4 f4 ff e9 2c fe ff ff e8 fd 81 8d ff 90 0f 0b e8 f5 81 8d ff 90 0f 0b e8 ed 81 8d ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 b5 86 8d [ 541.671836][T11199] RSP: 0018:ffffc90008ed7938 EFLAGS: 00010283 [ 541.685944][T11199] RAX: ffffffff82060a43 RBX: dffffc0000000000 RCX: 0000000000040000 [ 541.697121][T11199] RDX: ffffc9001027a000 RSI: 000000000000bfc7 RDI: 000000000000bfc8 [ 541.713711][T11199] RBP: ffff88801897c04c R08: ffff88801897c04f R09: 1ffff1100312f809 [ 541.723327][T11199] R10: dffffc0000000000 R11: ffffed100312f80a R12: ffff88801897c000 [ 541.738546][T11199] R13: 1ffffffff29f3328 R14: 000000000000000a R15: 0000000000000000 [ 541.758477][T11199] FS: 00007f80bdc286c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 541.775180][T11199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.798323][T11199] CR2: 000000002007f000 CR3: 0000000058d32000 CR4: 00000000003506f0 [ 541.808866][T11199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.824356][T11199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.838247][T11199] Kernel panic - not syncing: Fatal exception [ 541.844691][T11199] Kernel Offset: disabled [ 541.849028][T11199] Rebooting in 86400 seconds..