last executing test programs: 8.499950253s ago: executing program 4 (id=1302): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 8.001722195s ago: executing program 4 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 7.83618602s ago: executing program 4 (id=1310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="430fc73f0f2390b9800000c00f323501000000660fc5db3e0f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x4a}], 0x1, 0x7a, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, 0x0, 0x0) writev(r3, &(0x7f0000000780)=[{0x0}], 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, 0x0, 0x0) unshare(0x22020400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f0000000840)="ff", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendmmsg$sock(r6, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000003c0)="ec", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a00)="02d0", 0x2}], 0x1}}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000040)) 6.817478487s ago: executing program 4 (id=1313): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1", 0x7b, 0x5, 0xd7}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.699475925s ago: executing program 3 (id=1314): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x2168, 0x2, 0x3}, 0x18, 0x3) landlock_restrict_self(r0, 0xa) fsopen(&(0x7f00000000c0)='9p\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020}, 0x13) read$char_usb(r2, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000280)=0x1) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000280)=0x1) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x14f600) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) (async) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f005, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x2, 0xc3, 0x1, 0x6}, {0x7, 0x7}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000dc0), 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x1c, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) 6.546780182s ago: executing program 4 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14f5ffff1400010300000000ecffffe10b0000007a2ee9be80c694c4a4fbb64bc036a99963dccff8c063a687e77a4609b8eb2b3eb940f53ab15ebc68929337d197e0a57ffed2a62d1d52aee38f21426e46d8dce6d7ca509989079a6a60bc89ba11"], 0x14}}, 0x40088c0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972e3aaa30cbdaa8c3994196fb2a65b315e3100f2acaeae3669942e96c3b99b6ec235"], 0xc) r3 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x410b83, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x6, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x7, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x9, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x80001000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0xd, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x4, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7f, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x4, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1007, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x4006, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x8b, 0x0, 0xfffffffffffffffe}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x3}, {0x8, 0x1b, 0x0, 0x0, 0x4}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$fb(r1, &(0x7f00000000c0), 0x0) 5.150558977s ago: executing program 3 (id=1321): landlock_restrict_self(0xffffffffffffffff, 0xc) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) io_uring_setup(0x178e, &(0x7f00000008c0)={0x0, 0x52be, 0x100, 0xfffffffe, 0x14e}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x6, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x20, 0x4, 0x0, 0xee2, 0x8, 0x3}, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c) 4.352621341s ago: executing program 3 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) io_setup(0x23, &(0x7f0000000280)=0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) prlimit64(0x0, 0x7, 0x0, 0xffffffffffffffff) getxattr(0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @mcast1, 0x7fffffff}, @in6={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}], 0x38) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0) 4.154771832s ago: executing program 3 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x700, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x88d0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044080}, 0x40000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r6, 0x4b63, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="51917800", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 4.141000024s ago: executing program 1 (id=1326): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1", 0x7b, 0x5, 0xd7}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.958629269s ago: executing program 1 (id=1328): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r0, 0x47, 0xdd}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000180)="de93817bc9350e2281d7ac0de841b163a24692fb0fb224e80037fa833f4fbc1608ac6dfd617dfcbf597c6e879de058e5f49ef31417fc12458058f7b427211ffe33222a59c6f5ad", &(0x7f0000000200)=""/221) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "245f9b0f454a7bd861a7db040ff74b3803ac854dbc19f87dec56a4fc338c8833f8d215a29f6f1521b00273070e878b80755b830c74a346fe43bbee97c9553b2f", 0x3c}, 0x48, r1) keyctl$unlink(0x9, r1, r2) (async) keyctl$link(0x8, r1, r2) (async) keyctl$link(0x8, r0, r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000480)='#\xba/$\x00', &(0x7f00000004c0)) keyctl$instantiate_iov(0x14, r1, &(0x7f00000009c0)=[{&(0x7f0000000500)="249aee969b36926e78524aef2a4f5b9f44a908ad7b7fb4823e6f93fc15d1bae7b8fd71780c568ba0f97519e3c82c07fbb1a32186bc03e47def55f065718f157ad0b7a5097025e210dda06d98a237ff49e802bb330a6d98c29881655d51937b2210153d008778b21b8af9493a88004084e6f8a4079b1d2e9afd4cccfa24ff365ebd159a5055e923f0263893f5a4c87c798377558dda678a50ed12772a5e24ea222dbadb22db090bd93cf280da5963a2d5c33e3269283d7a97d03cc1a7c19343", 0xbf}, {&(0x7f00000005c0)="0211904c9e3da848cd07cc0b1f31c9e8fbf4601c631158c0191bdb7d477fc7222db3629d66fbb29f27c16d5e5c2d1273ad92cee74fc27ae5f2c2cabf145da1003d75807b2a21503a5fbb136a10dba1a8095269c1450ef50f59db1a8a12bf3942e695243297002a52c2d84dd6a5787c6cd137eff84e221ac4897c3aaca19d7ca76f8d5b34bcd5d980c26ee50e4a5c8d2ed5989f0246097af29dd5f1ab59d8a27b09125645181bf830d4a896e8b4760d58f4d1810341e729ac7a21e795e88236499aeb99972de1bee64c03f5a73e", 0xcd}, {&(0x7f00000006c0)="1d47bd524aa1ede59210632c655cd2686bf480ef7e86623392d021134c0b422cedfd4d35cf008729c75daaf75632b1f67881422da001b4f49c5db706ddbfe5ae74dd169f44ea76abf45255892518aeb53f9ff093a8ec4450922ebe7bec5da17725a1bb7125f27c27fbabcee202a32c562f9c2a983d8bf10447c8db03c137e116bcd6719dfe843e8c8bcdaf9d2d6a3c69173b52e55709242c48d693f735ac3f4d195cad19aa9cb0fc7afb6355fcedd01406aaad714f08e838b8628ba2ecc19855fe5b96e52b794f7676d89520ce6ff67cc471cf31", 0xd4}, {&(0x7f00000007c0)="c5e2c8244c4b9d81ab2985910bc7578b8b2dea7951cf6d737ed001270da33b5d4290424def919a2657d057ee7e141c37ae4bbe920a220f3dc0de8e6d9f6327415b7d344763754d5f8d9c756118b11607c890e4639d365d217f2c7576", 0x5c}, {&(0x7f0000000840)="fad0644f5eeb7c3c2a56fd149f70c79e4e80efc05cee649bd47fffcac639906b220aa1981ad102a88f04431a077be495febb7bf153a89e1a177c9a01aac64b61e4fc02540f70b7c6e15ebf57d9a4300dc8b3ac095b1e100f04e3", 0x5a}, {&(0x7f00000008c0)="0fdba6cc0c9357d9cfcef653385e7857b6f6b0c93e482453db77fdcf6d017cfa14155c", 0x23}, {&(0x7f0000000900)="e85abf830f617ea7d592fd33c9eedbfa8221a0ff8dc2d6cb7fd6c0077bb4af328a42a5fc701800ce2d33154066cfb5a0fc53370b84df67404db7280bf1a94d647ac01fc94cda45b6c0f97630bdffe7bfcaefee8c0e4295e42b8bab53ee9dfa1d30cddd67af3d13597d91b3a9dd1adf306ee0a03b18c968a0f3ba7a33a946dc7127cc171343b51551ae78b7e8790774f14be5466db286c54197accc5285849b83e5689b737f70f2c7bc1c11da7d50b51a05c57f2ed411faf8c309850147", 0xbd}], 0x7, r1) (async) keyctl$assume_authority(0x10, r1) (async) r3 = request_key(&(0x7f0000000a40)='trusted\x00', &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000ac0)='#\xba/$\x00', r1) keyctl$reject(0x13, r3, 0x400, 0x3, r1) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "ac93d74e0bffa23b015c6d06a040381875f40ebcee2006918436848bca5d62af65901ad26dcf8825ce36a4d686e3d8e0a47ead3c1cd54546083f7de227701039", 0x1e}, 0x48, r1) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r5, 0x7cb, &(0x7f0000000c40)={0xffffffffffffffff, 0x4, 0x1ff}) (async) keyctl$describe(0x6, r0, &(0x7f0000000c80)=""/16, 0x10) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000cc0)={0x1, 0x1, 0x2, 0xed6, 0x13, "f245bc97b73e3b77e0930a561d3015c1e98a34"}) (async) keyctl$update(0x2, r4, &(0x7f0000000d00)="7f391cd8ceea62683acd8d62ad705adbba9b09105974ef3b3bfdd660737af0e986d4c1a2effcb897c9a2cec0ba6f7f724c18f564f2256d5175d5b275bc4387787cd31c5bf35978bae3a77782efaddecaf095a0f77c4dc0af3e5b5095", 0x5c) (async) r7 = add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @desc2}, &(0x7f0000000e00)={0x0, "25e8f4779ddc50d87a3ffff596f2ddc4cdcad14cf87c11529c9657b1f666647138a793d7093be8a2db3de00e6c86b2b9d475bf027cbe0094ab0da38753cc6e18", 0x18}, 0x48, r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000e80)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000f80)=0xe8) getgroups(0x6, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x0]) keyctl$chown(0x4, r7, r8, r9) r10 = accept$inet6(0xffffffffffffffff, &(0x7f0000001000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001040)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000001080)={{{@in=@private, @in6=@dev}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000001180)=0xe8) (async) read(r6, &(0x7f00000011c0)=""/60, 0x3c) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r11, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004040) 3.811192752s ago: executing program 2 (id=1329): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9378b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="0ac78f7ea62f2b750e55742ecdd2b655e86208b9a69fe4a986161e65a58c57c0521031aa1b3bbefeba3b8f5deeb1568bf8aaa80a1e800940d52330d72836831a79762727d7aeb3148cc2351e4ec13ac2d448d2963317b9f98bf504c4ff330f133baf043215ab803e1530b94cdc5b6484d38349", 0x73}, {&(0x7f0000000440)="0b5a3b6cbd81be771ba1600fe3951ea8309b80f6bde8d6970120c3e3a534d29999ad57f925d4c67e8f49f36954c5e949cbe287a5dacfa734a02e161a96e82daf763589bab7cc676feecff37b53d6a16e003b5d2ce5a0bb71f4327b13", 0x5c}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x40012040) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000001ac0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0310bd7000fedbdf250b00000028000180080106000000000008000700", @ANYRESDEC=r4, @ANYBLOB="14000400000000d40a0000ec000000000000010000004acb080003000500000007ff59da71a537db03349357134931fb0004e9ffff04000500020000000800020003000000000000007f00ffd936857fa5e8e31b9f558cd4fd20897497f003b8b85c0a617b01", @ANYRESDEC=r8, @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x4048081}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004045) socket$nl_netfilter(0x10, 0x3, 0xc) 3.226409686s ago: executing program 0 (id=1331): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1", 0x7b, 0x5, 0xd7}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.933601748s ago: executing program 4 (id=1332): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r1, 0x3000}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x100) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000040) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)={0x20, 0x15, 0x7, "210200ddbe2919"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0) 2.863212925s ago: executing program 1 (id=1333): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000060601000000886973797b3100000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x2000000) 2.603464152s ago: executing program 0 (id=1334): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)={{0x10b, 0x96, 0x4, 0x37f, 0x35a, 0x100, 0x367, 0xd}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = signalfd4(r0, &(0x7f0000000040)={[0x5]}, 0x8, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x8810) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x345, 0x0, 0x2000000}]}) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.288332059s ago: executing program 0 (id=1335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c0470f01c535000400000f30440f20c03508000000440f22c0430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f80f090f23f8c481e57dcd", 0x5b}], 0x1, 0x10, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x7, 0x40040) capset(0x0, &(0x7f0000000040)={0xaad, 0x6, 0x3f13, 0x6, 0x800, 0x94}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newnexthop={0x20, 0x68, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r11 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000040)='test_dummy_encryption', &(0x7f0000000180)='\xa3<\xa1\t\x85|v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xea\xff\xff\xe3\x00\x00\x00\x00\xd3\xbb\xeb9L\x03\x0e\xdc}U\x8c\xdd\n\xaaq\x1d\x9em_\x97\xccN\b\x06\x00\x00\x00\xb5\x12\x8cv\xe4_\x91\xa8G!m;\xa0\\\x9a\\\xa1>b\xa1^ds\x0f\xd3\x8dI>\x11-\xbe\x89y\xd2\x8dm&\xd6[\xf3\xe0/\xcbvq\xed\xe2\xe3gp\xd5c5D\xe79f\xb6\xc9I\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x06\x00\x00\x00\xc6n,K%\x91:\xed\v\x961\xeeZ\x85\x8dw\x83\x87\xa4:\xc9\xbe$\x10\x93\xe4\xe8\xaftnh\x06\xbf\n?i\xa2\xec\x13h\xf0@o\xf5\xe5\xdd\x01d\xc6\x96\x00'/197, 0x0) 2.162264786s ago: executing program 2 (id=1336): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2004, 0xf7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1d, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd, 0xffff}, {0x0, 0x4}}}, 0x24}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000001c0)={0x40, 0x3, 0x28, {0xfffffffffffffec9, 0x13, "f70ba381030000200007000000cb4fdcc3560fb30d54f365c5b1d43ae44fbf6fd73f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.959823956s ago: executing program 1 (id=1337): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000040ff6943b80000000800000028f2000000008607000000ebb0", 0x20, r5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x3}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000460900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r3, &(0x7f0000000180)=""/133, 0x85) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000e8b000/0x2000)=nil, &(0x7f0000765000/0x4000)=nil, 0x2000, 0x2}) 1.754756256s ago: executing program 0 (id=1338): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1", 0x7b, 0x5, 0xd7}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.393358231s ago: executing program 3 (id=1339): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) fcntl$getown(0xffffffffffffffff, 0x9) 1.379746004s ago: executing program 0 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="430fc73f0f2390b9800000c00f323501000000660fc5db3e0f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x4a}], 0x1, 0x7a, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, 0x0, 0x0) writev(r3, &(0x7f0000000780)=[{0x0}], 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, 0x0, 0x0) unshare(0x22020400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f0000000840)="ff", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendmmsg$sock(r6, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000003c0)="ec", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a00)="02d0", 0x2}], 0x1}}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000040)) 1.271548114s ago: executing program 3 (id=1341): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x40, 0x3, 0x8c, {0x8c, 0x11, "c6fb33ca38575249b551a5914385832386715e0de7eca23cd971df6f167531a2a1ddfbe999efddbe49a7f356d3820d92574f1fadd61a380452f46d2563308ff386913a1ff742e69c5a50a3d1b074cb37116541d5fa4a766a57ae56aca91245d5445d122a230d6aa86768f78339612569dccb8521694c437db04b3bf9b7a2f4ae01335b04560f5381a8a6"}}, &(0x7f0000000340)={0x0, 0x3, 0x57, @string={0x57, 0x3, "1456e991e4fdfc71bbc19f983ce416d2c817821810c88eeb112e0b233e2fbbcdcec1a452f91abc305f2417ee9eeefe1b3c96c66357a781b49342439a46592cb4cf3149e2b4a2f0d16b71b6161156309d7ae34bee30"}}, &(0x7f0000000480)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "3c3692911048c7c2bd852ff42d7476cc"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0xe}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x60, 0xe, 0x2, "0f84e64a", "35b9c483"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0xc2, 0x2, 0x7f, 0x8, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x20, 0x30, 0xa0, "6e4aa568999d28e3f94f67eebb4c30293021ed297c3bcdd76d0644a6063f3345e7cbecb7b81500e16a5f85cee1c0210fcc7ced21e7b1355df0d7167350edc2170d685f5e442120ef28f2a5644b6d36c3b2e64889943c03d73011845151f6e5eefb8af7ad9263da38bda3dd4ca43a82adf8b81b2df4e0d19262d06c5cad9987d57a551c717f06e1cccf6544f8813f4df94b06694446565fc91392fac8c4e595fc"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0xb, 0x2, '\\e'}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @local}, &(0x7f0000000980)={0x40, 0x19, 0x2, "68f4"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xb660}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x2b}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xc}}) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x80) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f00000005c0), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) 978.439513ms ago: executing program 1 (id=1342): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000069000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @broadcast, @loopback}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400000402000000000000", @ANYRES32=0x0, @ANYBLOB="0300060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="0200e1ffe9bf3210a34091fe287d"], 0x44}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 435.941861ms ago: executing program 0 (id=1343): socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000580)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000002900)=[{&(0x7f0000000100)="ec53", 0x2}], 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000004c0)={0x20, 0xb}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000700)=ANY=[], &(0x7f0000000340)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f00000007c0)={0x20, 0x84, 0x3, '`19'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "3bae1e"}}) 319.257926ms ago: executing program 2 (id=1344): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1", 0x7b, 0x5, 0xd7}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 243.387967ms ago: executing program 2 (id=1345): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x9d1, 0x4) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12040) close(r2) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6043009300383a00fe880000000000000000000000000001ff0200000000000000000000000000010200907800004efc671b12e2000a6c01ff01000000000000000000000033ed8d2ebf57a9060d73d511bf823c5900000000"], 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000000200)=""/77, 0x4d}, 0x7}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm], 0x2) 130.244591ms ago: executing program 2 (id=1346): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sync_file_range(r0, 0xe2b, 0x8000000000000001, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x140, r1}) 88.759079ms ago: executing program 1 (id=1347): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9378b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="0ac78f7ea62f2b750e55742ecdd2b655e86208b9a69fe4a986161e65a58c57c0521031aa1b3bbefeba3b8f5deeb1568bf8aaa80a1e800940d52330d72836831a79762727d7aeb3148cc2351e4ec13ac2d448d2963317b9f98bf504c4ff330f133baf043215ab803e1530b94cdc5b6484d38349", 0x73}, {&(0x7f0000000440)="0b5a3b6cbd81be771ba1600fe3951ea8309b80f6bde8d6970120c3e3a534d29999ad57f925d4c67e8f49f36954c5e949cbe287a5dacfa734a02e161a96e82daf763589bab7cc676feecff37b53d6a16e003b5d2ce5a0bb71f4327b13", 0x5c}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x40012040) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000001ac0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0310bd7000fedbdf250b00000028000180080106000000000008000700", @ANYRESDEC=r4, @ANYBLOB="14000400000000d40a0000ec000000000000010000004acb080003000500000007ff59da71a537db03349357134931fb0004e9ffff04000500020000000800020003000000000000007f00ffd936857fa5e8e31b9f558cd4fd20897497f003b8b85c0a617b01", @ANYRESDEC=r8, @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x4048081}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004045) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=1348): r0 = socket$netlink(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000220011e0361908c3df72bd25028010e17f00000602000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4028) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x5}) getpgrp(0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r3 = fsopen(&(0x7f0000000400)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000003080500000000000000000003000002050003005b1700"], 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000003080500000000000000000003000002050003005b1700"], 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) kernel console output (not intermixed with test programs): bled state [ 216.448225][ T42] IPVS: starting estimator thread 0... [ 216.481097][ T5729] usb 1-1: USB disconnect, device number 35 [ 216.565280][ T8463] IPVS: using max 29 ests per chain, 69600 per kthread [ 216.653941][ T8460] bridge_slave_0 (unregistering): left allmulticast mode [ 216.711471][ T8460] bridge_slave_0 (unregistering): left promiscuous mode [ 216.759352][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.259211][ T8473] netlink: 48 bytes leftover after parsing attributes in process `syz.0.858'. [ 217.299673][ T8473] netlink: 91 bytes leftover after parsing attributes in process `syz.0.858'. [ 217.336112][ T5715] usbhid 2-1:0.0: can't add hid device: -71 [ 217.374948][ T5715] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 217.433678][ T5715] usb 2-1: USB disconnect, device number 31 [ 217.483977][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.859'. [ 217.703089][ T8479] binder: 8478:8479 ioctl c0306201 200000000080 returned -14 [ 217.888964][ T8489] syzkaller0: entered promiscuous mode [ 217.948643][ T8489] syzkaller0: entered allmulticast mode [ 218.095419][ T29] audit: type=1326 audit(1780617237.587:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.175397][ T29] audit: type=1326 audit(1780617237.617:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.200205][ T29] audit: type=1326 audit(1780617237.617:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.265364][ T29] audit: type=1326 audit(1780617237.617:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.317189][ T29] audit: type=1326 audit(1780617237.627:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.406882][ T29] audit: type=1326 audit(1780617237.647:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.431527][ T29] audit: type=1326 audit(1780617237.727:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.457178][ T29] audit: type=1326 audit(1780617237.727:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.483023][ T29] audit: type=1326 audit(1780617237.727:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.595407][ T29] audit: type=1326 audit(1780617237.727:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fee6d39ce59 code=0x7ffc0000 [ 218.809623][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 218.968448][ T8511] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 218.995409][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 219.015622][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 219.072780][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 219.129053][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 219.144494][ T8511] bond1: entered promiscuous mode [ 219.166812][ T8511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.182687][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 219.215674][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 219.249408][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 219.267139][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.289054][ T9] usb 2-1: Product: syz [ 219.292675][ T8520] loop3: detected capacity change from 0 to 2640 [ 219.314172][ T8520] buffer_io_error: 11 callbacks suppressed [ 219.314185][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.328588][ T9] usb 2-1: Manufacturer: syz [ 219.350228][ T9] usb 2-1: SerialNumber: syz [ 219.351548][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.410117][ T9] usb 2-1: config 0 descriptor?? [ 219.423438][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.537660][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.558826][ T8523] loop3: detected capacity change from 2640 to 524287992 [ 219.566925][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.591032][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.662474][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.705098][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.743532][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.772571][ T8520] ldm_validate_partition_table(): Disk read failed. [ 219.791496][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.812849][ T8520] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.833734][ T8520] Dev loop3: unable to read RDB block 0 [ 219.850455][ T8520] loop3: unable to read partition table [ 219.858759][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 219.873126][ T8520] loop_reread_partitions: partition scan of loop3 (ir¡c‡’ úÒVUŸX¨») failed (rc=-5) [ 219.900731][ T9] input input15: Device does not respond to id packet M [ 219.928746][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 219.948010][ T9] input input15: Device does not respond to id packet P [ 220.012728][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 220.036237][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 220.067158][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 220.075228][ T9] input input15: Device does not respond to id packet B [ 220.093752][ T9] input input15: Limiting number of effects to 32 (device reports 85) [ 220.169133][ T8537] syzkaller0: entered promiscuous mode [ 220.174969][ T8537] syzkaller0: entered allmulticast mode [ 220.371264][ T8539] syzkaller0: entered promiscuous mode [ 220.387201][ T8539] syzkaller0: entered allmulticast mode [ 221.155491][ T9] iforce 2-1:0.0: usb_submit_urb failed: -110 [ 221.170126][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 221.184753][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 221.199938][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 221.224611][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 221.567904][ T9] usb 2-1: USB disconnect, device number 32 [ 221.759850][ T4999] ldm_validate_partition_table(): Disk read failed. [ 221.795010][ T4999] Dev loop3: unable to read RDB block 0 [ 221.818071][ T4999] loop3: unable to read partition table [ 221.916385][ T4999] ldm_validate_partition_table(): Disk read failed. [ 221.923530][ T4999] Dev loop3: unable to read RDB block 0 [ 221.930838][ T4999] loop3: unable to read partition table [ 221.998758][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.008540][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.055379][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 222.205264][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 222.223668][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 222.242653][ T9] usb 2-1: config 0 has no interface number 0 [ 222.257572][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.293752][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 222.322581][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.340218][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.358148][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 222.368251][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.392454][ T9] usb 2-1: config 0 descriptor?? [ 222.405803][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 222.440565][ T8572] syzkaller0: entered promiscuous mode [ 222.446548][ T8572] syzkaller0: entered allmulticast mode [ 223.121786][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 223.128840][ T9] usb 2-1: USB disconnect, device number 33 [ 223.152315][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 223.252014][ T8587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.891'. [ 223.393192][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.891'. [ 224.147311][ T8611] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 224.315301][ T8613] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 224.539707][ T8613] team0: Port device veth0 added [ 224.590511][ T8622] syzkaller0: entered promiscuous mode [ 224.618307][ T8622] syzkaller0: entered allmulticast mode [ 224.675667][ T5714] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 224.845352][ T5714] usb 3-1: device descriptor read/64, error -71 [ 224.995214][ T42] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 225.109212][ T5714] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 225.175643][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 225.186258][ T42] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 225.201082][ T42] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 225.211846][ T42] usb 2-1: config 8 has no interface number 0 [ 225.218786][ T42] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 225.230215][ T42] usb 2-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.251722][ T42] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 225.261434][ T5714] usb 3-1: device descriptor read/64, error -71 [ 225.268065][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.279515][ T42] usb 2-1: Product: syz [ 225.283779][ T42] usb 2-1: Manufacturer: syz [ 225.289082][ T42] usb 2-1: SerialNumber: syz [ 225.375610][ T5714] usb usb3-port1: attempt power cycle [ 225.514022][ T42] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 225.543235][ T42] usb 2-1: USB disconnect, device number 34 [ 225.725189][ T5714] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 225.756326][ T5714] usb 3-1: device descriptor read/8, error -71 [ 226.017331][ T5714] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 226.055885][ T5714] usb 3-1: device descriptor read/8, error -71 [ 226.176050][ T5714] usb usb3-port1: unable to enumerate USB device [ 226.202852][ T8653] usb usb8: usbfs: process 8653 (syz.3.909) did not claim interface 0 before use [ 226.320232][ T8658] FAULT_INJECTION: forcing a failure. [ 226.320232][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.338032][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.4.912 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.338061][ T8658] Tainted: [L]=SOFTLOCKUP [ 226.338068][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.338077][ T8658] Call Trace: [ 226.338084][ T8658] [ 226.338091][ T8658] dump_stack_lvl+0xe8/0x150 [ 226.338117][ T8658] should_fail_ex+0x412/0x560 [ 226.338141][ T8658] _copy_from_user+0x2d/0xb0 [ 226.338164][ T8658] ucma_write+0x15d/0x2f0 [ 226.338190][ T8658] ? __pfx_ucma_write+0x10/0x10 [ 226.338210][ T8658] ? iov_iter_iovec_advance+0x1e0/0x290 [ 226.338236][ T8658] vfs_writev+0x4bd/0x990 [ 226.338258][ T8658] ? __pfx_ucma_write+0x10/0x10 [ 226.338285][ T8658] ? __pfx_vfs_writev+0x10/0x10 [ 226.338317][ T8658] ? __fget_files+0x2a/0x420 [ 226.338342][ T8658] ? __fget_files+0x3a0/0x420 [ 226.338362][ T8658] ? __fget_files+0x2a/0x420 [ 226.338389][ T8658] do_writev+0x154/0x2e0 [ 226.338411][ T8658] ? __pfx_do_writev+0x10/0x10 [ 226.338438][ T8658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.338457][ T8658] do_syscall_64+0x174/0x580 [ 226.338475][ T8658] ? trace_irq_disable+0x3b/0x140 [ 226.338499][ T8658] ? clear_bhb_loop+0x40/0x90 [ 226.338520][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.338537][ T8658] RIP: 0033:0x7f6213b9ce59 [ 226.338561][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.338577][ T8658] RSP: 002b:00007f6214ad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 226.338597][ T8658] RAX: ffffffffffffffda RBX: 00007f6213e15fa0 RCX: 00007f6213b9ce59 [ 226.338609][ T8658] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 226.338621][ T8658] RBP: 00007f6214ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 226.338632][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.338643][ T8658] R13: 00007f6213e16038 R14: 00007f6213e15fa0 R15: 00007f6213f3fa48 [ 226.338671][ T8658] [ 226.454900][ T8661] syzkaller0: entered promiscuous mode [ 226.591772][ T8661] syzkaller0: entered allmulticast mode [ 226.606023][ T5714] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 226.776645][ T5714] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 226.785628][ T5714] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 226.797764][ T5714] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 226.807216][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.815395][ T5714] usb 1-1: Product: syz [ 226.817370][ T5633] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 226.819745][ T5714] usb 1-1: Manufacturer: syz [ 226.832728][ T5714] usb 1-1: SerialNumber: syz [ 226.849696][ T5714] usb 1-1: config 0 descriptor?? [ 226.863433][ T5714] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 226.975516][ T5633] usb 5-1: Using ep0 maxpacket: 8 [ 226.996783][ T5633] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.035043][ T5633] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 227.054278][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.064954][ T5633] usb 5-1: Product: syz [ 227.069463][ T5633] usb 5-1: Manufacturer: syz [ 227.074388][ T5633] usb 5-1: SerialNumber: syz [ 227.162792][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.184231][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.285904][ T8686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.923'. [ 227.304896][ T8686] netlink: 75 bytes leftover after parsing attributes in process `syz.2.923'. [ 227.330559][ T5633] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 227.362418][ T5633] usb 5-1: USB disconnect, device number 29 [ 227.469750][ T8656] team0: entered allmulticast mode [ 227.475663][ T8656] team_slave_0: entered allmulticast mode [ 227.481508][ T8656] team_slave_1: entered allmulticast mode [ 227.487482][ T8656] vlan0: entered allmulticast mode [ 227.492680][ T8656] veth0_vlan: entered allmulticast mode [ 227.511839][ T8656] team0: left allmulticast mode [ 227.516934][ T8656] team_slave_0: left allmulticast mode [ 227.522416][ T8656] team_slave_1: left allmulticast mode [ 227.528043][ T8656] vlan0: left allmulticast mode [ 227.539179][ T8656] veth0_vlan: left allmulticast mode [ 227.810392][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.821129][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.107944][ T5714] usb 1-1: USB disconnect, device number 36 [ 228.269047][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 228.269064][ T29] audit: type=1326 audit(1780617247.767:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.932" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb96f9ce59 code=0xffff0000 [ 228.753082][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.934'. [ 228.818000][ T8724] netlink: 83 bytes leftover after parsing attributes in process `syz.0.934'. [ 228.964743][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 228.986775][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 229.419657][ T8736] could not allocate digest TFM handle [ 229.505604][ T5633] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 229.666818][ T5633] usb 3-1: Using ep0 maxpacket: 8 [ 229.683635][ T5633] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 229.705259][ T5633] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 229.723781][ T5633] usb 3-1: config 8 has no interface number 0 [ 229.731323][ T5633] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 229.758607][ T5633] usb 3-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.787354][ T5633] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 229.800794][ T5633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.825969][ T5633] usb 3-1: Product: syz [ 229.833717][ T5633] usb 3-1: Manufacturer: syz [ 229.838532][ T5633] usb 3-1: SerialNumber: syz [ 230.095843][ T5633] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 230.136878][ T5633] usb 3-1: USB disconnect, device number 34 [ 230.252696][ T8772] Invalid logical block size (4352) [ 230.444878][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.473448][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.634378][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 230.793509][ T8794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.945'. [ 230.819472][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.945'. [ 231.063095][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.942'. [ 231.235355][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.947'. [ 231.275919][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.947'. [ 231.516459][ T5714] IPVS: starting estimator thread 0... [ 231.528117][ T8810] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20004 [ 231.625237][ T8811] IPVS: using max 30 ests per chain, 72000 per kthread [ 231.645333][ T5729] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 231.805378][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 231.815829][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.827505][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.843069][ T5729] usb 2-1: config 0 has no interface number 0 [ 231.850300][ T5729] usb 2-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.865413][ T5729] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 231.874687][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.885928][ T5729] usb 2-1: config 0 descriptor?? [ 231.896379][ T5729] usbhid 2-1:0.2: couldn't find an input interrupt endpoint [ 232.029656][ T8822] sg_write: data in/out 422877/370 bytes for SCSI command 0x0-- guessing data in; [ 232.029656][ T8822] program syz.2.953 not setting count and/or reply_len properly [ 232.485225][ T5714] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 232.595511][ T5729] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 232.615304][ T5714] usb 5-1: device descriptor read/64, error -71 [ 232.747796][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 232.757762][ T5729] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 232.769107][ T5729] usb 1-1: config 0 has no interface number 0 [ 232.776867][ T5729] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.787743][ T5729] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 232.799489][ T5729] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.811330][ T5729] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.825518][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.838236][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.848513][ T5729] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 232.865310][ T5714] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 232.874937][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.904462][ T5729] usb 1-1: config 0 descriptor?? [ 232.929680][ T5729] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 232.964437][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.979039][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.006324][ T5714] usb 5-1: device descriptor read/64, error -71 [ 233.125502][ T5714] usb usb5-port1: attempt power cycle [ 233.304383][ T42] usb 1-1: USB disconnect, device number 37 [ 233.317875][ T42] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 233.485229][ T5714] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 233.527110][ T5714] usb 5-1: device descriptor read/8, error -71 [ 233.777536][ T8843] kvm: kvm [8842]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 233.786353][ T5714] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 233.794166][ T8843] kvm: kvm [8842]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 233.815718][ T5714] usb 5-1: device descriptor read/8, error -71 [ 233.925626][ T5714] usb usb5-port1: unable to enumerate USB device [ 234.285218][ T5714] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 234.443639][ T5729] usb 2-1: USB disconnect, device number 35 [ 234.461239][ T5714] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.491746][ T5714] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 234.514374][ T5714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.544821][ T5714] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.562527][ T5714] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 234.575539][ T5714] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 234.593315][ T5714] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.603324][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.611491][ T5714] usb 3-1: Product: syz [ 234.615926][ T5714] usb 3-1: Manufacturer: syz [ 234.629914][ T8853] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.643203][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.656694][ T5714] cdc_wdm 3-1:1.0: skipping garbage [ 234.662569][ T5714] cdc_wdm 3-1:1.0: skipping garbage [ 234.668365][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.681283][ T5714] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 234.688789][ T5714] cdc_wdm 3-1:1.0: Unknown control protocol [ 234.859278][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.866775][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.873314][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.879931][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.887902][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.888997][ T5729] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 234.894520][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.895079][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.914739][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.921951][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.928558][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.935334][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.941947][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.949792][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.956412][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.963687][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.970303][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.977299][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.983918][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 234.990638][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 234.997265][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 235.057789][ T5729] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.065853][ T5636] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 235.077761][ T5729] usb 2-1: config 3 has an invalid interface number: 80 but max is 0 [ 235.087926][ T5729] usb 2-1: config 3 has no interface number 0 [ 235.094805][ T5729] usb 2-1: config 3 interface 80 has no altsetting 0 [ 235.111443][ T5729] usb 2-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice=30.75 [ 235.124757][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.133839][ T5729] usb 2-1: Product: Ó¿ [ 235.139983][ T5729] usb 2-1: Manufacturer: 級鰌鬧鯄蛬æ–眪⤞å·á¢‘懺ᑻ좢ȑé°ë´£å‰‚Ⴃ达扬åˆå§ªã©žæ´“☶楌‒䋶쬽젩짱á­á‡„㸉껅㚙ä­ížªé¸¬î°™æ’¶âº›éŸœç‘ịཻ켶撣矮⩼ꑜ輼è«á„䟅걒믛焯䮳⚢馑룶鉈醳ꠄ헾ꌬ퀞ጙ묌₤ä³â¾¬å˜¾àµ‰è¶¡æ²ˆîºˆç´¦ß€ë´ä‹ ëµ»æ™¤â¬Œàº‚謚堕䔈έ蟸㇥赘ë°ï†Œë¡¾é»¾Bè¢Â³ [ 235.197653][ T5729] usb 2-1: SerialNumber: Г [ 235.209975][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.221438][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.267506][ T5636] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.279764][ T5636] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 235.299430][ T5636] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 235.330233][ T5636] usb 1-1: Manufacturer: syz [ 235.334939][ T5636] usb 1-1: SerialNumber: syz [ 235.390707][ T8869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.968'. [ 235.401104][ T8869] netlink: 83 bytes leftover after parsing attributes in process `syz.3.968'. [ 235.528988][ T5714] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 235.551740][ T8864] syzkaller0: entered promiscuous mode [ 235.563881][ T8864] syzkaller0: entered allmulticast mode [ 235.600382][ T5636] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 235.632925][ T5636] usb 1-1: USB disconnect, device number 38 [ 235.699663][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.731026][ T5714] usb 5-1: not running at top speed; connect to a high speed hub [ 235.747329][ T5714] usb 5-1: config 6 has an invalid interface number: 229 but max is 0 [ 235.759642][ T5714] usb 5-1: config 6 has no interface number 0 [ 235.766914][ T5714] usb 5-1: config 6 interface 229 has no altsetting 0 [ 235.779061][ T5714] usb 5-1: New USB device found, idVendor=0bda, idProduct=f192, bcdDevice=2e.97 [ 235.798027][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.806715][ T5714] usb 5-1: Product: syz [ 235.811055][ T5714] usb 5-1: Manufacturer: syz [ 235.815847][ T5714] usb 5-1: SerialNumber: syz [ 235.955556][ T5729] snd-usb-caiaq 2-1:3.80: can't set alt interface. [ 235.978540][ T5729] usb 2-1: unable to init card! (ret=-5) [ 235.999617][ T5729] snd-usb-caiaq 2-1:3.80: probe with driver snd-usb-caiaq failed with error -5 [ 236.041662][ T5729] usb 2-1: USB disconnect, device number 36 [ 236.080221][ T5714] usb 5-1: USB disconnect, device number 34 [ 236.673333][ T8886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.016184][ T5714] usb 3-1: USB disconnect, device number 35 [ 237.255595][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 237.278551][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.290263][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 237.295322][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.310062][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.317818][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.389969][ T8905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.428998][ T8905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.488322][ T8905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.512677][ T8905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.535581][ T8918] fuse: Bad value for 'fd' [ 237.842547][ T29] audit: type=1800 audit(1780617257.337:801): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.983" name="bus" dev="tmpfs" ino=1016 res=0 errno=0 [ 237.866101][ T8924] FAULT_INJECTION: forcing a failure. [ 237.866101][ T8924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.903524][ T8924] CPU: 0 UID: 0 PID: 8924 Comm: syz.4.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.903552][ T8924] Tainted: [L]=SOFTLOCKUP [ 237.903558][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.903569][ T8924] Call Trace: [ 237.903575][ T8924] [ 237.903582][ T8924] dump_stack_lvl+0xe8/0x150 [ 237.903607][ T8924] should_fail_ex+0x412/0x560 [ 237.903630][ T8924] _copy_from_user+0x2d/0xb0 [ 237.903650][ T8924] kstrtouint_from_user+0xd6/0x180 [ 237.903670][ T8924] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 237.903702][ T8924] proc_fail_nth_write+0x8e/0x210 [ 237.903724][ T8924] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.903749][ T8924] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.903778][ T8924] vfs_write+0x29a/0xb90 [ 237.903810][ T8924] ? __pfx_vfs_write+0x10/0x10 [ 237.903835][ T8924] ? __fget_files+0x2a/0x420 [ 237.903857][ T8924] ? __fget_files+0x3a0/0x420 [ 237.903876][ T8924] ? __fget_files+0x2a/0x420 [ 237.903903][ T8924] ksys_write+0x150/0x270 [ 237.903929][ T8924] ? __pfx_ksys_write+0x10/0x10 [ 237.903959][ T8924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.903977][ T8924] do_syscall_64+0x174/0x580 [ 237.903994][ T8924] ? trace_irq_disable+0x3b/0x140 [ 237.904016][ T8924] ? clear_bhb_loop+0x40/0x90 [ 237.904035][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.904050][ T8924] RIP: 0033:0x7f6213b5d68e [ 237.904066][ T8924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.904081][ T8924] RSP: 002b:00007f6214ad2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.904100][ T8924] RAX: ffffffffffffffda RBX: 00007f6214ad36c0 RCX: 00007f6213b5d68e [ 237.904113][ T8924] RDX: 0000000000000001 RSI: 00007f6214ad30a0 RDI: 0000000000000004 [ 237.904125][ T8924] RBP: 00007f6214ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 237.904136][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.904146][ T8924] R13: 00007f6213e16038 R14: 00007f6213e15fa0 R15: 00007f6213f3fa48 [ 237.904174][ T8924] [ 238.431986][ T29] audit: type=1326 audit(1780617257.927:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.498323][ T29] audit: type=1326 audit(1780617257.927:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.567004][ T29] audit: type=1326 audit(1780617257.927:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.612887][ T29] audit: type=1326 audit(1780617257.927:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.638229][ T29] audit: type=1326 audit(1780617257.927:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.678039][ T29] audit: type=1326 audit(1780617257.937:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.714336][ T29] audit: type=1326 audit(1780617257.937:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.752638][ T29] audit: type=1326 audit(1780617257.937:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.780540][ T29] audit: type=1326 audit(1780617257.937:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6213b9ce59 code=0x7ffc0000 [ 238.865190][ T42] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 238.996292][ T42] usb 3-1: device descriptor read/64, error -71 [ 239.065722][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.077147][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.195232][ T5714] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 239.245301][ T42] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 239.350585][ T8964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1001'. [ 239.372525][ T5714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 133, changing to 7 [ 239.391988][ T5714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.401998][ T42] usb 3-1: device descriptor read/64, error -71 [ 239.416617][ T5714] usb 2-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 239.427701][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.440971][ T5714] usb 2-1: Product: syz [ 239.447545][ T5714] usb 2-1: Manufacturer: syz [ 239.454764][ T5714] usb 2-1: SerialNumber: syz [ 239.527487][ T42] usb usb3-port1: attempt power cycle [ 239.576946][ T8959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.693692][ T8968] tipc: Enabled bearer , priority 0 [ 239.713423][ T8968] syzkaller0: entered promiscuous mode [ 239.724358][ T8968] syzkaller0: entered allmulticast mode [ 239.779802][ T8968] tipc: Resetting bearer [ 239.798178][ T8967] tipc: Resetting bearer [ 239.835905][ T8967] tipc: Disabling bearer [ 239.874990][ T5714] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 239.882478][ T42] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 239.926788][ T42] usb 3-1: device descriptor read/8, error -71 [ 239.998279][ T5714] usb 2-1: USB disconnect, device number 37 [ 240.195307][ T42] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 240.215942][ T42] usb 3-1: device descriptor read/8, error -71 [ 240.335699][ T42] usb usb3-port1: unable to enumerate USB device [ 240.695372][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 240.860326][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.876376][ T42] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 240.894564][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 240.929679][ T9] usb 5-1: can't read configurations, error -71 [ 240.971485][ T8988] netlink: 7548 bytes leftover after parsing attributes in process `syz.3.1010'. [ 241.062449][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 241.088453][ T42] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 241.097696][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.108195][ T42] usb 1-1: Product: syz [ 241.112456][ T42] usb 1-1: Manufacturer: syz [ 241.117601][ T42] usb 1-1: SerialNumber: syz [ 241.124895][ T42] usb 1-1: config 0 descriptor?? [ 241.540152][ T42] airspy 1-1:0.0: Board ID: 00 [ 241.549207][ T42] airspy 1-1:0.0: Firmware version: [ 241.985235][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 242.085899][ T9010] mmap: syz.1.1017 (9010): VmData 37588992 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 242.167383][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 242.185182][ T9] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 242.214735][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 242.245192][ T9] usb 5-1: config 220 has no interface number 2 [ 242.258923][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 242.301254][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 242.320735][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 242.335209][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 242.345613][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 242.352428][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 242.358785][ T9007] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 242.374019][ T42] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 242.376874][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.404370][ T42] airspy 1-1:0.0: Registered as swradio24 [ 242.408992][ T9] usb 5-1: Product: syz [ 242.418549][ T42] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 242.420538][ T9] usb 5-1: Manufacturer: syz [ 242.439829][ T42] usb 1-1: USB disconnect, device number 39 [ 242.466689][ T9] usb 5-1: SerialNumber: syz [ 242.769033][ T9] usb 5-1: selecting invalid altsetting 0 [ 242.798327][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 242.812000][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'. [ 242.821323][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1022'. [ 242.829499][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 242.867275][ T9] usb 5-1: selecting invalid altsetting 0 [ 242.885171][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 242.941347][ T9] usb 5-1: USB disconnect, device number 36 [ 243.311718][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 244.219270][ T9061] FAULT_INJECTION: forcing a failure. [ 244.219270][ T9061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.257161][ T9061] CPU: 0 UID: 0 PID: 9061 Comm: syz.0.1034 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.257191][ T9061] Tainted: [L]=SOFTLOCKUP [ 244.257197][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.257207][ T9061] Call Trace: [ 244.257214][ T9061] [ 244.257222][ T9061] dump_stack_lvl+0xe8/0x150 [ 244.257248][ T9061] should_fail_ex+0x412/0x560 [ 244.257274][ T9061] _copy_from_user+0x2d/0xb0 [ 244.257296][ T9061] restore_altstack+0xab/0x4c0 [ 244.257324][ T9061] ? __pfx_restore_altstack+0x10/0x10 [ 244.257352][ T9061] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.257380][ T9061] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 244.257408][ T9061] ? __lock_acquire+0x6b5/0x2cf0 [ 244.257432][ T9061] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 244.257456][ T9061] ? _raw_spin_unlock_irq+0x2e/0x50 [ 244.257479][ T9061] ? signal_setup_done+0x22f/0x310 [ 244.257502][ T9061] ? arch_do_signal_or_restart+0x4e7/0x840 [ 244.257532][ T9061] ? __task_pid_nr_ns+0x28/0x470 [ 244.257563][ T9061] ? __task_pid_nr_ns+0x28/0x470 [ 244.257589][ T9061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.257607][ T9061] do_syscall_64+0x174/0x580 [ 244.257624][ T9061] ? clear_bhb_loop+0x40/0x90 [ 244.257642][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.257663][ T9061] RIP: 0033:0x7fee6d33e1d9 [ 244.257679][ T9061] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 244.257692][ T9061] RSP: 002b:00007fee6e1e1a40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 244.257710][ T9061] RAX: ffffffffffffffda RBX: 00007fee6e1e26c0 RCX: 00007fee6d33e1d9 [ 244.257722][ T9061] RDX: 00007fee6e1e1a40 RSI: 00007fee6e1e1b70 RDI: 0000000000000021 [ 244.257733][ T9061] RBP: 00007fee6e1e2090 R08: 0000000000000000 R09: 0000000000000000 [ 244.257742][ T9061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 244.257751][ T9061] R13: 00007fee6d616038 R14: 00007fee6d615fa0 R15: 00007fee6d73fa48 [ 244.257775][ T9061] [ 244.788629][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1036'. [ 244.813358][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 244.825357][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1036'. [ 244.865202][ T42] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 245.025300][ T42] usb 1-1: Invalid ep0 maxpacket: 64 [ 245.117823][ T9079] FAULT_INJECTION: forcing a failure. [ 245.117823][ T9079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.174008][ T9079] CPU: 0 UID: 0 PID: 9079 Comm: syz.4.1040 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.174038][ T9079] Tainted: [L]=SOFTLOCKUP [ 245.174045][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.174055][ T9079] Call Trace: [ 245.174062][ T9079] [ 245.174069][ T9079] dump_stack_lvl+0xe8/0x150 [ 245.174095][ T9079] should_fail_ex+0x412/0x560 [ 245.174119][ T9079] _copy_to_user+0x31/0xb0 [ 245.174143][ T9079] map_get_next_key+0x4c0/0x620 [ 245.174171][ T9079] ? map_get_next_key+0x286/0x620 [ 245.174199][ T9079] __sys_bpf+0x768/0x950 [ 245.174226][ T9079] ? __pfx___sys_bpf+0x10/0x10 [ 245.174273][ T9079] ? ksys_write+0x242/0x270 [ 245.174300][ T9079] ? __pfx_ksys_write+0x10/0x10 [ 245.174328][ T9079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.174347][ T9079] __x64_sys_bpf+0x7c/0x90 [ 245.174371][ T9079] do_syscall_64+0x174/0x580 [ 245.174389][ T9079] ? trace_irq_disable+0x3b/0x140 [ 245.174413][ T9079] ? clear_bhb_loop+0x40/0x90 [ 245.174435][ T9079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.174453][ T9079] RIP: 0033:0x7f6213b9ce59 [ 245.174469][ T9079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.174484][ T9079] RSP: 002b:00007f6214ad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.174504][ T9079] RAX: ffffffffffffffda RBX: 00007f6213e15fa0 RCX: 00007f6213b9ce59 [ 245.174516][ T9079] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 245.174527][ T9079] RBP: 00007f6214ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 245.174537][ T9079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.174548][ T9079] R13: 00007f6213e16038 R14: 00007f6213e15fa0 R15: 00007f6213f3fa48 [ 245.174576][ T9079] [ 245.175263][ T42] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 245.245687][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1038'. [ 245.407084][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1038'. [ 245.435419][ T42] usb 1-1: Invalid ep0 maxpacket: 64 [ 245.445568][ T42] usb usb1-port1: attempt power cycle [ 245.655211][ T809] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 245.806394][ T42] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 245.819863][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.842129][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 245.859015][ T42] usb 1-1: Invalid ep0 maxpacket: 64 [ 245.865987][ T809] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 245.876106][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.887713][ T809] usb 5-1: config 0 descriptor?? [ 245.995625][ T42] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 246.038886][ T42] usb 1-1: Invalid ep0 maxpacket: 64 [ 246.061780][ T42] usb usb1-port1: unable to enumerate USB device [ 246.119767][ T809] ath6kl: Failed to submit usb control message: -71 [ 246.135916][ T809] ath6kl: unable to send the bmi data to the device: -71 [ 246.151433][ T809] ath6kl: Unable to send get target info: -71 [ 246.171978][ T809] ath6kl: Failed to init ath6kl core: -71 [ 246.189438][ T809] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 246.225281][ T809] usb 5-1: USB disconnect, device number 37 [ 246.598647][ T9104] __nla_validate_parse: 1 callbacks suppressed [ 246.598666][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 246.784032][ T9107] bridge0: port 3(netdevsim0) entered blocking state [ 246.793831][ T9107] bridge0: port 3(netdevsim0) entered disabled state [ 246.812906][ T9107] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 246.862137][ T9107] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 246.883419][ T9107] bridge0: port 3(netdevsim0) entered blocking state [ 246.891972][ T9107] bridge0: port 3(netdevsim0) entered forwarding state [ 247.727924][ T9128] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 248.175324][ T5636] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 248.227928][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 248.325260][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 248.349775][ T5636] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.377206][ T5636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.406741][ T5636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 248.434084][ T5636] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.474120][ T5636] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.492177][ T5636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.508125][ T9] usb 1-1: config 2 has an invalid interface number: 207 but max is 1 [ 248.521356][ T5636] usb 5-1: config 0 descriptor?? [ 248.530219][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 248.543459][ T9] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 248.560551][ T9] usb 1-1: config 2 has no interface number 0 [ 248.567401][ T9] usb 1-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 248.581100][ T9] usb 1-1: config 2 interface 207 has no altsetting 0 [ 248.603444][ T9] usb 1-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 248.633997][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.643513][ T9] usb 1-1: Product: syz [ 248.648325][ T9] usb 1-1: Manufacturer: syz [ 248.656606][ T9] usb 1-1: SerialNumber: syz [ 248.682760][ T9149] syzkaller0: entered promiscuous mode [ 248.691489][ T9149] syzkaller0: entered allmulticast mode [ 248.805312][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1067'. [ 248.814440][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1067'. [ 248.899824][ T9135] ipip2: entered allmulticast mode [ 248.924963][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.948523][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.999670][ T5636] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 249.015790][ T9] qmi_wwan 1-1:2.207: skipping garbage [ 249.023638][ T9] qmi_wwan 1-1:2.207: skipping garbage [ 249.037642][ T9] qmi_wwan 1-1:2.207: bogus CDC Union: master=0, slave=0 [ 249.050259][ T9] qmi_wwan 1-1:2.207: probe with driver qmi_wwan failed with error -22 [ 249.064749][ T9] usb 1-1: USB disconnect, device number 44 [ 249.387998][ T9169] netlink: 91 bytes leftover after parsing attributes in process `syz.1.1073'. [ 249.495509][ T42] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 249.690114][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 249.719853][ T42] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 249.763035][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.763087][ T42] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 249.763112][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.806177][ T42] usb 3-1: config 0 descriptor?? [ 249.884585][ T809] usb 5-1: USB disconnect, device number 38 [ 249.947472][ T9185] xt_hashlimit: size too large, truncated to 1048576 [ 250.075010][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1072'. [ 250.135232][ T5715] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 250.186094][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.206043][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.345803][ T5715] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 250.370701][ T5715] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 250.385909][ T5715] usb 2-1: can't read configurations, error -61 [ 250.448427][ T9196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1080'. [ 250.492848][ T42] hid_parser_main: 5 callbacks suppressed [ 250.492872][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.501562][ T9198] fuse: fd is not a fuse device [ 250.510482][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1080'. [ 250.530667][ T5715] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 250.545578][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.559668][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.570045][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.577278][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.584247][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.591240][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.598470][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.605478][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.612520][ T42] asus 0003:0B05:1822.0018: unknown main item tag 0x0 [ 250.633031][ T42] asus 0003:0B05:1822.0018: hidraw0: USB HID v0.08 Device [HID 0b05:1822] on usb-dummy_hcd.2-1/input0 [ 250.699821][ T9] usb 3-1: USB disconnect, device number 40 [ 250.708985][ T5715] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 250.740030][ T5715] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 250.766083][ T5715] usb 2-1: can't read configurations, error -61 [ 250.781271][ T5715] usb usb2-port1: attempt power cycle [ 250.795013][ T9205] fido_id[9205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 250.870388][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.899339][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.947301][ T9215] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1087'. [ 250.958204][ T9215] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1087'. [ 251.105372][ T42] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 251.145257][ T5715] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 251.174964][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 251.174979][ T29] audit: type=1326 audit(1780617270.667:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1089" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfbf99ce59 code=0x0 [ 251.179197][ T5715] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 251.214491][ T5715] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 251.222358][ T5715] usb 2-1: can't read configurations, error -61 [ 251.255351][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 251.267235][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.285266][ T42] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 251.296291][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.305302][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.320678][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.345186][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.354733][ T42] usb 5-1: Product: syz [ 251.360598][ T5715] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 251.376071][ T42] usb 5-1: Manufacturer: syz [ 251.382404][ T42] usb 5-1: SerialNumber: syz [ 251.406460][ T5715] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 251.418793][ T5715] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 251.437823][ T5715] usb 2-1: can't read configurations, error -61 [ 251.466424][ T5715] usb usb2-port1: unable to enumerate USB device [ 251.503417][ T9219] kvm: pic: non byte write [ 251.611245][ T42] cdc_ncm 5-1:1.0: skipping garbage [ 251.621672][ T42] cdc_ncm 5-1:1.0: skipping garbage [ 251.637923][ T42] cdc_ncm 5-1:1.0: skipping garbage [ 251.643309][ T42] cdc_ncm 5-1:1.0: skipping garbage [ 251.649628][ T42] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 251.658004][ T42] cdc_ncm 5-1:1.0: bind() failure [ 251.671536][ T42] usb 5-1: USB disconnect, device number 39 [ 252.001426][ T9250] __nla_validate_parse: 1 callbacks suppressed [ 252.001441][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1094'. [ 252.017889][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1094'. [ 252.027334][ T5715] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 252.188024][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 252.201848][ T5715] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 252.214762][ T5715] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 252.224158][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.245291][ T5715] usb 3-1: Product: syz [ 252.249606][ T5715] usb 3-1: Manufacturer: syz [ 252.256038][ T5715] usb 3-1: SerialNumber: syz [ 252.266413][ T5715] r8152-cfgselector 3-1: Unknown version 0x0000 [ 252.272733][ T5715] r8152-cfgselector 3-1: config 0 descriptor?? [ 252.641379][ T9266] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1099'. [ 252.651649][ T9266] netlink: 91 bytes leftover after parsing attributes in process `syz.1.1099'. [ 252.695208][ T9268] FAULT_INJECTION: forcing a failure. [ 252.695208][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 252.708215][ T9268] CPU: 1 UID: 0 PID: 9268 Comm: syz.1.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.708244][ T9268] Tainted: [L]=SOFTLOCKUP [ 252.708250][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.708260][ T9268] Call Trace: [ 252.708267][ T9268] [ 252.708275][ T9268] dump_stack_lvl+0xe8/0x150 [ 252.708294][ T9268] should_fail_ex+0x412/0x560 [ 252.708309][ T9268] should_failslab+0xa8/0x100 [ 252.708319][ T9268] ? skb_clone+0x212/0x3a0 [ 252.708334][ T9268] kmem_cache_alloc_noprof+0x87/0x650 [ 252.708357][ T9268] ? apparmor_capable+0x126/0x170 [ 252.708382][ T9268] skb_clone+0x212/0x3a0 [ 252.708399][ T9268] ? nfnetlink_rcv+0x4b0/0x27b0 [ 252.708418][ T9268] nfnetlink_rcv+0x4de/0x27b0 [ 252.708438][ T9268] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.708448][ T9268] ? __local_bh_enable_ip+0xd0/0x130 [ 252.708458][ T9268] ? __dev_queue_xmit+0x2b6/0x3950 [ 252.708469][ T9268] ? __dev_queue_xmit+0x1fe5/0x3950 [ 252.708478][ T9268] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.708491][ T9268] ? __dev_queue_xmit+0x2b6/0x3950 [ 252.708503][ T9268] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.708524][ T9268] ? ref_tracker_free+0x693/0x840 [ 252.708537][ T9268] ? __pfx_ref_tracker_free+0x10/0x10 [ 252.708547][ T9268] ? __asan_memcpy+0x40/0x70 [ 252.708559][ T9268] ? __skb_clone+0x63/0x7a0 [ 252.708570][ T9268] ? __skb_clone+0x483/0x7a0 [ 252.708583][ T9268] ? skb_clone+0x246/0x3a0 [ 252.708594][ T9268] ? __netlink_deliver_tap+0x807/0x850 [ 252.708609][ T9268] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.708626][ T9268] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.708639][ T9268] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.708656][ T9268] netlink_unicast+0x75c/0x8e0 [ 252.708674][ T9268] netlink_sendmsg+0x813/0xb40 [ 252.708693][ T9268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.708709][ T9268] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.708724][ T9268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.708740][ T9268] ____sys_sendmsg+0x972/0x9f0 [ 252.708749][ T9268] ? __might_fault+0xaf/0x130 [ 252.708765][ T9268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.708779][ T9268] ? import_iovec+0x73/0xa0 [ 252.708792][ T9268] ___sys_sendmsg+0x2a5/0x360 [ 252.708801][ T9268] ? __lock_acquire+0x6b5/0x2cf0 [ 252.708814][ T9268] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.708840][ T9268] ? __fget_files+0x2a/0x420 [ 252.708852][ T9268] ? __fget_files+0x3a0/0x420 [ 252.708868][ T9268] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.708879][ T9268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.708894][ T9268] ? __pfx_ksys_write+0x10/0x10 [ 252.708918][ T9268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.708928][ T9268] do_syscall_64+0x174/0x580 [ 252.708938][ T9268] ? trace_irq_disable+0x3b/0x140 [ 252.708960][ T9268] ? clear_bhb_loop+0x40/0x90 [ 252.708980][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.708997][ T9268] RIP: 0033:0x7ffb96f9ce59 [ 252.709014][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.709023][ T9268] RSP: 002b:00007ffb97f34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.709034][ T9268] RAX: ffffffffffffffda RBX: 00007ffb97215fa0 RCX: 00007ffb96f9ce59 [ 252.709041][ T9268] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 252.709047][ T9268] RBP: 00007ffb97f34090 R08: 0000000000000000 R09: 0000000000000000 [ 252.709053][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.709058][ T9268] R13: 00007ffb97216038 R14: 00007ffb97215fa0 R15: 00007ffb9733fa48 [ 252.709073][ T9268] [ 253.159505][ T9272] netlink: 'syz.1.1101': attribute type 2 has an invalid length. [ 253.169586][ T9272] netlink: 'syz.1.1101': attribute type 2 has an invalid length. [ 253.508398][ T9289] loop5: detected capacity change from 0 to 7 [ 253.524873][ T9289] Dev loop5: unable to read RDB block 7 [ 253.551446][ T9289] loop5: unable to read partition table [ 253.565698][ T9289] loop5: partition table beyond EOD, truncated [ 253.587092][ T9289] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 253.640502][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'. [ 253.678038][ T9290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1105'. [ 253.731733][ T9298] tipc: Enabled bearer , priority 0 [ 253.743868][ T9298] syzkaller0: entered promiscuous mode [ 253.754183][ T9298] syzkaller0: entered allmulticast mode [ 253.774799][ T29] audit: type=1326 audit(1780617273.267:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 253.847627][ T29] audit: type=1326 audit(1780617273.267:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 253.880008][ T9298] tipc: Resetting bearer [ 253.889088][ T29] audit: type=1326 audit(1780617273.307:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 253.913674][ T9297] tipc: Resetting bearer [ 253.915328][ T5636] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 253.927590][ T29] audit: type=1326 audit(1780617273.307:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 253.957558][ T29] audit: type=1326 audit(1780617273.307:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 253.997407][ T29] audit: type=1326 audit(1780617273.307:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 254.021841][ T29] audit: type=1326 audit(1780617273.307:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 254.022760][ T9297] tipc: Disabling bearer [ 254.046638][ T29] audit: type=1326 audit(1780617273.307:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 254.080167][ T29] audit: type=1326 audit(1780617273.307:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.1.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb96f9ce59 code=0x7ffc0000 [ 254.160121][ T5636] usb 5-1: too many configurations: 109, using maximum allowed: 8 [ 254.174543][ T5636] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 254.190362][ T5636] usb 5-1: can't read configurations, error -61 [ 254.326872][ T5636] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 254.485786][ T5636] usb 5-1: too many configurations: 109, using maximum allowed: 8 [ 254.495532][ T5636] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 254.503182][ T5636] usb 5-1: can't read configurations, error -61 [ 254.509907][ T5636] usb usb5-port1: attempt power cycle [ 254.733116][ T5633] r8152-cfgselector 3-1: USB disconnect, device number 41 [ 254.857767][ T5636] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 254.890279][ T5636] usb 5-1: too many configurations: 109, using maximum allowed: 8 [ 254.906177][ T5636] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 254.921332][ T5636] usb 5-1: can't read configurations, error -61 [ 254.929251][ T9322] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1117'. [ 254.948506][ T9322] FAULT_INJECTION: forcing a failure. [ 254.948506][ T9322] name failslab, interval 1, probability 0, space 0, times 0 [ 254.969407][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.2.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.969426][ T9322] Tainted: [L]=SOFTLOCKUP [ 254.969430][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.969436][ T9322] Call Trace: [ 254.969441][ T9322] [ 254.969446][ T9322] dump_stack_lvl+0xe8/0x150 [ 254.969463][ T9322] should_fail_ex+0x412/0x560 [ 254.969478][ T9322] should_failslab+0xa8/0x100 [ 254.969489][ T9322] __kmalloc_cache_noprof+0x88/0x660 [ 254.969504][ T9322] ? fuse_lookup_name+0x1d0/0x8b0 [ 254.969520][ T9322] fuse_lookup_name+0x1d0/0x8b0 [ 254.969533][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.969546][ T9322] ? __pfx_fuse_lookup_name+0x10/0x10 [ 254.969567][ T9322] ? __lock_acquire+0x6b5/0x2cf0 [ 254.969584][ T9322] fuse_lookup+0x213/0x4e0 [ 254.969603][ T9322] ? __pfx_fuse_lookup+0x10/0x10 [ 254.969617][ T9322] ? do_raw_spin_lock+0x12b/0x2f0 [ 254.969636][ T9322] ? do_raw_spin_unlock+0xf5/0x210 [ 254.969651][ T9322] ? _raw_spin_unlock+0x28/0x50 [ 254.969666][ T9322] ? d_alloc+0x144/0x190 [ 254.969681][ T9322] lookup_one_qstr_excl+0x12d/0x360 [ 254.969697][ T9322] filename_create+0x20e/0x370 [ 254.969716][ T9322] ? __pfx_filename_create+0x10/0x10 [ 254.969732][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.969750][ T9322] filename_mkdirat+0xd2/0x510 [ 254.969768][ T9322] ? __pfx_filename_mkdirat+0x10/0x10 [ 254.969784][ T9322] ? do_getname+0x151/0x250 [ 254.969795][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.969806][ T9322] __se_sys_mkdirat+0x35/0x150 [ 254.969815][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.969825][ T9322] do_syscall_64+0x174/0x580 [ 254.969835][ T9322] ? trace_irq_disable+0x3b/0x140 [ 254.969850][ T9322] ? clear_bhb_loop+0x40/0x90 [ 254.969863][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.969872][ T9322] RIP: 0033:0x7f314379ce59 [ 254.969883][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.969892][ T9322] RSP: 002b:00007f31445de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 254.969903][ T9322] RAX: ffffffffffffffda RBX: 00007f3143a15fa0 RCX: 00007f314379ce59 [ 254.969910][ T9322] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 254.969917][ T9322] RBP: 00007f31445de090 R08: 0000000000000000 R09: 0000000000000000 [ 254.969923][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.969928][ T9322] R13: 00007f3143a16038 R14: 00007f3143a15fa0 R15: 00007f3143b3fa48 [ 254.969944][ T9322] [ 255.065335][ T5636] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 255.348473][ T5636] usb 5-1: too many configurations: 109, using maximum allowed: 8 [ 255.358200][ T5636] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 255.366195][ T5636] usb 5-1: can't read configurations, error -61 [ 255.379972][ T5636] usb usb5-port1: unable to enumerate USB device [ 255.610406][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'. [ 255.623878][ T9337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 255.798416][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.806562][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.837064][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'. [ 256.187745][ T5636] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 256.365164][ T5636] usb 3-1: Using ep0 maxpacket: 16 [ 256.400385][ T5636] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 256.415422][ T5636] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 256.431235][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.442541][ T5636] usb 3-1: Product: syz [ 256.446982][ T5636] usb 3-1: Manufacturer: syz [ 256.451789][ T5636] usb 3-1: SerialNumber: syz [ 256.473514][ T9367] fuse: Bad value for 'user_id' [ 256.478945][ T9367] fuse: Bad value for 'user_id' [ 256.486437][ T5636] r8152-cfgselector 3-1: Unknown version 0x0000 [ 256.499176][ T5636] r8152-cfgselector 3-1: config 0 descriptor?? [ 257.014821][ T9387] __nla_validate_parse: 2 callbacks suppressed [ 257.014840][ T9387] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1136'. [ 257.067204][ T9387] kvm: apic: phys broadcast and lowest prio [ 257.288916][ T9392] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1138'. [ 257.635722][ T9406] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 257.725272][ T5715] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 257.895278][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 257.914118][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 257.926095][ T5715] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 257.934660][ T5715] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 257.947878][ T5715] usb 5-1: config 14 has no interface number 0 [ 257.954168][ T5715] usb 5-1: config 14 has no interface number 1 [ 257.971086][ T5715] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 257.985041][ T5715] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 257.999863][ T5715] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 258.012083][ T5715] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 258.023926][ T5715] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 258.035494][ T42] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 258.043476][ T5715] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.059174][ T5715] usb 5-1: config 14 interface 57 has no altsetting 0 [ 258.085347][ T5715] usb 5-1: config 14 interface 228 has no altsetting 0 [ 258.102084][ T5715] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 258.121130][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.140233][ T5715] usb 5-1: Product: syz [ 258.151071][ T5715] usb 5-1: Manufacturer: syz [ 258.160261][ T5715] usb 5-1: SerialNumber: syz [ 258.205992][ T42] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 258.216623][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 258.224660][ T42] usb 2-1: can't read configurations, error -61 [ 258.365304][ T42] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 258.489114][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1150'. [ 258.516077][ T42] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 258.530134][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 258.538901][ T42] usb 2-1: can't read configurations, error -61 [ 258.546210][ T42] usb usb2-port1: attempt power cycle [ 258.609297][ T5715] legousbtower 5-1:14.57: interrupt endpoints not found [ 258.884710][ T5636] r8152-cfgselector 3-1: USB disconnect, device number 42 [ 258.885291][ T42] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 258.937519][ T42] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 258.956570][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 258.964694][ T42] usb 2-1: can't read configurations, error -61 [ 259.039545][ T5715] legousbtower 5-1:14.228: get version request failed: -121 [ 259.051929][ T5715] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 259.095223][ T42] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 259.128369][ T42] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 259.148776][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 259.163628][ T42] usb 2-1: can't read configurations, error -61 [ 259.170866][ T42] usb usb2-port1: unable to enumerate USB device [ 259.275922][ T9441] syzkaller1: entered promiscuous mode [ 259.284415][ T9441] syzkaller1: entered allmulticast mode [ 259.913989][ T9462] syzkaller0: entered promiscuous mode [ 259.925374][ T9462] syzkaller0: entered allmulticast mode [ 260.234147][ T42] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 260.411404][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 260.436061][ T42] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 260.482220][ T42] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.491399][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.500091][ T42] usb 3-1: Product: syz [ 260.504319][ T42] usb 3-1: Manufacturer: syz [ 260.515518][ T42] usb 3-1: SerialNumber: syz [ 260.533465][ T42] r8152-cfgselector 3-1: Unknown version 0x0000 [ 260.539900][ T42] r8152-cfgselector 3-1: config 0 descriptor?? [ 260.817470][ T5729] usb 5-1: USB disconnect, device number 44 [ 261.197318][ T9486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1163'. [ 262.661628][ T9474] bridge0: port 1(netdevsim0) entered blocking state [ 262.669513][ T9474] bridge0: port 1(netdevsim0) entered disabled state [ 262.677228][ T9474] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 262.693672][ T9474] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 262.701973][ T9474] bridge0: port 1(netdevsim0) entered blocking state [ 262.708819][ T9474] bridge0: port 1(netdevsim0) entered forwarding state [ 262.751517][ T9483] @0Ù: renamed from bond_slave_1 (while UP) [ 262.962933][ T42] r8152-cfgselector 3-1: USB disconnect, device number 43 [ 263.108716][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 263.108733][ T29] audit: type=1326 audit(1780617282.607:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.0.1171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee6d39ce59 code=0x0 [ 263.142082][ T9509] kernel read not supported for file /sg0 (pid: 9509 comm: syz.3.1170) [ 263.455292][ T42] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 263.610018][ T9521] syzkaller0: entered promiscuous mode [ 263.617158][ T9521] syzkaller0: entered allmulticast mode [ 263.627389][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 263.637549][ T42] usb 2-1: can't read configurations, error -61 [ 263.644781][ T9525] FAULT_INJECTION: forcing a failure. [ 263.644781][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.660226][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.4.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.660251][ T9525] Tainted: [L]=SOFTLOCKUP [ 263.660256][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.660264][ T9525] Call Trace: [ 263.660270][ T9525] [ 263.660276][ T9525] dump_stack_lvl+0xe8/0x150 [ 263.660298][ T9525] should_fail_ex+0x412/0x560 [ 263.660322][ T9525] _copy_from_user+0x2d/0xb0 [ 263.660342][ T9525] ___sys_recvmsg+0x175/0x590 [ 263.660363][ T9525] ? __pfx____sys_recvmsg+0x10/0x10 [ 263.660381][ T9525] ? __fget_files+0x2a/0x420 [ 263.660420][ T9525] do_recvmmsg+0x334/0x800 [ 263.660443][ T9525] ? __pfx_do_recvmmsg+0x10/0x10 [ 263.660470][ T9525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.660505][ T9525] __x64_sys_recvmmsg+0x198/0x250 [ 263.660525][ T9525] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 263.660551][ T9525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.660570][ T9525] do_syscall_64+0x174/0x580 [ 263.660587][ T9525] ? trace_irq_disable+0x3b/0x140 [ 263.660612][ T9525] ? clear_bhb_loop+0x40/0x90 [ 263.660633][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.660650][ T9525] RIP: 0033:0x7f6213b9ce59 [ 263.660667][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.660682][ T9525] RSP: 002b:00007f6214ab2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.660700][ T9525] RAX: ffffffffffffffda RBX: 00007f6213e16090 RCX: 00007f6213b9ce59 [ 263.660713][ T9525] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 263.660723][ T9525] RBP: 00007f6214ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 263.660734][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.660744][ T9525] R13: 00007f6213e16128 R14: 00007f6213e16090 R15: 00007f6213f3fa48 [ 263.660771][ T9525] [ 263.915254][ T42] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 264.069048][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 264.078656][ T42] usb 2-1: can't read configurations, error -61 [ 264.088901][ T42] usb usb2-port1: attempt power cycle [ 264.133790][ T9530] fuse: Bad value for 'rootmode' [ 264.438179][ T42] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 264.468369][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 264.483147][ T42] usb 2-1: can't read configurations, error -61 [ 264.626347][ T42] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 264.663754][ T42] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 264.672055][ T42] usb 2-1: can't read configurations, error -61 [ 264.683766][ T42] usb usb2-port1: unable to enumerate USB device [ 264.883513][ T9540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1180'. [ 265.348787][ T809] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 265.520230][ T809] usb 1-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 265.532216][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 265.542408][ T809] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.551682][ T809] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.564311][ T809] usb 1-1: Product: syz [ 265.568662][ T809] usb 1-1: Manufacturer: syz [ 265.573438][ T809] usb 1-1: SerialNumber: syz [ 265.591009][ T809] usb 1-1: config 0 descriptor?? [ 265.740467][ T809] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 265.783813][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.096122][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.152171][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.575470][ T42] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 266.747231][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 266.759036][ T42] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 266.777824][ T42] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 266.792132][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.811324][ T42] usb 2-1: Product: syz [ 266.822969][ T42] usb 2-1: Manufacturer: syz [ 266.830231][ T42] usb 2-1: SerialNumber: syz [ 266.844664][ T42] r8152-cfgselector 2-1: Unknown version 0x0000 [ 266.858065][ T42] r8152-cfgselector 2-1: config 0 descriptor?? [ 266.898740][ T9565] FAULT_INJECTION: forcing a failure. [ 266.898740][ T9565] name failslab, interval 1, probability 0, space 0, times 0 [ 266.912499][ T9565] CPU: 1 UID: 0 PID: 9565 Comm: syz.3.1188 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.912529][ T9565] Tainted: [L]=SOFTLOCKUP [ 266.912538][ T9565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.912549][ T9565] Call Trace: [ 266.912556][ T9565] [ 266.912563][ T9565] dump_stack_lvl+0xe8/0x150 [ 266.912588][ T9565] should_fail_ex+0x412/0x560 [ 266.912612][ T9565] should_failslab+0xa8/0x100 [ 266.912629][ T9565] ? alloc_empty_file+0x5b/0x1d0 [ 266.912649][ T9565] kmem_cache_alloc_noprof+0x87/0x650 [ 266.912679][ T9565] alloc_empty_file+0x5b/0x1d0 [ 266.912699][ T9565] alloc_file_pseudo+0x155/0x240 [ 266.912719][ T9565] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 266.912742][ T9565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 266.912762][ T9565] ? evm_inode_alloc_security+0x40/0xb0 [ 266.912782][ T9565] ? security_inode_alloc+0xd5/0x310 [ 266.912818][ T9565] sock_alloc_file+0xb8/0x2e0 [ 266.912842][ T9565] do_accept+0x3a0/0x760 [ 266.912870][ T9565] ? __pfx_do_accept+0x10/0x10 [ 266.912912][ T9565] __sys_accept4+0x139/0x230 [ 266.912938][ T9565] ? __pfx___sys_accept4+0x10/0x10 [ 266.912961][ T9565] ? __pfx_ksys_write+0x10/0x10 [ 266.912991][ T9565] __x64_sys_accept4+0x9a/0xb0 [ 266.913014][ T9565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.913033][ T9565] do_syscall_64+0x174/0x580 [ 266.913051][ T9565] ? trace_irq_disable+0x3b/0x140 [ 266.913076][ T9565] ? clear_bhb_loop+0x40/0x90 [ 266.913098][ T9565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.913115][ T9565] RIP: 0033:0x7fcfbf99ce59 [ 266.913133][ T9565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.913149][ T9565] RSP: 002b:00007fcfc08dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 266.913169][ T9565] RAX: ffffffffffffffda RBX: 00007fcfbfc15fa0 RCX: 00007fcfbf99ce59 [ 266.913183][ T9565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 266.913193][ T9565] RBP: 00007fcfc08dc090 R08: 0000000000000000 R09: 0000000000000000 [ 266.913204][ T9565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.913214][ T9565] R13: 00007fcfbfc16038 R14: 00007fcfbfc15fa0 R15: 00007fcfbfd3fa48 [ 266.913243][ T9565] [ 267.608266][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.633644][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.764709][ T9582] syzkaller0: entered promiscuous mode [ 267.773889][ T9582] syzkaller0: entered allmulticast mode [ 267.788284][ T9589] ipt_rpfilter: unknown options [ 267.800539][ T9589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1195'. [ 267.810517][ T9583] bond0: (slave team0): Releasing backup interface [ 267.836459][ T9583] bridge_slave_1: left allmulticast mode [ 267.842332][ T9583] bridge_slave_1: left promiscuous mode [ 267.849599][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.869731][ T9583] bond0: (slave bond_slave_0): Releasing backup interface [ 267.889829][ T9583] bond0: (slave bond_slave_1): Releasing backup interface [ 267.921290][ T9583] team0: Port device team_slave_0 removed [ 267.952038][ T9583] team0: Port device team_slave_1 removed [ 267.961832][ T9583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.969747][ T9583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.979246][ T9583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.988691][ T9583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.003691][ T9583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.138180][ T42] usb 1-1: USB disconnect, device number 45 [ 269.281928][ T9] r8152-cfgselector 2-1: USB disconnect, device number 50 [ 269.341258][ T9600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1197'. [ 270.758216][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.783325][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.957188][ T5636] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 271.125316][ T5636] usb 5-1: Using ep0 maxpacket: 8 [ 271.140658][ T5636] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 271.167293][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.190991][ T5636] usb 5-1: Product: syz [ 271.204968][ T5636] usb 5-1: Manufacturer: syz [ 271.217518][ T5636] usb 5-1: SerialNumber: syz [ 271.243934][ T5636] usb 5-1: config 0 descriptor?? [ 271.262400][ T5636] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 271.297991][ T5636] dvb-usb: bulk message failed: -22 (2/0) [ 271.318986][ T5636] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.350783][ T5636] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 271.382402][ T5636] usb 5-1: media controller created [ 271.468698][ T5636] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.574365][ T5636] dvb-usb: bulk message failed: -22 (1/0) [ 271.599795][ T5636] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 271.642231][ T5636] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 271.695596][ T5636] dvb-usb: schedule remote query interval to 50 msecs. [ 271.724136][ T5636] dvb-usb: bulk message failed: -22 (2/0) [ 271.732420][ T5636] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 271.757871][ T9630] usb usb7: usbfs: process 9630 (syz.3.1206) did not claim interface 0 before use [ 271.779644][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 271.789166][ T9] dvb-usb: error while querying for an remote control event. [ 271.802018][ T5636] usb 5-1: USB disconnect, device number 45 [ 272.028646][ T5636] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 272.034553][ T9640] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.185176][ T5633] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 272.347144][ T5633] usb 1-1: Using ep0 maxpacket: 16 [ 272.349067][ T9644] syzkaller0: entered promiscuous mode [ 272.359473][ T9644] syzkaller0: entered allmulticast mode [ 272.367896][ T5633] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 272.379010][ T9650] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1212'. [ 272.387437][ T5633] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 272.412534][ T5633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.445557][ T5633] usb 1-1: Product: syz [ 272.457323][ T5633] usb 1-1: Manufacturer: syz [ 272.468274][ T5633] usb 1-1: SerialNumber: syz [ 272.482868][ T5633] r8152-cfgselector 1-1: Unknown version 0x0000 [ 272.499280][ T5633] r8152-cfgselector 1-1: config 0 descriptor?? [ 272.987293][ T9662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1213'. [ 273.795296][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 274.602172][ T29] audit: type=1326 audit(1780617294.097:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.3.1218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfbf99ce59 code=0x0 [ 274.856927][ T5633] r8152-cfgselector 1-1: USB disconnect, device number 46 [ 275.923353][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 275.991157][ T9699] netlink: 91 bytes leftover after parsing attributes in process `syz.0.1224'. [ 276.081540][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 276.094468][ T9698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1225'. [ 276.115531][ T5715] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 276.276956][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 276.288561][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 276.321244][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 276.336123][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 276.351922][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 276.374289][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 276.398223][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.398438][ T5715] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 276.422050][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.447478][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.451845][ T9714] FAULT_INJECTION: forcing a failure. [ 276.451845][ T9714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.472148][ T9714] CPU: 0 UID: 0 PID: 9714 Comm: syz.1.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.472177][ T9714] Tainted: [L]=SOFTLOCKUP [ 276.472191][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.472201][ T9714] Call Trace: [ 276.472209][ T9714] [ 276.472217][ T9714] dump_stack_lvl+0xe8/0x150 [ 276.472243][ T9714] should_fail_ex+0x412/0x560 [ 276.472269][ T9714] _copy_to_user+0x31/0xb0 [ 276.472292][ T9714] simple_read_from_buffer+0xe1/0x170 [ 276.472320][ T9714] proc_fail_nth_read+0x1bb/0x230 [ 276.472345][ T9714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.472371][ T9714] ? rw_verify_area+0x2a6/0x4d0 [ 276.472394][ T9714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.472417][ T9714] vfs_read+0x20c/0xa70 [ 276.472446][ T9714] ? __pfx___mutex_lock+0x10/0x10 [ 276.472466][ T9714] ? __pfx_vfs_read+0x10/0x10 [ 276.472492][ T9714] ? __fget_files+0x2a/0x420 [ 276.472517][ T9714] ? __fget_files+0x3a0/0x420 [ 276.472536][ T9714] ? __fget_files+0x2a/0x420 [ 276.472566][ T9714] ksys_read+0x150/0x270 [ 276.472592][ T9714] ? __pfx_ksys_read+0x10/0x10 [ 276.472623][ T9714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.472647][ T9714] do_syscall_64+0x174/0x580 [ 276.472664][ T9714] ? trace_irq_disable+0x3b/0x140 [ 276.472688][ T9714] ? clear_bhb_loop+0x40/0x90 [ 276.472710][ T9714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.472728][ T9714] RIP: 0033:0x7ffb96f5d68e [ 276.472745][ T9714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.472760][ T9714] RSP: 002b:00007ffb97f33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.472780][ T9714] RAX: ffffffffffffffda RBX: 00007ffb97f346c0 RCX: 00007ffb96f5d68e [ 276.472793][ T9714] RDX: 000000000000000f RSI: 00007ffb97f340a0 RDI: 0000000000000004 [ 276.472804][ T9714] RBP: 00007ffb97f34090 R08: 0000000000000000 R09: 0000000000000000 [ 276.472815][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.472826][ T9714] R13: 00007ffb97216038 R14: 00007ffb97215fa0 R15: 00007ffb9733fa48 [ 276.472856][ T9714] [ 276.738512][ T5715] usb 5-1: Product: syz [ 276.774548][ T5715] usb 5-1: Manufacturer: syz [ 276.782677][ T5715] usb 5-1: SerialNumber: syz [ 276.811018][ T5715] usb 5-1: config 0 descriptor?? [ 276.925843][ T9720] syzkaller0: entered promiscuous mode [ 276.931377][ T9720] syzkaller0: entered allmulticast mode [ 277.001184][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 277.058022][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 277.084756][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 277.190766][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.220716][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.247474][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.253971][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.261824][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.268544][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.273602][ T9] hid_parser_main: 28 callbacks suppressed [ 277.273622][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.288276][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.291575][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.297104][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.302598][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.308638][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.331237][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.340046][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.348085][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.350821][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.360509][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.369384][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.374083][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.378596][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.390933][ T9] hid-generic 0000:0000:0002.0019: unknown main item tag 0x0 [ 277.394688][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.401894][ T9] hid-generic 0000:0000:0002.0019: hidraw0: HID v0.03 Device [syz1] on syz0 [ 277.438273][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.446439][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.473143][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.499344][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.515785][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.532504][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.540468][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.549773][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 277.562784][ T9728] fido_id[9728]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.569046][ T5715] input input18: Timeout waiting for response from device. [ 277.603939][ T5715] usb 5-1: USB disconnect, device number 46 [ 279.382891][ T9751] kvm: kvm [9750]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x1 [ 279.704619][ T9754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.728512][ T9754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.800681][ T9722] team1: entered promiscuous mode [ 279.806239][ T9722] team1: entered allmulticast mode [ 279.811992][ T9722] 8021q: adding VLAN 0 to HW filter on device team1 [ 279.911093][ T9749] tipc: Enabling of bearer rejected, failed to enable media [ 279.989213][ T9754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.256338][ T5715] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 280.415505][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 280.424063][ T5715] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.432472][ T5715] usb 3-1: config 0 has no interface number 0 [ 280.439029][ T5715] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.450231][ T5715] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.463400][ T5715] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 280.472832][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.495002][ T5715] usb 3-1: config 0 descriptor?? [ 280.657577][ T9786] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1254'. [ 280.695525][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 280.852531][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1257'. [ 280.863248][ T9794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1257'. [ 280.872417][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 280.880749][ T9] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 280.901134][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 280.911742][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.914090][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 280.920348][ T9] usb 2-1: Product: syz [ 280.933599][ T9] usb 2-1: Manufacturer: syz [ 280.938767][ T9] usb 2-1: SerialNumber: syz [ 280.949655][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 280.960127][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 281.682959][ T9803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.075873][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 282.205277][ T5636] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 282.226844][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.235884][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.246073][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.255313][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.268789][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.278546][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.287295][ T9] usb 5-1: Product: syz [ 282.291524][ T9] usb 5-1: Manufacturer: syz [ 282.301499][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 282.306802][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 282.312081][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 282.367931][ T5636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.379284][ T5636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.389415][ T5636] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.402565][ T5636] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.411679][ T5636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.422280][ T5636] usb 1-1: config 0 descriptor?? [ 282.506013][ T42] usb 5-1: USB disconnect, device number 47 [ 282.837557][ T5636] hid_parser_main: 91 callbacks suppressed [ 282.837580][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.856016][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.863483][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.871174][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.878738][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.886826][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.894642][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.902142][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.909627][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.917303][ T5636] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 282.933177][ T5636] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 282.946127][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 283.087434][ T5715] usbhid 3-1:0.2: can't add hid device: -71 [ 283.101472][ T5715] usbhid 3-1:0.2: probe with driver usbhid failed with error -71 [ 283.110632][ T809] usb 1-1: USB disconnect, device number 47 [ 283.127490][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.131334][ T5715] usb 3-1: USB disconnect, device number 44 [ 283.147639][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.182807][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.204840][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.232198][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.243955][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.253713][ T9] usb 5-1: Product: syz [ 283.262889][ T9] usb 5-1: Manufacturer: syz [ 283.276615][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 283.283739][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 283.292516][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 283.412338][ T9] r8152-cfgselector 2-1: USB disconnect, device number 51 [ 283.585280][ T5715] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 283.715222][ T5715] usb 3-1: device descriptor read/64, error -71 [ 283.815983][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 283.860145][ T9828] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 283.955404][ T5715] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 283.977808][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.998119][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.014162][ T5636] usb 5-1: USB disconnect, device number 48 [ 284.044880][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.080764][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 284.097988][ T5715] usb 3-1: device descriptor read/64, error -71 [ 284.128810][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 284.153852][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.177183][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.199363][ T9] usb 2-1: Product: syz [ 284.209924][ T9] usb 2-1: Manufacturer: syz [ 284.226236][ T5715] usb usb3-port1: attempt power cycle [ 284.247186][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 284.260515][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 284.269686][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.284104][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.294478][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 284.305555][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 284.464325][ C0] wdm_int_callback: 10065 callbacks suppressed [ 284.464352][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 284.477147][ C0] wdm_int_callback: 10065 callbacks suppressed [ 284.477174][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 284.490648][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 284.497280][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 284.504255][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 284.510981][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 284.517392][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 284.524024][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 284.527960][ T42] usb 2-1: USB disconnect, device number 52 [ 284.530118][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 284.625601][ T5715] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 284.655483][ T9823] bond0: (slave team0): Releasing backup interface [ 284.655903][ T5715] usb 3-1: device descriptor read/8, error -71 [ 284.692685][ T9823] bridge_slave_0: left allmulticast mode [ 284.767588][ T9823] bridge_slave_0: left promiscuous mode [ 284.785054][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.829111][ T9823] bridge_slave_1: left allmulticast mode [ 284.842951][ T9823] bridge_slave_1: left promiscuous mode [ 284.862896][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.925313][ T5715] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 284.985962][ T5715] usb 3-1: device descriptor read/8, error -71 [ 284.995538][ T9823] bond0: (slave bond_slave_0): Releasing backup interface [ 285.078981][ T9823] bond0: (slave bond_slave_1): Releasing backup interface [ 285.115813][ T5715] usb usb3-port1: unable to enumerate USB device [ 285.198632][ T9823] team0: Port device team_slave_0 removed [ 285.245607][ T9823] team0: Port device team_slave_1 removed [ 285.265622][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.322634][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.384014][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.404682][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.447189][ T9823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.885265][ T5699] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 285.932223][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.943291][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.045301][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 286.052376][ T5699] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 286.063309][ T5699] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 286.072856][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.083006][ T5699] usb 1-1: Product: syz [ 286.088244][ T5699] usb 1-1: Manufacturer: syz [ 286.092877][ T5699] usb 1-1: SerialNumber: syz [ 286.101369][ T5699] r8152-cfgselector 1-1: Unknown version 0x0000 [ 286.107733][ T5699] r8152-cfgselector 1-1: config 0 descriptor?? [ 286.195336][ T5633] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 286.365436][ T5633] usb 5-1: Using ep0 maxpacket: 8 [ 286.376301][ T5633] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 286.393855][ T5633] usb 5-1: config 0 has no interface number 0 [ 286.413424][ T5633] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.439049][ T5633] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 286.459984][ T5633] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 92, changing to 10 [ 286.493364][ T5633] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 17764, setting to 1024 [ 286.524690][ T5633] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.541497][ T5633] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 286.559718][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.569406][ T5633] usb 5-1: Product: syz [ 286.573648][ T5633] usb 5-1: Manufacturer: syz [ 286.585301][ T5633] usb 5-1: SerialNumber: syz [ 286.597503][ T5633] usb 5-1: config 0 descriptor?? [ 286.604808][ T9863] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 286.846211][ T5633] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 286.953434][ T29] audit: type=1326 audit(1780617306.447:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.034139][ T29] audit: type=1326 audit(1780617306.487:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.075192][ T29] audit: type=1326 audit(1780617306.487:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.113639][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.126846][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.168998][ T29] audit: type=1326 audit(1780617306.487:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.194927][ T29] audit: type=1326 audit(1780617306.487:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.220981][ T29] audit: type=1326 audit(1780617306.487:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.292066][ T29] audit: type=1326 audit(1780617306.487:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.323586][ T29] audit: type=1326 audit(1780617306.487:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 287.360247][ T29] audit: type=1326 audit(1780617306.487:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f314375d68e code=0x7ffc0000 [ 287.393896][ T29] audit: type=1326 audit(1780617306.487:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.2.1285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314379ce59 code=0x7ffc0000 [ 288.278586][ T9894] syzkaller0: entered promiscuous mode [ 288.284291][ T9894] syzkaller0: entered allmulticast mode [ 288.619090][ T9] r8152-cfgselector 1-1: USB disconnect, device number 48 [ 289.135878][ C1] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 289.151373][ T9] usb 5-1: USB disconnect, device number 49 [ 289.515398][ T9927] bond2: entered allmulticast mode [ 289.552185][ T9929] ipip1: entered promiscuous mode [ 289.576164][ T9929] ipip1: entered allmulticast mode [ 289.600504][ T9929] bond2: (slave ipip1): The slave device specified does not support setting the MAC address [ 289.662716][ T9929] bond2: (slave ipip1): Error -95 calling set_mac_address [ 290.283048][ T9940] tipc: Started in network mode [ 290.293297][ T9940] tipc: Node identity ea66cdd4d60f, cluster identity 4711 [ 290.304194][ T9940] tipc: Enabled bearer , priority 0 [ 290.314299][ T9940] syzkaller0: entered promiscuous mode [ 290.320303][ T9940] syzkaller0: entered allmulticast mode [ 290.365009][ T9940] syzkaller0: mtu greater than device maximum [ 290.380679][ T9939] tipc: Resetting bearer [ 290.444002][ T9939] tipc: Disabling bearer [ 290.742399][ T9949] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 290.995314][ T809] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 291.016702][ T9949] fuse: Bad value for 'user_id' [ 291.027546][ T9949] fuse: Bad value for 'user_id' [ 291.048030][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.071686][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.175402][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 291.191349][ T809] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 291.208780][ T809] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 291.221491][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.232505][ T809] usb 3-1: Product: syz [ 291.246800][ T809] usb 3-1: Manufacturer: syz [ 291.258261][ T809] usb 3-1: SerialNumber: syz [ 291.271014][ T809] r8152-cfgselector 3-1: Unknown version 0x0000 [ 291.275358][ T5633] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 291.278170][ T809] r8152-cfgselector 3-1: config 0 descriptor?? [ 291.446737][ T5633] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 291.459146][ T5633] usb 1-1: config 0 has no interface number 0 [ 291.469406][ T5633] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.485269][ T5633] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.504053][ T5633] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 291.513609][ T5633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.533684][ T5633] usb 1-1: Product: syz [ 291.543410][ T5633] usb 1-1: Manufacturer: syz [ 291.550410][ T5633] usb 1-1: SerialNumber: syz [ 291.564030][ T5633] usb 1-1: config 0 descriptor?? [ 291.575440][ T5633] ums-karma 1-1:0.46: USB Mass Storage device detected [ 291.675727][ T5633] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 291.777206][ T5699] usb 1-1: USB disconnect, device number 49 [ 291.977293][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.989382][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.001796][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.013524][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.144555][ T9985] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 292.426114][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.435879][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.444557][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.452975][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.855246][ T5715] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 293.006776][ T5715] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.015550][ T5715] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 293.025869][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.034889][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 293.046160][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 293.059261][ T5715] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.068563][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.078220][ T5715] usb 2-1: Product: syz [ 293.082417][ T5715] usb 2-1: Manufacturer: syz [ 293.093835][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 293.099256][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 293.106758][ T5715] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 293.112742][ T5715] cdc_wdm 2-1:1.0: Unknown control protocol [ 293.240133][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'. [ 293.321129][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.327749][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.334132][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.340725][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.346987][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.353604][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.359942][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.366527][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.372773][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.379355][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.385713][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.392298][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.398567][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.405167][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.411449][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.418028][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.424344][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.430939][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.438086][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.444717][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.457002][ T5715] usb 2-1: USB disconnect, device number 53 [ 293.462972][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 293.552594][ T9995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.679121][ T5633] r8152-cfgselector 3-1: USB disconnect, device number 49 [ 294.335057][T10017] batman_adv: batadv0: Adding interface: vlan3 [ 294.344246][T10017] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.373755][T10017] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 294.948998][T10034] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1325'. [ 295.085563][T10023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.135470][T10023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.151189][T10039] FAULT_INJECTION: forcing a failure. [ 295.151189][T10039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.186193][T10039] CPU: 0 UID: 0 PID: 10039 Comm: syz.0.1330 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.186219][T10039] Tainted: [L]=SOFTLOCKUP [ 295.186223][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.186232][T10039] Call Trace: [ 295.186237][T10039] [ 295.186242][T10039] dump_stack_lvl+0xe8/0x150 [ 295.186258][T10039] should_fail_ex+0x412/0x560 [ 295.186273][T10039] _copy_from_iter+0x1d3/0x1670 [ 295.186289][T10039] ? alloc_pages_mpol+0x3c0/0x490 [ 295.186301][T10039] ? __pfx__copy_from_iter+0x10/0x10 [ 295.186312][T10039] ? alloc_pages_noprof+0x13b/0x2a0 [ 295.186322][T10039] ? skb_page_frag_refill+0x119/0x460 [ 295.186339][T10039] kcm_sendmsg+0xe4e/0x29f0 [ 295.186372][T10039] ? __pfx_kcm_sendmsg+0x10/0x10 [ 295.186385][T10039] ? aa_sock_msg_perm+0xf1/0x1b0 [ 295.186401][T10039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.186417][T10039] ? __pfx_kcm_sendmsg+0x10/0x10 [ 295.186428][T10039] sock_write_iter+0x49b/0x4f0 [ 295.186441][T10039] ? __pfx_sock_write_iter+0x10/0x10 [ 295.186458][T10039] ? bpf_lsm_file_permission+0x9/0x20 [ 295.186479][T10039] ? security_file_permission+0x75/0x260 [ 295.186507][T10039] vfs_write+0x61d/0xb90 [ 295.186539][T10039] ? __pfx_vfs_write+0x10/0x10 [ 295.186568][T10039] ? __fget_files+0x2a/0x420 [ 295.186585][T10039] ksys_write+0x150/0x270 [ 295.186601][T10039] ? __pfx_ksys_write+0x10/0x10 [ 295.186619][T10039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.186630][T10039] do_syscall_64+0x174/0x580 [ 295.186640][T10039] ? trace_irq_disable+0x3b/0x140 [ 295.186655][T10039] ? clear_bhb_loop+0x40/0x90 [ 295.186667][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.186677][T10039] RIP: 0033:0x7fee6d39ce59 [ 295.186688][T10039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.186697][T10039] RSP: 002b:00007fee6e1e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.186708][T10039] RAX: ffffffffffffffda RBX: 00007fee6d615fa0 RCX: 00007fee6d39ce59 [ 295.186715][T10039] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003 [ 295.186721][T10039] RBP: 00007fee6e1e2090 R08: 0000000000000000 R09: 0000000000000000 [ 295.186727][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.186733][T10039] R13: 00007fee6d616038 R14: 00007fee6d615fa0 R15: 00007fee6d73fa48 [ 295.186748][T10039] [ 295.843394][T10047] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 295.907470][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1333'. [ 296.135399][ T5633] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 296.315273][ T5633] usb 5-1: Using ep0 maxpacket: 16 [ 296.335532][ T5633] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 296.361825][ T5633] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 296.390687][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.415146][ T5633] usb 5-1: Product: syz [ 296.419483][ T5633] usb 5-1: Manufacturer: syz [ 296.425559][ T5633] usb 5-1: SerialNumber: syz [ 296.436449][ T5633] r8152-cfgselector 5-1: Unknown version 0x0000 [ 296.442883][ T5633] r8152-cfgselector 5-1: config 0 descriptor?? [ 296.613394][T10058] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 296.805208][ T5699] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 296.975548][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 296.991711][ T5699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.028148][ T5699] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.069803][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 297.092939][ T5699] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 297.118439][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.148665][ T5699] usb 3-1: config 0 descriptor?? [ 297.432079][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.441093][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.573681][ T5699] hid (null): unknown global tag 0xa3 [ 297.579198][ T5699] hid (null): unknown global tag 0xc [ 297.584661][ T5699] hid (null): unknown global tag 0xd [ 297.593363][ T5699] hid-corsair-void 0003:1B1C:0A1D.001B: unexpected long global item [ 297.613583][ T5699] hid-corsair-void 0003:1B1C:0A1D.001B: parse failed (reason: -22) [ 297.623272][ T5699] hid-corsair-void 0003:1B1C:0A1D.001B: probe with driver hid-corsair-void failed with error -22 [ 297.780991][ T5699] usb 3-1: USB disconnect, device number 50 [ 297.921978][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1342'. [ 298.495312][ T5633] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 298.635293][ T5633] usb 1-1: device descriptor read/64, error -71 [ 298.685485][ T30] INFO: task kworker/1:4:5706 blocked for more than 143 seconds. [ 298.693365][ T30] Tainted: G L syzkaller #0 [ 298.703602][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.713170][ T30] task:kworker/1:4 state:D stack:21056 pid:5706 tgid:5706 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 298.728327][ T30] Workqueue: usb_hub_wq hub_event [ 298.733434][ T30] Call Trace: [ 298.736986][ T30] [ 298.739963][ T30] __schedule+0x1821/0x5740 [ 298.744505][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 298.749528][ T30] ? look_up_lock_class+0x57/0x110 [ 298.754691][ T30] ? __pfx___schedule+0x10/0x10 [ 298.760560][ T30] ? schedule+0x90/0x360 [ 298.764861][ T30] schedule+0x164/0x360 [ 298.769446][ T30] schedule_timeout+0xc3/0x2c0 [ 298.774282][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 298.780380][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.791098][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.796846][ T30] ? wait_for_completion+0x274/0x5e0 [ 298.802447][ T30] wait_for_completion+0x2cc/0x5e0 [ 298.810222][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 298.816722][ T30] i2c_del_adapter+0x5c0/0x790 [ 298.821549][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 298.827674][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 298.833014][ T30] ? dvb_usbv2_exit+0x94c/0xb80 [ 298.839702][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 298.844654][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 298.850397][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 298.850684][ T5699] r8152-cfgselector 5-1: USB disconnect, device number 50 [ 298.856460][ T30] usb_probe_interface+0x659/0xc70 [ 298.869266][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 298.879239][ T30] really_probe+0x267/0xaf0 [ 298.883816][ T30] __driver_probe_device+0x1ef/0x380 [ 298.889302][ T5633] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 298.908256][ T30] driver_probe_device+0x4f/0x240 [ 298.914062][ T30] __device_attach_driver+0x279/0x430 [ 298.924214][ T30] bus_for_each_drv+0x258/0x2f0 [ 298.929391][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 298.935562][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 298.941003][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 298.947863][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 298.953757][ T30] __device_attach+0x2c5/0x450 [ 298.959670][ T30] ? __pfx___device_attach+0x10/0x10 [ 298.965021][ T30] ? _raw_spin_unlock+0x28/0x50 [ 298.970336][ T30] device_initial_probe+0xa1/0xd0 [ 298.976343][ T30] bus_probe_device+0x12a/0x220 [ 298.981264][ T30] device_add+0x7e9/0xbb0 [ 298.986946][ T30] usb_set_configuration+0x1a87/0x2110 [ 298.992500][ T30] usb_generic_driver_probe+0x8d/0x150 [ 299.004502][ T30] usb_probe_device+0x1c4/0x3b0 [ 299.010566][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 299.016759][ T30] really_probe+0x267/0xaf0 [ 299.021631][ T30] __driver_probe_device+0x1ef/0x380 [ 299.030347][ T30] driver_probe_device+0x4f/0x240 [ 299.035571][ T5633] usb 1-1: device descriptor read/64, error -71 [ 299.042329][ T30] __device_attach_driver+0x279/0x430 [ 299.048028][ T30] bus_for_each_drv+0x258/0x2f0 [ 299.052942][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 299.059793][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 299.065498][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.070779][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.076974][ T30] __device_attach+0x2c5/0x450 [ 299.082189][ T30] ? __pfx___device_attach+0x10/0x10 [ 299.087856][ T30] ? _raw_spin_unlock+0x28/0x50 [ 299.092771][ T30] device_initial_probe+0xa1/0xd0 [ 299.098258][ T30] bus_probe_device+0x12a/0x220 [ 299.103160][ T30] device_add+0x7e9/0xbb0 [ 299.107979][ T30] usb_new_device+0xa08/0x16f0 [ 299.112821][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 299.118585][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.123860][ T30] hub_event+0x2a1c/0x4f30 [ 299.128867][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 299.134093][ T30] ? __pfx_hub_event+0x10/0x10 [ 299.139394][ T30] ? process_scheduled_works+0xa70/0x1860 [ 299.145869][ T5633] usb usb1-port1: attempt power cycle [ 299.153299][ T30] ? process_scheduled_works+0xa70/0x1860 [ 299.160531][ T30] ? process_scheduled_works+0xa70/0x1860 [ 299.167080][ T30] process_scheduled_works+0xb5d/0x1860 [ 299.172827][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.179333][ T30] ? assign_work+0x3d5/0x5e0 [ 299.183989][ T30] worker_thread+0xa53/0xfc0 [ 299.189069][ T30] kthread+0x389/0x470 [ 299.193206][ T30] ? __pfx_worker_thread+0x10/0x10 [ 299.198896][ T30] ? __pfx_kthread+0x10/0x10 [ 299.203566][ T30] ret_from_fork+0x514/0xb70 [ 299.208599][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 299.213770][ T30] ? __switch_to+0xc79/0x1410 [ 299.218914][ T30] ? __pfx_kthread+0x10/0x10 [ 299.223752][ T30] ret_from_fork_asm+0x1a/0x30 [ 299.232244][ T30] [ 299.236075][ T30] [ 299.236075][ T30] Showing all locks held in the system: [ 299.244049][ T30] 1 lock held by khungtaskd/30: [ 299.250407][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 299.271428][ T30] 2 locks held by getty/5387: [ 299.284347][ T30] #0: ffff8880362770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 299.307798][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 299.327174][ T30] 6 locks held by kworker/0:4/5633: [ 299.336203][ T30] #0: ffff888021eedd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 299.358852][ T30] #1: ffffc9000407fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 299.379497][ T30] #2: ffff88802a21c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 299.394071][ T30] #3: ffff88801f280568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 299.409459][ T30] #4: ffff888029049f60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 299.424068][ T30] #5: ffffffff8f686088 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840 [ 299.440360][ T30] 5 locks held by kworker/1:4/5706: [ 299.450233][ T30] #0: ffff888021eedd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 299.479169][ T30] #1: ffffc900045efc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 299.500285][ T30] #2: ffff88802a8801d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 299.509410][ T5633] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 299.523615][ T30] #3: ffff888028b631d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 299.540672][ T30] #4: ffff888034d321a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 299.555787][ T5633] usb 1-1: device descriptor read/8, error -71 [ 299.563506][ T30] 3 locks held by syz.3.1341/10074: [ 299.575143][ T30] 1 lock held by syz.1.1347/10102: [ 299.582951][ T30] 2 locks held by syz.2.1348/10095: [ 299.595143][ T30] #0: ffffffff8fdc8600 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 299.609778][ T30] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 299.629191][ T30] [ 299.632843][ T30] ============================================= [ 299.632843][ T30] [ 299.650264][ T30] NMI backtrace for cpu 1 [ 299.650278][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 299.650292][ T30] Tainted: [L]=SOFTLOCKUP [ 299.650295][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.650301][ T30] Call Trace: [ 299.650306][ T30] [ 299.650310][ T30] dump_stack_lvl+0xe8/0x150 [ 299.650327][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 299.650341][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 299.650353][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 299.650368][ T30] sys_info+0x135/0x170 [ 299.650379][ T30] watchdog+0xfd3/0x1030 [ 299.650397][ T30] ? watchdog+0x1c9/0x1030 [ 299.650413][ T30] kthread+0x389/0x470 [ 299.650440][ T30] ? __pfx_watchdog+0x10/0x10 [ 299.650453][ T30] ? __pfx_kthread+0x10/0x10 [ 299.650466][ T30] ret_from_fork+0x514/0xb70 [ 299.650478][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 299.650488][ T30] ? __switch_to+0xc79/0x1410 [ 299.650503][ T30] ? __pfx_kthread+0x10/0x10 [ 299.650516][ T30] ret_from_fork_asm+0x1a/0x30 [ 299.650534][ T30] [ 299.650538][ T30] Sending NMI from CPU 1 to CPUs 0: [ 299.766747][ C0] NMI backtrace for cpu 0 [ 299.766766][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.766787][ C0] Tainted: [L]=SOFTLOCKUP [ 299.766793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.766801][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 299.766823][ C0] Code: cb 7e 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 01 22 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 299.766836][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 299.766850][ C0] RAX: 000000000039fc23 RBX: ffffffff819a845a RCX: 0000000080000001 [ 299.766861][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa43ca RDI: ffffffff8c28b8e0 [ 299.766871][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 299.766882][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 299.766893][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 299.766903][ C0] FS: 0000000000000000(0000) GS:ffff88812529c000(0000) knlGS:0000000000000000 [ 299.766921][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.766931][ C0] CR2: 0000000000000000 CR3: 00000000366f0000 CR4: 00000000003526f0 [ 299.766944][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.766952][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 299.766962][ C0] Call Trace: [ 299.766968][ C0] [ 299.766973][ C0] default_idle+0x9/0x20 [ 299.766990][ C0] default_idle_call+0x72/0xb0 [ 299.767006][ C0] do_idle+0x36a/0x5f0 [ 299.767029][ C0] ? __pfx_do_idle+0x10/0x10 [ 299.767045][ C0] ? do_idle+0x11/0x5f0 [ 299.767063][ C0] cpu_startup_entry+0x43/0x60 [ 299.767079][ C0] rest_init+0x2de/0x300 [ 299.767098][ C0] start_kernel+0x38a/0x3e0 [ 299.767117][ C0] x86_64_start_reservations+0x24/0x30 [ 299.767138][ C0] x86_64_start_kernel+0x143/0x1c0 [ 299.767159][ C0] common_startup_64+0x13e/0x147 [ 299.767186][ C0] [ 299.825398][ T5633] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 299.836572][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 299.981848][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 299.992534][ T30] Tainted: [L]=SOFTLOCKUP [ 299.996844][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.006896][ T30] Call Trace: [ 300.010166][ T30] [ 300.013087][ T30] vpanic+0x56c/0xa60 [ 300.017092][ T30] ? __pfx___schedule+0x10/0x10 [ 300.021936][ T30] ? __pfx_vpanic+0x10/0x10 [ 300.026544][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 300.032705][ T30] panic+0xc5/0xd0 [ 300.036426][ T30] ? __pfx_panic+0x10/0x10 [ 300.040848][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 300.046215][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 300.052361][ T30] watchdog+0x102c/0x1030 [ 300.056691][ T30] ? watchdog+0x1c9/0x1030 [ 300.061109][ T30] kthread+0x389/0x470 [ 300.065193][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.069947][ T30] ? __pfx_kthread+0x10/0x10 [ 300.074526][ T30] ret_from_fork+0x514/0xb70 [ 300.079111][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 300.084220][ T30] ? __switch_to+0xc79/0x1410 [ 300.088926][ T30] ? __pfx_kthread+0x10/0x10 [ 300.093513][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.098279][ T30] [ 300.101664][ T30] Kernel Offset: disabled [ 300.105986][ T30] Rebooting in 86400 seconds..