last executing test programs: 7.323091959s ago: executing program 3 (id=4046): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04"], 0x22) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x5, 0x6, 0x8, 0x8, 0x1}}}}, 0x17) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x0, 0x4000, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23b3b6}) r8 = dup3(r2, r7, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa194f}) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f0000000180)={0x18, r10}) r11 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f0000000240)='/de4\x12O\x8e\x9cv/q-\xa8\xb7t\xb5\xbe;\xe2\x028s;\xfa\xb7N\xd1\xdd\xfc\x1c2\xd7^\x82\xcfM\xab\xb8\xb7\x93\xce\xfc\xb8\xad@\xd2c6\x88\x16gX}\xa4\xceO\xf7a\xd7d\xb2\x89Q$\xbf\x98\xfa\x8b\xf1\xc7\xd5\x00\xcdi\x8aT\xfd|\xe0', 0x0, r0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) r12 = memfd_secret(0x0) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r13, 0x0, r12) ioctl$LOOP_SET_STATUS(r12, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x61d6d4e6, 0x3, 0xf4780000, 0x19, "7763a42777876db7d54b45f9d97f1e65b61f41db70ef6c17c7c1aec2b6e5b08ff6c9540c00c825b4e33e705fddf3b05c2a4746015de5cd89e90f3a4995662354", "ec6324a74111bf1f7afe1c89c5fc3da1ce646cc5bd8f5ea59ed90bf016e6cf95", [0xfffffffffffffffb, 0x2]}) r14 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f00000000c0)) 6.751063118s ago: executing program 3 (id=4049): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x1}}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x4010, r1, 0x132ca000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="68c8a8c48175f53d9f48b516caec7a4815e8b9ebe02041f0f983b69ef82e2238ba32bd3e8e7eaec3bd28c33192d490e638b80cc317d2281078cf90379f291f6fcc9220ded4c104ba059f363426cc69651ec96c471376a4112954b31c1d791293de1344524bd48cd60446dd7f8822c135c1c09f1ecd9f8b66b7bea719898e906b91819ef362db034ed0e22ba652e5df4fc3abde6d655672a52719041d990371f60758b149b3e7ed4c8af7289b59790496d805ba5d9fb8a9da66a33e82a6e87b5b107f5b01de9d420a8a82f5a2da6ec3d93c5343"], 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r3, &(0x7f0000000480)=[@t={0x81, 0x0, 0x0, 0x0, @generic}, @t={0x81, 0x1, 0x2, 0x0, @generic}], 0x10) 5.734831197s ago: executing program 3 (id=4052): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1032, 0xffffffffffffffff, 0x10000000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x13, r3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000b0000000000000008000f0001000000", 0x24) syz_io_uring_submit(r4, r0, &(0x7f00000000c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r10 = dup2(r9, r8) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x420102) r11 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r11, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r12, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x2, 0x6}, &(0x7f0000000280)=0x8) 4.374347263s ago: executing program 2 (id=4056): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x2, 0xc0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@remote}, {@multicast2, 0x7}, {@private}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) 4.313323773s ago: executing program 3 (id=4058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000950000000000b500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000180), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0xfdef}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x12f, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x7, "8b7668a21729e4"}, {0xdd, 0xbb, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd528566752ef4090016895d45162f023cde71dbd618a52517986b705c5e653ee0e7edda93407e44be1c203b816d0181c08d643268af338ccd2d0a90dccc0d6a01613fb6ae8a1424"}, {0xdd, 0x3b, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b673369573"}, {0xdd, 0x6, "85251095238f"}]}}]}, 0x14c}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) dup2(r8, r8) 4.243164342s ago: executing program 1 (id=4059): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)) 4.123086875s ago: executing program 4 (id=4061): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(0x0, 0x14) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000b80)) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000001500)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0xe729, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffc, 0x5, 0x0, 0x0, 0x67, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(0xffffffffffffffff, 0x80080401) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000200)=0x4) r5 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000180)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) syz_emit_vhci(0x0, 0xffffffffffffffc7) socket$xdp(0x2c, 0x3, 0x0) 3.707138353s ago: executing program 0 (id=4062): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xc8) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a", 0x10}], 0x1}}], 0x1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x348}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.684099522s ago: executing program 2 (id=4063): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000840)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'ip6erspan0\x00', @random="201a4847569b"}) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f000000000000000055211c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ae2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b4bb9aa87029d33d61dd5c844024ba757371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2980005a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed191a11f7a67db5170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e03a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada81ee50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bb45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a5e1f12ae32c6a647def9546abb7a2d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0252f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a103ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de08bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bbe0f10521862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfbd36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d30edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a7300000000000000000000000000000000404f3a886b412981a566dc0f6ae8d5847217cf092859c6c18ee2f06b5bf5948a22e32fb065d1c7cb1d1a2b1cdf2623e39398b2eceedd92eaccf489f48e7263c45e7cdb37846d80d475e8f009ccee601a04b51e2ebff23ab218185ad2ee3c5e484c38da0fba7ff8dadda78097a0f8817a98dc066b2af500031e62b98bcbcb9f0fa3f231d078554d22d9405a0a5902fba4a788c66cf4ef92e00d7d5636c7cd3f45409d94967aaab0da3b11fda49cc560f77290e50714d1c49a70b90ba8e20b55134ee79dc97877cb41028e0a7a21da3fd3935e44ad2e1bc4cfea"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3}) shutdown(r5, 0x0) 3.283033091s ago: executing program 0 (id=4064): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x6558) 3.07102469s ago: executing program 3 (id=4065): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000181000/0xf000)=nil, 0xf000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0xa00, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0xa, 0x3, 0x4) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0xe7, 0x3, 0x7, 0x0, 0x80000000000, 0x0, 0xc636}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8e80) socket$netlink(0x10, 0x3, 0x2) 3.070571033s ago: executing program 4 (id=4066): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) 3.028230997s ago: executing program 0 (id=4067): r0 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) mremap(&(0x7f0000349000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000635000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x10000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gre0\x00', 0x0}) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}, {&(0x7f0000000040)="dc812b8dbb489522cf252b02a8bc8dcc", 0x10}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2161, 0x0) 2.964874504s ago: executing program 4 (id=4068): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) dup2(0xffffffffffffffff, r0) 2.787025539s ago: executing program 4 (id=4069): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8, 0x10, 0x0, 0xffffff00, {{0x10, 0x4, 0x1, 0x3, 0x40, 0x68, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp={0x44, 0x2c, 0xab, 0x0, 0x3, [0x4, 0x4999, 0x4, 0x4, 0x9, 0x1000, 0xfffffffa, 0xfffffc00, 0x7ff, 0x0]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0xf5628a429645ff75, &(0x7f00000000c0)={@empty, @multicast2, r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f0983ae94d81b524b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e190d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de0100b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687e9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c42ecaf710f95e63007000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b579544332402d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b4306301855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d70f6dde3fca49b70f8977ab587b441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a00"/5047], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x0, 0x60000000, 0xffffff1f, 0x0, &(0x7f0000000180)="9a", 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) sendmmsg$sock(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="897116530ec6795ff89160d39d6d4d5dbd80ea7fda00e282a9a59b3d6ad8b4b94866b91dbd68d7f8e08aaade5f117c4ed1284d9bbdb4d2fe4c32ff6507b71eacc2574966", 0x44}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0xd2}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xe78f}}, @timestamping={{0x14, 0x1, 0x25, 0x92e2}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="c245b20e8733f2f34ea54008e0cb6535224963137d435a7c668fb137209cb0cb79a6076e7f75eb3e4697cc7ebac3c477bc37eb0c5ef03716705afb9559f797f45b661fa0a983945206d7e698ba0c66d22280a871b250013cb5961f", 0x5b}, {&(0x7f00000002c0)="2ac7ec799f1f3d8afbd07039b300eabd2476ce3645f13beacce5978b986bd9af4dfac0cdfcb9c171966ef28f9720954ac8ecff2ce069ba5b2c019e01bc05bec7dd1983a4651e6ede103a690b48563f47f8ccae33ac44fc3b5b4fe7becc3d7da65dbee5d6553b255efbb32ca0fa93b4e3e5111f52e88fdb194177e3a9a23b09bb00ae67455379508bafe39166bad68e7f92af609ba3a66e0acb982f97d541e3b1f2d52ae5bf", 0xa5}], 0x2, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}], 0x48}}, {{&(0x7f0000000540)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="a5091ecc85a1d22f74bbcac46d157c096df79ba2b5810ae0dc7cb323e58303d58d6c275137bab698ef56c2121a1af4dec03a2dfac9e9bfed87906d90a4295f6009fd5102cc56b29cb128a4711bebe620745b2329f7ea8e9f74349147b940c8d4051ef283f8f13ae3d144f463df77a7e469c3ee36ce4523a5b808695b1b90cca9d5d1d6357c8c9363f3c9f56adf1acca9169a302af667da88f67f8d03d15651ffd46b61f63ccd9b4b17e69c81f3f24a7229e89faf9d9b1c3ed9e769b750ab053186c3878080922c1702760ccdd9491d0fb62ed407334cff7c2f3b9b862817b066d5", 0xe1}, {&(0x7f00000006c0)="fb2b18abf2e84e96b9c66a086fbe14f46afab05790afe50f07fdfbe55a03bff03825751dd3a8b200ae285ff11cd8ce1c43ea202db055f0b34a52871a40add7ab568cf65ca4a8d2ca523e5ca4512fd5958dee1578dda16549460c0e438300430dc62e1fe237eaa4ebd4fea6c5efba34729e7d222b43b89623e707292db740d9deedbb624bd65f40f038f1", 0x8a}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x8d}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xc0}}], 0x3, 0x8841) 2.65849122s ago: executing program 4 (id=4070): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x40006828, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x0, 0x9]) unshare(0x50000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', '', [{0x20, '\x00'}], 0xa, "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"/278}, 0xfffffea2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) dup(r3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000480)=0xd97, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_setup(0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.560328208s ago: executing program 2 (id=4071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 2.551917076s ago: executing program 0 (id=4072): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r2 = socket(0x40000000015, 0x0, 0xfffffffd) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0xffffffff}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20200, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000400)=ANY=[], 0xfffffecc) r5 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x3ff}, 0x0, 0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)="f4", 0x1}) io_uring_enter(r5, 0x1ffe, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000010140)=0x8, 0x4) capset(0x0, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') setns(r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, 0x0) 2.444139114s ago: executing program 2 (id=4073): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x2, 0xc0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@remote}, {@multicast2, 0x7}, {@private}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) 2.283905712s ago: executing program 1 (id=4074): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xc8) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a", 0x10}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x348}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.045231161s ago: executing program 1 (id=4075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000950000000000b500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000180), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0xfdef}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x12f, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x7, "8b7668a21729e4"}, {0xdd, 0xbb, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd528566752ef4090016895d45162f023cde71dbd618a52517986b705c5e653ee0e7edda93407e44be1c203b816d0181c08d643268af338ccd2d0a90dccc0d6a01613fb6ae8a1424"}, {0xdd, 0x3b, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b673369573"}, {0xdd, 0x6, "85251095238f"}]}}]}, 0x14c}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) dup2(r8, r8) 1.971160249s ago: executing program 2 (id=4076): mknod(0x0, 0x8000, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="8ab6a1a3d9397116c2485dd1a366cd6571a551cf06329df827e60f11f1f7cef32034a69b60add1376d93fe6890e681463944a96a524609fe5d6ae5517e09f20bc6c7928b25f724f6cbaa9e9971453b74752998416bae4dab27b838242c06dcd03a7baa5a48bc9726bcbfaeb743a0afe5a9504a54b1f5492d3ee153ff87ea44cce35929c5ac965debe7cbdfd46b0057392f1f98f8ce6bdfdf3ab6dc024d7489ad23999617c87b615ae0", 0xa9) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.519871601s ago: executing program 0 (id=4077): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000181000/0xf000)=nil, 0xf000}, 0x5}) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) 1.30292621s ago: executing program 2 (id=4078): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x37c, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c5be8ffa3264e3951dd318363e02d36fa69ecaa3978b6c471c9dde0052632d1ebe277982fb0c900dd3f461257ad46a69b8f1e9bc36d8992426aa4adddc024bb74a39539f1cf801502cbd0d7acb8b2c5d9778a8253d2c8746d5b252a32f67c94cb8916a6310c1af0c0eb6f09a07d5020948a9c0f147c01d4a8b3af25686eadef9eaed2623cb012521ab86453e71bf351c130b6d33ffc388afdb5b2b7c16c1002a0640dd73e7a7e6a852dd2c75209d711a50363e46116ad2a14483c3729a81e4ef2fed2f18732f0038e079e561eea96eb665219070f42139c627dd5f185d23fdc316d38eb99826bcb63938d6cd1af3b5274f57009f87854ad98bef03025c32e"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r7, 0x0, {}, 0xff}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.111098548s ago: executing program 1 (id=4079): r0 = socket(0x10, 0x3, 0x0) r1 = io_uring_setup(0x48ae, &(0x7f00000000c0)={0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0x1000)=nil, 0x1000}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4a) socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r2, 0x10d, 0xcc, &(0x7f00000002c0), &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880), 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreq(r4, 0x10d, 0x2, &(0x7f0000000000)={@multicast1, @broadcast}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(0xffffffffffffffff, &(0x7f0000005740)=[{&(0x7f0000000340)='\n]', 0x2}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x8, &(0x7f0000000100)="0400000000004000", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 945.666362ms ago: executing program 1 (id=4080): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044325, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000200)=[{0x9, 0x0, 0x0, 0x7ffffff8}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f00000005c0)=[{0x0, 0x16, 0x3, 0x7}, {0x16, 0x40}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x1c960f5e}], 0x1, 0x0, 0x0) r3 = creat(0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000600), 0x8, 0x121700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000280), &(0x7f0000000180)=r2}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x8399, 0x10}, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x1) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000300)=""/1, &(0x7f0000000580)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000400)='GPL\x00', 0xe, 0xf8, &(0x7f0000000b80)=""/248, 0x21880, 0x24, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x100}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x6, 0x6}, {0x1, 0x2, 0x3, 0xc}, {0x0, 0x2, 0x1, 0x3}], 0x10, 0x1000}, 0x90) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x80, 0x17, 0x303, 0x0, 0x0, 0x0, 0x0}) openat(r1, 0x0, 0x40, 0x27) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000002d9, &(0x7f0000000680)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 497.801544ms ago: executing program 4 (id=4081): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000840)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'ip6erspan0\x00', @random="201a4847569b"}) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f000000000000000055211c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ae2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b4bb9aa87029d33d61dd5c844024ba757371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2980005a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed191a11f7a67db5170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e03a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada81ee50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bb45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a5e1f12ae32c6a647def9546abb7a2d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0252f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a103ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de08bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bbe0f10521862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfbd36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d30edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a7300000000000000000000000000000000404f3a886b412981a566dc0f6ae8d5847217cf092859c6c18ee2f06b5bf5948a22e32fb065d1c7cb1d1a2b1cdf2623e39398b2eceedd92eaccf489f48e7263c45e7cdb37846d80d475e8f009ccee601a04b51e2ebff23ab218185ad2ee3c5e484c38da0fba7ff8dadda78097a0f8817a98dc066b2af500031e62b98bcbcb9f0fa3f231d078554d22d9405a0a5902fba4a788c66cf4ef92e00d7d5636c7cd3f45409d94967aaab0da3b11fda49cc560f77290e50714d1c49a70b90ba8e20b55134ee79dc97877cb41028e0a7a21da3fd3935e44ad2e1bc4cfea"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3}) shutdown(r5, 0x0) 497.312885ms ago: executing program 0 (id=4082): fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000080), 0x4e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000fbf80e1004231f02af5f0102030109021200010000000009"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3f6e, &(0x7f0000000340)={0x0, 0x0, 0x200, 0xfffffffd, 0x340}, &(0x7f0000000140), &(0x7f0000000100)) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8a01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 560.445µs ago: executing program 3 (id=4083): socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e000000100000000000000000000000000000000000000000200001000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c30c00"/112], 0xb8}}, 0x0) 0s ago: executing program 1 (id=4084): socket$packet(0x11, 0x0, 0x300) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20", @ANYRES32], 0x7) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r2, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000183afffe80000000000000000000000000f9baff4f"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): man-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.186824][T20849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.218386][ T5094] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.232269][ T5094] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 921.253405][ T5094] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 921.264807][ T5094] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 921.287029][ T5094] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 921.340598][ T5094] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 921.388168][ T5094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.422938][ T5094] usb 3-1: Product: syz [ 921.432854][T20849] hsr_slave_0: entered promiscuous mode [ 921.435994][ T5094] usb 3-1: Manufacturer: syz [ 921.448548][T20849] hsr_slave_1: entered promiscuous mode [ 921.453392][ T5094] usb 3-1: SerialNumber: syz [ 921.459966][T20849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.468007][T20276] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 921.499207][T20849] Cannot create hsr debugfs directory [ 921.526765][ T5091] Bluetooth: Unexpected continuation frame (len 18) [ 921.616776][ T1050] hsr_slave_0: left promiscuous mode [ 921.627727][ T1050] hsr_slave_1: left promiscuous mode [ 921.645528][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.658272][T20276] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 921.677635][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.685004][T20276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.706316][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.719066][T20276] usb 4-1: config 0 descriptor?? [ 921.734992][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.744501][T20276] cp210x 4-1:0.0: cp210x converter detected [ 921.788517][ T1050] veth1_macvtap: left promiscuous mode [ 921.794387][ T1050] veth0_macvtap: left promiscuous mode [ 921.801419][ T1050] veth0_vlan: left promiscuous mode [ 921.831407][ T29] audit: type=1326 audit(1720373832.648:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.1.3724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8fff75bd9 code=0x0 [ 922.290742][ T5091] Bluetooth: hci1: command tx timeout [ 922.939850][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3725'. [ 923.332583][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 923.446128][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 924.269095][T20276] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 924.276838][T20276] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 924.321221][T20276] usb 4-1: cp210x converter now attached to ttyUSB0 [ 924.360006][T20276] usb 4-1: USB disconnect, device number 12 [ 924.368583][ T5091] Bluetooth: hci1: command tx timeout [ 924.405698][T20276] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 924.416210][T20276] cp210x 4-1:0.0: device disconnected [ 924.807525][ T5094] cdc_ncm 3-1:1.0: bind() failure [ 924.863652][ T5094] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 924.910328][ T5094] cdc_ncm 3-1:1.1: bind() failure [ 924.954426][ T5094] usb 3-1: USB disconnect, device number 18 [ 924.971846][T20703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.263260][T20703] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.339792][ T5091] Bluetooth: Unexpected continuation frame (len 18) [ 925.521054][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.528280][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.676357][T20276] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.683584][T20276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.832755][ T29] audit: type=1326 audit(1720373836.648:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20984 comm="syz.3.3733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x0 [ 925.925576][T20989] FAULT_INJECTION: forcing a failure. [ 925.925576][T20989] name failslab, interval 1, probability 0, space 0, times 0 [ 925.970084][T20989] CPU: 1 PID: 20989 Comm: syz.2.3734 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 925.980311][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 925.990628][T20989] Call Trace: [ 925.993934][T20989] [ 925.996895][T20989] dump_stack_lvl+0x241/0x360 [ 926.001613][T20989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.004862][T20703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.006844][T20989] ? __pfx__printk+0x10/0x10 [ 926.018221][T20989] ? __pfx___might_resched+0x10/0x10 [ 926.023569][T20989] should_fail_ex+0x3b0/0x4e0 [ 926.028277][T20989] ? tomoyo_encode2+0x27e/0x550 [ 926.033313][T20989] should_failslab+0x9/0x20 [ 926.037820][T20989] __kmalloc_noprof+0xd8/0x400 [ 926.042579][T20989] tomoyo_encode2+0x27e/0x550 [ 926.047251][T20989] tomoyo_check_unix_address+0x330/0x880 [ 926.053242][T20989] ? tomoyo_check_unix_address+0x15a/0x880 [ 926.059124][T20989] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 926.065276][T20989] tomoyo_socket_connect_permission+0x23a/0x370 [ 926.071515][T20989] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 926.078297][T20989] ? vfs_write+0x7c4/0xc90 [ 926.082764][T20989] ? __pfx_current_check_access_socket+0x10/0x10 [ 926.089116][T20989] ? __might_fault+0xaa/0x120 [ 926.093825][T20989] ? __might_fault+0xc6/0x120 [ 926.098521][T20989] security_socket_connect+0x75/0xb0 [ 926.103820][T20989] __sys_connect+0x1fe/0x310 [ 926.108430][T20989] ? __pfx___sys_connect+0x10/0x10 [ 926.113561][T20989] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 926.119916][T20989] ? do_syscall_64+0x100/0x230 [ 926.124816][T20989] __x64_sys_connect+0x7a/0x90 [ 926.129619][T20989] do_syscall_64+0xf3/0x230 [ 926.134136][T20989] ? clear_bhb_loop+0x35/0x90 [ 926.138799][T20989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.144714][T20989] RIP: 0033:0x7f6e40375bd9 [ 926.149147][T20989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.168761][T20989] RSP: 002b:00007f6e411e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 926.177181][T20989] RAX: ffffffffffffffda RBX: 00007f6e40503f60 RCX: 00007f6e40375bd9 [ 926.185153][T20989] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 926.193139][T20989] RBP: 00007f6e411e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 926.201096][T20989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.209489][T20989] R13: 000000000000000b R14: 00007f6e40503f60 R15: 00007f6e4062fa68 [ 926.217461][T20989] [ 926.311127][T20703] veth0_vlan: entered promiscuous mode [ 926.342323][T20703] veth1_vlan: entered promiscuous mode [ 926.438395][ T5091] Bluetooth: hci1: command tx timeout [ 926.596493][T20849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 926.635005][T20703] veth0_macvtap: entered promiscuous mode [ 926.668878][T20849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 926.690532][T20849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 926.712165][T20703] veth1_macvtap: entered promiscuous mode [ 926.724583][T20849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 926.775099][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.790163][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.801595][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.814849][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.831242][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.845600][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.863171][T20703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.910405][ T5142] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 926.915504][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.938187][ T5094] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 926.953617][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.965895][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.983864][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.994204][T20703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.006684][T20703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.019708][T20703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.042811][T20703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.058793][T20703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.067631][T20703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.089557][T20703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.128101][ T5142] usb 3-1: Using ep0 maxpacket: 32 [ 927.140755][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.140803][ T5094] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 927.164123][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.171300][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.184577][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.195797][ T5142] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 927.201018][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.258763][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.268120][ T5142] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 927.278894][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.285900][ T5142] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 927.311343][ T5142] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 927.318937][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.330543][ T5142] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.350731][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.368033][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.390912][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.404096][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.407735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.424687][T20849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.425213][ T5142] usb 3-1: Product: syz [ 927.435860][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.438865][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.443715][ T5142] usb 3-1: Manufacturer: syz [ 927.457441][ T5142] usb 3-1: SerialNumber: syz [ 927.459412][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.473792][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.492116][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.501770][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.514416][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.533170][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.541837][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.542889][T20849] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.556909][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.570268][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.589692][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.596921][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.604811][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.613735][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.636971][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.644207][ T6051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.653750][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.672113][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.683307][ T5094] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 927.715546][ T5094] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 927.740281][ T5142] cdc_ncm 3-1:1.0: bind() failure [ 927.755878][ T5094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.760562][ T5142] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 927.777448][ T5142] cdc_ncm 3-1:1.1: bind() failure [ 927.813210][ T5094] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 927.813365][ T5142] usb 3-1: USB disconnect, device number 19 [ 927.832382][ T5094] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 927.877329][ T5094] usb 2-1: Product: syz [ 927.907042][ T5094] usb 2-1: Manufacturer: syz [ 927.923756][ T5094] usb 2-1: SerialNumber: syz [ 927.930292][T20849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.944460][ T5094] usb 2-1: config 0 descriptor?? [ 927.970530][ T5094] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 928.065249][T20849] veth0_vlan: entered promiscuous mode [ 928.123208][T20849] veth1_vlan: entered promiscuous mode [ 928.236415][T20849] veth0_macvtap: entered promiscuous mode [ 928.271026][T20849] veth1_macvtap: entered promiscuous mode [ 928.337000][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.338802][ T9] usb 2-1: USB disconnect, device number 124 [ 928.347555][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 928.372019][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.394442][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.413226][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.423070][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 928.433320][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.457511][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.473115][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.495075][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.512313][T20849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.538679][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.554327][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.575416][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.586887][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.603260][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.614491][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.629307][T20849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.649045][T20849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.693680][T20849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.715856][T20849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.725575][T20849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.735932][T20849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.747826][T20849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.948237][ T5094] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 928.996426][T21002] netlink: 'syz.1.3737': attribute type 28 has an invalid length. [ 929.005074][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.006619][T21002] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3737'. [ 929.049429][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.148456][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.163380][ T5094] usb 4-1: too many configurations: 245, using maximum allowed: 8 [ 929.173375][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.183784][ T5094] usb 4-1: config index 0 descriptor too short (expected 64797, got 132) [ 929.193494][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.249603][ T5094] usb 4-1: config index 1 descriptor too short (expected 64797, got 132) [ 929.268427][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.311434][ T5094] usb 4-1: config index 2 descriptor too short (expected 64797, got 132) [ 929.361420][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.417997][ T5094] usb 4-1: config index 3 descriptor too short (expected 64797, got 132) [ 929.433489][ T29] audit: type=1326 audit(1720373840.248:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.0.3746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1944975bd9 code=0x0 [ 929.488688][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.535375][ T5094] usb 4-1: config index 4 descriptor too short (expected 64797, got 132) [ 929.554687][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.589433][ T5094] usb 4-1: config index 5 descriptor too short (expected 64797, got 132) [ 929.608009][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.652147][ T5094] usb 4-1: config index 6 descriptor too short (expected 64797, got 132) [ 929.680056][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.709293][ T5094] usb 4-1: config index 7 descriptor too short (expected 64797, got 132) [ 929.728048][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.741500][ T5094] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 929.751008][ T5094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.759133][ T5094] usb 4-1: Product: syz [ 929.763320][ T5094] usb 4-1: Manufacturer: syz [ 929.789813][ T5094] usb 4-1: SerialNumber: syz [ 929.821297][ T5094] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 929.921135][ T6051] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 930.759076][ T5144] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 930.959689][ T5144] usb 2-1: Using ep0 maxpacket: 32 [ 930.996551][ T5144] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.998374][ T6051] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 931.029988][ T5144] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.065736][ T5144] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.079414][ T5144] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 931.105448][ T6051] ath9k_htc: Failed to initialize the device [ 931.152071][ T5144] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 931.193297][ T6051] usb 4-1: ath9k_htc: USB layer deinitialized [ 931.215719][ T5144] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 931.268536][ T5144] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.278003][ T5144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.292012][ T5144] usb 2-1: Product: syz [ 931.313706][ T5144] usb 2-1: Manufacturer: syz [ 931.333872][ T5144] usb 2-1: SerialNumber: syz [ 931.606862][ T5144] cdc_ncm 2-1:1.0: bind() failure [ 931.637396][T21094] kvm: pic: non byte write [ 931.654725][ T5144] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 931.670790][ T5144] cdc_ncm 2-1:1.1: bind() failure [ 931.697459][ T5144] usb 2-1: USB disconnect, device number 125 [ 932.192369][T21103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3763'. [ 932.209662][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.217719][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.269075][T21103] bridge_slave_1: left allmulticast mode [ 932.274811][T21103] bridge_slave_1: left promiscuous mode [ 932.296936][T21103] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.366616][T21103] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 932.610584][ T5094] usb 4-1: USB disconnect, device number 13 [ 933.028267][ T5144] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 933.229637][ T5144] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 933.264168][ T5144] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 933.306904][ T5144] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 933.336425][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.358210][ T5145] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 933.377148][ T5144] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 933.558719][ T5091] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 933.568682][ T5091] Bluetooth: hci1: Injecting HCI hardware error event [ 933.577619][ T5091] Bluetooth: hci1: hardware error 0x00 [ 933.588017][ T5144] gspca_sn9c2028: read1 error -32 [ 933.597264][ T5145] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 933.612636][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.626022][ T5144] gspca_sn9c2028: read1 error -32 [ 933.677094][ T5145] usb 2-1: config 0 descriptor?? [ 933.689151][ T5145] cp210x 2-1:0.0: cp210x converter detected [ 934.320431][ T5145] usb 2-1: cp210x converter now attached to ttyUSB0 [ 934.363282][ T2807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.641327][T21132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.716360][ T2807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.838292][ T6052] usb 2-1: USB disconnect, device number 126 [ 934.874774][ T6052] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 934.911912][ T2807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.929735][ T6052] cp210x 2-1:0.0: device disconnected [ 935.099950][T15592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 935.112046][T15592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 935.126856][T15592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 935.131633][T21163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3781'. [ 935.139180][ T2807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.154934][T15592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 935.168056][T15592] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 935.175708][T15592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 935.247303][T21163] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 935.663100][ T9] usb 3-1: USB disconnect, device number 20 [ 935.728113][ T5091] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 935.985634][ T2807] bridge_slave_0: left allmulticast mode [ 935.991844][ T2807] bridge_slave_0: left promiscuous mode [ 935.997639][ T2807] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.748082][T15592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 936.774706][T15592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 936.792272][T15592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 936.802462][T15592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 936.811460][T15592] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 936.822769][T15592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.242474][ T5091] Bluetooth: hci2: command tx timeout [ 937.383603][ T2807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.403885][ T2807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.432458][ T2807] bond0 (unregistering): Released all slaves [ 937.508376][ T5094] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 937.580400][T21165] chnl_net:caif_netlink_parms(): no params data found [ 937.731109][ T5094] usb 4-1: Using ep0 maxpacket: 32 [ 937.772795][ T5094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.795893][ T5094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.822714][ T5094] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 937.848079][ T5094] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 937.881712][ T5094] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 937.897840][ T5094] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 937.915709][ T5094] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 937.942011][ T5094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.963731][ T5094] usb 4-1: Product: syz [ 937.972773][ T5094] usb 4-1: Manufacturer: syz [ 937.983333][ T5094] usb 4-1: SerialNumber: syz [ 938.272795][ T5094] cdc_ncm 4-1:1.0: bind() failure [ 938.319471][ T5094] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 938.326344][ T5094] cdc_ncm 4-1:1.1: bind() failure [ 938.414490][ T5094] usb 4-1: USB disconnect, device number 14 [ 938.549817][T21165] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.585970][T21165] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.623969][T21165] bridge_slave_0: entered allmulticast mode [ 938.661934][T21165] bridge_slave_0: entered promiscuous mode [ 938.718745][T21165] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.733509][T21165] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.741446][T21165] bridge_slave_1: entered allmulticast mode [ 938.755472][T21165] bridge_slave_1: entered promiscuous mode [ 938.785160][ T2807] hsr_slave_0: left promiscuous mode [ 938.806834][ T2807] hsr_slave_1: left promiscuous mode [ 938.838428][ T2807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.845934][ T2807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.880796][ T2807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.908255][ T2807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.918540][ T5091] Bluetooth: hci4: command tx timeout [ 939.011147][ T2807] veth1_macvtap: left promiscuous mode [ 939.028021][T20276] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 939.031147][ T2807] veth0_macvtap: left promiscuous mode [ 939.063022][ T2807] veth1_vlan: left promiscuous mode [ 939.096905][ T2807] veth0_vlan: left promiscuous mode [ 939.214508][T20276] usb 3-1: Using ep0 maxpacket: 32 [ 939.225401][T20276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.279736][T20276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.291547][T20276] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.303053][T20276] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 939.313308][T20276] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 939.323457][ T5091] Bluetooth: hci2: command tx timeout [ 939.330748][T20276] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 939.343782][T20276] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 939.360032][T20276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.372971][T20276] usb 3-1: Product: syz [ 939.377277][T20276] usb 3-1: Manufacturer: syz [ 939.382700][T20276] usb 3-1: SerialNumber: syz [ 939.528196][ T5145] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 939.742576][ T5145] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 939.759212][ T5145] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 939.776944][ T5145] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 939.786355][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.809807][ T5145] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 939.943699][ T2807] team0 (unregistering): Port device team_slave_1 removed [ 939.973653][ T5091] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 939.985355][ T5091] Bluetooth: hci0: Injecting HCI hardware error event [ 939.995498][T15592] Bluetooth: hci0: hardware error 0x00 [ 940.016553][ T5145] gspca_sn9c2028: read1 error -32 [ 940.034594][ T5145] gspca_sn9c2028: read1 error -32 [ 940.054301][ T2807] team0 (unregistering): Port device team_slave_0 removed [ 940.785867][T20276] cdc_ncm 3-1:1.0: bind() failure [ 940.801753][T21165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.816394][T20276] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 940.839408][T21165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.839480][T20276] cdc_ncm 3-1:1.1: bind() failure [ 940.882443][T20276] usb 3-1: USB disconnect, device number 21 [ 940.982855][T21165] team0: Port device team_slave_0 added [ 940.990059][T21248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3795'. [ 940.999619][ T5091] Bluetooth: hci4: command tx timeout [ 941.001560][T21165] team0: Port device team_slave_1 added [ 941.132451][T21248] bridge_slave_1: left allmulticast mode [ 941.148403][T21248] bridge_slave_1: left promiscuous mode [ 941.154325][T21248] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.190829][T21248] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 941.291001][T21165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.298514][T21165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.325511][T21165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.366349][T21165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.387515][T21165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.433656][ T5091] Bluetooth: hci2: command tx timeout [ 941.455211][T21165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.519319][T21196] chnl_net:caif_netlink_parms(): no params data found [ 941.917693][T21165] hsr_slave_0: entered promiscuous mode [ 941.938463][T21165] hsr_slave_1: entered promiscuous mode [ 941.955581][T21165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.963769][T21165] Cannot create hsr debugfs directory [ 942.058303][T21196] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.065580][T21196] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.073264][T21196] bridge_slave_0: entered allmulticast mode [ 942.090794][T21196] bridge_slave_0: entered promiscuous mode [ 942.118276][T15592] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 942.143058][ T6051] usb 4-1: USB disconnect, device number 15 [ 942.295179][ T2807] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.346089][T21196] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.379752][T21196] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.392118][T21196] bridge_slave_1: entered allmulticast mode [ 942.400654][T21196] bridge_slave_1: entered promiscuous mode [ 942.490761][ T2807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.516505][T21196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.582249][T21196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.682081][ T2807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.784853][T21287] netlink: 'syz.4.3801': attribute type 10 has an invalid length. [ 942.836673][T21287] team0: Port device netdevsim0 added [ 942.851807][T21289] netlink: 'syz.4.3801': attribute type 10 has an invalid length. [ 942.903310][T21289] team0: Port device netdevsim0 removed [ 942.926438][T21289] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 942.986435][ T2807] bond0: (slave netdevsim0): Releasing backup interface [ 942.996438][ T2807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.028045][T21297] hub 9-0:1.0: USB hub found [ 943.037168][T21297] hub 9-0:1.0: 8 ports detected [ 943.038943][T21196] team0: Port device team_slave_0 added [ 943.079700][T15592] Bluetooth: hci4: command tx timeout [ 943.104014][T21196] team0: Port device team_slave_1 added [ 943.363219][T21196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.377042][T21196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.424664][T21309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3806'. [ 943.464878][T21196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.478055][T15592] Bluetooth: hci2: command tx timeout [ 943.496005][T21196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.503257][T21196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.531453][T21196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.618558][T21309] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 944.091485][T21196] hsr_slave_0: entered promiscuous mode [ 944.104718][T21196] hsr_slave_1: entered promiscuous mode [ 944.122328][T21196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.149257][T21196] Cannot create hsr debugfs directory [ 944.198244][T20276] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 944.384066][ T2807] bridge_slave_1: left allmulticast mode [ 944.395646][ T2807] bridge_slave_1: left promiscuous mode [ 944.406646][ T2807] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.429670][T20276] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 944.460933][T20276] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 944.471541][ T2807] bridge_slave_0: left allmulticast mode [ 944.484457][T20276] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 944.496563][ T2807] bridge_slave_0: left promiscuous mode [ 944.513689][T20276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.525474][ T2807] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.555967][T20276] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 944.754546][T20276] gspca_sn9c2028: read1 error -32 [ 944.776465][T20276] gspca_sn9c2028: read1 error -32 [ 944.808260][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 944.998363][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 945.010304][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.028113][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.044540][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.059493][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 945.075467][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 945.086575][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 945.115522][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 945.145466][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.154253][ T9] usb 5-1: Product: syz [ 945.159348][T15592] Bluetooth: hci4: command tx timeout [ 945.171851][ T9] usb 5-1: Manufacturer: syz [ 945.176614][ T9] usb 5-1: SerialNumber: syz [ 945.212095][ T2807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.245845][ T2807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.271587][ T2807] bond0 (unregistering): Released all slaves [ 945.498051][ T2807] tipc: Disabling bearer [ 945.520283][ T2807] tipc: Left network mode [ 945.537360][ T9] cdc_ncm 5-1:1.0: bind() failure [ 945.578154][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 945.605428][ T9] cdc_ncm 5-1:1.1: bind() failure [ 945.654451][ T9] usb 5-1: USB disconnect, device number 15 [ 946.050758][ T2807] hsr_slave_0: left promiscuous mode [ 946.057133][ T2807] hsr_slave_1: left promiscuous mode [ 946.064499][ T2807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.076173][ T2807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.086093][ T2807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.095592][ T2807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.159964][ T2807] veth1_macvtap: left promiscuous mode [ 946.169872][ T2807] veth0_macvtap: left promiscuous mode [ 946.181084][ T2807] veth1_vlan: left promiscuous mode [ 946.189122][ T2807] veth0_vlan: left promiscuous mode [ 946.821967][ T5094] usb 4-1: USB disconnect, device number 16 [ 947.158423][ T2807] team0 (unregistering): Port device team_slave_1 removed [ 947.209824][ T2807] team0 (unregistering): Port device team_slave_0 removed [ 947.298192][ T5144] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 947.508215][ T5144] usb 5-1: Using ep0 maxpacket: 32 [ 947.519883][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.531153][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.541611][ T5144] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 947.551069][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.564902][ T5144] usb 5-1: config 0 descriptor?? [ 947.573992][ T5144] hub 5-1:0.0: USB hub found [ 947.766722][T21353] netlink: 'syz.3.3815': attribute type 10 has an invalid length. [ 947.798322][T21353] bond0: (slave netdevsim0): Releasing backup interface [ 947.816051][T21353] team0: Port device netdevsim0 added [ 947.822276][T21356] netlink: 'syz.3.3815': attribute type 10 has an invalid length. [ 947.833946][ T5144] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 947.845134][T21356] team0: Port device netdevsim0 removed [ 947.854875][T21356] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 947.874581][T21358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3816'. [ 947.883962][T21359] netlink: 'syz.2.3816': attribute type 11 has an invalid length. [ 947.907171][T21355] netlink: 'syz.4.3817': attribute type 14 has an invalid length. [ 947.929715][T21165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 948.045189][ T5144] usbhid 5-1:0.0: can't add hid device: -71 [ 948.057051][T21165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 948.064031][ T5144] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 948.092078][ T5144] usb 5-1: USB disconnect, device number 16 [ 948.116314][T21165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 948.176239][T21368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3819'. [ 948.199609][T21165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 948.565287][T21165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.589155][ T6052] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 948.682960][T21165] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.732012][T17582] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.739298][T17582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.777833][T21378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.798544][ T6052] usb 4-1: Using ep0 maxpacket: 32 [ 948.807712][T17582] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.815107][T17582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.826821][ T6052] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.854709][ T6052] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.904605][ T6052] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 948.918391][T21196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 948.948018][ T6052] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 948.966297][T21196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 948.985554][ T6052] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 949.007357][T21196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 949.030024][T21165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.043453][ T6052] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 949.072004][T21196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 949.085858][ T6052] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 949.113149][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.137572][ T6052] usb 4-1: Product: syz [ 949.150641][ T6052] usb 4-1: Manufacturer: syz [ 949.176466][ T6052] usb 4-1: SerialNumber: syz [ 949.213916][T21165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.235573][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 949.430427][ T6052] cdc_ncm 4-1:1.0: bind() failure [ 949.442286][ T6052] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 949.453990][ T6052] cdc_ncm 4-1:1.1: bind() failure [ 949.466625][ T6052] usb 4-1: USB disconnect, device number 17 [ 949.509963][T21165] veth0_vlan: entered promiscuous mode [ 949.561451][T21196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.568134][T17582] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 949.591360][T21165] veth1_vlan: entered promiscuous mode [ 949.682068][T21196] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.714980][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.722254][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.760237][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.767377][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.776825][T17582] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 949.785956][T17582] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 949.815976][T17582] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 949.816276][T21165] veth0_macvtap: entered promiscuous mode [ 949.831581][T17582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.865617][T17582] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 949.893439][T21165] veth1_macvtap: entered promiscuous mode [ 949.950992][T21165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.968369][T21165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.979222][T21165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.020529][T21165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.045020][T21165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.056272][T21165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.070063][T17582] gspca_sn9c2028: read1 error -32 [ 950.075941][T17582] gspca_sn9c2028: read1 error -32 [ 950.092918][T21165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.160198][T21165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.179303][T21165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.206204][T21165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.232828][T21165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.262701][T21165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.310496][T21165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.356822][T21165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.407464][T21165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.436270][T21165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.455427][T21165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.470699][T21165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.485377][T21196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.766478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.783207][ T29] audit: type=1326 audit(1720373861.598:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 950.792323][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.856802][ T29] audit: type=1326 audit(1720373861.598:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 950.883434][T21422] macvlan0: entered promiscuous mode [ 950.894735][T21422] macvlan0: left promiscuous mode [ 950.901814][ T29] audit: type=1326 audit(1720373861.598:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 950.928339][ T29] audit: type=1326 audit(1720373861.598:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 950.954798][ T29] audit: type=1326 audit(1720373861.598:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 951.019820][ T29] audit: type=1326 audit(1720373861.598:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 951.047512][ T29] audit: type=1326 audit(1720373861.598:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 951.070001][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.107075][ T29] audit: type=1326 audit(1720373861.598:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 951.130109][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.139311][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.155572][ T29] audit: type=1326 audit(1720373861.598:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 951.159771][T21196] veth0_vlan: entered promiscuous mode [ 951.192392][ T29] audit: type=1326 audit(1720373861.598:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x7ffc0000 [ 951.305783][T21196] veth1_vlan: entered promiscuous mode [ 951.422075][T21196] veth0_macvtap: entered promiscuous mode [ 951.473577][T21196] veth1_macvtap: entered promiscuous mode [ 951.545192][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.568213][ T5146] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 951.589843][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.622695][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.694637][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.707270][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.737498][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.749871][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.758018][ T5146] usb 1-1: Using ep0 maxpacket: 32 [ 951.768127][ T5146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 951.786622][ T5146] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 951.790046][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.834914][T21196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.855381][ T5146] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 951.873616][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.880377][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.902156][ T5146] usb 1-1: Product: syz [ 951.906480][ T5146] usb 1-1: Manufacturer: syz [ 951.910033][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.913990][ T5146] usb 1-1: SerialNumber: syz [ 951.932848][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.957293][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.978121][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.002365][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.016344][T21196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.032510][T21196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.051425][T21196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.078421][T17582] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 952.094795][T21196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.105079][T21196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.114703][T21196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.129708][T21196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.179444][ T5146] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 952.202099][ T6052] usb 5-1: USB disconnect, device number 17 [ 952.276775][T17582] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 952.328337][T17582] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 952.374089][T17582] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 952.426252][T17582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.451930][T17582] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 952.469526][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.479466][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.550270][T20276] usb 1-1: USB disconnect, device number 31 [ 952.604380][T20276] usblp0: removed [ 952.620260][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.647497][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.652141][T17582] gspca_sn9c2028: read1 error -32 [ 952.857348][T21469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3832'. [ 952.940364][T17582] gspca_sn9c2028: read1 error -71 [ 952.961297][T17582] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 953.004039][T17582] usb 4-1: USB disconnect, device number 18 [ 953.588050][T17582] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 953.631029][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'. [ 953.723822][T21490] program syz.3.3837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 953.758010][T17582] usb 5-1: device descriptor read/64, error -71 [ 953.855052][T21502] FAULT_INJECTION: forcing a failure. [ 953.855052][T21502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.910075][T21502] CPU: 0 PID: 21502 Comm: syz.2.3838 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 953.920283][T21502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 953.930463][T21502] Call Trace: [ 953.933772][T21502] [ 953.936692][T21502] dump_stack_lvl+0x241/0x360 [ 953.941371][T21502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.946615][T21502] ? __pfx__printk+0x10/0x10 [ 953.951221][T21502] should_fail_ex+0x3b0/0x4e0 [ 953.955902][T21502] _copy_from_user+0x2f/0xe0 [ 953.960494][T21502] sctp_setsockopt+0xcc/0x11c0 [ 953.965257][T21502] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 953.971150][T21502] do_sock_setsockopt+0x3af/0x720 [ 953.976167][T21502] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 953.981877][T21502] ? __fget_files+0x29/0x470 [ 953.986458][T21502] ? __fget_files+0x3f6/0x470 [ 953.991170][T21502] __sys_setsockopt+0x1ae/0x250 [ 953.996027][T21502] __x64_sys_setsockopt+0xb5/0xd0 [ 954.001048][T21502] do_syscall_64+0xf3/0x230 [ 954.005551][T21502] ? clear_bhb_loop+0x35/0x90 [ 954.010232][T21502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.016116][T21502] RIP: 0033:0x7f6e40375bd9 [ 954.020545][T21502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.040149][T21502] RSP: 002b:00007f6e411c0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 954.048551][T21502] RAX: ffffffffffffffda RBX: 00007f6e40504038 RCX: 00007f6e40375bd9 [ 954.056508][T21502] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000005 [ 954.064470][T21502] RBP: 00007f6e411c00a0 R08: 0000000000000008 R09: 0000000000000000 [ 954.072431][T21502] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 954.080390][T21502] R13: 000000000000006e R14: 00007f6e40504038 R15: 00007f6e4062fa68 [ 954.088359][T21502] [ 954.158703][T17582] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 954.238195][ T6053] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 954.330556][T17582] usb 5-1: device descriptor read/64, error -71 [ 954.448133][ T6053] usb 2-1: Using ep0 maxpacket: 16 [ 954.459371][ T6053] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.470167][T17582] usb usb5-port1: attempt power cycle [ 954.481334][ T6053] usb 2-1: config 0 has no interfaces? [ 954.490980][ T6053] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 954.501146][ T6053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.509803][ T6053] usb 2-1: Product: syz [ 954.514972][ T6053] usb 2-1: Manufacturer: syz [ 954.524618][ T6053] usb 2-1: SerialNumber: syz [ 954.536528][ T6053] usb 2-1: config 0 descriptor?? [ 954.628112][T20276] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 954.812147][ T6053] usb 2-1: USB disconnect, device number 127 [ 954.838938][T20276] usb 4-1: Using ep0 maxpacket: 32 [ 954.862206][T20276] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.890017][T17582] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 954.902640][T20276] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.929229][T17582] usb 5-1: device descriptor read/8, error -71 [ 954.936287][T20276] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 954.960600][T20276] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 954.975971][T20276] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 954.991882][T20276] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 955.007012][T20276] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.031080][T20276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.031111][T20276] usb 4-1: Product: syz [ 955.031127][T20276] usb 4-1: Manufacturer: syz [ 955.031152][T20276] usb 4-1: SerialNumber: syz [ 955.208783][T17582] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 955.259329][T17582] usb 5-1: device descriptor read/8, error -71 [ 955.286318][T20276] cdc_ncm 4-1:1.0: bind() failure [ 955.301379][T20276] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 955.312347][T20276] cdc_ncm 4-1:1.1: bind() failure [ 955.329290][T20276] usb 4-1: USB disconnect, device number 19 [ 955.389842][T17582] usb usb5-port1: unable to enumerate USB device [ 955.516671][T21556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3849'. [ 955.699482][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 955.902101][T21562] netlink: 'syz.3.3851': attribute type 10 has an invalid length. [ 955.925211][ T9] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 955.946441][ T9] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 955.946645][T21562] bond0: (slave netdevsim0): Releasing backup interface [ 955.978051][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 955.995445][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.009741][T21562] team0: Port device netdevsim0 added [ 956.023587][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 956.034948][T21563] netlink: 'syz.3.3851': attribute type 10 has an invalid length. [ 956.114091][T21563] team0: Port device netdevsim0 removed [ 956.138554][T21563] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 956.219810][ T9] gspca_sn9c2028: read1 error -32 [ 956.375976][T21567] netlink: 'syz.4.3853': attribute type 10 has an invalid length. [ 956.418097][T21567] bond0: (slave netdevsim0): Releasing backup interface [ 956.431888][T21567] team0: Port device netdevsim0 added [ 956.477407][ T9] gspca_sn9c2028: read1 error -71 [ 956.497704][ T9] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71 [ 956.551756][ T9] usb 1-1: USB disconnect, device number 32 [ 957.108552][T17582] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 957.138189][ T6052] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 957.178488][ T6053] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 957.212880][T21594] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 957.288846][T17582] usb 2-1: Using ep0 maxpacket: 16 [ 957.297989][T17582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.309790][T17582] usb 2-1: config 0 has no interfaces? [ 957.320469][T17582] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 957.331941][T17582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.341447][T17582] usb 2-1: Product: syz [ 957.346050][T17582] usb 2-1: Manufacturer: syz [ 957.351645][ T6052] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.364848][ T9362] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 957.372622][T17582] usb 2-1: SerialNumber: syz [ 957.381470][ T6052] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 957.390487][ T6053] usb 4-1: Using ep0 maxpacket: 8 [ 957.397202][T17582] usb 2-1: config 0 descriptor?? [ 957.406179][ T6052] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.420588][ T6053] usb 4-1: config 0 has no interfaces? [ 957.426140][ T6053] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 957.436887][ T6052] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 957.446097][ T6053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.454297][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.464136][ T6053] usb 4-1: config 0 descriptor?? [ 957.474773][ T6052] hub 5-1:1.0: bad descriptor, ignoring hub [ 957.486934][ T6052] hub 5-1:1.0: probe with driver hub failed with error -5 [ 957.494679][ T6052] cdc_wdm 5-1:1.0: skipping garbage [ 957.499998][ T6052] cdc_wdm 5-1:1.0: skipping garbage [ 957.505678][ T6052] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 957.578105][ T9362] usb 1-1: Using ep0 maxpacket: 32 [ 957.587846][ T9362] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.602271][ T9362] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.612229][ T9362] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.631056][ T9362] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 957.644595][ T9362] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.654487][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 957.655105][ T5144] usb 2-1: USB disconnect, device number 2 [ 957.668934][ T9362] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 957.696984][ T9362] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.715648][ T9362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.734348][ T9362] usb 1-1: Product: syz [ 957.741828][T20276] usb 4-1: USB disconnect, device number 20 [ 957.747708][ T9362] usb 1-1: Manufacturer: syz [ 957.764495][ T9362] usb 1-1: SerialNumber: syz [ 957.858412][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 957.867525][ T9] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 957.876186][ T9] usb 3-1: config 0 has no interface number 0 [ 957.889347][ T9] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 957.900668][ T9] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 957.915733][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 957.926156][ T9] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 957.934697][ T9] usb 3-1: Product: syz [ 957.939134][ T9] usb 3-1: Manufacturer: syz [ 957.943783][ T9] usb 3-1: SerialNumber: syz [ 957.951017][ T9] usb 3-1: config 0 descriptor?? [ 957.970090][ T9] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 957.980032][ T9] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 957.984471][ T9362] cdc_ncm 1-1:1.0: bind() failure [ 957.989535][ T9] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 958.008860][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 958.010750][ T9362] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 958.019975][ T9] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 958.037365][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 958.055548][ T9362] cdc_ncm 1-1:1.1: bind() failure [ 958.056275][ T9] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 958.074931][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 958.075571][ T9362] usb 1-1: USB disconnect, device number 33 [ 958.085987][ T9] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 958.102276][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 958.270404][ T6052] usb 3-1: USB disconnect, device number 22 [ 958.300962][ T6052] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 958.355561][ T6052] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 958.404764][ T6052] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 958.458698][ T6052] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 958.475291][T21602] netlink: 'syz.3.3867': attribute type 10 has an invalid length. [ 958.484222][ T6052] keyspan 3-1:0.107: device disconnected [ 958.531610][T21602] bond0: (slave netdevsim0): Releasing backup interface [ 958.584426][T21602] team0: Port device netdevsim0 added [ 958.668187][ T9362] usb 5-1: USB disconnect, device number 22 [ 958.855371][T21611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3869'. [ 958.995184][T21618] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 959.025908][T21618] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 959.265563][T21624] kvm: pic: non byte write [ 959.474563][T21626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3874'. [ 959.594282][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 959.594302][ T29] audit: type=1326 audit(1720373870.408:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21627 comm="syz.2.3875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e40375bd9 code=0x0 [ 959.622688][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.781645][T21634] netlink: 'syz.3.3876': attribute type 4 has an invalid length. [ 959.828399][T21634] netlink: 'syz.3.3876': attribute type 4 has an invalid length. [ 959.861243][T21631] netlink: 'syz.3.3876': attribute type 4 has an invalid length. [ 959.991884][T21638] xt_TCPMSS: Only works on TCP SYN packets [ 960.081767][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 960.114863][T21653] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode [ 960.249673][T20276] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 960.288083][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 960.299018][ T9] usb 1-1: config 0 has no interfaces? [ 960.306954][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 960.327414][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.418607][ T9] usb 1-1: config 0 descriptor?? [ 960.453140][T20276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 960.466050][T21664] kvm: pic: non byte write [ 960.507819][T20276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 960.523436][T20276] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 960.534195][T20276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.543274][T20276] usb 4-1: Product: syz [ 960.552677][T20276] usb 4-1: Manufacturer: syz [ 960.557615][T20276] usb 4-1: SerialNumber: syz [ 960.566969][T20276] usb 4-1: config 0 descriptor?? [ 960.728332][ T6053] usb 1-1: USB disconnect, device number 34 [ 960.795888][T20276] usb 4-1: ignoring: probably an ADSL modem [ 960.799583][T21671] tipc: Can't bind to reserved service type 0 [ 960.958093][T21677] GUP no longer grows the stack in syz.2.3889 (21677): 20004000-20006000 (20002000) [ 960.988732][T21677] CPU: 0 PID: 21677 Comm: syz.2.3889 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 960.998965][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 961.009049][T21677] Call Trace: [ 961.012344][T21677] [ 961.015287][T21677] dump_stack_lvl+0x241/0x360 [ 961.019998][T21677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.025234][T21677] ? __pfx__printk+0x10/0x10 [ 961.029860][T21677] ? find_vma+0xf9/0x170 [ 961.034138][T21677] ? vma_is_secretmem+0xd/0x50 [ 961.038930][T21677] ? check_vma_flags+0x531/0x5a0 [ 961.043864][T21677] __get_user_pages+0x10e3/0x1590 [ 961.048899][T21677] ? __pfx___get_user_pages+0x10/0x10 [ 961.054297][T21677] __gup_longterm_locked+0x4b0/0x2a80 [ 961.059697][T21677] ? __pfx___gup_longterm_locked+0x10/0x10 [ 961.065759][T21677] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 961.071737][T21677] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 961.078070][T21677] ? sanity_check_pinned_pages+0x12c2/0x13c0 [ 961.084155][T21677] ? gup_fast_fallback+0x220d/0x2b40 [ 961.089435][T21677] gup_fast_fallback+0x2732/0x2b40 [ 961.094564][T21677] ? __pfx_gup_fast_fallback+0x10/0x10 [ 961.100131][T21677] ? mark_lock+0x9a/0x350 [ 961.104480][T21677] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 961.110486][T21677] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 961.116805][T21677] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 961.122348][T21677] ? is_valid_gup_args+0x124/0x200 [ 961.127473][T21677] pin_user_pages_fast+0xcc/0x160 [ 961.132600][T21677] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 961.138235][T21677] ? __kmalloc_node_noprof+0x247/0x440 [ 961.143734][T21677] ? kvmalloc_node_noprof+0x72/0x190 [ 961.149035][T21677] io_pin_pages+0x7e/0x170 [ 961.153504][T21677] io_sqe_buffer_register+0x180/0x1b10 [ 961.158989][T21677] ? __might_fault+0xc6/0x120 [ 961.163710][T21677] ? _copy_from_user+0xa6/0xe0 [ 961.168501][T21677] ? io_copy_iov+0xda/0x260 [ 961.173012][T21677] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 961.178913][T21677] ? __pfx_io_copy_iov+0x10/0x10 [ 961.183888][T21677] ? io_sqe_buffers_register+0x208/0x6b0 [ 961.189530][T21677] ? io_sqe_buffers_register+0x208/0x6b0 [ 961.195163][T21677] ? __kmalloc_noprof+0x217/0x400 [ 961.200285][T21677] io_sqe_buffers_register+0x4d3/0x6b0 [ 961.205763][T21677] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 961.211756][T21677] ? __fget_files+0x29/0x470 [ 961.216380][T21677] __se_sys_io_uring_register+0xb22/0x15d0 [ 961.222198][T21677] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 961.228442][T21677] ? do_syscall_64+0x100/0x230 [ 961.233208][T21677] ? do_syscall_64+0xb6/0x230 [ 961.237897][T21677] do_syscall_64+0xf3/0x230 [ 961.242498][T21677] ? clear_bhb_loop+0x35/0x90 [ 961.247167][T21677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.253061][T21677] RIP: 0033:0x7f6e40375bd9 [ 961.257475][T21677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.277164][T21677] RSP: 002b:00007f6e411e1048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 961.285611][T21677] RAX: ffffffffffffffda RBX: 00007f6e40503f60 RCX: 00007f6e40375bd9 [ 961.293584][T21677] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000007 [ 961.301640][T21677] RBP: 00007f6e403e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 961.309799][T21677] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 961.317769][T21677] R13: 000000000000000b R14: 00007f6e40503f60 R15: 00007f6e4062fa68 [ 961.325835][T21677] [ 961.431115][T21685] netlink: 'syz.4.3890': attribute type 4 has an invalid length. [ 961.528628][T21687] netlink: 'syz.4.3890': attribute type 4 has an invalid length. [ 961.674166][T21681] netlink: 'syz.4.3890': attribute type 4 has an invalid length. [ 961.898647][T21699] netlink: 'syz.0.3894': attribute type 21 has an invalid length. [ 961.898757][T21699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3894'. [ 962.042186][T21703] kvm: pic: non byte write [ 963.018130][ T6053] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 963.201153][ T9362] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 963.220227][ T6053] usb 1-1: Using ep0 maxpacket: 8 [ 963.240067][ T6053] usb 1-1: config 0 has no interfaces? [ 963.245605][ T6053] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 963.266287][ T6053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.288079][ T6053] usb 1-1: config 0 descriptor?? [ 963.297544][T20276] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 963.329991][T20276] usb 4-1: USB disconnect, device number 21 [ 963.350246][T21749] binder: 21745:21749 ioctl c0306201 0 returned -14 [ 963.413037][ T9362] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 963.435977][ T9362] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 963.464257][ T9362] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 963.484028][ T9362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.511464][ T9] usb 1-1: USB disconnect, device number 35 [ 963.520698][ T9362] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 963.721815][ T9362] gspca_sn9c2028: read1 error -32 [ 963.988362][ T9362] gspca_sn9c2028: read1 error -71 [ 963.996045][ T9362] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 964.018611][ T9362] usb 2-1: USB disconnect, device number 3 [ 964.397132][T21757] kvm: pic: non byte write [ 964.738175][T21775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3916'. [ 964.770009][T21776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3916'. [ 964.780931][T15592] Bluetooth: Unexpected continuation frame (len 18) [ 964.840921][T21775] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3916'. [ 964.867096][T21774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3916'. [ 964.892340][ T29] audit: type=1326 audit(1720373875.708:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d75bd9 code=0x0 [ 965.159533][T21794] netlink: 'syz.3.3919': attribute type 1 has an invalid length. [ 965.398415][ T6053] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 965.515826][T21807] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 965.526383][T21807] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 965.608084][ T6053] usb 3-1: Using ep0 maxpacket: 8 [ 965.638411][ T6053] usb 3-1: config 0 has no interfaces? [ 965.649468][ T6053] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 965.669367][ T6053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.700420][ T6053] usb 3-1: config 0 descriptor?? [ 965.930485][ T6053] usb 3-1: USB disconnect, device number 23 [ 966.061709][T21819] netlink: 'syz.3.3927': attribute type 10 has an invalid length. [ 966.139476][T21822] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 966.143058][T21819] team0: Port device netdevsim0 removed [ 966.202580][T21819] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 966.618312][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 966.668054][ T6053] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 966.839658][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 966.859410][ T9] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 966.868016][ T6053] usb 4-1: Invalid ep0 maxpacket: 64 [ 966.887999][ T9] usb 2-1: config 0 has no interface number 0 [ 966.902749][ T9] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 966.935072][ T9] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 966.979253][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 967.000216][ T9] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 967.017302][ T9] usb 2-1: Product: syz [ 967.033488][ T9] usb 2-1: Manufacturer: syz [ 967.040367][ T6053] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 967.058696][ T9] usb 2-1: SerialNumber: syz [ 967.086095][ T9] usb 2-1: config 0 descriptor?? [ 967.103673][ T9] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 967.121124][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 967.152977][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 967.179143][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 967.223065][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 967.251109][ T6053] usb 4-1: Invalid ep0 maxpacket: 64 [ 967.266378][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 967.275216][ T6053] usb usb4-port1: attempt power cycle [ 967.279859][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 967.328064][T15592] Bluetooth: hci2: command tx timeout [ 967.359932][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 967.392998][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 967.419213][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 967.470364][ T9] usb 2-1: USB disconnect, device number 4 [ 967.573442][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 967.634683][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 967.696372][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 967.712358][T21851] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 967.712411][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 967.722918][ T9] keyspan 2-1:0.107: device disconnected [ 967.758152][ T6053] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 967.782715][T21853] netlink: 'syz.2.3939': attribute type 10 has an invalid length. [ 967.799450][ T6053] usb 4-1: Invalid ep0 maxpacket: 64 [ 967.807537][T21853] team0: Port device netdevsim0 removed [ 967.820266][T21853] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 967.919170][T17582] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 967.965516][ T6053] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 968.019868][ T6053] usb 4-1: Invalid ep0 maxpacket: 64 [ 968.025800][ T6053] usb usb4-port1: unable to enumerate USB device [ 968.069032][T15592] Bluetooth: Unexpected continuation frame (len 18) [ 968.078046][T17582] usb 1-1: device descriptor read/64, error -71 [ 968.168131][ T9362] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 968.348125][T17582] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 968.362532][ T9362] usb 3-1: Using ep0 maxpacket: 32 [ 968.375082][ T9362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.387597][ T9362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.400640][ T9362] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 968.411557][ T9362] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 968.426985][ T9362] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 968.442487][ T9362] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 968.457738][ T9362] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 968.467310][ T9362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.477410][ T9362] usb 3-1: Product: syz [ 968.482919][ T9362] usb 3-1: Manufacturer: syz [ 968.487765][ T9362] usb 3-1: SerialNumber: syz [ 968.518290][T17582] usb 1-1: device descriptor read/64, error -71 [ 968.638763][T17582] usb usb1-port1: attempt power cycle [ 968.704637][ T9362] cdc_ncm 3-1:1.0: bind() failure [ 968.717058][ T9362] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 968.724841][ T9362] cdc_ncm 3-1:1.1: bind() failure [ 968.740838][ T9362] usb 3-1: USB disconnect, device number 24 [ 969.048126][T17582] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 969.089531][T17582] usb 1-1: device descriptor read/8, error -71 [ 969.148156][T20276] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 969.348706][T20276] usb 5-1: Using ep0 maxpacket: 32 [ 969.359642][T20276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.378133][T17582] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 969.400737][T20276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.428394][T20276] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 969.441683][T17582] usb 1-1: device descriptor read/8, error -71 [ 969.446528][T20276] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 969.462076][T20276] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 969.497273][T20276] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 969.533939][T20276] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 969.555811][T20276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.577177][T20276] usb 5-1: Product: syz [ 969.588438][T17582] usb usb1-port1: unable to enumerate USB device [ 969.595055][T20276] usb 5-1: Manufacturer: syz [ 969.616555][T20276] usb 5-1: SerialNumber: syz [ 969.664963][T21889] netlink: 'syz.3.3952': attribute type 10 has an invalid length. [ 969.905294][T20276] cdc_ncm 5-1:1.0: bind() failure [ 969.945288][T20276] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 969.959020][T20276] cdc_ncm 5-1:1.1: bind() failure [ 969.982684][T20276] usb 5-1: USB disconnect, device number 23 [ 970.192132][T15592] Bluetooth: Unexpected continuation frame (len 18) [ 970.415125][T21901] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 970.424500][T21901] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 970.639199][T21908] FAULT_INJECTION: forcing a failure. [ 970.639199][T21908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.655155][T21908] CPU: 1 PID: 21908 Comm: syz.4.3958 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 970.665430][T21908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 970.675495][T21908] Call Trace: [ 970.678779][T21908] [ 970.681701][T21908] dump_stack_lvl+0x241/0x360 [ 970.686373][T21908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.691668][T21908] ? __pfx__printk+0x10/0x10 [ 970.696280][T21908] ? __pfx_lock_release+0x10/0x10 [ 970.701313][T21908] ? aa_label_sk_perm+0x4f0/0x6d0 [ 970.706332][T21908] should_fail_ex+0x3b0/0x4e0 [ 970.711014][T21908] _copy_from_iter+0x1f6/0x1960 [ 970.715875][T21908] ? __pfx___might_resched+0x10/0x10 [ 970.721177][T21908] ? __pfx__copy_from_iter+0x10/0x10 [ 970.726753][T21908] bcm_sendmsg+0x157/0x7a0 [ 970.731164][T21908] ? __pfx_bcm_sendmsg+0x10/0x10 [ 970.736177][T21908] ? __import_iovec+0x536/0x820 [ 970.741012][T21908] ? aa_sock_msg_perm+0x91/0x160 [ 970.745935][T21908] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 970.751203][T21908] ? security_socket_sendmsg+0x87/0xb0 [ 970.756673][T21908] ? __pfx_bcm_sendmsg+0x10/0x10 [ 970.761607][T21908] __sock_sendmsg+0x221/0x270 [ 970.766279][T21908] ____sys_sendmsg+0x525/0x7d0 [ 970.771035][T21908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.776312][T21908] __sys_sendmsg+0x2b0/0x3a0 [ 970.780983][T21908] ? __pfx___sys_sendmsg+0x10/0x10 [ 970.786093][T21908] ? vfs_write+0x7c4/0xc90 [ 970.790515][T21908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 970.796960][T21908] ? do_syscall_64+0x100/0x230 [ 970.801727][T21908] ? do_syscall_64+0xb6/0x230 [ 970.806400][T21908] do_syscall_64+0xf3/0x230 [ 970.810916][T21908] ? clear_bhb_loop+0x35/0x90 [ 970.815391][T21849] delete_channel: no stack [ 970.815609][T21908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.815642][T21908] RIP: 0033:0x7f1e82175bd9 [ 970.815660][T21908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.850705][T21908] RSP: 002b:00007f1e82fa1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.859119][T21908] RAX: ffffffffffffffda RBX: 00007f1e82303f60 RCX: 00007f1e82175bd9 [ 970.867171][T21908] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 970.875501][T21908] RBP: 00007f1e82fa10a0 R08: 0000000000000000 R09: 0000000000000000 [ 970.883476][T21908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.891443][T21908] R13: 000000000000000b R14: 00007f1e82303f60 R15: 00007f1e8242fa68 [ 970.899415][T21908] [ 971.074047][T21911] FAULT_INJECTION: forcing a failure. [ 971.074047][T21911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.098526][T21911] CPU: 1 PID: 21911 Comm: syz.4.3960 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 971.108734][T21911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 971.118778][T21911] Call Trace: [ 971.122042][T21911] [ 971.124958][T21911] dump_stack_lvl+0x241/0x360 [ 971.129647][T21911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.134881][T21911] ? __pfx__printk+0x10/0x10 [ 971.139511][T21911] ? __pfx_lock_release+0x10/0x10 [ 971.144526][T21911] should_fail_ex+0x3b0/0x4e0 [ 971.149211][T21911] _copy_from_user+0x2f/0xe0 [ 971.153814][T21911] inet6_ioctl+0x192/0x280 [ 971.158258][T21911] ? __pfx_inet6_ioctl+0x10/0x10 [ 971.163228][T21911] sock_do_ioctl+0x158/0x460 [ 971.167867][T21911] ? __pfx_sock_do_ioctl+0x10/0x10 [ 971.173015][T21911] sock_ioctl+0x629/0x8e0 [ 971.177370][T21911] ? __pfx_sock_ioctl+0x10/0x10 [ 971.182232][T21911] ? __fget_files+0x29/0x470 [ 971.186855][T21911] ? __fget_files+0x3f6/0x470 [ 971.191518][T21911] ? __fget_files+0x29/0x470 [ 971.196093][T21911] ? bpf_lsm_file_ioctl+0x9/0x10 [ 971.201019][T21911] ? security_file_ioctl+0x87/0xb0 [ 971.206136][T21911] ? __pfx_sock_ioctl+0x10/0x10 [ 971.210978][T21911] __se_sys_ioctl+0xfc/0x170 [ 971.215557][T21911] do_syscall_64+0xf3/0x230 [ 971.220048][T21911] ? clear_bhb_loop+0x35/0x90 [ 971.224704][T21911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.230582][T21911] RIP: 0033:0x7f1e82175bd9 [ 971.234984][T21911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.254671][T21911] RSP: 002b:00007f1e82fa1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.263104][T21911] RAX: ffffffffffffffda RBX: 00007f1e82303f60 RCX: 00007f1e82175bd9 [ 971.271072][T21911] RDX: 0000000020000080 RSI: 000000000000890b RDI: 0000000000000003 [ 971.279036][T21911] RBP: 00007f1e82fa10a0 R08: 0000000000000000 R09: 0000000000000000 [ 971.287184][T21911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.295162][T21911] R13: 000000000000000b R14: 00007f1e82303f60 R15: 00007f1e8242fa68 [ 971.303143][T21911] [ 971.413081][T21914] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 971.419744][T21914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 971.471389][T21914] vhci_hcd vhci_hcd.0: Device attached [ 971.527600][T21922] netlink: 'syz.1.3963': attribute type 10 has an invalid length. [ 971.619938][T21922] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 971.755955][ T9] usb 15-1: new low-speed USB device number 5 using vhci_hcd [ 971.876695][T21917] vhci_hcd: connection reset by peer [ 971.889905][ T35] vhci_hcd: stop threads [ 971.894196][ T35] vhci_hcd: release socket [ 971.917107][ T35] vhci_hcd: disconnect device [ 972.128669][ T9362] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 972.150787][ T29] audit: type=1326 audit(1720373882.968:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.198313][ T29] audit: type=1326 audit(1720373882.968:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.240522][ T29] audit: type=1326 audit(1720373882.988:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.273328][ T29] audit: type=1326 audit(1720373882.988:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.302991][ T29] audit: type=1326 audit(1720373882.988:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.330789][ T9362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 972.346370][ T29] audit: type=1326 audit(1720373882.998:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.350894][ T9362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 972.390356][ T29] audit: type=1326 audit(1720373882.998:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.423752][ T29] audit: type=1326 audit(1720373882.998:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.446766][ T9362] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 972.480082][ T29] audit: type=1326 audit(1720373882.998:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.500461][ T9362] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 972.532077][ T9362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.573649][ T29] audit: type=1326 audit(1720373882.998:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e82175bd9 code=0x7ffc0000 [ 972.588289][ T9362] usb 2-1: config 0 descriptor?? [ 972.648482][T21947] fuse: Unknown parameter '0x0000000000000003' [ 972.698821][T21947] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.3971'. [ 973.073035][ T9362] plantronics 0003:047F:FFFF.002A: ignoring exceeding usage max [ 973.101844][ T9362] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 973.117100][ T9362] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 973.818688][ T9362] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 974.019259][T21965] netlink: 'syz.2.3978': attribute type 10 has an invalid length. [ 974.048195][ T9362] usb 4-1: Using ep0 maxpacket: 32 [ 974.075293][ T9362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.120668][ T9362] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.167747][ T9362] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 974.196734][ T9362] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 974.233848][ T9362] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 974.257984][ T9362] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 974.284105][ T9362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.310683][ T9362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.355383][ T9362] usb 4-1: Product: syz [ 974.369933][ T9362] usb 4-1: Manufacturer: syz [ 974.383421][ T9362] usb 4-1: SerialNumber: syz [ 974.558322][T17582] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 974.624150][ T9362] cdc_ncm 4-1:1.0: bind() failure [ 974.657202][ T9362] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 974.690949][ T9362] cdc_ncm 4-1:1.1: bind() failure [ 974.733809][ T9362] usb 4-1: USB disconnect, device number 26 [ 974.748207][T17582] usb 2-1: device descriptor read/64, error -32 [ 974.801277][T21976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3981'. [ 975.039284][T17582] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 975.092002][T21980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3982'. [ 975.208406][T17582] usb 2-1: device descriptor read/64, error -32 [ 975.273165][T21933] mmap: syz.1.3968 (21933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 975.478242][T17582] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 975.518328][T17582] usb 2-1: device descriptor read/8, error -32 [ 975.798376][T17582] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 975.858667][T17582] usb 2-1: device descriptor read/8, error -32 [ 975.858741][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3989'. [ 975.918174][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3989'. [ 975.988140][T17582] raw-gadget.0 gadget.1: failed to queue suspend event [ 976.007856][ T6052] usb 2-1: USB disconnect, device number 5 [ 976.045453][ T6052] raw-gadget.0 gadget.1: failed to queue reset event [ 976.168141][ T6052] raw-gadget.0 gadget.1: failed to queue resume event [ 976.268040][ T6052] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 976.276812][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 976.289766][ T6052] raw-gadget.0 gadget.1: failed to queue reset event [ 976.378186][ T6052] raw-gadget.0 gadget.1: failed to queue resume event [ 976.467047][ T6052] usb 2-1: device descriptor read/64, error -32 [ 976.539130][T21963] raw-gadget.0 gadget.1: failed to queue suspend event [ 976.578100][T21963] raw-gadget.0 gadget.1: failed to queue disconnect event [ 976.704976][T22012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3994'. [ 976.725416][T22012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3994'. [ 976.745383][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'. [ 976.928758][ T9] vhci_hcd: vhci_device speed not set [ 976.935451][T22018] netlink: 'syz.4.3996': attribute type 1 has an invalid length. [ 976.965866][T22022] FAULT_INJECTION: forcing a failure. [ 976.965866][T22022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.016120][T22022] CPU: 0 PID: 22022 Comm: syz.1.3997 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 977.027032][T22022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 977.037800][T22022] Call Trace: [ 977.041118][T22022] [ 977.044076][T22022] dump_stack_lvl+0x241/0x360 [ 977.048804][T22022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.054033][T22022] ? __pfx__printk+0x10/0x10 [ 977.058745][T22022] ? __pfx_lock_release+0x10/0x10 [ 977.063890][T22022] should_fail_ex+0x3b0/0x4e0 [ 977.068689][T22022] _copy_from_iter+0x1f6/0x1960 [ 977.073688][T22022] ? __virt_addr_valid+0x183/0x520 [ 977.079277][T22022] ? __pfx_lock_release+0x10/0x10 [ 977.084352][T22022] ? __alloc_skb+0x28f/0x440 [ 977.088948][T22022] ? __pfx__copy_from_iter+0x10/0x10 [ 977.094246][T22022] ? __virt_addr_valid+0x183/0x520 [ 977.099384][T22022] ? __virt_addr_valid+0x183/0x520 [ 977.104492][T22022] ? __virt_addr_valid+0x44e/0x520 [ 977.109603][T22022] ? __check_object_size+0x49c/0x900 [ 977.114978][T22022] netlink_sendmsg+0x743/0xcb0 [ 977.119835][T22022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.125210][T22022] ? __import_iovec+0x536/0x820 [ 977.130078][T22022] ? aa_sock_msg_perm+0x91/0x160 [ 977.135125][T22022] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 977.140434][T22022] ? security_socket_sendmsg+0x87/0xb0 [ 977.145923][T22022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.151201][T22022] __sock_sendmsg+0x221/0x270 [ 977.155876][T22022] ____sys_sendmsg+0x525/0x7d0 [ 977.160728][T22022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.166016][T22022] __sys_sendmsg+0x2b0/0x3a0 [ 977.170638][T22022] ? __pfx___sys_sendmsg+0x10/0x10 [ 977.176280][T22022] ? vfs_write+0x7c4/0xc90 [ 977.180762][T22022] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 977.187262][T22022] ? do_syscall_64+0x100/0x230 [ 977.192134][T22022] ? do_syscall_64+0xb6/0x230 [ 977.196835][T22022] do_syscall_64+0xf3/0x230 [ 977.201609][T22022] ? clear_bhb_loop+0x35/0x90 [ 977.206451][T22022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.212359][T22022] RIP: 0033:0x7f6aabd75bd9 [ 977.216808][T22022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.236423][T22022] RSP: 002b:00007f6aacb91048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.244874][T22022] RAX: ffffffffffffffda RBX: 00007f6aabf03f60 RCX: 00007f6aabd75bd9 [ 977.252961][T22022] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 977.261101][T22022] RBP: 00007f6aacb910a0 R08: 0000000000000000 R09: 0000000000000000 [ 977.269080][T22022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.277179][T22022] R13: 000000000000000b R14: 00007f6aabf03f60 R15: 00007f6aac02fa68 [ 977.285306][T22022] [ 977.771577][T22033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3999'. [ 977.919126][T22037] netlink: 'syz.4.4001': attribute type 10 has an invalid length. [ 977.965715][T22037] team0: Port device netdevsim0 removed [ 977.974678][T22040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4000'. [ 977.999149][T22037] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 978.957559][T22073] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 978.965552][T22071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4012'. [ 978.986573][T22073] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 979.009647][T22071] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4012'. [ 979.054899][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4012'. [ 979.527724][T22081] netlink: 'syz.2.4014': attribute type 10 has an invalid length. [ 980.070001][T22091] FAULT_INJECTION: forcing a failure. [ 980.070001][T22091] name failslab, interval 1, probability 0, space 0, times 0 [ 980.098161][T22091] CPU: 0 PID: 22091 Comm: syz.4.4016 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 980.108371][T22091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 980.118451][T22091] Call Trace: [ 980.121752][T22091] [ 980.124696][T22091] dump_stack_lvl+0x241/0x360 [ 980.129418][T22091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.134628][T22091] ? __pfx__printk+0x10/0x10 [ 980.139220][T22091] ? __pfx___might_resched+0x10/0x10 [ 980.144505][T22091] should_fail_ex+0x3b0/0x4e0 [ 980.149352][T22091] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 980.155480][T22091] should_failslab+0x9/0x20 [ 980.159995][T22091] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 980.165545][T22091] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 980.171552][T22091] kvm_mmu_load+0x115/0x26e0 [ 980.176192][T22091] ? __mutex_unlock_slowpath+0x21d/0x750 [ 980.182011][T22091] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 980.188216][T22091] ? __pfx_kvm_mmu_load+0x10/0x10 [ 980.193469][T22091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 980.199472][T22091] ? __asan_memset+0x23/0x50 [ 980.204544][T22091] ? vmx_flush_tlb_guest+0x1e5/0x310 [ 980.209935][T22091] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 980.215584][T22091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 980.221855][T22091] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 980.227455][T22091] ? vmx_get_nmi_mask+0xdf/0x1a0 [ 980.232503][T22091] vcpu_run+0x6b72/0x87f0 [ 980.237140][T22091] ? __pfx_vcpu_run+0x10/0x10 [ 980.241968][T22091] ? __local_bh_enable_ip+0x168/0x200 [ 980.247469][T22091] ? lockdep_hardirqs_on+0x99/0x150 [ 980.252811][T22091] ? __pfx_lock_acquire+0x10/0x10 [ 980.257961][T22091] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 980.263545][T22091] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 980.269353][T22091] ? xfd_validate_state+0x6e/0x150 [ 980.274501][T22091] ? rcu_is_watching+0x15/0xb0 [ 980.279582][T22091] ? rcu_is_watching+0x15/0xb0 [ 980.284549][T22091] kvm_arch_vcpu_ioctl_run+0xa7e/0x1920 [ 980.290216][T22091] ? mark_lock+0x9a/0x350 [ 980.294581][T22091] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920 [ 980.300327][T22091] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 980.306755][T22091] ? __pfx_lock_acquire+0x10/0x10 [ 980.311904][T22091] ? get_task_pid+0x23/0x310 [ 980.316538][T22091] ? __pfx_lock_release+0x10/0x10 [ 980.321594][T22091] ? kvm_vcpu_ioctl+0x1d9/0xd00 [ 980.326560][T22091] ? get_task_pid+0x23/0x310 [ 980.331214][T22091] kvm_vcpu_ioctl+0x7f5/0xd00 [ 980.336030][T22091] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 980.341284][T22091] ? __fget_files+0x29/0x470 [ 980.345922][T22091] ? __fget_files+0x3f6/0x470 [ 980.350647][T22091] ? __fget_files+0x29/0x470 [ 980.355367][T22091] ? bpf_lsm_file_ioctl+0x9/0x10 [ 980.360367][T22091] ? security_file_ioctl+0x87/0xb0 [ 980.365524][T22091] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 980.370767][T22091] __se_sys_ioctl+0xfc/0x170 [ 980.375418][T22091] do_syscall_64+0xf3/0x230 [ 980.380074][T22091] ? clear_bhb_loop+0x35/0x90 [ 980.384784][T22091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.390718][T22091] RIP: 0033:0x7f1e82175bd9 [ 980.395190][T22091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.415359][T22091] RSP: 002b:00007f1e82f80048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.423808][T22091] RAX: ffffffffffffffda RBX: 00007f1e82304038 RCX: 00007f1e82175bd9 [ 980.431912][T22091] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 980.439935][T22091] RBP: 00007f1e82f800a0 R08: 0000000000000000 R09: 0000000000000000 [ 980.448023][T22091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.456191][T22091] R13: 000000000000006e R14: 00007f1e82304038 R15: 00007f1e8242fa68 [ 980.464335][T22091] [ 981.159545][T22114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4022'. [ 981.278624][T22118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4023'. [ 981.416130][T22118] bond1: entered promiscuous mode [ 981.510994][T22124] netlink: 'syz.2.4025': attribute type 10 has an invalid length. [ 981.709387][T22132] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 981.718403][T22132] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 982.058642][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 982.269050][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 982.295438][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.311523][ T5143] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 982.336045][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 982.368069][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 982.383281][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.392750][ T9] usb 3-1: Product: syz [ 982.397066][ T9] usb 3-1: Manufacturer: syz [ 982.411404][ T9] usb 3-1: SerialNumber: syz [ 982.447574][ T9] usb 3-1: config 0 descriptor?? [ 982.520321][ T5143] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 982.541751][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.573097][ T5143] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 982.592837][ T5143] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 982.615428][ T5143] usb 5-1: Manufacturer: syz [ 982.623755][T22145] netlink: 'syz.0.4032': attribute type 21 has an invalid length. [ 982.638680][ T5143] usb 5-1: config 0 descriptor?? [ 982.644118][T22145] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4032'. [ 982.716089][T20276] usb 3-1: USB disconnect, device number 25 [ 982.767981][ T5143] rc_core: IR keymap rc-hauppauge not found [ 982.773680][T22148] netlink: 'syz.3.4033': attribute type 21 has an invalid length. [ 982.779926][ T5143] Registered IR keymap rc-empty [ 982.789266][ T5143] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 982.801590][ T5143] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71 [ 982.869031][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 982.898061][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 983.119906][ T9] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 983.144612][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.179212][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 983.205360][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.237853][ T9] usb 2-1: config 0 descriptor?? [ 983.360319][ T5144] usb 5-1: USB disconnect, device number 24 [ 983.568536][T15592] Bluetooth: hci2: command tx timeout [ 984.078104][T22167] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 984.084942][T22167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 984.148133][T22167] vhci_hcd vhci_hcd.0: Device attached [ 984.200779][T22175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4039'. [ 984.418098][T17582] usb 13-1: new low-speed USB device number 5 using vhci_hcd [ 984.568390][ T9] usb 2-1: string descriptor 0 read error: -71 [ 984.583635][T22171] vhci_hcd: connection reset by peer [ 984.591811][ T35] vhci_hcd: stop threads [ 984.596202][ T35] vhci_hcd: release socket [ 984.604213][ T9] usb 2-1: USB disconnect, device number 8 [ 984.616743][ T35] vhci_hcd: disconnect device [ 985.340065][T22190] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 985.351702][T22190] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 985.423385][T22195] FAULT_INJECTION: forcing a failure. [ 985.423385][T22195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.450511][T22195] CPU: 1 PID: 22195 Comm: syz.1.4045 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 985.460729][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 985.470796][T22195] Call Trace: [ 985.474089][T22195] [ 985.477006][T22195] dump_stack_lvl+0x241/0x360 [ 985.481796][T22195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 985.487027][T22195] ? __pfx__printk+0x10/0x10 [ 985.491622][T22195] ? __pfx_lock_release+0x10/0x10 [ 985.496642][T22195] should_fail_ex+0x3b0/0x4e0 [ 985.501321][T22195] _copy_to_iter+0x1f6/0x1960 [ 985.506022][T22195] ? __pfx__copy_to_iter+0x10/0x10 [ 985.511157][T22195] ? ksys_write+0x23e/0x2c0 [ 985.515664][T22195] get_random_bytes_user+0x1e5/0x420 [ 985.520954][T22195] ? __pfx_get_random_bytes_user+0x10/0x10 [ 985.526808][T22195] __x64_sys_getrandom+0x152/0x250 [ 985.531929][T22195] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 985.537581][T22195] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 985.543564][T22195] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 985.549902][T22195] ? do_syscall_64+0x100/0x230 [ 985.554821][T22195] ? do_syscall_64+0xb6/0x230 [ 985.559503][T22195] do_syscall_64+0xf3/0x230 [ 985.564090][T22195] ? clear_bhb_loop+0x35/0x90 [ 985.568787][T22195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.574740][T22195] RIP: 0033:0x7f6aabd75bd9 [ 985.579242][T22195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.598929][T22195] RSP: 002b:00007f6aacb91048 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 985.607421][T22195] RAX: ffffffffffffffda RBX: 00007f6aabf03f60 RCX: 00007f6aabd75bd9 [ 985.615399][T22195] RDX: 0000000000000000 RSI: 00000000fffffef0 RDI: 0000000020000340 [ 985.623442][T22195] RBP: 00007f6aacb910a0 R08: 0000000000000000 R09: 0000000000000000 [ 985.631417][T22195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.639382][T22195] R13: 000000000000000b R14: 00007f6aabf03f60 R15: 00007f6aac02fa68 [ 985.647358][T22195] [ 985.650466][ C1] vkms_vblank_simulate: vblank timer overrun [ 985.659627][ T6052] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 985.859619][ T6052] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 985.884411][ T6052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.917645][T22202] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 985.924191][ T6052] usb 3-1: config 0 descriptor?? [ 985.944750][ T6052] cp210x 3-1:0.0: cp210x converter detected [ 986.288109][ T9362] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 986.378082][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 986.482894][ T9362] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 986.498395][ T9362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.519464][ T9362] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 986.529183][ T9362] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 986.547610][ T9362] usb 1-1: Manufacturer: syz [ 986.566480][ T9362] usb 1-1: config 0 descriptor?? [ 986.578187][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 986.601967][ T9] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 986.615399][ T9] usb 2-1: config 0 has no interface number 0 [ 986.623113][ T9] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 986.647709][ T9] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 986.673858][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 986.691548][ T9] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 986.713458][ T9] usb 2-1: Product: syz [ 986.723375][ T9] usb 2-1: Manufacturer: syz [ 986.729161][ T9362] rc_core: IR keymap rc-hauppauge not found [ 986.730960][ T9] usb 2-1: SerialNumber: syz [ 986.740937][ T9362] Registered IR keymap rc-empty [ 986.766712][ T9362] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 986.767250][ T9] usb 2-1: config 0 descriptor?? [ 986.793723][ T9362] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input72 [ 986.799037][ T9] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 986.834795][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 986.852927][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 986.860488][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 986.937351][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 987.011057][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 987.071418][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 987.102757][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 987.161426][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 987.192558][ T9] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 987.241593][ T9] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 987.343357][T22222] input: syz1 as /devices/virtual/input/input73 [ 987.356484][ T9] usb 2-1: USB disconnect, device number 9 [ 987.411328][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 987.434919][T22222] syz_tun: entered allmulticast mode [ 987.470913][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4052'. [ 987.530129][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 987.554264][T20276] usb 1-1: USB disconnect, device number 40 [ 987.574485][T22222] syz_tun (unregistering): left allmulticast mode [ 987.592963][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 987.670908][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 987.739164][ T9] keyspan 2-1:0.107: device disconnected [ 987.898637][T22234] FAULT_INJECTION: forcing a failure. [ 987.898637][T22234] name failslab, interval 1, probability 0, space 0, times 0 [ 987.917392][T22234] CPU: 0 PID: 22234 Comm: syz.1.4055 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 987.927601][T22234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 987.937754][T22234] Call Trace: [ 987.941094][T22234] [ 987.944057][T22234] dump_stack_lvl+0x241/0x360 [ 987.948771][T22234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.953998][T22234] ? __pfx__printk+0x10/0x10 [ 987.958614][T22234] ? is_bpf_text_address+0x285/0x2a0 [ 987.963938][T22234] should_fail_ex+0x3b0/0x4e0 [ 987.968937][T22234] ? __alloc_skb+0x1c3/0x440 [ 987.973772][T22234] should_failslab+0x9/0x20 [ 987.978445][T22234] kmem_cache_alloc_node_noprof+0x71/0x320 [ 987.984569][T22234] __alloc_skb+0x1c3/0x440 [ 987.989060][T22234] ? __pfx_vsnprintf+0x10/0x10 [ 987.993856][T22234] ? aa_get_newest_label+0xff/0x6f0 [ 987.999175][T22234] ? __pfx___alloc_skb+0x10/0x10 [ 988.004182][T22234] ? snprintf+0xda/0x120 [ 988.008621][T22234] skb_copy_expand+0x150/0xae0 [ 988.013438][T22234] ? __pfx_snprintf+0x10/0x10 [ 988.018133][T22234] ? bpf_lsm_capable+0x9/0x10 [ 988.022834][T22234] ? security_capable+0x90/0xb0 [ 988.027735][T22234] uevent_net_rcv_skb+0x2fe/0x460 [ 988.032790][T22234] ? __pfx_uevent_net_rcv_skb+0x10/0x10 [ 988.038372][T22234] netlink_rcv_skb+0x1e3/0x430 [ 988.043170][T22234] ? __pfx_uevent_net_rcv_skb+0x10/0x10 [ 988.048750][T22234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 988.054576][T22234] ? netlink_deliver_tap+0x2e/0x1b0 [ 988.059898][T22234] netlink_unicast+0x7ea/0x980 [ 988.064698][T22234] ? __pfx_netlink_unicast+0x10/0x10 [ 988.070131][T22234] ? __virt_addr_valid+0x183/0x520 [ 988.075426][T22234] ? __check_object_size+0x49c/0x900 [ 988.080836][T22234] ? bpf_lsm_netlink_send+0x9/0x10 [ 988.086154][T22234] netlink_sendmsg+0x8db/0xcb0 [ 988.091150][T22234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.096545][T22234] ? aa_sock_msg_perm+0x91/0x160 [ 988.101585][T22234] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 988.106920][T22234] ? security_socket_sendmsg+0x87/0xb0 [ 988.112409][T22234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.118079][T22234] __sock_sendmsg+0x221/0x270 [ 988.122804][T22234] __sys_sendto+0x3a4/0x4f0 [ 988.127357][T22234] ? __pfx___sys_sendto+0x10/0x10 [ 988.132409][T22234] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 988.138420][T22234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 988.144801][T22234] ? exc_page_fault+0x590/0x8c0 [ 988.149741][T22234] __x64_sys_sendto+0xde/0x100 [ 988.154582][T22234] do_syscall_64+0xf3/0x230 [ 988.159185][T22234] ? clear_bhb_loop+0x35/0x90 [ 988.164743][T22234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.170667][T22234] RIP: 0033:0x7f6aabd7796c [ 988.175200][T22234] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 988.194837][T22234] RSP: 002b:00007f6aacb8fed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 988.203298][T22234] RAX: ffffffffffffffda RBX: 00007f6aacb8ffd0 RCX: 00007f6aabd7796c [ 988.211655][T22234] RDX: 0000000000000020 RSI: 00007f6aacb90020 RDI: 0000000000000005 [ 988.219651][T22234] RBP: 0000000000000000 R08: 00007f6aacb8ff24 R09: 000000000000000c [ 988.227675][T22234] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 988.235689][T22234] R13: 00007f6aacb8ff78 R14: 00007f6aacb90020 R15: 0000000000000000 [ 988.243719][T22234] [ 988.270865][ T6052] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 988.293335][ T6052] cp210x 3-1:0.0: querying part number failed [ 988.328780][ T6052] usb 3-1: cp210x converter now attached to ttyUSB0 [ 988.379458][ T6052] usb 3-1: USB disconnect, device number 26 [ 988.409381][ T6052] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 988.430306][ T6052] cp210x 3-1:0.0: device disconnected [ 988.557990][T22244] vhci_hcd: vhci_device speed not set [ 988.738122][T20276] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 988.784565][T22251] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 988.812058][T22251] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 988.941158][T20276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 988.994452][T20276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 989.034460][T20276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 989.099373][T20276] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 989.124124][T20276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.154407][T20276] usb 2-1: config 0 descriptor?? [ 989.550767][T22263] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4064'. [ 989.569203][T17582] vhci_hcd: vhci_device speed not set [ 989.667580][T20276] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max [ 989.716649][T20276] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 989.778826][T20276] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 989.846890][T20276] usb 2-1: USB disconnect, device number 10 [ 990.418104][ T6052] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 990.630571][ T6052] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 990.648424][ T6052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.674891][ T6052] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 990.727153][ T6052] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 990.749383][ T6052] usb 5-1: Manufacturer: syz [ 990.772795][ T6052] usb 5-1: config 0 descriptor?? [ 990.888511][ T6052] rc_core: IR keymap rc-hauppauge not found [ 990.905584][ T6052] Registered IR keymap rc-empty [ 990.922396][ T6052] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 990.952907][ T6052] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input74 [ 990.990101][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 991.065265][T22298] kvm: pic: non byte write [ 991.620852][T20276] usb 5-1: USB disconnect, device number 25 [ 991.768366][T17582] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 991.845298][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 991.845312][ T29] audit: type=1326 audit(1720373902.658:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22312 comm="syz.1.4080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6aabd75bd9 code=0x0 [ 991.988112][T17582] usb 3-1: Using ep0 maxpacket: 32 [ 991.995029][T17582] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.006557][T17582] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.017650][T17582] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 992.036371][T17582] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 992.049330][T17582] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 992.061554][T17582] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 992.080973][T17582] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.090406][T17582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.098662][T17582] usb 3-1: Product: syz [ 992.103227][T17582] usb 3-1: Manufacturer: syz [ 992.108008][T17582] usb 3-1: SerialNumber: syz [ 992.354760][T17582] cdc_ncm 3-1:1.0: bind() failure [ 992.375283][T17582] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 992.394090][T17582] cdc_ncm 3-1:1.1: bind() failure [ 992.413896][T17582] usb 3-1: USB disconnect, device number 27 [ 992.558179][T20276] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 992.747277][ T29] audit: type=1326 audit(1720373903.558:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22322 comm="syz.3.4083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f265fb75bd9 code=0x0 [ 992.772397][T20276] usb 1-1: Using ep0 maxpacket: 16 [ 992.785171][T20276] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 992.813509][T20276] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 992.841041][T20276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.857272][ T12] ------------[ cut here ]------------ [ 992.863464][ T12] WARNING: CPU: 1 PID: 12 at net/wireless/nl80211.c:19473 cfg80211_bss_color_notify+0x5f6/0x8b0 [ 992.873780][T20276] usb 1-1: Product: syz [ 992.874017][ T12] Modules linked in: [ 992.882279][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 992.889647][T20276] usb 1-1: Manufacturer: syz [ 992.892519][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 992.897775][T20276] usb 1-1: SerialNumber: syz [ 992.907221][ T12] Workqueue: phy109 ieee80211_color_collision_detection_work [ 992.907263][ T12] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 992.907290][ T12] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 c9 dd b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 bb dd b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ad dd b8 f6 c6 05 94 83 ba 04 01 90 48 [ 992.907308][ T12] RSP: 0018:ffffc90000117aa0 EFLAGS: 00010293 [ 992.907329][ T12] RAX: ffffffff8add49f5 RBX: 0000000000000000 RCX: ffff888016ec5a00 [ 992.907346][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 992.907360][ T12] RBP: ffffc90000117bb0 R08: ffffffff8add4522 R09: 1ffffffff1f5a925 [ 992.907376][ T12] R10: dffffc0000000000 R11: ffffffff8af8c3f0 R12: 1ffff92000022f5c [ 992.907392][ T12] R13: ffff88806c1a4000 R14: ffff88806c1a4cb0 R15: dffffc0000000000 [ 992.907408][ T12] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 992.907424][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.907439][ T12] CR2: 00000000200c1000 CR3: 0000000070c4e000 CR4: 00000000003506f0 [ 992.907456][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 992.907469][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 992.907496][ T12] Call Trace: [ 992.907506][ T12] [ 992.907517][ T12] ? __warn+0x163/0x4e0 [ 992.922581][T20276] usb 1-1: config 0 descriptor?? [ 992.926414][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 992.926446][ T12] ? report_bug+0x2b3/0x500 [ 992.926468][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 993.070563][ T12] ? handle_bug+0x3e/0x70 [ 993.074970][ T12] ? exc_invalid_op+0x1a/0x50 [ 993.079887][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 993.084942][ T12] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 993.092528][ T12] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 993.098404][ T12] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 993.104238][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 993.110200][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 993.115251][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 993.121336][ T12] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 993.127517][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 993.133994][ T12] ? process_scheduled_works+0x945/0x1830 [ 993.139928][ T12] process_scheduled_works+0xa2c/0x1830 [ 993.145503][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.152538][ T12] ? assign_work+0x364/0x3d0 [ 993.158515][ T12] worker_thread+0x86d/0xd50 [ 993.163865][ T12] ? __kthread_parkme+0x169/0x1d0 [ 993.169076][ T12] ? __pfx_worker_thread+0x10/0x10 [ 993.174216][ T12] kthread+0x2f0/0x390 [ 993.178609][ T12] ? __pfx_worker_thread+0x10/0x10 [ 993.183749][ T12] ? __pfx_kthread+0x10/0x10 [ 993.188437][ T12] ret_from_fork+0x4b/0x80 [ 993.192885][ T12] ? __pfx_kthread+0x10/0x10 [ 993.197484][ T12] ret_from_fork_asm+0x1a/0x30 [ 993.202388][ T12] [ 993.205448][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 993.212748][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 993.222836][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 993.232916][ T12] Workqueue: phy109 ieee80211_color_collision_detection_work [ 993.240334][ T12] Call Trace: [ 993.243639][ T12] [ 993.246643][ T12] dump_stack_lvl+0x241/0x360 [ 993.251368][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.256579][ T12] ? __pfx__printk+0x10/0x10 [ 993.261188][ T12] ? vscnprintf+0x5d/0x90 [ 993.265541][ T12] panic+0x349/0x860 [ 993.269450][ T12] ? __warn+0x172/0x4e0 [ 993.273604][ T12] ? __pfx_panic+0x10/0x10 [ 993.278023][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 993.282967][ T12] __warn+0x346/0x4e0 [ 993.286949][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 993.292782][ T12] report_bug+0x2b3/0x500 [ 993.297541][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 993.303610][ T12] handle_bug+0x3e/0x70 [ 993.307847][ T12] exc_invalid_op+0x1a/0x50 [ 993.312348][ T12] asm_exc_invalid_op+0x1a/0x20 [ 993.317206][ T12] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 993.323613][ T12] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 c9 dd b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 bb dd b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ad dd b8 f6 c6 05 94 83 ba 04 01 90 48 [ 993.343213][ T12] RSP: 0018:ffffc90000117aa0 EFLAGS: 00010293 [ 993.349283][ T12] RAX: ffffffff8add49f5 RBX: 0000000000000000 RCX: ffff888016ec5a00 [ 993.357333][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 993.365298][ T12] RBP: ffffc90000117bb0 R08: ffffffff8add4522 R09: 1ffffffff1f5a925 [ 993.373349][ T12] R10: dffffc0000000000 R11: ffffffff8af8c3f0 R12: 1ffff92000022f5c [ 993.381313][ T12] R13: ffff88806c1a4000 R14: ffff88806c1a4cb0 R15: dffffc0000000000 [ 993.389300][ T12] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 993.396840][ T12] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 993.402632][ T12] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 993.408440][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 993.413456][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 993.419429][ T12] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 993.425572][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 993.431897][ T12] ? process_scheduled_works+0x945/0x1830 [ 993.437693][ T12] process_scheduled_works+0xa2c/0x1830 [ 993.443508][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.450131][ T12] ? assign_work+0x364/0x3d0 [ 993.454734][ T12] worker_thread+0x86d/0xd50 [ 993.459338][ T12] ? __kthread_parkme+0x169/0x1d0 [ 993.464369][ T12] ? __pfx_worker_thread+0x10/0x10 [ 993.469480][ T12] kthread+0x2f0/0x390 [ 993.473556][ T12] ? __pfx_worker_thread+0x10/0x10 [ 993.478660][ T12] ? __pfx_kthread+0x10/0x10 [ 993.483275][ T12] ret_from_fork+0x4b/0x80 [ 993.487702][ T12] ? __pfx_kthread+0x10/0x10 [ 993.492466][ T12] ret_from_fork_asm+0x1a/0x30 [ 993.497237][ T12] [ 993.500497][ T12] Kernel Offset: disabled [ 993.504924][ T12] Rebooting in 86400 seconds..