last executing test programs: 20.521001212s ago: executing program 4 (id=942): r0 = syz_open_dev$evdev(&(0x7f00000008c0), 0x200, 0x1) (fail_nth: 6) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000900)=0x8) 19.556422668s ago: executing program 4 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') getdents(r1, &(0x7f0000000240)=""/96, 0x60) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000a00)={r8, r6, r7, 0x0, 0x1, 0xffdd, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r9 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000076770200000a4c000000f50a0b0400000000000001006e756d67656e00007303e64cce32c90fdb0c00028008000140000000110900010073797a30061b21000000000900020073797a3200000000140000001100010000000000080000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000743b0000000000000000000018110000aabd6b91aee91122bea6ffe8aec8e0465a5af8704d4a0824741bf1bd33372dad297e1ed86bf2201dd0515a969dc8a77a1d4c6c10f18a27a02555f7eb39f53904296ea9128edd4ad364af7ac02132c1f5e054b91a057777293065a191661eb059811fbe3429309bbadc19680a8c2fff28079b3ac18035d1d9b7e7a3f8375d66410da1c2dfd7d9f71f068e09d9c5ba48bd635682227d03d7dc3077a2390708354d0d8184", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000a14000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x80000, 0x1) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14}}, 0xb0}}, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 17.105292876s ago: executing program 1 (id=951): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r0, 0xb29, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000", @ANYRES64], 0x50}}, 0x20044084) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) r5 = socket(0x2000000015, 0x80005, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x150}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r7], 0x78}}, 0x20000800) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4ea1, @private=0xa010100}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffdb3400000000000000fbff0000fc0011907800000000000000334e790de7d73bf3ec"], 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 14.279056166s ago: executing program 4 (id=954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5) personality(0x0) sched_setattr(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x884) 13.158839156s ago: executing program 1 (id=956): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x4240}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b00010100000009040000030206000005240600000524000000"], 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 12.058632733s ago: executing program 2 (id=959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5) personality(0x0) sched_setattr(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x884) 10.55902603s ago: executing program 3 (id=960): mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x187031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000100)={0x2d}, 0x14) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0xa, &(0x7f0000000140)=[{0x5, 0x5, 0x81, 0x6}, {0xa, 0x25, 0x9, 0x4}, {0x9, 0xad, 0x6, 0x5}, {0x7, 0x5, 0xad, 0x7ff}, {0x8e, 0x4, 0x4, 0x1000005}, {0xfffe, 0xa, 0xd, 0x7}, {0x9, 0xc0, 0x81, 0x6}, {0x5, 0xd, 0xba, 0x3}, {0x3, 0x0, 0x81, 0x9}, {0x0, 0x3, 0x55, 0x5}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x40046602, &(0x7f0000000300)={0x0, 0x0, r5}) ftruncate(r5, 0x6eea2322) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 10.244115023s ago: executing program 3 (id=961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "501040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3c, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 10.154042766s ago: executing program 4 (id=962): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x2, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) 10.061895981s ago: executing program 3 (id=963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r3, 0x7}, 0x8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x3, 0x84a, 0x4, 0x8}) ftruncate(r4, 0x200004) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf25190000000800030016e1a08646b07b47d0f0e7f7f331", @ANYRES32=r12, @ANYBLOB="05001e00c1c57464"], 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x200c4040) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 8.707786845s ago: executing program 4 (id=964): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r0, 0xb29, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000", @ANYRES64], 0x50}}, 0x20044084) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) r5 = socket(0x2000000015, 0x80005, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r7], 0x78}}, 0x20000800) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4ea1, @private=0xa010100}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffdb3400000000000000fbff0000fc0011907800000000000000334e790de7d73bf3ec"], 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 8.492210269s ago: executing program 1 (id=965): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0xffffffffffffffff, &(0x7f0000000200)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @local}, &(0x7f0000000340)=0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x16, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}}, 0x4000000) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_q', 0x2}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x3fe, 0x8100) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000000c0)={0x9, 0x1a, 0x5, 0x5, "5a1348286f34d0f60e4c439cb062c41f307db4809d429c23d8e1f7e6ced1b686"}) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109028d0003010000000904000000010120"], 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r6, 0x0, 0x0, 0x80800) 8.254578998s ago: executing program 2 (id=966): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r0, 0xb29, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000", @ANYRES64], 0x50}}, 0x20044084) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) r5 = socket(0x2000000015, 0x80005, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x150}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r7], 0x78}}, 0x20000800) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4ea1, @private=0xa010100}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffdb3400000000000000fbff0000fc0011907800000000000000334e790de7d73bf3ec"], 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 8.158986268s ago: executing program 0 (id=967): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x10, 0x4, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x9, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x4, 0x9, '\x00', 0x13}, {0x3, 0x3e, 0x3, '\x00', 0x8f}, {0xe, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x8, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x0, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x431040, 0x0) pipe2(&(0x7f0000000000), 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0305720, 0x0) 8.097099232s ago: executing program 3 (id=968): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002700)={{0x1, 0x1, 0x18, r0, {r1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x3, 0x98, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x18, 0x63, 0x60, 0x8, 0xe8d, 0x763f, 0x9b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x2, 0x3, 0x17, 0x98, 0x7b, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0x2, 0x1, 0x4, 0x2e, 0x2b, 0x15, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}, {{0x9, 0x4, 0x3, 0x4b, 0x0, 0xa7, 0xd8, 0x1, 0x7}}]}}]}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$null(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000100)) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4, 0x1, [0x1b]}]}]}]}, 0x2c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.595853894s ago: executing program 1 (id=969): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x38) (fail_nth: 6) 5.727944861s ago: executing program 1 (id=970): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xd7, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x1, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x3ff, 0x0, 0x1}, {0x3, 0x0, 0x1}], @generic="151306f270c3db7813707f3a354e671cc8fc73fd1df902ff2bff529b135126dee97c2c2a5ea96874be5e5359342d9923e62ad8307b4175cf9c5cff7c99a8d1501cc88c99c1e83c371d30749e7546daeb09eaa70f9c05bd9d1b0011178e5355653dd765534d2c79cfd7d5a894328ad80feeb12dd0081f0cb264fa2dadfa38b10c04f5300e4aeeda4507e83a077aea3f69f628168ece399cd0fea85c89028449f460f455c4966d97d602012c01b556a126b59162a25389c9f53e"}}}}, &(0x7f0000000000)={0x1, 0x3, [0xcda, 0xf18, 0xc38, 0x1fc]}) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'hsr0\x00'}) (async) syz_usb_connect(0x0, 0x52, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="c6f92b9ba3fcbc07ad8b71004cfd5fa113f446195ec790806bc1134d87cfc72b6db8bf14bb6c0fed852d6bf3eda327d469a38f91dbee5649e80fc51f39ea7975bb6ef0a5c3de9c779f78d4d7a8e2b584abc77f85baf81228ca0b5afab4c87b005713a6fbc7d15584d501f58ea7d3892e54f3135380f5adff9f6fd5fba70bf04362641e3ad562360ec4fd9deaf6f2fbfd81a04df2a6e8f7b27bc45bcb643386396877be1d78d36149d298045c1d1df3b2c281fafe8fc33ac0329bba2f2d67988a9fbc39bd22de5c9b0c63cb931ba50b6e402d7dae5dc2f68d3dbe79d33131ffd49aac", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0], 0x0) 4.810172402s ago: executing program 2 (id=971): mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x187031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000100)={0x2d}, 0x14) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0xa, &(0x7f0000000140)=[{0x5, 0x5, 0x81, 0x6}, {0xa, 0x25, 0x9, 0x4}, {0x9, 0xad, 0x6, 0x5}, {0x7, 0x5, 0xad, 0x7ff}, {0x8e, 0x4, 0x4, 0x1000005}, {0xfffe, 0xa, 0xd, 0x7}, {0x9, 0xc0, 0x81, 0x6}, {0x5, 0xd, 0xba, 0x3}, {0x3, 0x0, 0x81, 0x9}, {0x0, 0x3, 0x55, 0x5}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x40046602, &(0x7f0000000300)={0x0, 0x0, r5}) ftruncate(r5, 0x6eea2322) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 4.496523699s ago: executing program 2 (id=972): r0 = open(&(0x7f0000000180)='./file0\x00', 0x6440, 0x81) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) gettid() open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r5, 0x47f6, 0x0, 0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(r0, 0x0, 0x0, 0x8000, 0xffffffffffffffff) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 4.462988497s ago: executing program 0 (id=973): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000"], 0x0) 4.384544941s ago: executing program 3 (id=974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x1000, 0x200, 0x7, 0x1, 0x0, 0x7, 0xc6, 0x1, 0x2, 0x6, 0x8, 0x8, 0x5}, {0x8, 0xaef3, 0xe, 0x8, 0xc, 0x1, 0x8, 0x14, 0xac, 0x5, 0x1, 0x6, 0x12005}, {0x8, 0x7, 0x1, 0x9, 0x7, 0x4, 0x1, 0xfe, 0x1, 0x15, 0x1, 0x3, 0x2}], 0x5}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x1ff, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote}}}}) r7 = socket(0x25, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x54, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) ioctl$TIOCSLCKTRMIOS(r6, 0x5435, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="804200001dfe0035d5f46d00128009000100626f6e6400000000f900028008003a00c5d926f23f95391e1abe4dadfcf3f9a7d75d862c08f868a060dcbab1131d604df00e98479919fcd45818884d5f74cae696702efdbc12", @ANYRES32=0x0, @ANYBLOB='\b\x00(\x00\x00\x00\x00\x00'], 0x44}}, 0x0) 4.279414s ago: executing program 0 (id=975): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x4240}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b00010100000009040000030206000005240600000524000000"], 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 3.990451058s ago: executing program 4 (id=976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x40, 0xd, 0x2, "a2e2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580"], 0x5c}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) 2.895946596s ago: executing program 3 (id=977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendto$inet6(r6, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x8, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 2.404931136s ago: executing program 2 (id=978): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000500)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r4, 0x0, 0xf, 0x2}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000000c0)={0x28, 0x1, r4, r5, 0x808, 0x6ac8e7d0}) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r7 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260bb2d3b6939a66c53afb7b2666", 0x91, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x1, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 2.280282273s ago: executing program 1 (id=979): socket$inet6_tcp(0xa, 0x1, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x8, {0x1c, 0x14, 0x20, 0x4, 0xfc, 0x0, 0xc8, 0x1, 0x1000}, [@RTA_DST={0x8, 0x1, {0x800}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x854c0aaae58a2fb4, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000000)) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2014110000000102"], 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = syz_io_uring_setup(0x2e03, &(0x7f0000000380)={0x0, 0x391d, 0x14b8e, 0x0, 0xfffffffd, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 348.721198ms ago: executing program 0 (id=980): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000ac0)=@ethtool_cmd={0x28}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbe) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @broadcast, 0x0, "c280619dcd8fb086632ab34f10d9d2ff818194f7932f21de4cdb8b58ced19864", 0xfffffeff, 0x17, 0x55f1, 0x2}, 0x3c) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x16, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) 210.953592ms ago: executing program 2 (id=981): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r0, 0xb29, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000", @ANYRES64], 0x50}}, 0x20044084) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) r5 = socket(0x2000000015, 0x80005, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x150}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r7], 0x78}}, 0x20000800) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4ea1, @private=0xa010100}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffdb3400000000000000fbff0000fc0011907800000000000000334e790de7d73bf3ec"], 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 153.855655ms ago: executing program 0 (id=982): mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x187031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000100)={0x2d}, 0x14) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0xa, &(0x7f0000000140)=[{0x5, 0x5, 0x81, 0x6}, {0xa, 0x25, 0x9, 0x4}, {0x9, 0xad, 0x6, 0x5}, {0x7, 0x5, 0xad, 0x7ff}, {0x8e, 0x4, 0x4, 0x1000005}, {0xfffe, 0xa, 0xd, 0x7}, {0x9, 0xc0, 0x81, 0x6}, {0x5, 0xd, 0xba, 0x3}, {0x3, 0x0, 0x81, 0x9}, {0x0, 0x3, 0x55, 0x5}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x40046602, &(0x7f0000000300)={0x0, 0x0, r5}) ftruncate(r5, 0x6eea2322) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) kernel console output (not intermixed with test programs): le Compute Engine, BIOS Google 10/25/2025 [ 414.545630][ T9220] Call Trace: [ 414.545638][ T9220] [ 414.545648][ T9220] dump_stack_lvl+0xe8/0x150 [ 414.545683][ T9220] should_fail_ex+0x414/0x560 [ 414.545725][ T9220] should_failslab+0xa8/0x100 [ 414.545755][ T9220] __kmalloc_cache_noprof+0x84/0x700 [ 414.545779][ T9220] ? __pfx___nla_validate_parse+0x10/0x10 [ 414.545804][ T9220] ? l2tp_tunnel_create+0x92/0x3e0 [ 414.545844][ T9220] l2tp_tunnel_create+0x92/0x3e0 [ 414.545884][ T9220] l2tp_nl_cmd_tunnel_create+0x29b/0x950 [ 414.545920][ T9220] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 414.545963][ T9220] ? __nla_parse+0x40/0x60 [ 414.545992][ T9220] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 414.546024][ T9220] genl_family_rcv_msg_doit+0x215/0x300 [ 414.546054][ T9220] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.546089][ T9220] ? bpf_lsm_capable+0x9/0x20 [ 414.546115][ T9220] ? security_capable+0x7e/0x2e0 [ 414.546148][ T9220] genl_rcv_msg+0x60e/0x790 [ 414.546176][ T9220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.546196][ T9220] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 414.546241][ T9220] netlink_rcv_skb+0x208/0x470 [ 414.546271][ T9220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.546297][ T9220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.546322][ T9220] ? genl_rcv+0x19/0x40 [ 414.546374][ T9220] ? down_read+0x274/0x2e0 [ 414.546398][ T9220] ? genl_rcv+0xd/0x40 [ 414.546432][ T9220] genl_rcv+0x28/0x40 [ 414.546462][ T9220] netlink_unicast+0x82f/0x9e0 [ 414.546497][ T9220] ? __pfx_netlink_unicast+0x10/0x10 [ 414.546521][ T9220] ? __alloc_skb+0x198/0x3a0 [ 414.546545][ T9220] ? netlink_sendmsg+0x642/0xb30 [ 414.546572][ T9220] ? skb_put+0x11b/0x210 [ 414.546599][ T9220] netlink_sendmsg+0x805/0xb30 [ 414.546639][ T9220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.546671][ T9220] ? __import_iovec+0x5d4/0x7f0 [ 414.546695][ T9220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.546726][ T9220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.546746][ T9220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.546776][ T9220] __sock_sendmsg+0x21c/0x270 [ 414.546812][ T9220] ____sys_sendmsg+0x505/0x820 [ 414.546845][ T9220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.546878][ T9220] ? kstrtouint+0x6e/0xe0 [ 414.546919][ T9220] ___sys_sendmsg+0x21f/0x2a0 [ 414.546956][ T9220] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.546981][ T9220] ? get_pid_task+0x20/0x1f0 [ 414.547009][ T9220] ? get_pid_task+0x20/0x1f0 [ 414.547034][ T9220] ? get_pid_task+0x20/0x1f0 [ 414.547096][ T9220] ? __fget_files+0x2a/0x420 [ 414.547123][ T9220] ? __fget_files+0x3a0/0x420 [ 414.547163][ T9220] __sys_sendmsg+0x164/0x220 [ 414.547193][ T9220] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.547229][ T9220] ? __pfx_ksys_write+0x10/0x10 [ 414.547264][ T9220] __do_fast_syscall_32+0x1dc/0x560 [ 414.547289][ T9220] ? lockdep_hardirqs_on+0x7b/0x110 [ 414.547310][ T9220] ? do_fast_syscall_32+0x34/0x80 [ 414.547334][ T9220] ? irqentry_exit+0x10f/0x660 [ 414.547360][ T9220] do_fast_syscall_32+0x34/0x80 [ 414.547386][ T9220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.547412][ T9220] RIP: 0023:0xf708d539 [ 414.547431][ T9220] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 414.547450][ T9220] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 414.547473][ T9220] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 414.547488][ T9220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.547501][ T9220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.547514][ T9220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 414.547527][ T9220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.547560][ T9220] [ 415.048678][ T912] usb 1-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 415.059103][ T912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.060940][ T9223] fuse: Bad value for 'rootmode' [ 415.075090][ T912] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.084415][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.092726][ T912] usb 1-1: Product: syz [ 415.097404][ T912] usb 1-1: Manufacturer: syz [ 415.102078][ T912] usb 1-1: SerialNumber: syz [ 415.325453][ T30] audit: type=1326 audit(1767401604.265:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9205 comm="syz.3.731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 415.641977][ T912] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 415.741786][ T912] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 415.783135][ T5873] usb 4-1: USB disconnect, device number 50 [ 415.844870][ T912] usb 1-1: USB disconnect, device number 36 [ 415.846167][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 415.947046][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.342039][ T5873] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 416.583099][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 416.614381][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 416.677819][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 416.691437][ T5873] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 416.705656][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.733979][ T5873] usb 4-1: Product: syz [ 416.759029][ T5873] usb 4-1: Manufacturer: syz [ 416.774165][ T5873] usb 4-1: SerialNumber: syz [ 416.834662][ T5873] usb 4-1: config 0 descriptor?? [ 416.861570][ T9240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.870076][ T9240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.905946][ T5873] usb 4-1: ucan: probing device on interface #0 [ 417.012168][ T9247] fuse: Unknown parameter 'ft' [ 417.690850][ T5873] ucan 4-1:0.0 can0: registered device [ 417.861332][ T5873] ucan 4-1:0.0 can0: firmware string: ¢â [ 418.214540][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 418.246303][ T5920] usb 4-1: USB disconnect, device number 51 [ 419.266814][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 419.556613][ T912] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 419.741394][ T912] usb 3-1: no configurations [ 419.746235][ T912] usb 3-1: can't read configurations, error -22 [ 419.907656][ T912] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 419.926801][ T6210] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 420.036571][ T5873] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 420.110013][ T6210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.122030][ T912] usb 3-1: no configurations [ 420.127773][ T6210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 420.138752][ T912] usb 3-1: can't read configurations, error -22 [ 420.158286][ T6210] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 420.171084][ T912] usb usb3-port1: attempt power cycle [ 420.193568][ T6210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.202677][ T5873] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 420.211991][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.238632][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.258986][ T6210] usb 5-1: config 0 descriptor?? [ 420.279844][ T6210] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 420.289015][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.342561][ T6210] dvb-usb: bulk message failed: -22 (3/0) [ 420.350526][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.388875][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.403076][ T6210] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 420.454297][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.461968][ T6210] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 420.481790][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.493432][ T9286] dvb-usb: bulk message failed: -22 (2/0) [ 420.501282][ T6210] usb 5-1: media controller created [ 420.519806][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.530993][ T912] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 420.550151][ T9286] dvb-usb: bulk message failed: -22 (4/0) [ 420.560387][ T6210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.619753][ T912] usb 3-1: no configurations [ 420.624431][ T912] usb 3-1: can't read configurations, error -22 [ 420.639512][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.659794][ T6210] dvb-usb: bulk message failed: -22 (6/0) [ 420.695536][ T6210] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 420.703910][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.715510][ T6210] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 420.726948][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.767218][ T6210] dvb-usb: schedule remote query interval to 150 msecs. [ 420.776289][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.797060][ T6210] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 420.807829][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.822794][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.839309][ T912] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 420.884876][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.893874][ T912] usb 3-1: no configurations [ 420.900175][ T912] usb 3-1: can't read configurations, error -22 [ 420.911981][ T912] usb usb3-port1: unable to enumerate USB device [ 420.931121][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.949387][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.966896][ T912] dvb-usb: bulk message failed: -22 (1/0) [ 420.980803][ T912] dvb-usb: error while querying for an remote control event. [ 421.010787][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 421.248821][ T912] dvb-usb: bulk message failed: -22 (1/0) [ 421.263387][ T912] dvb-usb: error while querying for an remote control event. [ 421.509977][ T912] dvb-usb: bulk message failed: -22 (1/0) [ 421.532257][ T912] dvb-usb: error while querying for an remote control event. [ 421.558164][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.581309][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 421.607809][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 421.616144][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.627111][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 421.813080][ T912] dvb-usb: bulk message failed: -22 (1/0) [ 421.825833][ T912] dvb-usb: error while querying for an remote control event. [ 421.931987][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 421.966756][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 422.036566][ T912] dvb-usb: bulk message failed: -22 (1/0) [ 422.086353][ T912] dvb-usb: error while querying for an remote control event. [ 422.094571][ T5873] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 422.123939][ T5873] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 422.139342][ T5873] usb 1-1: Product: syz [ 422.152825][ T5873] usb 1-1: Manufacturer: syz [ 422.175599][ T5873] usb 1-1: SerialNumber: syz [ 422.215224][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 422.246944][ T5873] usb 1-1: config 0 descriptor?? [ 422.276593][ T912] dvb-usb: bulk message failed: -22 (1/0) [ 422.282459][ T912] dvb-usb: error while querying for an remote control event. [ 422.296272][ T5873] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 422.304361][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.336553][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.413287][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 422.433328][ T5873] usb 5-1: USB disconnect, device number 37 [ 422.445188][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.561278][ T5873] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 422.583002][ T24] usb 2-1: Product: syz [ 422.597666][ T24] usb 2-1: Manufacturer: syz [ 422.633129][ T24] usb 2-1: SerialNumber: syz [ 422.673595][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 422.721654][ T24] usb 2-1: bad CDC descriptors [ 422.774973][ T24] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 422.826026][ T24] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 423.906856][ T6041] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 424.078729][ T6041] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.106520][ T6041] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.117371][ T6041] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.126747][ T6041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.134797][ T6041] usb 3-1: SerialNumber: syz [ 424.356893][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.367024][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.385136][ T6041] usb 3-1: 0:2 : does not exist [ 424.415275][ T6041] usb 3-1: USB disconnect, device number 51 [ 424.510113][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.797716][ T9348] fuse: Unknown parameter 'ft' [ 424.837375][ T30] audit: type=1326 audit(1767401613.885:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7fc00000 [ 424.952055][ T6041] usb 2-1: USB disconnect, device number 42 [ 425.258932][ T6041] usb 1-1: USB disconnect, device number 37 [ 425.341621][ T6041] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 426.706793][ T5920] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 426.856697][ T5920] usb 1-1: device descriptor read/64, error -71 [ 427.121419][ T5920] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 427.289126][ T5920] usb 1-1: device descriptor read/64, error -71 [ 427.437626][ T5920] usb usb1-port1: attempt power cycle [ 427.736933][ T6041] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 427.806521][ T5920] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 427.837183][ T5920] usb 1-1: device descriptor read/8, error -71 [ 427.855428][ T9397] fuse: Unknown parameter 'ft' [ 427.956625][ T44] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 428.035403][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.049620][ T6041] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 428.350315][ T5920] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 428.534547][ T5920] usb 1-1: device descriptor read/8, error -71 [ 428.549717][ T6041] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 428.559284][ T6041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.577670][ T6041] usb 4-1: config 0 descriptor?? [ 428.586586][ T912] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 428.606596][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 428.617693][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.631883][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.641853][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.647899][ T5920] usb usb1-port1: unable to enumerate USB device [ 428.663099][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 428.677255][ T6041] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 428.684214][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.704580][ T6041] dvb-usb: bulk message failed: -22 (3/0) [ 428.718160][ T6041] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 428.743250][ T6041] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 428.750745][ T44] usb 2-1: config 0 descriptor?? [ 428.766180][ T6041] usb 4-1: media controller created [ 428.782078][ T912] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.793502][ T912] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 428.805327][ T6041] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.836534][ T9381] dvb-usb: bulk message failed: -22 (2/0) [ 428.842577][ T9381] dvb-usb: bulk message failed: -22 (4/0) [ 428.844903][ T912] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 428.860050][ T6041] dvb-usb: bulk message failed: -22 (6/0) [ 428.865921][ T6041] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 428.866730][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.930855][ T6041] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 428.997789][ T9396] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 429.036896][ T6041] dvb-usb: schedule remote query interval to 150 msecs. [ 429.069048][ T912] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.238013][ T6041] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 429.396585][ T6041] dvb-usb: bulk message failed: -22 (1/0) [ 429.405527][ T6041] dvb-usb: error while querying for an remote control event. [ 429.451245][ T9410] loop6: detected capacity change from 0 to 524287999 [ 429.493630][ T5965] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 429.516288][ T9410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.772'. [ 429.550837][ T9410] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 429.880852][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 429.904385][ T5920] dvb-usb: error while querying for an remote control event. [ 430.099698][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 430.107871][ T5920] dvb-usb: error while querying for an remote control event. [ 430.297365][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 430.303372][ T5920] dvb-usb: error while querying for an remote control event. [ 430.395898][ T5920] usb 4-1: USB disconnect, device number 52 [ 430.516010][ T5920] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 430.520290][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.540409][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.713211][ T5873] usb 3-1: USB disconnect, device number 52 [ 431.735968][ T9394] delete_channel: no stack [ 431.796782][ T6210] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 431.837119][ T912] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 431.905314][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 431.927556][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 431.949806][ T6210] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.976913][ T44] usb 2-1: USB disconnect, device number 43 [ 431.985159][ T6210] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.016593][ T912] usb 4-1: Using ep0 maxpacket: 8 [ 432.031610][ T912] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 432.045529][ T6210] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.064380][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.084265][ T6210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.096712][ T912] usb 4-1: Product: syz [ 432.100980][ T912] usb 4-1: Manufacturer: syz [ 432.115877][ T912] usb 4-1: SerialNumber: syz [ 432.172547][ T912] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 432.258840][ T5873] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 432.355185][ T6210] usb 1-1: usb_control_msg returned -32 [ 432.370941][ T6210] usbtmc 1-1:16.0: can't read capabilities [ 432.431412][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 432.442440][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 432.455727][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 432.524571][ T5873] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 432.533898][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.547983][ T5873] usb 3-1: Product: syz [ 432.557870][ T5873] usb 3-1: Manufacturer: syz [ 432.566679][ T5873] usb 3-1: SerialNumber: syz [ 432.632777][ T5873] usb 3-1: config 0 descriptor?? [ 432.639498][ T9431] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 432.653345][ T9431] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 432.674995][ T5873] usb 3-1: ucan: probing device on interface #0 [ 432.776087][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.792187][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.815103][ T912] gspca_m5602: Failed to find a sensor [ 432.820919][ T912] ALi m5602 4-1:8.0: ALi m5602 webcam failed [ 432.845579][ T912] usb 4-1: USB disconnect, device number 53 [ 433.221806][ T9443] fuse: Unknown parameter 'ft' [ 433.409820][ T5873] ucan 3-1:0.0 can0: registered device [ 433.677615][ T5873] ucan 3-1:0.0 can0: firmware string: ¢â [ 433.889740][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 433.932949][ T912] usb 3-1: USB disconnect, device number 53 [ 434.536590][ T6041] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 434.633822][ T5832] usb 1-1: USB disconnect, device number 43 [ 434.748777][ T6041] usb 4-1: device descriptor read/64, error -71 [ 434.779409][ T9461] netlink: 96 bytes leftover after parsing attributes in process `syz.1.784'. [ 434.795935][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.784'. [ 434.977701][ T5923] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 434.996629][ T6041] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 435.006736][ T912] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 435.156548][ T6041] usb 4-1: device descriptor read/64, error -71 [ 435.188869][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 435.205626][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.229470][ T5923] usb 3-1: Product: syz [ 435.239928][ T5923] usb 3-1: Manufacturer: syz [ 435.252542][ T5923] usb 3-1: SerialNumber: syz [ 435.269390][ T912] usb 5-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 435.286901][ T6041] usb usb4-port1: attempt power cycle [ 435.296975][ T912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.319148][ T912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.333509][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.354452][ T912] usb 5-1: Product: syz [ 435.393137][ T912] usb 5-1: Manufacturer: syz [ 435.402055][ T912] usb 5-1: SerialNumber: syz [ 435.530569][ T9457] syzkaller0: entered promiscuous mode [ 435.536186][ T9457] syzkaller0: entered allmulticast mode [ 435.565584][ T5923] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input24 [ 435.592474][ T5185] bcm5974 3-1:1.0: could not read from device [ 435.606489][ T5923] usb 3-1: USB disconnect, device number 54 [ 435.635178][ T912] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 435.646558][ T6041] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 435.667539][ T5185] bcm5974 3-1:1.0: could not read from device [ 435.700128][ T6041] usb 4-1: device descriptor read/8, error -71 [ 435.733109][ T912] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 435.763784][ T912] usb 5-1: USB disconnect, device number 38 [ 435.795708][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.976620][ T6041] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 435.997205][ T6041] usb 4-1: device descriptor read/8, error -71 [ 436.088457][ T9464] fuse: Unknown parameter 'ft' [ 436.123598][ T6041] usb usb4-port1: unable to enumerate USB device [ 436.745370][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'. [ 437.006516][ T912] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 437.309030][ T912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.319491][ T912] usb 5-1: config 0 has no interfaces? [ 437.332039][ T912] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 437.411551][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.459997][ T912] usb 5-1: Product: syz [ 437.465784][ T912] usb 5-1: Manufacturer: syz [ 437.475053][ T912] usb 5-1: SerialNumber: syz [ 437.506411][ T912] usb 5-1: config 0 descriptor?? [ 437.699733][ T9491] netlink: 96 bytes leftover after parsing attributes in process `syz.3.792'. [ 438.561003][ T9499] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 439.035007][ T9505] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 439.119479][ T9505] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 440.399797][ T24] usb 5-1: USB disconnect, device number 39 [ 441.138950][ T912] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 441.236582][ T5832] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 441.316510][ T912] usb 4-1: Using ep0 maxpacket: 16 [ 441.323812][ T912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.335561][ T912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.468727][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 441.578559][ T5832] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 441.589807][ T9522] fuse: Unknown parameter 'ft' [ 441.676572][ T5832] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 441.686327][ T5832] usb 3-1: config 162 has no interface number 0 [ 441.700067][ T5832] usb 3-1: config 162 has no interface number 1 [ 441.716526][ T912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.718003][ T5832] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 442.016657][ T912] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 442.025976][ T912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.044111][ T912] usb 4-1: config 0 descriptor?? [ 442.049319][ T5832] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 442.090584][ T5832] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 442.131255][ T5832] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 442.166594][ T5832] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 442.214007][ T5832] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 442.285214][ T5832] usb 3-1: config 162 interface 84 has no altsetting 0 [ 442.297720][ T5832] usb 3-1: config 162 interface 2 has no altsetting 0 [ 442.304578][ T5832] usb 3-1: config 162 interface 3 has no altsetting 0 [ 442.430167][ T5832] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 442.446513][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.459456][ T9529] loop6: detected capacity change from 0 to 524287999 [ 442.471253][ T9529] netlink: 64 bytes leftover after parsing attributes in process `syz.3.798'. [ 442.519313][ T5832] usb 3-1: Product: syz [ 442.524399][ T5832] usb 3-1: Manufacturer: syz [ 442.532455][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 442.698406][ T5832] usb 3-1: SerialNumber: syz [ 442.787982][ T9537] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 443.031966][ T5832] usb 3-1: USB disconnect, device number 55 [ 443.226568][ T5873] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 443.416759][ T5873] usb 5-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 443.451107][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.501278][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.541769][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.568104][ T5873] usb 5-1: Product: syz [ 443.581813][ T5873] usb 5-1: Manufacturer: syz [ 443.595046][ T5873] usb 5-1: SerialNumber: syz [ 444.036841][ T5873] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 444.143387][ T5873] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 444.199465][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.247471][ T5873] usb 5-1: USB disconnect, device number 40 [ 444.276650][ T6041] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 444.427146][ T6041] usb 2-1: device descriptor read/64, error -71 [ 444.562883][ T912] usbhid 4-1:0.0: can't add hid device: -71 [ 444.590783][ T912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 444.630639][ T912] usb 4-1: USB disconnect, device number 58 [ 444.667238][ T6041] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 444.836696][ T6041] usb 2-1: device descriptor read/64, error -71 [ 444.841832][ T5873] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 444.864986][ T9561] netlink: 96 bytes leftover after parsing attributes in process `syz.4.805'. [ 444.916562][ T5920] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 444.954299][ T6041] usb usb2-port1: attempt power cycle [ 445.006555][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 445.015492][ T5873] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 445.028393][ T5873] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 445.154219][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.165523][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.176082][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 445.190199][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.201079][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.228262][ T5873] usb 3-1: config 162 has no interface number 0 [ 445.239008][ T5873] usb 3-1: config 162 has no interface number 1 [ 445.250600][ T5873] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.274264][ T5873] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 445.293690][ T5873] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 445.307487][ T5920] usb 1-1: config 0 descriptor?? [ 445.337747][ T6041] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 445.358168][ T6041] usb 2-1: device descriptor read/8, error -71 [ 445.418396][ T5873] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 445.431808][ T5873] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 445.446550][ T5873] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 445.461394][ T5873] usb 3-1: config 162 interface 84 has no altsetting 0 [ 445.468673][ T5873] usb 3-1: config 162 interface 2 has no altsetting 0 [ 445.490910][ T5873] usb 3-1: config 162 interface 3 has no altsetting 0 [ 445.543749][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.550458][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.616856][ T6041] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 445.636631][ T5873] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 445.649836][ T6041] usb 2-1: device descriptor read/8, error -71 [ 445.688070][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.705306][ T5873] usb 3-1: Product: syz [ 445.711340][ T5873] usb 3-1: Manufacturer: syz [ 445.716141][ T5873] usb 3-1: SerialNumber: syz [ 445.761593][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 445.771418][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 445.784564][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 445.795508][ T6041] usb usb2-port1: unable to enumerate USB device [ 445.804237][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 445.987067][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 446.009114][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 446.032101][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 446.045885][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 446.061790][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 446.116187][ T9573] trusted_key: encrypted_key: insufficient parameters specified [ 446.166931][ T5920] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 446.307134][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 446.344094][ T5920] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 446.513761][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 446.542020][ T5873] usb 3-1: USB disconnect, device number 56 [ 447.245737][ T9581] fuse: Unknown parameter 'groupÅrû‘øõë!_id' [ 447.710372][ T5832] usb 1-1: USB disconnect, device number 44 [ 448.728097][ T9601] netlink: 96 bytes leftover after parsing attributes in process `syz.0.813'. [ 448.946779][ T912] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 449.098714][ T912] usb 2-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 449.115339][ T912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.136575][ T5873] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 449.191524][ T912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.201148][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.209756][ T912] usb 2-1: Product: syz [ 449.214113][ T912] usb 2-1: Manufacturer: syz [ 449.219524][ T912] usb 2-1: SerialNumber: syz [ 449.296566][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 449.304617][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.316863][ T5832] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 449.336565][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.346565][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.360719][ T5873] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.370098][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.405655][ T5873] usb 4-1: config 0 descriptor?? [ 449.483414][ T912] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 449.498323][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 449.551903][ T5832] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 449.583668][ T5832] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 449.656587][ T5832] usb 3-1: config 162 has no interface number 0 [ 449.664117][ T5832] usb 3-1: config 162 has no interface number 1 [ 449.670689][ T5832] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 449.684211][ T5832] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 449.695290][ T5832] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 449.707208][ T5832] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 449.718760][ T5832] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 449.731660][ T5832] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 449.871435][ T9611] loop6: detected capacity change from 0 to 524287999 [ 449.890958][ T9611] netlink: 64 bytes leftover after parsing attributes in process `syz.3.817'. [ 449.902268][ T912] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 449.942250][ T912] usb 2-1: USB disconnect, device number 48 [ 449.948401][ T5832] usb 3-1: config 162 interface 84 has no altsetting 0 [ 449.955511][ T5832] usb 3-1: config 162 interface 2 has no altsetting 0 [ 449.962497][ T5832] usb 3-1: config 162 interface 3 has no altsetting 0 [ 449.972157][ T5965] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 449.990926][ T5832] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 450.001719][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.010993][ T5832] usb 3-1: Product: syz [ 450.040527][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.083120][ T9612] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 450.096661][ T5832] usb 3-1: Manufacturer: syz [ 450.120923][ T5832] usb 3-1: SerialNumber: syz [ 450.481384][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 450.546883][ T6210] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 450.736931][ T6210] usb 2-1: Using ep0 maxpacket: 16 [ 450.747422][ T6210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.771494][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 450.778873][ T6210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.795051][ T6210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.822236][ T5832] usb 3-1: USB disconnect, device number 57 [ 450.828539][ T6210] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.862055][ T6210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.926563][ T912] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 450.976019][ T6210] usb 2-1: config 0 descriptor?? [ 451.086727][ T912] usb 5-1: Using ep0 maxpacket: 32 [ 451.118615][ T912] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 451.174672][ T912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 451.217034][ T912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 451.261292][ T912] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 451.290674][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.406733][ T9619] netlink: 64 bytes leftover after parsing attributes in process `syz.1.819'. [ 451.439085][ T9619] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 451.610714][ T912] usb 5-1: Product: syz [ 451.616982][ T912] usb 5-1: Manufacturer: syz [ 451.651982][ T912] usb 5-1: SerialNumber: syz [ 451.686642][ T912] usb 5-1: config 0 descriptor?? [ 451.711846][ T912] rndis_host 5-1:0.0: skipping garbage [ 451.726120][ T912] rndis_host 5-1:0.0: invalid descriptor buffer length [ 451.747498][ T912] usb 5-1: bad CDC descriptors [ 451.767648][ T912] cdc_acm 5-1:0.0: skipping garbage [ 451.785846][ T912] cdc_acm 5-1:0.0: invalid descriptor buffer length [ 452.199744][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.238342][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.271146][ T6041] usb 5-1: USB disconnect, device number 41 [ 452.296808][ T5832] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 452.384065][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 452.404597][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 452.437239][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 452.446786][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 452.455183][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.476174][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.545495][ T5873] usb 4-1: USB disconnect, device number 59 [ 452.572066][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.601460][ T5832] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.613451][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.665394][ T5832] usb 3-1: config 0 descriptor?? [ 453.176687][ T5873] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 453.231089][ T9633] netlink: 64 bytes leftover after parsing attributes in process `syz.2.821'. [ 453.259843][ T9632] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 453.359862][ T5873] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 453.368295][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.408084][ T5873] usb 1-1: config 0 has no interface number 0 [ 453.414601][ T5873] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 453.440855][ T5873] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 453.440896][ T5873] usb 1-1: config 0 interface 255 has no altsetting 0 [ 453.440962][ T5873] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 453.440990][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.464674][ T5873] usb 1-1: config 0 descriptor?? [ 453.785524][ T5873] usb 1-1: string descriptor 0 read error: -32 [ 453.854689][ T9641] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 453.994559][ T9644] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 453.995719][ T9644] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 454.090305][ T9645] netlink: 60 bytes leftover after parsing attributes in process `syz.3.827'. [ 455.130221][ T6210] usbhid 2-1:0.0: can't add hid device: -71 [ 455.137692][ T6210] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 455.228239][ T6210] usb 2-1: USB disconnect, device number 49 [ 455.259106][ T5965] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 455.708602][ T9655] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 456.526917][ T9653] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 456.777833][ T9653] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 457.415142][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 457.446210][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 457.507464][ T5832] usb 3-1: USB disconnect, device number 58 [ 457.876617][ T5832] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 458.060850][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 458.081625][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.139963][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.221813][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 458.293575][ T5832] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 458.324086][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.359248][ T5832] usb 3-1: config 0 descriptor?? [ 458.376545][ T6041] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 458.556569][ T6041] usb 4-1: Using ep0 maxpacket: 8 [ 458.563899][ T6041] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 458.595932][ T6041] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 458.645257][ T6041] usb 4-1: config 162 has no interface number 0 [ 458.663518][ T6041] usb 4-1: config 162 has no interface number 1 [ 458.829351][ T9680] loop6: detected capacity change from 0 to 524287999 [ 458.849507][ T9680] netlink: 64 bytes leftover after parsing attributes in process `syz.2.833'. [ 458.874448][ T6041] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 458.888345][ T5923] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 458.909568][ T9681] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 458.974171][ T6041] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 459.005342][ T6041] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 459.032933][ T6041] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 459.066566][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 459.077620][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.087515][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 459.116249][ T5923] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.169995][ T6041] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 459.296600][ T6041] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 459.311524][ T5923] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 459.323337][ T6041] usb 4-1: config 162 interface 84 has no altsetting 0 [ 459.330632][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.346605][ T6041] usb 4-1: config 162 interface 2 has no altsetting 0 [ 459.353677][ T5923] usb 5-1: Product: syz [ 459.360051][ T6041] usb 4-1: config 162 interface 3 has no altsetting 0 [ 459.391827][ T5923] usb 5-1: Manufacturer: syz [ 459.397427][ T5923] usb 5-1: SerialNumber: syz [ 459.405284][ T6041] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 459.466553][ T6041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.474638][ T6041] usb 4-1: Product: syz [ 459.482206][ T6041] usb 4-1: Manufacturer: syz [ 459.486928][ T6041] usb 4-1: SerialNumber: syz [ 459.538873][ T5923] usb 5-1: bad CDC descriptors [ 459.552583][ T5923] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 459.563866][ T5923] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 459.789459][ T9683] FAULT_INJECTION: forcing a failure. [ 459.789459][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 459.987523][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.1.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.987560][ T9683] Tainted: [L]=SOFTLOCKUP [ 459.987568][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.987581][ T9683] Call Trace: [ 459.987590][ T9683] [ 459.987599][ T9683] dump_stack_lvl+0xe8/0x150 [ 459.987633][ T9683] should_fail_ex+0x414/0x560 [ 459.987672][ T9683] should_failslab+0xa8/0x100 [ 459.987702][ T9683] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 459.987737][ T9683] ? __alloc_skb+0x198/0x3a0 [ 459.987760][ T9683] ? __alloc_skb+0x1dc/0x3a0 [ 459.987780][ T9683] ? __local_bh_enable_ip+0xd0/0x130 [ 459.987804][ T9683] ? __alloc_skb+0x198/0x3a0 [ 459.987828][ T9683] __alloc_skb+0x1dc/0x3a0 [ 459.987855][ T9683] netlink_ack+0x146/0xa50 [ 459.987900][ T9683] netlink_rcv_skb+0x28c/0x470 [ 459.987929][ T9683] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 459.987965][ T9683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.988005][ T9683] ? bpf_lsm_capable+0x9/0x20 [ 459.988031][ T9683] ? security_capable+0x7e/0x2e0 [ 459.988063][ T9683] nfnetlink_rcv+0x282/0x2590 [ 459.988093][ T9683] ? is_bpf_text_address+0x26/0x2b0 [ 459.988133][ T9683] ? __kernel_text_address+0xd/0x40 [ 459.988164][ T9683] ? unwind_get_return_address+0x4d/0x90 [ 459.988190][ T9683] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.988225][ T9683] ? arch_stack_walk+0xfc/0x150 [ 459.988259][ T9683] ? __lock_acquire+0x6b6/0x2cf0 [ 459.988286][ T9683] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 459.988311][ T9683] ? stack_depot_save_flags+0x33/0x810 [ 459.988348][ T9683] ? __lock_acquire+0x6b6/0x2cf0 [ 459.988378][ T9683] ? __lock_acquire+0x6b6/0x2cf0 [ 459.988411][ T9683] ? __netlink_lookup+0xbd/0x8a0 [ 459.988452][ T9683] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.988480][ T9683] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.988515][ T9683] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.988552][ T9683] netlink_unicast+0x82f/0x9e0 [ 459.988585][ T9683] ? __pfx_netlink_unicast+0x10/0x10 [ 459.988608][ T9683] ? __alloc_skb+0x198/0x3a0 [ 459.988631][ T9683] ? netlink_sendmsg+0x642/0xb30 [ 459.988657][ T9683] ? skb_put+0x11b/0x210 [ 459.988685][ T9683] netlink_sendmsg+0x805/0xb30 [ 459.988723][ T9683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.988755][ T9683] ? __import_iovec+0x5d4/0x7f0 [ 459.988779][ T9683] ? aa_sock_msg_perm+0xf1/0x1b0 [ 459.988809][ T9683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.988830][ T9683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.988860][ T9683] __sock_sendmsg+0x21c/0x270 [ 459.988894][ T9683] ____sys_sendmsg+0x505/0x820 [ 459.988927][ T9683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.988967][ T9683] ? kstrtouint+0x6e/0xe0 [ 459.989007][ T9683] ___sys_sendmsg+0x21f/0x2a0 [ 459.989036][ T9683] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.989061][ T9683] ? get_pid_task+0x20/0x1f0 [ 459.989089][ T9683] ? get_pid_task+0x20/0x1f0 [ 459.989114][ T9683] ? get_pid_task+0x20/0x1f0 [ 459.989172][ T9683] ? __fget_files+0x2a/0x420 [ 459.989199][ T9683] ? __fget_files+0x3a0/0x420 [ 459.989237][ T9683] __sys_sendmsg+0x164/0x220 [ 459.989266][ T9683] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.989301][ T9683] ? __pfx_ksys_write+0x10/0x10 [ 459.989334][ T9683] __do_fast_syscall_32+0x1dc/0x560 [ 459.989359][ T9683] ? lockdep_hardirqs_on+0x7b/0x110 [ 459.989380][ T9683] ? do_fast_syscall_32+0x34/0x80 [ 459.989403][ T9683] ? irqentry_exit+0x10f/0x660 [ 459.989429][ T9683] do_fast_syscall_32+0x34/0x80 [ 459.989453][ T9683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.989480][ T9683] RIP: 0023:0xf708d539 [ 459.989498][ T9683] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 459.989518][ T9683] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 459.989541][ T9683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 459.989557][ T9683] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.989569][ T9683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.989581][ T9683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 459.989594][ T9683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.989626][ T9683] [ 460.936626][ T5923] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 461.056853][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 461.160049][ T5923] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 461.196939][ T5923] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 461.208502][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 461.215295][ T5923] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 461.230901][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.259161][ T5923] usb 2-1: config 0 descriptor?? [ 461.268155][ T9685] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 461.377909][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 461.413985][ T6041] usb 4-1: USB disconnect, device number 60 [ 461.695997][ T5923] hid-retrode 0003:0403:97C1.0009: unbalanced collection at end of report description [ 461.734562][ T5923] hid-retrode 0003:0403:97C1.0009: probe with driver hid-retrode failed with error -22 [ 461.875663][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 461.904280][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 461.921815][ T5923] usb 2-1: USB disconnect, device number 50 [ 462.001242][ T5832] usb 3-1: USB disconnect, device number 59 [ 462.009204][ T30] audit: type=1326 audit(1767401651.055:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 462.211671][ T6041] usb 5-1: USB disconnect, device number 42 [ 462.886178][ T6041] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 463.004396][ T9704] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 463.089423][ T6041] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.100565][ T6041] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 463.142088][ T6041] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 463.158615][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.202082][ T9696] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 463.215714][ T6041] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.314281][ T9707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.841'. [ 463.364967][ T9706] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 463.577606][ T9706] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 464.056602][ T9432] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 464.251505][ T9432] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 464.271872][ T9432] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 464.293686][ T9432] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 464.374444][ T9432] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 464.388213][ T9432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.449238][ T9432] usb 3-1: Product: syz [ 464.461953][ T9432] usb 3-1: Manufacturer: syz [ 464.472069][ T9432] usb 3-1: SerialNumber: syz [ 464.557489][ T9432] usb 3-1: config 0 descriptor?? [ 464.617821][ T9711] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 464.645150][ T9711] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 464.697236][ T9432] usb 3-1: ucan: probing device on interface #0 [ 465.333840][ T9432] ucan 3-1:0.0 can0: registered device [ 465.527119][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 465.544737][ T24] usb 5-1: USB disconnect, device number 43 [ 465.552250][ T9695] delete_channel: no stack [ 465.577805][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.843'. [ 465.625901][ T9432] ucan 3-1:0.0 can0: firmware string: unknown [ 465.682001][ T9432] usb 3-1: USB disconnect, device number 60 [ 466.126609][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 466.292936][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 466.306619][ T9432] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 466.323553][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.359089][ T9725] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 466.369096][ T24] usb 5-1: Product: syz [ 466.393641][ T24] usb 5-1: Manufacturer: syz [ 466.404269][ T24] usb 5-1: SerialNumber: syz [ 466.468475][ T9432] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.571965][ T9627] Set syz1 is full, maxelem 65536 reached [ 466.578165][ T9432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 466.594503][ T9432] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 466.621185][ T9728] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 466.625056][ T9432] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.655102][ T9728] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 466.689564][ T9432] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 466.706775][ T6210] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 466.724682][ T9432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.746539][ T9432] usb 4-1: Product: syz [ 466.756195][ T9432] usb 4-1: Manufacturer: syz [ 466.770363][ T9432] usb 4-1: SerialNumber: syz [ 466.794551][ T9432] usb 4-1: config 0 descriptor?? [ 466.813045][ T9432] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 466.868495][ T6210] usb 3-1: Using ep0 maxpacket: 16 [ 466.876368][ T6210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.888312][ T6210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.904986][ T6210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 466.921857][ T6210] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 466.932030][ T5873] usb 1-1: USB disconnect, device number 45 [ 466.971060][ T6210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.995609][ T6210] usb 3-1: config 0 descriptor?? [ 467.025740][ T9715] syzkaller0: entered promiscuous mode [ 467.031552][ T9715] syzkaller0: entered allmulticast mode [ 467.053047][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input25 [ 467.082047][ T5185] bcm5974 5-1:1.0: could not read from device [ 467.137437][ T5185] bcm5974 5-1:1.0: could not read from device [ 467.152586][ T24] usb 5-1: USB disconnect, device number 44 [ 467.455819][ T9738] loop6: detected capacity change from 0 to 524287999 [ 467.509874][ T9738] netlink: 64 bytes leftover after parsing attributes in process `syz.2.847'. [ 467.625498][ T9740] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 467.696127][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 467.712692][ T9] usb 4-1: USB disconnect, device number 61 [ 468.718403][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 468.784026][ T9732] delete_channel: no stack [ 469.653268][ T5873] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 469.863707][ T5873] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.876500][ T5873] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 469.887920][ T5873] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.935297][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.999491][ T9753] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.080350][ T5873] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.604375][ T6210] usbhid 3-1:0.0: can't add hid device: -71 [ 470.620884][ T6210] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 470.667211][ T6210] usb 3-1: USB disconnect, device number 61 [ 472.118885][ T9772] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 472.125726][ T9772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 472.206838][ T9772] vhci_hcd vhci_hcd.0: Device attached [ 472.525847][ T9786] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 472.532632][ T9786] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 472.591693][ T57] usb 5-1: USB disconnect, device number 45 [ 472.605915][ T9752] delete_channel: no stack [ 472.673112][ T9786] vhci_hcd vhci_hcd.0: Device attached [ 472.780334][ T9772] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(20) [ 472.787003][ T9772] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 472.811110][ T9] usb 38-1: SetAddress Request (2) to port 0 [ 472.820818][ T9] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 472.844374][ T9772] vhci_hcd vhci_hcd.0: Device attached [ 472.918462][ T9796] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 472.925145][ T9796] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 472.994613][ T9796] vhci_hcd vhci_hcd.0: Device attached [ 473.112169][ T9772] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(23) [ 473.118845][ T9772] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 473.216818][ T9772] vhci_hcd vhci_hcd.0: Device attached [ 474.465452][ T9800] vhci_hcd: connection closed [ 474.472785][ T9797] vhci_hcd: connection closed [ 474.478286][ T9790] vhci_hcd: connection closed [ 474.483367][ T9787] vhci_hcd: connection closed [ 474.508111][ T36] vhci_hcd vhci_hcd.2: stop threads [ 474.536934][ T9776] vhci_hcd: connection reset by peer [ 474.558293][ T6210] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 474.602375][ T36] vhci_hcd vhci_hcd.2: release socket [ 474.619468][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 474.666181][ T36] vhci_hcd vhci_hcd.2: stop threads [ 474.677073][ T36] vhci_hcd vhci_hcd.2: release socket [ 474.682626][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 474.689701][ T36] vhci_hcd vhci_hcd.2: stop threads [ 474.700994][ T36] vhci_hcd vhci_hcd.2: release socket [ 474.711367][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 474.721331][ T36] vhci_hcd vhci_hcd.2: stop threads [ 474.728016][ T6210] usb 5-1: Using ep0 maxpacket: 16 [ 474.736638][ T36] vhci_hcd vhci_hcd.2: release socket [ 474.743629][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 474.743946][ T6210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.816769][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 474.882610][ T6210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.888917][ T36] vhci_hcd vhci_hcd.2: stop threads [ 474.915690][ T36] vhci_hcd vhci_hcd.2: release socket [ 474.917572][ T6210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 474.994741][ T6210] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 474.998955][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 475.023663][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.047364][ T6210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.057363][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 475.093916][ T6210] usb 5-1: config 0 descriptor?? [ 475.101625][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 475.128369][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.174065][ T9820] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 475.233336][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.486322][ T9825] loop6: detected capacity change from 0 to 524287999 [ 475.609385][ T9824] netlink: 64 bytes leftover after parsing attributes in process `syz.4.865'. [ 475.632625][ T9824] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 475.739925][ T5965] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 476.205725][ T9836] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 476.423147][ T9836] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 476.444810][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.464290][ T9836] bond0: entered promiscuous mode [ 476.469716][ T9836] bond_slave_0: entered promiscuous mode [ 476.488051][ T9837] netlink: 2240 bytes leftover after parsing attributes in process `syz.2.868'. [ 476.509567][ T9836] bond_slave_1: entered promiscuous mode [ 476.523159][ T9836] team0: Port device bond0 added [ 477.376773][ T5923] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 477.477232][ T9837] team0 (unregistering): left promiscuous mode [ 477.483559][ T9837] team_slave_0: left promiscuous mode [ 477.491068][ T9837] team_slave_1: left promiscuous mode [ 477.497125][ T9837] bond0: left promiscuous mode [ 477.502085][ T9837] bond_slave_0: left promiscuous mode [ 477.513064][ T9837] bond_slave_1: left promiscuous mode [ 477.558942][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 477.570224][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 477.596750][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 477.635912][ T5923] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 477.687524][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.701378][ T9837] team0 (unregistering): Port device team_slave_0 removed [ 477.723960][ T5923] usb 1-1: Product: syz [ 477.734284][ T5923] usb 1-1: Manufacturer: syz [ 477.751620][ T9837] team0 (unregistering): Port device team_slave_1 removed [ 477.788731][ T9837] team0 (unregistering): Port device bond0 removed [ 477.869774][ T5923] usb 1-1: SerialNumber: syz [ 477.985655][ T9] usb 38-1: device descriptor read/8, error -110 [ 478.027884][ T6210] usbhid 5-1:0.0: can't add hid device: -71 [ 478.059292][ T6210] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 478.129248][ T5923] usb 1-1: config 0 descriptor?? [ 478.136115][ T6210] usb 5-1: USB disconnect, device number 46 [ 478.188754][ T5873] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 478.212634][ T9841] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 478.220990][ T9841] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 478.268935][ T5923] usb 1-1: ucan: probing device on interface #0 [ 478.453630][ T5832] usb 2-1: USB disconnect, device number 51 [ 478.477830][ T9818] delete_channel: no stack [ 479.101495][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 479.118248][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 479.150155][ T5923] ucan 1-1:0.0 can0: registered device [ 479.208439][ T5923] ucan 1-1:0.0 can0: firmware string: unknown [ 479.231845][ T5923] usb 1-1: USB disconnect, device number 46 [ 479.320781][ T9] usb usb38-port1: attempt power cycle [ 480.184764][ T9] usb usb38-port1: unable to enumerate USB device [ 480.205165][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 480.620914][ T9871] random: crng reseeded on system resumption [ 480.736556][ T5920] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 481.210556][ T5920] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.221748][ T5920] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.231935][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.319180][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.457931][ T9869] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 481.521953][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.194964][ T9879] netlink: 96 bytes leftover after parsing attributes in process `syz.1.879'. [ 482.936554][ T6210] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 483.172350][ T24] usb 3-1: USB disconnect, device number 62 [ 483.180284][ T9868] delete_channel: no stack [ 483.217515][ T6210] usb 4-1: Using ep0 maxpacket: 8 [ 483.232764][ T6210] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 483.275962][ T6210] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 483.294744][ T6210] usb 4-1: config 162 has no interface number 0 [ 483.310744][ T6210] usb 4-1: config 162 has no interface number 1 [ 483.326365][ T6210] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.341670][ T6210] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 483.363766][ T6210] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 483.378950][ T6210] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 483.396735][ T6210] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 483.409502][ T6210] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 483.432413][ T6210] usb 4-1: config 162 interface 84 has no altsetting 0 [ 483.440915][ T6210] usb 4-1: config 162 interface 2 has no altsetting 0 [ 483.465972][ T6210] usb 4-1: config 162 interface 3 has no altsetting 0 [ 483.490694][ T6210] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 483.500351][ T6210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.511636][ T6210] usb 4-1: Product: syz [ 483.515953][ T6210] usb 4-1: Manufacturer: syz [ 483.528932][ T6210] usb 4-1: SerialNumber: syz [ 483.597878][ T5873] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 483.636658][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 483.745972][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 483.757623][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 483.770006][ T5873] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 483.781977][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.791451][ T5873] usb 5-1: Product: syz [ 483.803396][ T6210] usb 4-1: USB disconnect, device number 62 [ 483.809546][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 483.820212][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.836113][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.865898][ T5873] usb 5-1: Manufacturer: syz [ 483.873188][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.889982][ T5873] usb 5-1: SerialNumber: syz [ 483.904259][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 483.918198][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.984080][ T5873] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 483.991735][ T24] usb 3-1: config 0 descriptor?? [ 484.136744][ T5873] gspca_m5602: Failed to find a sensor [ 484.142350][ T5873] ALi m5602 5-1:8.0: ALi m5602 webcam failed [ 484.159204][ T5873] usb 5-1: USB disconnect, device number 47 [ 484.435670][ T9903] loop6: detected capacity change from 0 to 524287999 [ 484.456342][ T9903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.882'. [ 484.540538][ T9904] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 484.568917][ T9300] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 485.253679][ T9918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.889'. [ 485.526629][ T5873] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 485.848187][ T5873] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.870669][ T5873] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 485.882311][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.898247][ T5873] usb 5-1: Product: syz [ 485.910123][ T5873] usb 5-1: Manufacturer: syz [ 486.051621][ T5873] usb 5-1: SerialNumber: syz [ 486.134018][ T5873] usb 5-1: config 0 descriptor?? [ 486.267368][ T30] audit: type=1800 audit(1767401675.265:62): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.893" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 486.429507][ T30] audit: type=1326 audit(1767401675.385:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.509872][ T30] audit: type=1326 audit(1767401675.385:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.578395][ T30] audit: type=1326 audit(1767401675.385:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.630285][ T30] audit: type=1326 audit(1767401675.385:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.652249][ T30] audit: type=1326 audit(1767401675.385:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.674343][ T30] audit: type=1326 audit(1767401675.385:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.714255][ T30] audit: type=1326 audit(1767401675.385:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.766117][ T30] audit: type=1326 audit(1767401675.385:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 486.874743][ T30] audit: type=1326 audit(1767401675.385:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 487.496149][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 487.532249][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 487.546687][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 487.591075][ T24] usb 3-1: USB disconnect, device number 63 [ 487.892385][ T9938] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 488.241745][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 488.438423][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 488.448502][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 488.462716][ T9950] openvswitch: netlink: Message has 4 unknown bytes. [ 488.507764][ T9940] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 488.519443][ T9940] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 488.520373][ T9938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.895'. [ 488.576892][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 488.600168][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 488.670096][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.719647][ T912] usb 5-1: USB disconnect, device number 48 [ 488.756571][ T24] usb 4-1: Product: syz [ 488.770531][ T24] usb 4-1: Manufacturer: syz [ 488.783972][ T24] usb 4-1: SerialNumber: syz [ 488.871374][ T9949] 8021q: adding VLAN 0 to HW filter on device bond14 [ 489.240504][ T24] usb 4-1: config 0 descriptor?? [ 489.246720][ T9944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.254272][ T9944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.265401][ T24] usb 4-1: ucan: probing device on interface #0 [ 489.716776][ T6210] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 489.866522][ T6210] usb 3-1: Using ep0 maxpacket: 8 [ 489.866861][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 489.887775][ T24] ucan 4-1:0.0 can0: registered device [ 489.894325][ T6210] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 489.912186][ T9964] binder: 9963:9964 ioctl 400c620e 80000180 returned -22 [ 489.927427][ T6210] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 489.943960][ T6210] usb 3-1: config 162 has no interface number 0 [ 489.955660][ T6210] usb 3-1: config 162 has no interface number 1 [ 489.966702][ T6210] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.992253][ T6210] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 490.015026][ T6210] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 490.038694][ T6210] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 490.060107][ T6210] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 490.063603][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 490.080045][ T6210] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 490.093331][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.102680][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 490.105031][ T9] usb 5-1: Product: syz [ 490.115975][ T9] usb 5-1: Manufacturer: syz [ 490.122958][ T9944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 490.136964][ T6210] usb 3-1: config 162 interface 84 has no altsetting 0 [ 490.145466][ T9] usb 5-1: SerialNumber: syz [ 490.148847][ T6210] usb 3-1: config 162 interface 2 has no altsetting 0 [ 490.157168][ T6210] usb 3-1: config 162 interface 3 has no altsetting 0 [ 490.172893][ T6210] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 490.182546][ T24] ucan 4-1:0.0 can0: firmware string: unknown [ 490.189187][ T6210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.199748][ T6210] usb 3-1: Product: syz [ 490.205390][ T6210] usb 3-1: Manufacturer: syz [ 490.211108][ T9] usb 5-1: config 0 descriptor?? [ 490.220165][ T24] usb 4-1: USB disconnect, device number 63 [ 490.233957][ T6210] usb 3-1: SerialNumber: syz [ 490.438951][ T9] hso 5-1:0.0: Failed to find BULK IN ep [ 490.453816][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 490.563965][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 490.833395][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 490.898144][ T6210] usb 3-1: USB disconnect, device number 64 [ 491.024980][ T9972] netlink: 96 bytes leftover after parsing attributes in process `syz.0.903'. [ 492.206658][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 492.356899][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 492.366908][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.378925][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.389544][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 492.580265][ T5920] usb 5-1: USB disconnect, device number 49 [ 492.653154][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.690777][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.913510][ T9] usb 3-1: config 0 descriptor?? [ 493.365997][ T9997] loop6: detected capacity change from 0 to 524287999 [ 493.377781][ T9997] netlink: 64 bytes leftover after parsing attributes in process `syz.2.906'. [ 493.435809][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 493.525728][ T9999] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 493.609347][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 493.609369][ T30] audit: type=1326 audit(1767401682.635:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 493.796637][ T5920] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 494.011419][ T5920] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.023203][ T5920] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 494.063804][ T5920] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.106150][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.251050][ T9998] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 494.312218][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.370585][T10006] fuse: Unknown parameter 'ft' [ 495.896603][ T5920] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 495.955518][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 495.985333][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 496.017452][ T9] usb 3-1: USB disconnect, device number 65 [ 496.046617][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 496.071138][ T5920] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 496.118964][ T5920] usb 4-1: config 0 has no interface number 0 [ 496.125110][ T5920] usb 4-1: config 0 interface 12 has no altsetting 0 [ 496.198379][ T5920] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 496.216813][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.226386][ T5920] usb 4-1: Product: syz [ 496.231208][ T5920] usb 4-1: Manufacturer: syz [ 496.249969][ T5920] usb 4-1: SerialNumber: syz [ 496.277165][ T5920] usb 4-1: config 0 descriptor?? [ 496.426290][ T9] usb 2-1: USB disconnect, device number 52 [ 496.433606][ T9993] delete_channel: no stack [ 496.700266][T10029] FAULT_INJECTION: forcing a failure. [ 496.700266][T10029] name failslab, interval 1, probability 0, space 0, times 0 [ 496.751563][T10032] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 496.763607][ T5920] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 496.776586][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 496.776660][ T5920] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 496.810592][ T5920] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 496.812091][T10029] CPU: 1 UID: 0 PID: 10029 Comm: syz.2.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.812219][T10029] Tainted: [L]=SOFTLOCKUP [ 496.812256][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.812297][T10029] Call Trace: [ 496.812319][T10029] [ 496.812348][T10029] dump_stack_lvl+0xe8/0x150 [ 496.812436][T10029] should_fail_ex+0x414/0x560 [ 496.812535][T10029] should_failslab+0xa8/0x100 [ 496.812612][T10029] kmem_cache_alloc_noprof+0x88/0x710 [ 496.812698][T10029] ? apparmor_capable+0x137/0x1a0 [ 496.812790][T10029] ? skb_clone+0x212/0x3a0 [ 496.812874][T10029] skb_clone+0x212/0x3a0 [ 496.812938][T10029] ? nfnetlink_rcv+0x4ba/0x2590 [ 496.813015][T10029] nfnetlink_rcv+0x4ec/0x2590 [ 496.813106][T10029] ? lockdep_hardirqs_on+0x7b/0x110 [ 496.813169][T10029] ? __dev_queue_xmit+0x289/0x31c0 [ 496.813243][T10029] ? __local_bh_enable_ip+0xd0/0x130 [ 496.813297][T10029] ? __dev_queue_xmit+0x289/0x31c0 [ 496.813375][T10029] ? __dev_queue_xmit+0x19cb/0x31c0 [ 496.813448][T10029] ? ___sys_sendmsg+0x21f/0x2a0 [ 496.813553][T10029] ? __dev_queue_xmit+0x289/0x31c0 [ 496.813661][T10029] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 496.813778][T10029] ? ref_tracker_free+0x63a/0x7d0 [ 496.813833][T10029] ? __asan_memcpy+0x40/0x70 [ 496.813885][T10029] ? __pfx_ref_tracker_free+0x10/0x10 [ 496.813939][T10029] ? __skb_clone+0x63/0x7a0 [ 496.814009][T10029] ? __skb_clone+0x483/0x7a0 [ 496.814097][T10029] ? skb_clone+0x246/0x3a0 [ 496.814182][T10029] ? __netlink_deliver_tap+0x807/0x850 [ 496.814269][T10029] ? netlink_deliver_tap+0x2e/0x1b0 [ 496.814380][T10029] netlink_unicast+0x82f/0x9e0 [ 496.814473][T10029] ? __pfx_netlink_unicast+0x10/0x10 [ 496.814528][T10029] ? __alloc_skb+0x198/0x3a0 [ 496.814593][T10029] ? netlink_sendmsg+0x642/0xb30 [ 496.814659][T10029] ? skb_put+0x11b/0x210 [ 496.814726][T10029] netlink_sendmsg+0x805/0xb30 [ 496.814822][T10029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.814915][T10029] ? __import_iovec+0x5d4/0x7f0 [ 496.815002][T10029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 496.815092][T10029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.815147][T10029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.815239][T10029] __sock_sendmsg+0x21c/0x270 [ 496.815326][T10029] ____sys_sendmsg+0x505/0x820 [ 496.815411][T10029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.815498][T10029] ? kstrtouint+0x6e/0xe0 [ 496.815603][T10029] ___sys_sendmsg+0x21f/0x2a0 [ 496.815670][T10029] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.815734][T10029] ? get_pid_task+0x20/0x1f0 [ 496.815808][T10029] ? get_pid_task+0x20/0x1f0 [ 496.815873][T10029] ? get_pid_task+0x20/0x1f0 [ 496.816010][T10029] ? __fget_files+0x2a/0x420 [ 496.816078][T10029] ? __fget_files+0x3a0/0x420 [ 496.816175][T10029] __sys_sendmsg+0x164/0x220 [ 496.816260][T10029] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.816375][T10029] ? __pfx_ksys_write+0x10/0x10 [ 496.816476][T10029] __do_fast_syscall_32+0x1dc/0x560 [ 496.816541][T10029] ? lockdep_hardirqs_on+0x7b/0x110 [ 496.816593][T10029] ? do_fast_syscall_32+0x34/0x80 [ 496.816651][T10029] ? irqentry_exit+0x10f/0x660 [ 496.816723][T10029] do_fast_syscall_32+0x34/0x80 [ 496.816787][T10029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.816853][T10029] RIP: 0023:0xf70dd539 [ 496.816899][T10029] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 496.816952][T10029] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 496.817010][T10029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 496.817046][T10029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.817089][T10029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.817122][T10029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 496.817158][T10029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.817244][T10029] [ 497.450109][T10032] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 497.461930][ T5920] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 497.493950][ T5920] usb 4-1: USB disconnect, device number 64 [ 497.547013][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 497.559981][T10032] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 497.597546][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.636567][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.686055][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 497.698170][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.715945][ T24] usb 1-1: Product: syz [ 497.722610][ T24] usb 1-1: Manufacturer: syz [ 497.727462][ T24] usb 1-1: SerialNumber: syz [ 497.754112][ T24] usb 1-1: bad CDC descriptors [ 497.768025][ T24] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 497.783532][ T24] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 498.201317][ T5920] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 498.515459][ T30] audit: type=1326 audit(1767401687.495:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.568469][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.584079][ T5920] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 498.625979][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.665477][ T30] audit: type=1326 audit(1767401687.505:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.665482][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.665531][ T30] audit: type=1326 audit(1767401687.505:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.719972][ T30] audit: type=1326 audit(1767401687.505:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.743256][ T30] audit: type=1326 audit(1767401687.505:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.770648][ T30] audit: type=1326 audit(1767401687.505:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.795914][T10045] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 498.805351][ T30] audit: type=1326 audit(1767401687.505:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.836954][ T30] audit: type=1326 audit(1767401687.505:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.867054][ T30] audit: type=1326 audit(1767401687.505:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 498.870069][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.115226][ T30] audit: type=1326 audit(1767401687.505:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 499.195579][ T30] audit: type=1326 audit(1767401687.505:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 499.954702][ T5920] usb 1-1: USB disconnect, device number 47 [ 500.256664][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 500.436627][ T5920] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 500.476975][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 500.485417][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.533671][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.581193][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.587675][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 500.615335][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 500.656782][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 500.666169][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.675541][ T5920] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 500.689439][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.709184][ T9] usb 3-1: config 0 descriptor?? [ 500.773126][ T5920] usb 5-1: Product: syz [ 500.776737][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 500.824023][ T24] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 500.834871][ T24] usb 2-1: config 0 has no interface number 0 [ 500.842673][ T5920] usb 5-1: Manufacturer: syz [ 500.850847][ T5920] usb 5-1: SerialNumber: syz [ 500.893613][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 500.906628][ T24] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 500.930358][ T24] usb 2-1: Product: syz [ 500.939133][ T24] usb 2-1: Manufacturer: syz [ 500.966903][ T24] usb 2-1: config 0 descriptor?? [ 501.005266][ T6210] usb 4-1: USB disconnect, device number 65 [ 501.137141][T10042] delete_channel: no stack [ 501.147807][ T5920] usb 5-1: config 0 descriptor?? [ 501.192076][ T5920] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 501.240042][ T5920] usb 5-1: Detected FT232H [ 501.317208][T10080] loop6: detected capacity change from 0 to 524287999 [ 501.337328][T10080] netlink: 64 bytes leftover after parsing attributes in process `syz.2.926'. [ 501.371746][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 501.405229][T10080] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 501.415500][ T5920] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 501.526704][T10069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.927'. [ 501.817035][ T6041] usb 2-1: USB disconnect, device number 53 [ 501.990049][ T5920] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 502.464469][ T24] usb 5-1: USB disconnect, device number 50 [ 502.532492][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 502.545526][ T24] ftdi_sio 5-1:0.0: device disconnected [ 503.764008][ T5920] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 503.800198][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 503.945065][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 503.956644][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 503.984522][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.006768][ T9] usb 3-1: USB disconnect, device number 66 [ 504.042261][ T5920] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.096553][ T5920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 504.126176][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.152605][ T5920] usb 1-1: Product: syz [ 504.157933][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 504.165705][ T5920] usb 1-1: Manufacturer: syz [ 504.206625][ T5920] usb 1-1: SerialNumber: syz [ 504.226356][ T5920] usb 1-1: bad CDC descriptors [ 504.240089][ T5920] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 504.289288][ T5920] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 504.363928][T10114] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 504.406640][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 504.467708][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.478852][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.510840][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 504.522263][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.572126][T10118] FAULT_INJECTION: forcing a failure. [ 504.572126][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 504.613577][T10116] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 504.625534][T10116] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 504.657522][T10118] CPU: 1 UID: 0 PID: 10118 Comm: syz.4.942 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.657559][T10118] Tainted: [L]=SOFTLOCKUP [ 504.657567][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.657580][T10118] Call Trace: [ 504.657588][T10118] [ 504.657598][T10118] dump_stack_lvl+0xe8/0x150 [ 504.657632][T10118] should_fail_ex+0x414/0x560 [ 504.657673][T10118] should_failslab+0xa8/0x100 [ 504.657702][T10118] __kmalloc_noprof+0xdf/0x800 [ 504.657724][T10118] ? tomoyo_encode+0x28b/0x550 [ 504.657759][T10118] tomoyo_encode+0x28b/0x550 [ 504.657795][T10118] tomoyo_realpath_from_path+0x58d/0x5d0 [ 504.657841][T10118] tomoyo_check_open_permission+0x1c1/0x3b0 [ 504.657867][T10118] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 504.657891][T10118] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 504.657964][T10118] security_file_open+0xb1/0x270 [ 504.657988][T10118] do_dentry_open+0x34e/0x1420 [ 504.658032][T10118] vfs_open+0x3b/0x340 [ 504.658057][T10118] ? path_openat+0x33f3/0x3dd0 [ 504.658080][T10118] path_openat+0x340e/0x3dd0 [ 504.658113][T10118] ? __pfx_stack_trace_save+0x10/0x10 [ 504.658162][T10118] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 504.658193][T10118] ? getname_flags+0xb8/0x540 [ 504.658220][T10118] ? __pfx_path_openat+0x10/0x10 [ 504.658242][T10118] ? __lock_acquire+0x6b6/0x2cf0 [ 504.658276][T10118] do_filp_open+0x1fa/0x410 [ 504.658310][T10118] ? __pfx_do_filp_open+0x10/0x10 [ 504.658353][T10118] ? _raw_spin_unlock+0x28/0x50 [ 504.658381][T10118] ? alloc_fd+0x64c/0x6c0 [ 504.658411][T10118] do_sys_openat2+0x121/0x200 [ 504.658438][T10118] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.658462][T10118] ? ksys_write+0x22a/0x250 [ 504.658480][T10118] ? __pfx_ksys_write+0x10/0x10 [ 504.658499][T10118] __ia32_compat_sys_openat+0x131/0x160 [ 504.658529][T10118] __do_fast_syscall_32+0x1dc/0x560 [ 504.658550][T10118] ? lockdep_hardirqs_on+0x7b/0x110 [ 504.658566][T10118] ? do_fast_syscall_32+0x34/0x80 [ 504.658585][T10118] ? irqentry_exit+0x10f/0x660 [ 504.658605][T10118] do_fast_syscall_32+0x34/0x80 [ 504.658624][T10118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.658646][T10118] RIP: 0023:0xf704d539 [ 504.658661][T10118] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 504.658676][T10118] RSP: 002b:00000000f543d100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 504.658695][T10118] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f543d150 [ 504.658708][T10118] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00000000f73e6ff4 [ 504.658718][T10118] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 504.658728][T10118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 504.658738][T10118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.658763][T10118] [ 504.658798][T10118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.954339][ T24] usb 2-1: Product: syz [ 504.958636][ T24] usb 2-1: Manufacturer: syz [ 504.963264][ T24] usb 2-1: SerialNumber: syz [ 504.979731][T10119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.939'. [ 505.048246][ T24] usb 2-1: bad CDC descriptors [ 505.054879][ T24] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 505.083590][ T24] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 505.544030][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 505.544052][ T30] audit: type=1326 audit(1767401694.575:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.0.935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 505.757428][T10129] netlink: 'syz.4.944': attribute type 2 has an invalid length. [ 505.798339][T10129] !: entered promiscuous mode [ 505.870514][T10129] netlink: 'syz.4.944': attribute type 2 has an invalid length. [ 505.893912][T10129] !: left promiscuous mode [ 506.322750][ T24] usb 1-1: USB disconnect, device number 48 [ 506.772156][ T30] audit: type=1326 audit(1767401695.815:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7fc00000 [ 506.951220][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.958241][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.971953][ T24] usb 2-1: USB disconnect, device number 54 [ 507.077081][ T912] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 507.238486][ T912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.259842][ T912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.301314][ T912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.345805][ T912] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.408831][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.429694][ T912] usb 3-1: config 0 descriptor?? [ 507.776966][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 507.959007][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 507.969375][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 507.981478][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 507.992016][ T44] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 508.005759][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 508.015332][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.032444][ T912] hid_parser_main: 28 callbacks suppressed [ 508.032470][ T912] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 508.046344][ T24] usb 4-1: Product: syz [ 508.050629][ T24] usb 4-1: Manufacturer: syz [ 508.055269][ T24] usb 4-1: SerialNumber: syz [ 508.060425][ T912] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 508.076544][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 508.079044][ T24] usb 4-1: config 0 descriptor?? [ 508.091029][ T912] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 508.104490][T10144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 508.120757][T10144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 508.140556][ T24] usb 4-1: ucan: probing device on interface #0 [ 508.147396][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 508.157180][ T44] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 508.167064][ T44] usb 1-1: config 162 has an invalid interface number: 3 but max is 2 [ 508.175289][ T44] usb 1-1: config 162 has no interface number 0 [ 508.182088][ T44] usb 1-1: config 162 has no interface number 1 [ 508.188664][ T44] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 508.202447][ T44] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 508.213850][ T44] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 508.227447][ T44] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 508.241580][ T44] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 508.252523][ T44] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 508.266635][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 508.288141][ T44] usb 1-1: config 162 interface 84 has no altsetting 0 [ 508.295178][ T44] usb 1-1: config 162 interface 2 has no altsetting 0 [ 508.298614][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.304416][ T44] usb 1-1: config 162 interface 3 has no altsetting 0 [ 508.323469][ T44] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 508.334588][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.349621][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.356824][ T44] usb 1-1: Product: syz [ 508.372997][ T44] usb 1-1: Manufacturer: syz [ 508.383473][ T44] usb 1-1: SerialNumber: syz [ 508.385167][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.456660][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.465807][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.499816][ T9] usb 2-1: config 0 descriptor?? [ 508.602654][ T24] usb 4-1: ucan: failed to retrieve device info [ 508.609097][ T24] usb 4-1: ucan: probe failed; try to update the device firmware [ 508.779377][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 508.931559][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 508.949283][ T44] usb 1-1: USB disconnect, device number 49 [ 509.010721][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 509.030218][T10151] loop6: detected capacity change from 0 to 524287999 [ 509.076747][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 509.089969][T10152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.951'. [ 509.116131][T10151] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 509.157732][ T5965] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 509.586646][ T6041] usb 3-1: reset high-speed USB device number 67 using dummy_hcd [ 510.199030][T10160] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 510.358006][T10162] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 510.371016][T10162] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 510.447898][ T5920] usb 3-1: USB disconnect, device number 67 [ 510.589432][ T912] usb 4-1: USB disconnect, device number 66 [ 510.726827][ T5920] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 510.956646][ T5920] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 510.965840][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.974308][ T5920] usb 3-1: Product: syz [ 510.984540][ T5920] usb 3-1: Manufacturer: syz [ 510.990909][ T5920] usb 3-1: SerialNumber: syz [ 511.721444][T10182] syzkaller0: entered promiscuous mode [ 511.729141][T10182] syzkaller0: entered allmulticast mode [ 511.737823][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 511.764408][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 512.086857][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input27 [ 512.098686][ T9] usb 2-1: USB disconnect, device number 55 [ 512.115233][ T5185] bcm5974 3-1:1.0: could not read from device [ 512.194053][ T5185] bcm5974 3-1:1.0: could not read from device [ 512.213455][ T5920] usb 3-1: USB disconnect, device number 68 [ 512.665772][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 512.846529][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 513.207973][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.218177][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.263611][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 513.286246][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.294757][ T9] usb 2-1: Product: syz [ 513.323097][T10206] netlink: 96 bytes leftover after parsing attributes in process `syz.0.957'. [ 513.351637][T10207] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 513.369344][ T9] usb 2-1: Manufacturer: syz [ 513.369369][ T9] usb 2-1: SerialNumber: syz [ 513.504898][ T9] usb 2-1: bad CDC descriptors [ 513.539366][ T9] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 513.606264][ T9] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 513.773591][T10210] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 513.785903][T10210] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 513.846113][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.959'. [ 515.043014][ T30] audit: type=1326 audit(1767401704.075:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7fc00000 [ 516.160892][ T912] usb 2-1: USB disconnect, device number 56 [ 516.736579][ T912] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 516.737580][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 516.916534][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 516.922478][ T912] usb 2-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 516.925826][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.947831][ T912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.972406][ T5833] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 516.980715][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.991998][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 517.005308][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 517.006334][ T912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.028532][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.041064][ T9] usb 5-1: config 0 descriptor?? [ 517.072774][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.136577][ T912] usb 2-1: Product: syz [ 517.152390][ T912] usb 2-1: Manufacturer: syz [ 517.163404][ T912] usb 2-1: SerialNumber: syz [ 517.167188][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 517.181744][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.195994][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.207227][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 517.232790][ T5833] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 517.244674][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.258657][ T5833] usb 3-1: config 0 descriptor?? [ 517.402956][T10241] loop6: detected capacity change from 0 to 524287999 [ 517.459435][ T5965] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 517.472436][ T912] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 517.513808][T10241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.964'. [ 517.544365][T10241] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 517.651714][T10244] netlink: 64 bytes leftover after parsing attributes in process `syz.2.966'. [ 517.673988][T10244] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 517.793431][ T912] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 517.828301][ T912] usb 2-1: USB disconnect, device number 57 [ 517.884735][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.366896][ T912] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 518.413691][T10246] FAULT_INJECTION: forcing a failure. [ 518.413691][T10246] name failslab, interval 1, probability 0, space 0, times 0 [ 518.444476][T10246] CPU: 1 UID: 0 PID: 10246 Comm: syz.1.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.444519][T10246] Tainted: [L]=SOFTLOCKUP [ 518.444528][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.444542][T10246] Call Trace: [ 518.444551][T10246] [ 518.444562][T10246] dump_stack_lvl+0xe8/0x150 [ 518.444596][T10246] should_fail_ex+0x414/0x560 [ 518.444639][T10246] should_failslab+0xa8/0x100 [ 518.444669][T10246] __kvmalloc_node_noprof+0x175/0x920 [ 518.444697][T10246] ? seq_read_iter+0x202/0xe20 [ 518.444726][T10246] seq_read_iter+0x202/0xe20 [ 518.444747][T10246] ? set_page_refcounted+0x76/0x160 [ 518.444780][T10246] ? __asan_memset+0x22/0x50 [ 518.444807][T10246] copy_splice_read+0x5d4/0xa50 [ 518.444849][T10246] ? __pfx_copy_splice_read+0x10/0x10 [ 518.444880][T10246] ? look_up_lock_class+0x57/0x110 [ 518.444905][T10246] ? register_lock_class+0x31/0x2e0 [ 518.444937][T10246] ? alloc_pipe_info+0x374/0x4d0 [ 518.444961][T10246] ? __pfx_copy_splice_read+0x10/0x10 [ 518.444987][T10246] splice_direct_to_actor+0x4a9/0xcc0 [ 518.445037][T10246] ? __pfx_direct_splice_actor+0x10/0x10 [ 518.445066][T10246] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 518.445107][T10246] do_splice_direct+0x181/0x270 [ 518.445153][T10246] ? __pfx_do_splice_direct+0x10/0x10 [ 518.445179][T10246] ? common_file_perm+0x1b5/0x220 [ 518.445210][T10246] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 518.445247][T10246] ? rw_verify_area+0x255/0x4d0 [ 518.445273][T10246] do_sendfile+0x4da/0x7e0 [ 518.445312][T10246] ? __pfx_do_sendfile+0x10/0x10 [ 518.445341][T10246] ? __pfx_ksys_write+0x10/0x10 [ 518.445367][T10246] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 518.445401][T10246] __do_fast_syscall_32+0x1dc/0x560 [ 518.445426][T10246] ? lockdep_hardirqs_on+0x7b/0x110 [ 518.445446][T10246] ? do_fast_syscall_32+0x34/0x80 [ 518.445471][T10246] ? irqentry_exit+0x10f/0x660 [ 518.445508][T10246] do_fast_syscall_32+0x34/0x80 [ 518.445534][T10246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 518.445562][T10246] RIP: 0023:0xf708d539 [ 518.445581][T10246] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 518.445603][T10246] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 518.445627][T10246] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 518.445642][T10246] RDX: 0000000000000000 RSI: 0000000000000038 RDI: 0000000000000000 [ 518.445655][T10246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.445668][T10246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 518.445681][T10246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.445715][T10246] [ 518.806653][ T912] usb 4-1: Using ep0 maxpacket: 8 [ 518.815716][ T912] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 518.824233][ T912] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 518.836706][ T912] usb 4-1: config 162 has no interface number 0 [ 518.843044][ T912] usb 4-1: config 162 has no interface number 1 [ 518.849483][ T912] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 518.862733][ T912] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 518.873935][ T912] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 518.886605][ T912] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 518.898025][ T912] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 518.908414][ T912] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 518.921564][ T912] usb 4-1: config 162 interface 84 has no altsetting 0 [ 518.928546][ T912] usb 4-1: config 162 interface 2 has no altsetting 0 [ 518.935463][ T912] usb 4-1: config 162 interface 3 has no altsetting 0 [ 518.962507][ T912] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 518.971678][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.979867][ T912] usb 4-1: Product: syz [ 518.984983][ T912] usb 4-1: Manufacturer: syz [ 518.989736][ T912] usb 4-1: SerialNumber: syz [ 519.430673][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 519.496530][ T9432] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 519.559745][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 519.614647][ T912] usb 4-1: USB disconnect, device number 67 [ 519.646552][ T9432] usb 2-1: device descriptor read/64, error -71 [ 519.926600][ T9432] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 520.054940][ T5833] usbhid 3-1:0.0: can't add hid device: -71 [ 520.069362][ T9432] usb 2-1: device descriptor read/64, error -71 [ 520.081672][ T5833] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 520.147113][ T5833] usb 3-1: USB disconnect, device number 69 [ 520.184104][ T5956] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 520.207797][ T9432] usb usb2-port1: attempt power cycle [ 520.606569][ T9432] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 520.638554][ T9432] usb 2-1: device descriptor read/8, error -71 [ 520.885916][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 520.896857][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 520.946731][ T9432] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 520.984586][T10259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.974'. [ 521.211036][ T9432] usb 2-1: device descriptor read/8, error -71 [ 521.338414][ T9432] usb usb2-port1: unable to enumerate USB device [ 521.463060][ T9] usb 5-1: USB disconnect, device number 51 [ 521.866587][ T9432] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 522.026553][ T9432] usb 1-1: Using ep0 maxpacket: 8 [ 522.033749][ T9432] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.055575][ T9432] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.102651][ T9432] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 522.112473][ T9432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.120537][ T9432] usb 1-1: Product: syz [ 522.125522][ T9432] usb 1-1: Manufacturer: syz [ 522.126685][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 522.131302][ T9432] usb 1-1: SerialNumber: syz [ 522.164134][ T9432] usb 1-1: bad CDC descriptors [ 522.178040][ T9432] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 522.184619][ T9432] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 522.328411][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 522.338476][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 522.353734][T10280] netlink: 96 bytes leftover after parsing attributes in process `syz.3.977'. [ 522.364447][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 522.379251][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 522.424973][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.433287][ T9] usb 5-1: Product: syz [ 522.437589][ T9] usb 5-1: Manufacturer: syz [ 522.442217][ T9] usb 5-1: SerialNumber: syz [ 522.614827][ T9] usb 5-1: config 0 descriptor?? [ 522.641136][T10275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 522.683730][T10275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 522.827680][ T9] usb 5-1: ucan: probing device on interface #0 [ 523.465856][ T9] usb 5-1: ucan: failed to retrieve device info [ 523.475995][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 523.517708][ T5833] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 523.869185][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 523.901257][T10292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 523.905001][ T30] audit: type=1326 audit(1767401712.945:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 524.008392][ T5833] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 524.043417][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.085423][ T5833] usb 2-1: Product: syz [ 524.102788][ T5833] usb 2-1: Manufacturer: syz [ 524.116367][ T5833] usb 2-1: SerialNumber: syz [ 524.162189][ T5833] usb 2-1: config 0 descriptor?? [ 524.370325][ T9] usb 1-1: USB disconnect, device number 50 [ 524.397631][ T5833] hso 2-1:0.0: Failed to find BULK IN ep [ 524.440680][ T5833] usb-storage 2-1:0.0: USB Mass Storage device detected [ 525.017152][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 525.025096][ C1] ------------[ cut here ]------------ [ 525.025120][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 525.025156][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: kworker/1:0/24 [ 525.025201][ C1] Modules linked in: [ 525.025233][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.025266][ C1] Tainted: [L]=SOFTLOCKUP [ 525.025277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.025295][ C1] Workqueue: usb_hub_wq hub_event [ 525.025328][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 525.025355][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 525.025377][ C1] RSP: 0018:ffffc90000a08638 EFLAGS: 00010246 [ 525.025401][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 525.025417][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e240 [ 525.025435][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.025453][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888078532b68 [ 525.025471][ C1] R13: 0000000000000000 R14: ffffffff8f92e240 R15: ffff8880227e3138 [ 525.025490][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 525.025511][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.025530][ C1] CR2: 00000000f744c8bc CR3: 000000001f7fa000 CR4: 00000000003526f0 [ 525.025553][ C1] Call Trace: [ 525.025563][ C1] [ 525.025591][ C1] rate_control_send_low+0x1a7/0x7b0 [ 525.025621][ C1] rate_control_get_rate+0x20b/0x5d0 [ 525.025657][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 525.025700][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 525.025735][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 525.025795][ C1] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 525.025833][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 525.025865][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.025885][ C1] ? lock_acquire+0x107/0x340 [ 525.025903][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.025929][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.025955][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 525.025978][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.026005][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 525.026029][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 525.026058][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 525.026091][ C1] __iterate_interfaces+0x2ab/0x590 [ 525.026110][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 525.026136][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 525.026157][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 525.026182][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 525.026205][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 525.026225][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 525.026246][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 525.026282][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 525.026304][ C1] ? read_tsc+0x9/0x20 [ 525.026335][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 525.026362][ C1] handle_softirqs+0x22b/0x7c0 [ 525.026464][ C1] ? __irq_exit_rcu+0x60/0x150 [ 525.026502][ C1] __irq_exit_rcu+0x60/0x150 [ 525.026525][ C1] irq_exit_rcu+0x9/0x30 [ 525.026548][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 525.026573][ C1] [ 525.026582][ C1] [ 525.026593][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.026620][ C1] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 525.026653][ C1] Code: ff ff e8 17 fa 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 09 fa 1f 00 e8 44 93 b8 09 48 85 db 74 c0 e8 fa f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 0b [ 525.026673][ C1] RSP: 0018:ffffc900001e70e0 EFLAGS: 00000287 [ 525.026696][ C1] RAX: ffffffff81a0fdc6 RBX: ffffc900001e7240 RCX: 0000000000100000 [ 525.026715][ C1] RDX: ffffc90019be8000 RSI: 000000000000378d RDI: 000000000000378e [ 525.026732][ C1] RBP: ffffc900001e71f0 R08: ffffffff8f822377 R09: 1ffffffff1f0446e [ 525.026751][ C1] R10: dffffc0000000000 R11: fffffbfff1f0446f R12: 0000000000000001 [ 525.026770][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e7923e0 [ 525.026796][ C1] ? console_flush_all+0x7f6/0xb00 [ 525.026843][ C1] ? console_flush_all+0x11a/0xb00 [ 525.026888][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 525.026931][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 525.026975][ C1] console_unlock+0xbb/0x190 [ 525.027008][ C1] ? __pfx_console_unlock+0x10/0x10 [ 525.027039][ C1] ? dev_vprintk_emit+0x337/0x3f0 [ 525.027077][ C1] vprintk_emit+0x47b/0x550 [ 525.027108][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 525.027140][ C1] ? lock_acquire+0x107/0x340 [ 525.027174][ C1] dev_vprintk_emit+0x337/0x3f0 [ 525.027212][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 525.027243][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 525.027296][ C1] dev_printk_emit+0xe0/0x130 [ 525.027339][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 525.027371][ C1] ? __up_read+0x25d/0x670 [ 525.027411][ C1] ? __dev_printk+0x131/0x190 [ 525.027444][ C1] _dev_info+0x10a/0x160 [ 525.027483][ C1] ? __pfx__dev_info+0x10/0x10 [ 525.027532][ C1] hub_port_init+0x5e6/0x28e0 [ 525.027587][ C1] hub_event+0x2573/0x4ef0 [ 525.027679][ C1] ? __pfx_hub_event+0x10/0x10 [ 525.027711][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 525.027746][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 525.027772][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 525.027801][ C1] process_scheduled_works+0xad1/0x1770 [ 525.027858][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.027882][ C1] ? do_raw_spin_lock+0x121/0x290 [ 525.027934][ C1] worker_thread+0x8a0/0xda0 [ 525.027997][ C1] kthread+0x711/0x8a0 [ 525.028035][ C1] ? __pfx_worker_thread+0x10/0x10 [ 525.028062][ C1] ? __pfx_kthread+0x10/0x10 [ 525.028099][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 525.028137][ C1] ? __pfx_kthread+0x10/0x10 [ 525.028172][ C1] ret_from_fork+0x510/0xa50 [ 525.028200][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 525.028224][ C1] ? __switch_to+0xc9e/0x1480 [ 525.028265][ C1] ? __pfx_kthread+0x10/0x10 [ 525.028299][ C1] ret_from_fork_asm+0x1a/0x30 [ 525.028352][ C1] [ 525.028366][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 525.028387][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.028421][ C1] Tainted: [L]=SOFTLOCKUP [ 525.028431][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.028447][ C1] Workqueue: usb_hub_wq hub_event [ 525.028478][ C1] Call Trace: [ 525.028488][ C1] [ 525.028497][ C1] vpanic+0x1e0/0x670 [ 525.028533][ C1] panic+0xb9/0xc0 [ 525.028563][ C1] ? __pfx_panic+0x10/0x10 [ 525.028603][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 525.028643][ C1] __warn+0x317/0x4b0 [ 525.028672][ C1] ? __rate_control_send_low+0x524/0x800 [ 525.028701][ C1] ? __rate_control_send_low+0x524/0x800 [ 525.028726][ C1] __report_bug+0x288/0x500 [ 525.028749][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 525.028788][ C1] ? __rate_control_send_low+0x524/0x800 [ 525.028819][ C1] ? __pfx___report_bug+0x10/0x10 [ 525.028850][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 525.028891][ C1] ? stack_depot_save_flags+0x33/0x810 [ 525.028944][ C1] report_bug_entry+0x19a/0x290 [ 525.028971][ C1] ? __rate_control_send_low+0x5bb/0x800 [ 525.028993][ C1] ? __rate_control_send_low+0x5c0/0x800 [ 525.029017][ C1] handle_bug+0xca/0x200 [ 525.029048][ C1] exc_invalid_op+0x1a/0x50 [ 525.029079][ C1] asm_exc_invalid_op+0x1a/0x20 [ 525.029102][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 525.029128][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 525.029149][ C1] RSP: 0018:ffffc90000a08638 EFLAGS: 00010246 [ 525.029171][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 525.029187][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e240 [ 525.029204][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.029221][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888078532b68 [ 525.029238][ C1] R13: 0000000000000000 R14: ffffffff8f92e240 R15: ffff8880227e3138 [ 525.029270][ C1] ? __rate_control_send_low+0x58d/0x800 [ 525.029306][ C1] rate_control_send_low+0x1a7/0x7b0 [ 525.029334][ C1] rate_control_get_rate+0x20b/0x5d0 [ 525.029365][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 525.029406][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 525.029440][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 525.029495][ C1] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 525.029548][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 525.029596][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.029623][ C1] ? lock_acquire+0x107/0x340 [ 525.029648][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.029687][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.029715][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 525.029747][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 525.029787][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 525.029822][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 525.029865][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 525.029911][ C1] __iterate_interfaces+0x2ab/0x590 [ 525.029944][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 525.029981][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 525.030011][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 525.030048][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 525.030082][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 525.030112][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 525.030142][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 525.030195][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 525.030226][ C1] ? read_tsc+0x9/0x20 [ 525.030271][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 525.030310][ C1] handle_softirqs+0x22b/0x7c0 [ 525.030340][ C1] ? __irq_exit_rcu+0x60/0x150 [ 525.030375][ C1] __irq_exit_rcu+0x60/0x150 [ 525.030400][ C1] irq_exit_rcu+0x9/0x30 [ 525.030424][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 525.030449][ C1] [ 525.030458][ C1] [ 525.030469][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.030495][ C1] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 525.030530][ C1] Code: ff ff e8 17 fa 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 09 fa 1f 00 e8 44 93 b8 09 48 85 db 74 c0 e8 fa f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 0b [ 525.030552][ C1] RSP: 0018:ffffc900001e70e0 EFLAGS: 00000287 [ 525.030573][ C1] RAX: ffffffff81a0fdc6 RBX: ffffc900001e7240 RCX: 0000000000100000 [ 525.030592][ C1] RDX: ffffc90019be8000 RSI: 000000000000378d RDI: 000000000000378e [ 525.030609][ C1] RBP: ffffc900001e71f0 R08: ffffffff8f822377 R09: 1ffffffff1f0446e [ 525.030628][ C1] R10: dffffc0000000000 R11: fffffbfff1f0446f R12: 0000000000000001 [ 525.030646][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e7923e0 [ 525.030673][ C1] ? console_flush_all+0x7f6/0xb00 [ 525.030719][ C1] ? console_flush_all+0x11a/0xb00 [ 525.030760][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 525.030799][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 525.030842][ C1] console_unlock+0xbb/0x190 [ 525.030876][ C1] ? __pfx_console_unlock+0x10/0x10 [ 525.030907][ C1] ? dev_vprintk_emit+0x337/0x3f0 [ 525.030954][ C1] vprintk_emit+0x47b/0x550 [ 525.030988][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 525.031018][ C1] ? lock_acquire+0x107/0x340 [ 525.031052][ C1] dev_vprintk_emit+0x337/0x3f0 [ 525.031087][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 525.031118][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 525.031168][ C1] dev_printk_emit+0xe0/0x130 [ 525.031209][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 525.031239][ C1] ? __up_read+0x25d/0x670 [ 525.031278][ C1] ? __dev_printk+0x131/0x190 [ 525.031309][ C1] _dev_info+0x10a/0x160 [ 525.031346][ C1] ? __pfx__dev_info+0x10/0x10 [ 525.031394][ C1] hub_port_init+0x5e6/0x28e0 [ 525.031447][ C1] hub_event+0x2573/0x4ef0 [ 525.031530][ C1] ? __pfx_hub_event+0x10/0x10 [ 525.031559][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 525.031594][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 525.031618][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 525.031645][ C1] process_scheduled_works+0xad1/0x1770 [ 525.031701][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.031725][ C1] ? do_raw_spin_lock+0x121/0x290 [ 525.031776][ C1] worker_thread+0x8a0/0xda0 [ 525.031829][ C1] kthread+0x711/0x8a0 [ 525.031865][ C1] ? __pfx_worker_thread+0x10/0x10 [ 525.031897][ C1] ? __pfx_kthread+0x10/0x10 [ 525.031933][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 525.031976][ C1] ? __pfx_kthread+0x10/0x10 [ 525.032010][ C1] ret_from_fork+0x510/0xa50 [ 525.032037][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 525.032059][ C1] ? __switch_to+0xc9e/0x1480 [ 525.032098][ C1] ? __pfx_kthread+0x10/0x10 [ 525.032131][ C1] ret_from_fork_asm+0x1a/0x30 [ 525.032184][ C1] [ 525.032793][ C1] Kernel Offset: disabled