last executing test programs: 19m37.032155895s ago: executing program 3 (id=4): r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 19m35.296876981s ago: executing program 3 (id=6): syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040ed50004"], 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0x110, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x7, 0x2, 0x1, 0x5, 0x6, 0x3], 0x2, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x6, 0x4, 0x2, 0x6], 0x1, 0x7}, {0x4, [0x4, 0x1, 0x4, 0x5, 0x2, 0x4], 0x6, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x3, 0x4, 0x1, 0x0, 0x5], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x5, 0x4, 0x7], 0x6}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x1, 0x2, 0x0, 0x4, 0x1], 0x2}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick=0xfdff, {0xfd, 0xf}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x4, 0x7d7}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2F\xb8\x9c\t\x88h\xdb\x8f\rT\xa8\xbcm\x9c\x81\x03\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\x00\x04\x00\x009VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xef\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4041, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000680)="7a7fa22c2a1a89df53ef2a2d86dd5a4fd3bfd1ccb0c68d4eeb53c7ec80035cd606d138e743d6928f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x0, 0x4000}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800) poll(&(0x7f0000000000)=[{r6, 0x448}, {r5, 0x2161}], 0x2, 0x120000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r8 = fanotify_init(0x2, 0x2) fanotify_mark(r8, 0x1, 0x8000008, r8, 0x0) 19m32.570300404s ago: executing program 0 (id=1): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) 19m30.442575327s ago: executing program 0 (id=10): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}, @generic={0x44, 0x2}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) inotify_init() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) stat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x30}], 0x2) 19m27.715302634s ago: executing program 0 (id=12): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) 19m22.810650176s ago: executing program 0 (id=16): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) 19m18.639358659s ago: executing program 32 (id=6): syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040ed50004"], 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0x110, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x7, 0x2, 0x1, 0x5, 0x6, 0x3], 0x2, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x6, 0x4, 0x2, 0x6], 0x1, 0x7}, {0x4, [0x4, 0x1, 0x4, 0x5, 0x2, 0x4], 0x6, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x3, 0x4, 0x1, 0x0, 0x5], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x5, 0x4, 0x7], 0x6}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x1, 0x2, 0x0, 0x4, 0x1], 0x2}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick=0xfdff, {0xfd, 0xf}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x4, 0x7d7}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2F\xb8\x9c\t\x88h\xdb\x8f\rT\xa8\xbcm\x9c\x81\x03\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\x00\x04\x00\x009VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xef\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4041, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000680)="7a7fa22c2a1a89df53ef2a2d86dd5a4fd3bfd1ccb0c68d4eeb53c7ec80035cd606d138e743d6928f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x0, 0x4000}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800) poll(&(0x7f0000000000)=[{r6, 0x448}, {r5, 0x2161}], 0x2, 0x120000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r8 = fanotify_init(0x2, 0x2) fanotify_mark(r8, 0x1, 0x8000008, r8, 0x0) 19m5.851169779s ago: executing program 33 (id=16): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) 18m56.228998033s ago: executing program 1 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003006861"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) pipe(&(0x7f00000000c0)) 18m48.633349095s ago: executing program 1 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) 18m38.581403988s ago: executing program 1 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) setgroups(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) 18m36.330356638s ago: executing program 1 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 18m34.573414083s ago: executing program 1 (id=62): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) 18m33.589323545s ago: executing program 1 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) 18m18.02349731s ago: executing program 34 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) 18.801485044s ago: executing program 4 (id=1473): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0xe, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.841586759s ago: executing program 2 (id=1476): prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x58, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r3}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000f492a7a579be0174299480fe2a65565da081aacd40d1c3f1147588b3fdd23972286f40c86eab8c1199f128cfd2a392f4f8e28a7bfa8ffb26ca87988c6988", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000100)={0xa, 0xa9d, 0x3, @mcast1}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 14.698901408s ago: executing program 5 (id=1483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x580}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x80000) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x8000288, 0x0, r7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) r10 = inotify_init1(0x80000) inotify_add_watch(r10, &(0x7f00000000c0)='./file0\x00', 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000004280), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 13.61541448s ago: executing program 5 (id=1488): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6(0xa, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 13.170807655s ago: executing program 2 (id=1490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x2, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@register_looper, @register_looper], 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 13.125385317s ago: executing program 4 (id=1491): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000f2c000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x1000000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_io_uring_setup(0xdaa, 0x0, &(0x7f0000000100), &(0x7f0000000000)) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000200)={0xb, 0x1, 0x3}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 13.069575848s ago: executing program 6 (id=1492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) writev(r3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) 12.060684586s ago: executing program 6 (id=1494): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@register_looper, @register_looper], 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) 10.583893735s ago: executing program 5 (id=1499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/235, 0xeb}], 0x6}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4d, 0x200200000002, 0x8000, 0x8, 0x5}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a400000002f3fba5f3a501dd117e8d0805000000000000000000070000040600000600024088640000ba959be459be464a881bd48b7eaca0cfbcb907b97805d33aad38f70de37de0eedc3e53d412881815ae8744c756d6b81b71fe58d9514f7a7114eb"], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) statx(0xffffffffffffff9c, &(0x7f0000004400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x20, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='2\x00', 0x2) 9.849962904s ago: executing program 4 (id=1502): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 9.539505035s ago: executing program 4 (id=1503): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000dc4009040000010300000009210900000122a0"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) 9.248922752s ago: executing program 2 (id=1504): prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0xa0, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r3}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x48, 0x1, {{'sha512-neon\x00'}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000f492a7a579be0174299480fe2a65565da081aacd40d1c3f1147588b3fdd23972286f40c86eab8c1199f128cfd2a392f4f8e28a7bfa8ffb26ca87988c6988", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000100)={0xa, 0xa9d, 0x3, @mcast1}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 8.519036815s ago: executing program 6 (id=1506): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x7, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_io_uring_setup(0x269, 0x0, &(0x7f0000000280), 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = signalfd4(r1, 0x0, 0x0, 0x80800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = syz_clone(0x2046a00, &(0x7f00000000c0)="4b549681d11459d784c7d5dfd3215dac5f2bf9994a8d393d5e00ee9b534edfc41f3657af51e4bc22019756c37eb9031cfd5b195bb429100c8577bce710bee2cb", 0x48, &(0x7f0000001840), 0x0, 0x0) wait4(r7, 0x0, 0x40000000, 0x0) 7.769128699s ago: executing program 5 (id=1511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@register_looper, @register_looper], 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 7.456299799s ago: executing program 6 (id=1513): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x94, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x3c, 0x1, [@m_ctinfo={0x38, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.191590428s ago: executing program 6 (id=1515): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b6342801000000000000", @ANYRESHEX=r1, @ANYRESDEC=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6f0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) chroot(&(0x7f0000000180)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) getpid() ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000640)={'veth1_to_bond\x00', &(0x7f0000000600)=@ethtool_sset_info={0x37, 0x9, 0x5, [0x5f4b0af7]}}) 6.833312965s ago: executing program 2 (id=1517): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000005840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f00000003c0)='numa_maps\x00') read$FUSE(r3, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(r3, &(0x7f00000001c0)={'some', 0x20, 0x0, 0x20, 0x9}, 0x2f) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, 0x0, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) unshare(0x66000080) 6.08545184s ago: executing program 4 (id=1519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xd8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 5.099877305s ago: executing program 4 (id=1523): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0xfffffffe) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000080)=0x58, 0x20e451bd, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r6, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x10000000000}]) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8108551b, &(0x7f0000002a40)) 4.655555556s ago: executing program 5 (id=1525): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x6b, {0x6b, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8489cad1c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a010200000000000000000200190009000100"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 3.793128124s ago: executing program 7 (id=1528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b6342801000000000000", @ANYRESHEX=r1, @ANYRESDEC=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6f0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) chroot(&(0x7f0000000180)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) lstat(&(0x7f0000000300)='./file0\x00', 0x0) getpid() ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000640)={'veth1_to_bond\x00', &(0x7f0000000600)=@ethtool_sset_info={0x37, 0x9, 0x5, [0x5f4b0af7]}}) 3.648266845s ago: executing program 2 (id=1529): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) 2.097464899s ago: executing program 6 (id=1530): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000dc4009040000010300000009210900000122a0"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) 2.097039077s ago: executing program 7 (id=1531): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007000000", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x814) 1.828944648s ago: executing program 5 (id=1532): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) 1.817374224s ago: executing program 7 (id=1533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/235, 0xeb}], 0x6}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4d, 0x200200000002, 0x8000, 0x8, 0x5}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a400000002f3fba5f3a501dd117e8d0805000000000000000000070000040600000600024088640000ba959be459be464a881bd48b7eaca0cfbcb907b97805d33aad38f70de37de0eedc3e53d412881815ae8744c756d6b81b71fe58d9514f7a7114eb"], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 684.266798ms ago: executing program 7 (id=1534): syz_open_dev$loop(0x0, 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file1/../file0/file0', [], 0xa, "b524be350e7611b133a163b4ab1b0400000024e974e8a21afa278685f8b184319a8c7bb520df76b782000000000000000748f0998fc48ca49ae39016047f988925afe412f017f895e926610850ea98959add30eecdfbf7ec4c6c186cb815e1624da9"}, 0x7c) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000000), 0x10, &(0x7f0000000300)={0x0, 0x1}, 0x8}, 0x0) 76.559043ms ago: executing program 7 (id=1535): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{}, 0xd8eb, 0x2}}, &(0x7f0000000300), 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 243.008µs ago: executing program 2 (id=1536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) preadv(r2, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) writev(r3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) 0s ago: executing program 7 (id=1537): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x60, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x4}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): idge_slave_0) entered disabled state [ 795.789770][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.926302][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.979131][ T43] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 795.985284][ T1457] bond0 (unregistering): Released all slaves [ 796.142676][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.142724][ T43] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 796.142745][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.146617][ T43] usb 8-1: config 0 descriptor?? [ 796.239815][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.319880][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.354170][ T43] usbhid 8-1:0.0: can't add hid device: -71 [ 796.354296][ T43] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 796.366274][ T43] usb 8-1: USB disconnect, device number 4 [ 796.421064][ T1457] bond0 (unregistering): Released all slaves [ 796.649585][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.741094][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.809084][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 796.813027][ T1457] bond0 (unregistering): Released all slaves [ 796.959100][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 796.961991][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.962036][ T43] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 796.962049][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.965789][ T43] usb 8-1: config 0 descriptor?? [ 797.182161][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.588'. [ 797.422150][ T43] kye 0003:0458:5016.0001: control desc unexpectedly large [ 797.456701][ T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0001/input/input15 [ 797.821587][ T37] audit: type=1326 audit(1764824607.269:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 797.821635][ T37] audit: type=1326 audit(1764824607.269:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 797.821659][ T37] audit: type=1326 audit(1764824607.269:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 797.821725][ T37] audit: type=1326 audit(1764824607.269:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 797.821749][ T37] audit: type=1326 audit(1764824607.269:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 797.821771][ T37] audit: type=1326 audit(1764824607.269:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 798.004799][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.035010][ T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0001/input/input16 [ 798.261772][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.417791][ T1457] bond0 (unregistering): Released all slaves [ 798.457779][ T43] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 798.742567][ T37] audit: type=1326 audit(1764824608.049:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.5.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 798.825601][ T8527] usb 8-1: USB disconnect, device number 5 [ 798.981463][ T9343] fido_id[9343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 799.671335][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.816486][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.464531][ T9190] team0: Port device team_slave_0 added [ 800.492479][ T9190] team0: Port device team_slave_1 added [ 801.541796][ T1457] hsr_slave_0: left promiscuous mode [ 801.559899][ T1457] hsr_slave_1: left promiscuous mode [ 801.560616][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.589729][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.639326][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.660221][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.002962][ T1457] hsr_slave_0: left promiscuous mode [ 802.048027][ T1457] hsr_slave_1: left promiscuous mode [ 802.061908][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.059165][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.139409][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.7.598'. [ 803.356354][ T37] audit: type=1326 audit(1764824612.809:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 803.356403][ T37] audit: type=1326 audit(1764824612.809:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 803.366588][ T37] audit: type=1326 audit(1764824612.809:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 803.366632][ T37] audit: type=1326 audit(1764824612.809:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 803.519129][ T37] audit: type=1326 audit(1764824612.969:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9369 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2326fcf749 code=0x7ffc0000 [ 803.712077][ T1457] hsr_slave_0: left promiscuous mode [ 803.814159][ T1457] hsr_slave_1: left promiscuous mode [ 803.814799][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.849114][ T5874] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 803.876531][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.050828][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.050876][ T5874] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 804.050910][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.144233][ T5874] usb 8-1: config 0 descriptor?? [ 805.021194][ T5874] usbhid 8-1:0.0: can't add hid device: -71 [ 805.023096][ T5874] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 805.049976][ T5874] usb 8-1: USB disconnect, device number 6 [ 805.440740][ T5874] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 805.589346][ T5874] usb 8-1: Using ep0 maxpacket: 16 [ 805.592014][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.592049][ T5874] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 805.592061][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.595937][ T5874] usb 8-1: config 0 descriptor?? [ 805.710495][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 805.899811][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 806.017969][ T5874] kye 0003:0458:5016.0002: control desc unexpectedly large [ 806.036619][ T5874] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0002/input/input17 [ 806.142020][ T5874] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0002/input/input18 [ 806.198541][ T5874] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 806.978553][ T8527] usb 8-1: USB disconnect, device number 7 [ 807.601180][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 808.084223][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 809.029803][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.029875][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.229087][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.599413][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.729822][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 810.872622][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 811.606825][ T9412] kAFS: unable to lookup cell 'ÿ' [ 811.607776][ T9412] kAFS: unable to lookup cell '(,c¾Ì' [ 811.990259][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 812.014983][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 812.016164][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 812.017471][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 812.018487][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 812.397111][ T9419] kAFS: unable to lookup cell 'ÿ' [ 812.397826][ T9419] kAFS: unable to lookup cell '(,c¾Ì' [ 812.433862][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 812.909690][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 813.440037][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 813.444684][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 813.455540][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 813.498238][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 813.501819][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 813.961994][ T9425] binder: 9422:9425 ioctl 4018620d 0 returned -22 [ 814.131731][ T5809] Bluetooth: hci4: command tx timeout [ 814.365919][ T9425] syz.7.610 (9425): drop_caches: 2 [ 814.411127][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.411139][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.411154][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.532166][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.532183][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.532209][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.185677][ T9190] hsr_slave_0: entered promiscuous mode [ 815.189761][ T9190] hsr_slave_1: entered promiscuous mode [ 815.262094][ T9190] debugfs: 'hsr0' already exists in 'hsr' [ 815.262123][ T9190] Cannot create hsr debugfs directory [ 815.650364][ T5809] Bluetooth: hci5: command tx timeout [ 816.223826][ T5809] Bluetooth: hci4: command tx timeout [ 816.473101][ T9437] syz.7.613 (9437): drop_caches: 2 [ 817.752929][ T5809] Bluetooth: hci5: command tx timeout [ 818.469004][ T5809] Bluetooth: hci4: command tx timeout [ 818.859134][ T9413] chnl_net:caif_netlink_parms(): no params data found [ 819.229030][ T9420] chnl_net:caif_netlink_parms(): no params data found [ 819.799251][ T5809] Bluetooth: hci5: command tx timeout [ 820.523355][ T5809] Bluetooth: hci4: command tx timeout [ 820.803919][ T9413] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.804149][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.804406][ T9413] bridge_slave_0: entered allmulticast mode [ 820.807685][ T9413] bridge_slave_0: entered promiscuous mode [ 821.008378][ T9467] ntfs3(nullb0): Primary boot signature is not NTFS. [ 821.008799][ T9467] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 821.424500][ T9413] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.424680][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.424917][ T9413] bridge_slave_1: entered allmulticast mode [ 821.502165][ T9413] bridge_slave_1: entered promiscuous mode [ 821.861102][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.861795][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.862013][ T9420] bridge_slave_0: entered allmulticast mode [ 821.864861][ T9420] bridge_slave_0: entered promiscuous mode [ 821.879311][ T5809] Bluetooth: hci5: command tx timeout [ 822.184986][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.185134][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.185334][ T9420] bridge_slave_1: entered allmulticast mode [ 822.190880][ T9420] bridge_slave_1: entered promiscuous mode [ 822.235551][ T9413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.406016][ T9413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.802369][ T9420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.951875][ T6006] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 823.984464][ T9420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.001291][ T9413] team0: Port device team_slave_0 added [ 824.060548][ T5793] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 824.104260][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.104308][ T6006] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 824.104329][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.115988][ T6006] usb 8-1: config 0 descriptor?? [ 824.165910][ T9413] team0: Port device team_slave_1 added [ 824.221085][ T5793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.221173][ T5793] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 824.221186][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.233795][ T5793] usb 6-1: config 0 descriptor?? [ 824.335308][ T6006] usbhid 8-1:0.0: can't add hid device: -71 [ 824.335498][ T6006] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 824.350650][ T6006] usb 8-1: USB disconnect, device number 8 [ 824.428145][ T9420] team0: Port device team_slave_0 added [ 824.465564][ T9190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 824.476484][ T5793] usbhid 6-1:0.0: can't add hid device: -71 [ 824.476560][ T5793] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 824.492140][ T5793] usb 6-1: USB disconnect, device number 3 [ 824.622911][ T9420] team0: Port device team_slave_1 added [ 824.623642][ T9190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 824.751296][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.751313][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.751339][ T9413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.752642][ T9190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 824.849910][ T6006] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 824.872154][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.872172][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.872197][ T9413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.971844][ T5793] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 824.991170][ T9190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 824.999680][ T6006] usb 8-1: Using ep0 maxpacket: 16 [ 825.009519][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.009575][ T6006] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 825.009597][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.014946][ T6006] usb 8-1: config 0 descriptor?? [ 825.046662][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.046678][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.046704][ T9420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.112283][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.112300][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.112325][ T9420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.119087][ T5793] usb 6-1: Using ep0 maxpacket: 16 [ 825.148653][ T5793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.148754][ T5793] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 825.148775][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.181923][ T5793] usb 6-1: config 0 descriptor?? [ 825.453254][ T6006] kye 0003:0458:5016.0003: control desc unexpectedly large [ 825.486921][ T6006] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0003/input/input19 [ 825.604594][ T6006] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0003/input/input20 [ 825.626074][ T9413] hsr_slave_0: entered promiscuous mode [ 825.627692][ T9413] hsr_slave_1: entered promiscuous mode [ 825.650366][ T9413] debugfs: 'hsr0' already exists in 'hsr' [ 825.650393][ T9413] Cannot create hsr debugfs directory [ 825.753948][ T5793] kye 0003:0458:5016.0004: control desc unexpectedly large [ 825.786854][ T1457] bridge_slave_1: left allmulticast mode [ 825.786881][ T1457] bridge_slave_1: left promiscuous mode [ 825.787139][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.845527][ T5793] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0004/input/input21 [ 825.898606][ T1457] bridge_slave_0: left allmulticast mode [ 825.898691][ T1457] bridge_slave_0: left promiscuous mode [ 825.904713][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.972598][ T6006] kye 0003:0458:5016.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 826.041676][ T1457] bridge_slave_1: left allmulticast mode [ 826.041705][ T1457] bridge_slave_1: left promiscuous mode [ 826.042121][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.067267][ T5793] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0004/input/input22 [ 826.153971][ T1457] bridge_slave_0: left allmulticast mode [ 826.153999][ T1457] bridge_slave_0: left promiscuous mode [ 826.154685][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.349245][ T6006] usb 8-1: USB disconnect, device number 9 [ 826.364425][ T5793] kye 0003:0458:5016.0004: input,hiddev1,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 826.450494][ T9501] fido_id[9501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0003/report_descriptor': No such device [ 826.581254][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.606718][ T5793] usb 6-1: USB disconnect, device number 4 [ 826.619977][ T9504] fido_id[9504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 826.869781][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.952738][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.171018][ T1457] bond0 (unregistering): Released all slaves [ 827.403612][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.488365][ T9512] binder: 9509:9512 ioctl 4018620d 0 returned -22 [ 827.512505][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.558652][ T9512] syz.5.624 (9512): drop_caches: 2 [ 827.574256][ T1457] bond0 (unregistering): Released all slaves [ 827.869944][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.971546][ T9420] hsr_slave_0: entered promiscuous mode [ 827.972759][ T9420] hsr_slave_1: entered promiscuous mode [ 828.174681][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.313820][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.018373][ T9420] debugfs: 'hsr0' already exists in 'hsr' [ 829.018398][ T9420] Cannot create hsr debugfs directory [ 829.969033][ T1457] hsr_slave_0: left promiscuous mode [ 830.000196][ T1457] hsr_slave_1: left promiscuous mode [ 830.001059][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.111841][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.309238][ T1457] hsr_slave_0: left promiscuous mode [ 830.319201][ T1457] hsr_slave_1: left promiscuous mode [ 830.320804][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.371125][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.309143][ T6006] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 831.479049][ T6006] usb 8-1: Using ep0 maxpacket: 16 [ 831.523885][ T6006] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.523941][ T6006] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.525450][ T6006] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 831.525476][ T6006] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 831.525495][ T6006] usb 8-1: Manufacturer: syz [ 831.533636][ T6006] usb 8-1: config 0 descriptor?? [ 831.556409][ T6006] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 831.640706][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 831.829597][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 833.179880][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 833.382135][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 834.129904][ T5966] usb 8-1: USB disconnect, device number 10 [ 835.537977][ T9558] netlink: 4104 bytes leftover after parsing attributes in process `syz.5.635'. [ 836.769063][ T9568] binder: 9562:9568 ioctl 4018620d 0 returned -22 [ 836.853599][ T9568] syz.5.637 (9568): drop_caches: 2 [ 837.838795][ T7572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 837.869105][ T7572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 837.897442][ T7572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 837.931235][ T7572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 837.932194][ T7572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.021623][ T9413] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 839.118541][ T9413] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 840.039610][ T5809] Bluetooth: hci0: command tx timeout [ 840.040736][ T9413] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 840.340084][ T9413] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 840.960523][ T9420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 841.069100][ T5874] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 841.074558][ T9420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 841.153759][ T9420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 841.218977][ T5874] usb 8-1: Using ep0 maxpacket: 16 [ 841.221331][ T5874] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 841.222825][ T5874] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 841.222850][ T5874] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 841.222869][ T5874] usb 8-1: Manufacturer: syz [ 841.275323][ T5874] usb 8-1: config 0 descriptor?? [ 841.290203][ T5874] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 841.478132][ T9420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 841.544086][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 842.123744][ T5809] Bluetooth: hci0: command tx timeout [ 842.661025][ T9615] syz.5.644 (9615): drop_caches: 2 [ 842.776395][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.776594][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.776730][ T9569] bridge_slave_0: entered allmulticast mode [ 842.802738][ T9569] bridge_slave_0: entered promiscuous mode [ 843.053866][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.055572][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.055825][ T9569] bridge_slave_1: entered allmulticast mode [ 843.085013][ T9569] bridge_slave_1: entered promiscuous mode [ 843.345660][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.464630][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.766154][ T9569] team0: Port device team_slave_0 added [ 843.831473][ T9569] team0: Port device team_slave_1 added [ 843.833899][ T5793] usb 8-1: USB disconnect, device number 11 [ 844.199878][ T5809] Bluetooth: hci0: command tx timeout [ 844.208080][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.208096][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.208120][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.272592][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.272610][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.272634][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.384618][ T9630] syz.7.647 (9630): drop_caches: 2 [ 844.406886][ T9413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.493622][ T1457] bridge_slave_1: left allmulticast mode [ 844.493649][ T1457] bridge_slave_1: left promiscuous mode [ 844.497555][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.217149][ T1457] bridge_slave_0: left allmulticast mode [ 845.217178][ T1457] bridge_slave_0: left promiscuous mode [ 845.228757][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.284545][ T5809] Bluetooth: hci0: command tx timeout [ 847.031739][ T1457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.109979][ T1457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.129049][ T5793] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 847.177210][ T1457] bond0 (unregistering): Released all slaves [ 847.279080][ T5793] usb 8-1: Using ep0 maxpacket: 16 [ 847.282242][ T5793] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.285340][ T5793] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 847.285372][ T5793] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 847.285392][ T5793] usb 8-1: Manufacturer: syz [ 847.318318][ T5793] usb 8-1: config 0 descriptor?? [ 847.366145][ T5793] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 847.569599][ T9569] hsr_slave_0: entered promiscuous mode [ 847.570972][ T9569] hsr_slave_1: entered promiscuous mode [ 847.731924][ T1457] hsr_slave_0: left promiscuous mode [ 847.749019][ T1457] hsr_slave_1: left promiscuous mode [ 847.750087][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.772338][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.480504][ T1457] team0 (unregistering): Port device team_slave_1 removed [ 848.632228][ T1457] team0 (unregistering): Port device team_slave_0 removed [ 848.872359][ T9661] netlink: 208844 bytes leftover after parsing attributes in process `syz.5.656'. [ 849.733732][ T9668] ntfs3(nullb0): Primary boot signature is not NTFS. [ 849.733933][ T9668] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 849.899733][ T9] usb 8-1: USB disconnect, device number 12 [ 849.958359][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.280668][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.283262][ T6515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.391933][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.392145][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.422771][ T9420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.539892][ T9420] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.595106][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.595337][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.703551][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.703700][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.727317][ T9413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.339899][ T9420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.360588][ T9569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 855.427245][ T9569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 855.474302][ T9569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 856.226935][ T9569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 856.360053][ T9420] veth0_vlan: entered promiscuous mode [ 856.447971][ T9420] veth1_vlan: entered promiscuous mode [ 856.589738][ T9725] syz.7.666 (9725): drop_caches: 2 [ 856.837627][ T9413] veth0_vlan: entered promiscuous mode [ 856.944015][ T9420] veth0_macvtap: entered promiscuous mode [ 856.956864][ T9413] veth1_vlan: entered promiscuous mode [ 856.976315][ T9420] veth1_macvtap: entered promiscuous mode [ 857.233065][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.297264][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.349734][ T9413] veth0_macvtap: entered promiscuous mode [ 857.379360][ T1457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.385827][ T1463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.395873][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.414238][ T1463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.422276][ T1463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.439456][ T9413] veth1_macvtap: entered promiscuous mode [ 857.684204][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.841337][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.844799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.911844][ T9413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.961326][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.966571][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.991002][ T9413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.073524][ T4155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.100011][ T4155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.130859][ T4155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.135050][ T4146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.135070][ T4146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.164916][ T4155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.481853][ T4155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.481873][ T4155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.732192][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.732225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.863031][ T1488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.863053][ T1488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.940525][ T43] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 860.319922][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 861.121746][ T9744] binder: 9740:9744 ioctl 4018620d 0 returned -22 [ 861.142082][ T9744] syz.5.670 (9744): drop_caches: 2 [ 861.394024][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.411081][ T43] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 861.411110][ T43] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 861.411128][ T43] usb 8-1: Manufacturer: syz [ 861.488264][ T43] usb 8-1: config 0 descriptor?? [ 861.544989][ T43] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 863.345374][ T5950] usb 8-1: USB disconnect, device number 13 [ 864.619755][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.137637][ T9775] ntfs3(nullb0): Primary boot signature is not NTFS. [ 866.138090][ T9775] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 866.779320][ T9569] veth0_vlan: entered promiscuous mode [ 866.993800][ T9569] veth1_vlan: entered promiscuous mode [ 867.988555][ T9569] veth0_macvtap: entered promiscuous mode [ 868.020941][ T9569] veth1_macvtap: entered promiscuous mode [ 868.215890][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.235466][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.265324][ T9758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.267271][ T9758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.267314][ T9758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.267348][ T9758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.389071][ T6006] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 868.589823][ T6006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.589871][ T6006] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 868.589891][ T6006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.594663][ T6006] usb 3-1: config 0 descriptor?? [ 868.926757][ T6006] usbhid 3-1:0.0: can't add hid device: -71 [ 868.926876][ T6006] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 868.938489][ T6006] usb 3-1: USB disconnect, device number 6 [ 870.521928][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.521973][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.554972][ T6321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.554991][ T6321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.728426][ T6006] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 870.789590][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.789611][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.888977][ T6006] usb 3-1: Using ep0 maxpacket: 16 [ 870.891323][ T6006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.891371][ T6006] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 870.891392][ T6006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.896820][ T6006] usb 3-1: config 0 descriptor?? [ 871.068064][ T6006] usbhid 3-1:0.0: can't add hid device: -71 [ 871.068192][ T6006] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 871.112259][ T6006] usb 3-1: USB disconnect, device number 7 [ 872.488325][ T9804] binder: 9799:9804 ioctl 4018620d 0 returned -22 [ 872.591545][ T9804] syz.2.681 (9804): drop_caches: 2 [ 874.780626][ T9824] syz.7.685 (9824): drop_caches: 2 [ 877.257717][ T9838] binder: 9835:9838 ioctl 4018620d 0 returned -22 [ 877.265171][ T9838] syz.6.688 (9838): drop_caches: 2 [ 878.525328][ T9840] ntfs3(nullb0): Primary boot signature is not NTFS. [ 878.525483][ T9840] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 878.799013][ T5874] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 878.946794][ T9846] binder: 9843:9846 ioctl 4018620d 0 returned -22 [ 878.953489][ T9846] syz.2.691 (9846): drop_caches: 2 [ 878.969005][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 878.977577][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.978745][ T5874] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 878.978769][ T5874] usb 5-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 878.978779][ T5874] usb 5-1: Manufacturer: syz [ 879.030430][ T5874] usb 5-1: config 0 descriptor?? [ 879.034341][ T5874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 881.610997][ T8548] usb 5-1: USB disconnect, device number 11 [ 886.314741][ T9901] syz.2.702 (9901): drop_caches: 2 [ 887.418427][ T9904] netlink: 'syz.5.705': attribute type 25 has an invalid length. [ 890.547053][ T9936] binder: 9932:9936 ioctl 4018620d 0 returned -22 [ 890.559330][ T9936] syz.4.704 (9936): drop_caches: 2 [ 898.153665][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.154070][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.154445][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.154825][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.155198][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.155569][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.155948][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.156320][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.156697][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 898.157070][ T9975] kvm: kvm [9967]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x801 [ 900.232907][ T9995] kAFS: unable to lookup cell 'ÿ' [ 900.233138][ T9995] kAFS: unable to lookup cell '(,c¾Ì' [ 901.569023][ T5874] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 901.732541][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.732572][ T5874] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 901.732584][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.746509][ T5874] usb 5-1: config 0 descriptor?? [ 901.955916][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 901.955999][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 901.982427][ T5874] usb 5-1: USB disconnect, device number 12 [ 902.345849][T10003] syz.5.729 (10003): drop_caches: 2 [ 902.619775][ T9757] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 902.799606][ T9757] usb 5-1: Using ep0 maxpacket: 16 [ 902.895088][ T9757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.895138][ T9757] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 902.895159][ T9757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.923222][ T9757] usb 5-1: config 0 descriptor?? [ 903.029037][ T8459] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 903.369899][ T9757] usbhid 5-1:0.0: can't add hid device: -71 [ 903.370022][ T9757] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 903.386060][ T8459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.386124][ T8459] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 903.386145][ T8459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.410314][ T9757] usb 5-1: USB disconnect, device number 13 [ 903.437459][ T8459] usb 3-1: config 0 descriptor?? [ 903.693914][ T8459] usbhid 3-1:0.0: can't add hid device: -71 [ 903.693995][ T8459] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 903.726808][ T8459] usb 3-1: USB disconnect, device number 8 [ 904.308991][ T9847] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 904.462999][ T9847] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 904.463017][ T9847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.463027][ T9847] usb 7-1: Product: syz [ 904.463034][ T9847] usb 7-1: Manufacturer: syz [ 904.463042][ T9847] usb 7-1: SerialNumber: syz [ 904.561657][T10017] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.733'. [ 905.453231][ T9847] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 905.511426][ T43] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 908.474950][ T43] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 908.618215][ T43] ath9k_htc: Failed to initialize the device [ 909.191834][ T43] usb 7-1: ath9k_htc: USB layer deinitialized [ 910.688627][T10049] kAFS: unable to lookup cell 'ÿ' [ 910.689182][T10049] kAFS: unable to lookup cell '(,c¾Ì' [ 910.990589][T10050] lo speed is unknown, defaulting to 1000 [ 910.991346][T10050] lo speed is unknown, defaulting to 1000 [ 911.046310][T10050] lo speed is unknown, defaulting to 1000 [ 912.904485][T10050] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 914.152780][T10050] lo speed is unknown, defaulting to 1000 [ 914.240630][T10050] lo speed is unknown, defaulting to 1000 [ 914.243891][T10050] lo speed is unknown, defaulting to 1000 [ 914.283376][T10050] lo speed is unknown, defaulting to 1000 [ 914.286327][T10050] lo speed is unknown, defaulting to 1000 [ 914.359862][ T8548] usb 7-1: USB disconnect, device number 2 [ 917.242563][T10082] netlink: 'syz.5.747': attribute type 25 has an invalid length. [ 922.266906][T10125] kAFS: unable to lookup cell 'ÿ' [ 922.267939][T10125] kAFS: unable to lookup cell '(,c¾Ì' [ 923.442949][T10132] ntfs3(nullb0): Primary boot signature is not NTFS. [ 923.443360][T10132] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 924.398674][T10139] ntfs3(nullb0): Primary boot signature is not NTFS. [ 924.399151][T10139] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 924.546535][T10144] syz.7.762 (10144): drop_caches: 2 [ 926.923655][T10163] binder: 10155:10163 ioctl 4018620d 0 returned -22 [ 926.943949][T10163] syz.2.766 (10163): drop_caches: 2 [ 929.009617][T10174] syz.7.769 (10174): drop_caches: 2 [ 930.121287][T10182] syz.5.771 (10182): drop_caches: 2 [ 932.265433][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.265499][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.550607][T10200] binder: 10193:10200 ioctl 4018620d 0 returned -22 [ 933.557479][T10200] syz.2.777 (10200): drop_caches: 2 [ 935.989747][T10215] kAFS: unable to lookup cell 'ÿ' [ 936.099048][ T8548] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 936.322645][ T8548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.322693][ T8548] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 936.322706][ T8548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.325871][ T8548] usb 5-1: config 0 descriptor?? [ 936.557141][ T8548] usbhid 5-1:0.0: can't add hid device: -71 [ 936.557263][ T8548] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 936.589468][ T8548] usb 5-1: USB disconnect, device number 14 [ 938.078995][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 938.102051][ T5817] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 938.329197][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 938.338737][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.338784][ T43] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 938.338806][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.439630][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.439686][ T5817] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 938.439708][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.444341][ T43] usb 5-1: config 0 descriptor?? [ 938.504129][ T5817] usb 7-1: config 0 descriptor?? [ 940.054558][ T5821] Bluetooth: hci5: command 0x0406 tx timeout [ 940.069531][ T8576] Bluetooth: hci4: command 0x0406 tx timeout [ 940.257077][ T5817] usbhid 7-1:0.0: can't add hid device: -71 [ 940.257194][ T5817] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 940.321760][ T5817] usb 7-1: USB disconnect, device number 3 [ 940.366569][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 940.366694][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 941.629336][ T43] usb 5-1: USB disconnect, device number 15 [ 941.768252][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 941.768279][T10241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.768304][T10241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.884144][T10241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.884166][T10241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.283099][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 946.744502][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.744549][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.744570][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.751745][ T43] usb 5-1: config 0 descriptor?? [ 946.858085][T10281] syz.6.797 (10281): drop_caches: 2 [ 947.473127][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 947.473255][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 947.489761][ T43] usb 5-1: USB disconnect, device number 16 [ 948.029055][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 948.258963][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 948.291307][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.291357][ T43] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 948.291378][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.337313][ T43] usb 5-1: config 0 descriptor?? [ 948.653429][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 948.653513][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 948.683603][ T43] usb 5-1: USB disconnect, device number 17 [ 950.590410][T10294] binder: 10291:10294 ioctl 4018620d 0 returned -22 [ 950.797652][T10294] syz.2.800 (10294): drop_caches: 2 [ 952.306551][T10307] binder: 10304:10307 ioctl 4018620d 0 returned -22 [ 952.323692][T10307] syz.5.804 (10307): drop_caches: 2 [ 954.516846][T10321] ntfs3(nullb0): Primary boot signature is not NTFS. [ 954.517055][T10321] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 954.776480][T10329] syz.2.810 (10329): drop_caches: 2 [ 954.991875][T10328] binder: 10322:10328 ioctl 4018620d 0 returned -22 [ 954.994585][T10328] syz.6.809 (10328): drop_caches: 2 [ 958.049106][ T6207] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 958.200868][ T6207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.200898][ T6207] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 958.200910][ T6207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.205875][ T6207] usb 6-1: config 0 descriptor?? [ 958.415488][ T6207] usbhid 6-1:0.0: can't add hid device: -71 [ 958.415609][ T6207] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 958.449380][ T6207] usb 6-1: USB disconnect, device number 5 [ 963.194418][T10386] syz_tun: entered allmulticast mode [ 963.373444][T10386] dvmrp8: entered allmulticast mode [ 964.683349][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 964.734648][T10385] syz_tun: left allmulticast mode [ 965.318708][T10404] syz_tun: entered allmulticast mode [ 965.412329][T10404] dvmrp8: entered allmulticast mode [ 965.449779][T10404] syz_tun: left allmulticast mode [ 965.618983][T10192] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 965.819149][T10192] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.819260][T10192] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 965.819283][T10192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.869598][T10192] usb 8-1: config 0 descriptor?? [ 966.098993][T10192] usbhid 8-1:0.0: can't add hid device: -71 [ 966.099106][T10192] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 966.105077][T10192] usb 8-1: USB disconnect, device number 14 [ 966.370354][T10422] syz.4.834 (10422): drop_caches: 2 [ 967.745281][T10440] binder: 10435:10440 ioctl 4018620d 0 returned -22 [ 967.790461][T10440] syz.7.839 (10440): drop_caches: 2 [ 970.507932][T10454] ntfs3(nullb0): Primary boot signature is not NTFS. [ 970.517031][T10454] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 971.819106][T10233] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 972.209976][T10233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.210025][T10233] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 972.210047][T10233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.273619][T10233] usb 3-1: config 0 descriptor?? [ 972.485040][T10233] usbhid 3-1:0.0: can't add hid device: -71 [ 972.485158][T10233] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 972.529195][T10233] usb 3-1: USB disconnect, device number 9 [ 973.108957][T10233] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 973.259016][T10233] usb 3-1: Using ep0 maxpacket: 16 [ 973.276892][T10233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.276940][T10233] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 973.276961][T10233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.314518][T10233] usb 3-1: config 0 descriptor?? [ 973.906373][T10233] kye 0003:0458:5016.0005: control desc unexpectedly large [ 973.974107][T10233] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0005/input/input25 [ 974.042049][T10233] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0005/input/input26 [ 974.087413][T10233] kye 0003:0458:5016.0005: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 974.519001][ T6207] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 974.641944][T10233] usb 3-1: USB disconnect, device number 10 [ 974.704350][ T6207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.704396][ T6207] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 974.704417][ T6207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.710074][ T6207] usb 5-1: config 0 descriptor?? [ 975.003287][ T6207] usbhid 5-1:0.0: can't add hid device: -71 [ 975.003415][ T6207] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 975.136074][ T6207] usb 5-1: USB disconnect, device number 18 [ 975.578980][T10039] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 975.731117][T10039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.731166][T10039] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 975.731187][T10039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.735500][T10039] usb 7-1: config 0 descriptor?? [ 976.144900][T10039] usbhid 7-1:0.0: can't add hid device: -71 [ 976.145274][T10039] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 976.209744][T10039] usb 7-1: USB disconnect, device number 4 [ 976.322710][T10498] binder: 10495:10498 ioctl 4018620d 0 returned -22 [ 976.329551][T10498] syz.7.854 (10498): drop_caches: 2 [ 976.688959][T10039] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 976.845674][T10039] usb 7-1: Using ep0 maxpacket: 16 [ 976.847322][T10039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.847350][T10039] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 976.847362][T10039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.866104][T10039] usb 7-1: config 0 descriptor?? [ 977.321571][T10039] kye 0003:0458:5016.0006: control desc unexpectedly large [ 977.379563][T10039] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0006/input/input27 [ 977.405323][T10039] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0006/input/input28 [ 977.591577][T10039] kye 0003:0458:5016.0006: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 978.253583][T10039] usb 7-1: USB disconnect, device number 5 [ 981.115426][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.196377][T10522] tipc: Started in network mode [ 981.196410][T10522] tipc: Node identity eada711a7d64, cluster identity 4711 [ 981.197210][T10522] tipc: Enabled bearer , priority 0 [ 981.211565][T10522] syzkaller0: entered promiscuous mode [ 981.211590][T10522] syzkaller0: entered allmulticast mode [ 981.283082][T10522] tipc: Resetting bearer [ 981.491090][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.532491][T10519] tipc: Resetting bearer [ 981.638533][T10531] netlink: 'syz.6.861': attribute type 25 has an invalid length. [ 981.759778][T10519] tipc: Disabling bearer [ 981.799877][T10537] ntfs3(nullb0): Primary boot signature is not NTFS. [ 981.800169][T10537] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 981.838929][ T6207] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 982.095214][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.118979][ T6207] usb 3-1: Using ep0 maxpacket: 16 [ 982.134874][ T6207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.134903][ T6207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.136266][ T6207] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 982.136290][ T6207] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 982.136308][ T6207] usb 3-1: Manufacturer: syz [ 982.180642][ T6207] usb 3-1: config 0 descriptor?? [ 982.941610][ T6207] usbhid 3-1:0.0: can't add hid device: -71 [ 982.941744][ T6207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 982.984882][ T6207] usb 3-1: USB disconnect, device number 11 [ 983.073859][T10548] kAFS: unable to lookup cell '(,c¾Ì' [ 984.896230][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.647229][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.677259][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.933505][ C0] vkms_vblank_simulate: vblank timer overrun [ 986.658702][T10571] kAFS: unable to lookup cell 'ÿ' [ 986.905345][T10571] kAFS: unable to lookup cell '(,c¾Ì' [ 990.482413][T10591] netlink: 'syz.6.875': attribute type 25 has an invalid length. [ 990.929091][ T5913] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 991.199166][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 991.203438][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.203457][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.204363][ T5913] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 991.204378][ T5913] usb 7-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 991.204388][ T5913] usb 7-1: Manufacturer: syz [ 991.222023][ T5913] usb 7-1: config 0 descriptor?? [ 991.834452][ T5913] usbhid 7-1:0.0: can't add hid device: -71 [ 991.834533][ T5913] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 991.838034][ T5913] usb 7-1: USB disconnect, device number 6 [ 992.598506][T10611] ntfs3(nullb0): Primary boot signature is not NTFS. [ 992.602762][T10611] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 993.327115][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.327168][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.611831][T10628] binder: 10623:10628 ioctl 4018620d 0 returned -22 [ 995.659544][T10628] syz.5.885 (10628): drop_caches: 2 [ 997.376634][T10634] netlink: 'syz.6.888': attribute type 25 has an invalid length. [ 998.201388][T10380] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 998.352061][T10380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.352109][T10380] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 998.352131][T10380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.444004][T10380] usb 7-1: config 0 descriptor?? [ 998.725928][T10380] usbhid 7-1:0.0: can't add hid device: -71 [ 998.726056][T10380] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 998.782539][T10380] usb 7-1: USB disconnect, device number 7 [ 999.170464][ T9785] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 999.268994][T10380] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 999.319716][ T9785] usb 5-1: Using ep0 maxpacket: 16 [ 999.322989][ T9785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.323018][ T9785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.325067][ T9785] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 999.325093][ T9785] usb 5-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 999.325111][ T9785] usb 5-1: Manufacturer: syz [ 999.357785][ T9785] usb 5-1: config 0 descriptor?? [ 999.468927][T10380] usb 7-1: Using ep0 maxpacket: 16 [ 999.472157][T10380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.472202][T10380] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 999.472276][T10380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.517013][T10380] usb 7-1: config 0 descriptor?? [ 1000.026400][ T9785] usbhid 5-1:0.0: can't add hid device: -71 [ 1000.027080][ T9785] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1000.027425][T10380] kye 0003:0458:5016.0007: control desc unexpectedly large [ 1000.048203][ T9785] usb 5-1: USB disconnect, device number 19 [ 1000.085376][T10380] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0007/input/input29 [ 1000.191479][T10380] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0007/input/input30 [ 1000.222826][T10380] kye 0003:0458:5016.0007: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 1000.463114][T10380] usb 7-1: USB disconnect, device number 8 [ 1000.593190][ T6207] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1000.703584][T10644] fido_id[10644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1000.848437][ T6207] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.848464][ T6207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.850676][ T6207] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1000.850709][ T6207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1000.850728][ T6207] usb 6-1: SerialNumber: syz [ 1001.097691][ T6207] usb 6-1: 0:2 : does not exist [ 1001.097855][ T6207] usb 6-1: unit 5: unexpected type 0x03 [ 1001.097877][ T6207] usb 6-1: unit 4 not found! [ 1002.209415][ T6207] usb 6-1: USB disconnect, device number 6 [ 1002.733286][T10494] udevd[10494]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.813345][T10671] tipc: Enabled bearer , priority 0 [ 1003.814480][T10672] syzkaller0: entered promiscuous mode [ 1003.814509][T10672] syzkaller0: entered allmulticast mode [ 1003.930194][T10675] netlink: 'syz.4.899': attribute type 25 has an invalid length. [ 1005.334095][T10667] tipc: Resetting bearer [ 1006.341532][T10667] tipc: Disabling bearer [ 1006.472924][T10380] tipc: Node number set to 2545840410 [ 1006.549154][T10683] kAFS: unable to lookup cell 'ÿ' [ 1006.550062][T10683] kAFS: unable to lookup cell '(,c¾Ì' [ 1007.217566][ T5817] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1007.694361][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 1007.756255][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.756286][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.758063][ T5817] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1007.758087][ T5817] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1007.758106][ T5817] usb 6-1: Manufacturer: syz [ 1007.810605][ T5817] usb 6-1: config 0 descriptor?? [ 1008.583409][T10380] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1008.585612][ T5817] usbhid 6-1:0.0: can't add hid device: -71 [ 1008.585742][ T5817] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1008.623923][ T5817] usb 6-1: USB disconnect, device number 7 [ 1008.780392][T10380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.780444][T10380] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1008.780466][T10380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.863008][T10380] usb 7-1: config 0 descriptor?? [ 1009.930069][T10380] usbhid 7-1:0.0: can't add hid device: -71 [ 1009.930196][T10380] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1010.005485][T10380] usb 7-1: USB disconnect, device number 9 [ 1010.320414][T10706] netlink: 'syz.5.910': attribute type 25 has an invalid length. [ 1010.359742][T10703] kvm_pr_unimpl_wrmsr: 185 callbacks suppressed [ 1010.359764][T10703] kvm: kvm [10702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xde3 [ 1010.360256][T10703] kvm: kvm [10702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x46a [ 1010.363415][T10703] kvm: kvm [10702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1631 [ 1010.415253][T10703] kvm: kvm [10702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x21d5 [ 1010.448981][T10380] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1010.474414][T10703] kvm_intel: kvm [10702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x161 [ 1010.540502][T10703] kvm_intel: kvm [10702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc96 [ 1010.608952][T10380] usb 7-1: Using ep0 maxpacket: 16 [ 1010.610954][T10380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.610998][T10380] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1010.611033][T10380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.618719][T10380] usb 7-1: config 0 descriptor?? [ 1011.216460][T10380] kye 0003:0458:5016.0008: control desc unexpectedly large [ 1011.387973][T10380] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0008/input/input31 [ 1013.427553][T10380] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0008/input/input32 [ 1013.495667][T10380] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 1013.527017][T10380] usb 7-1: USB disconnect, device number 10 [ 1014.649117][T10717] fido_id[10717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1015.427788][T10734] binder: 10729:10734 ioctl 4018620d 0 returned -22 [ 1015.442459][T10734] syz.6.916 (10734): drop_caches: 2 [ 1017.814741][T10748] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1017.814923][T10748] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1017.868165][T10745] syz.5.914 (10745): drop_caches: 2 [ 1018.039178][ T5874] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1018.208953][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 1018.215773][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.215792][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.216982][ T5874] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1018.216998][ T5874] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1018.217009][ T5874] usb 3-1: Manufacturer: syz [ 1018.270231][ T5874] usb 3-1: config 0 descriptor?? [ 1018.299099][ T6059] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1018.484530][ T6059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.484580][ T6059] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1018.484624][ T6059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.528469][ T6059] usb 5-1: config 0 descriptor?? [ 1018.750041][ T6059] usbhid 5-1:0.0: can't add hid device: -71 [ 1018.751297][ T6059] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1018.791457][ T6059] usb 5-1: USB disconnect, device number 20 [ 1018.927029][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 1018.927165][ T5874] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1018.970141][ T5874] usb 3-1: USB disconnect, device number 12 [ 1019.099897][T10758] binder: 10753:10758 ioctl 4018620d 0 returned -22 [ 1019.111355][T10758] syz.6.923 (10758): drop_caches: 2 [ 1019.298918][ T6059] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1019.498891][ T6059] usb 5-1: Using ep0 maxpacket: 16 [ 1019.501793][ T6059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.501839][ T6059] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1019.501860][ T6059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.516540][ T6059] usb 5-1: config 0 descriptor?? [ 1020.193209][ T6059] kye 0003:0458:5016.0009: control desc unexpectedly large [ 1020.197000][ T6059] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0009/input/input33 [ 1021.761719][ T6059] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0009/input/input34 [ 1021.771358][ T6059] kye 0003:0458:5016.0009: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 1021.980610][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.7.926'. [ 1022.080216][ T5817] usb 5-1: USB disconnect, device number 21 [ 1022.322768][T10771] fido_id[10771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1024.739895][T10790] binder: 10786:10790 ioctl 4018620d 0 returned -22 [ 1024.870882][T10790] syz.4.933 (10790): drop_caches: 2 [ 1025.209031][ T8527] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1025.619432][ T8527] usb 6-1: Using ep0 maxpacket: 16 [ 1025.689146][T10802] syz.6.935 (10802): drop_caches: 2 [ 1025.732278][ T8527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.732317][ T8527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.738199][ T8527] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1025.738218][ T8527] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1025.738228][ T8527] usb 6-1: Manufacturer: syz [ 1025.761039][ T8527] usb 6-1: config 0 descriptor?? [ 1026.443480][ T8527] usbhid 6-1:0.0: can't add hid device: -71 [ 1026.443602][ T8527] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1026.464981][ T8527] usb 6-1: USB disconnect, device number 8 [ 1028.049417][T10808] syz.2.928 (10808): drop_caches: 2 [ 1028.421083][T10813] binder: 10809:10813 ioctl 4018620d 0 returned -22 [ 1028.615218][T10813] syz.2.940 (10813): drop_caches: 2 [ 1029.621065][T10819] netlink: 'syz.5.942': attribute type 20 has an invalid length. [ 1030.390157][T10827] kAFS: unable to lookup cell 'ÿ' [ 1030.390995][T10827] kAFS: unable to lookup cell '(,c¾Ì' [ 1030.768396][T10830] lo speed is unknown, defaulting to 1000 [ 1031.201827][ T5945] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1031.350950][ T5945] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.351001][ T5945] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.351025][ T5945] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1031.351036][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.414449][ T5945] usb 7-1: config 0 descriptor?? [ 1031.427809][ T5945] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1031.698473][ T993] usb 7-1: USB disconnect, device number 11 [ 1033.018954][ T993] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1033.168950][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 1033.175639][ T993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.175695][ T993] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.175748][ T993] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1033.175769][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.183500][ T993] usb 7-1: config 0 descriptor?? [ 1033.271829][ T993] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1033.814530][T10852] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1033.827478][T10852] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1034.665490][ T6059] usb 7-1: USB disconnect, device number 12 [ 1034.952010][ T993] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1035.289600][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 1035.538669][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.538702][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.542893][ T993] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1035.542921][ T993] usb 5-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1035.542940][ T993] usb 5-1: Manufacturer: syz [ 1035.557665][ T993] usb 5-1: config 0 descriptor?? [ 1036.270104][ T993] usbhid 5-1:0.0: can't add hid device: -71 [ 1036.270183][ T993] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1036.275638][ T993] usb 5-1: USB disconnect, device number 22 [ 1037.445108][T10902] /dev/nullb0: Can't open blockdev [ 1037.534407][T10885] lo speed is unknown, defaulting to 1000 [ 1037.902107][T10904] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1037.914891][T10904] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1042.444319][ T5817] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1043.138939][ T5817] usb 8-1: Using ep0 maxpacket: 16 [ 1043.141651][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.141685][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.143162][ T5817] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1043.143186][ T5817] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1043.143204][ T5817] usb 8-1: Manufacturer: syz [ 1043.162235][ T5817] usb 8-1: config 0 descriptor?? [ 1043.313890][T10965] kAFS: unable to lookup cell 'ÿ' [ 1043.314954][T10965] kAFS: unable to lookup cell '(,c¾Ì' [ 1043.794178][ T5817] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1043.797571][ T5817] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1043.797618][ T5817] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1043.797644][ T5817] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1043.797666][ T5817] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1043.803114][ T5817] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1046.465397][T10972] lo speed is unknown, defaulting to 1000 [ 1047.859326][ T5817] usb 8-1: USB disconnect, device number 15 [ 1049.606783][T11016] binder: 11012:11016 ioctl 4018620d 0 returned -22 [ 1049.613540][T11016] syz.6.988 (11016): drop_caches: 2 [ 1049.801439][ T5966] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1050.136118][ T5966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.136155][ T5966] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1050.136180][ T5966] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1050.136192][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.271656][ T5966] usb 5-1: config 0 descriptor?? [ 1050.327043][ T5966] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1051.051179][ T5817] usb 5-1: USB disconnect, device number 23 [ 1051.489066][ T993] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1051.508992][ T5817] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1051.659038][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 1051.665512][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.665629][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1051.665671][ T5817] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1051.665692][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.397592][ T993] usb 6-1: Using ep0 maxpacket: 16 [ 1052.416380][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.416411][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.417516][ T993] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1052.417540][ T993] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1052.417668][ T993] usb 6-1: Manufacturer: syz [ 1052.432031][ T993] usb 6-1: config 0 descriptor?? [ 1052.432683][ T5817] usb 5-1: config 0 descriptor?? [ 1052.497601][ T5817] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1052.639077][ T8527] usb 5-1: USB disconnect, device number 24 [ 1052.972748][ T993] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1052.972774][ T993] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1052.972790][ T993] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1052.972805][ T993] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1052.972821][ T993] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1052.973369][ T993] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1053.172885][ T8527] usb 6-1: USB disconnect, device number 9 [ 1054.637745][T11035] netlink: 'syz.4.996': attribute type 25 has an invalid length. [ 1054.950017][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.950060][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.008973][ T6207] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1055.249030][ T6207] usb 3-1: Using ep0 maxpacket: 16 [ 1055.251473][ T6207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.251495][ T6207] usb 3-1: config 0 has no interfaces? [ 1055.256360][ T6207] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1055.256385][ T6207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.256403][ T6207] usb 3-1: Product: syz [ 1055.256416][ T6207] usb 3-1: Manufacturer: syz [ 1055.256428][ T6207] usb 3-1: SerialNumber: syz [ 1055.428133][ T6207] usb 3-1: config 0 descriptor?? [ 1055.723158][T11048] kAFS: unable to lookup cell 'ÿ' [ 1055.826634][ T8527] usb 3-1: USB disconnect, device number 13 [ 1055.849060][T11054] kAFS: unable to lookup cell '(,c¾Ì' [ 1056.085647][T11049] loop2: detected capacity change from 0 to 7 [ 1056.168403][T11049] Dev loop2: unable to read RDB block 7 [ 1056.168484][T11049] loop2: AHDI p1 p2 p3 [ 1056.168541][T11049] loop2: partition table partially beyond EOD, truncated [ 1056.191230][T11049] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1056.191254][T11049] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1059.288951][ T993] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1059.450473][ T993] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1059.450501][ T993] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1059.450513][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.502768][ T993] usb 7-1: config 0 descriptor?? [ 1059.529790][ T993] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1059.949575][ T993] usb 7-1: USB disconnect, device number 13 [ 1060.318974][T10192] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1060.458927][ T993] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1060.468955][T10192] usb 8-1: Using ep0 maxpacket: 16 [ 1060.505795][T10192] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.505826][T10192] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.507520][T10192] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1060.507544][T10192] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1060.507559][T10192] usb 8-1: Manufacturer: syz [ 1060.528534][T11085] kAFS: unable to lookup cell 'ÿ' [ 1060.530157][T11085] kAFS: unable to lookup cell '(,c¾Ì' [ 1060.710330][T10192] usb 8-1: config 0 descriptor?? [ 1060.738913][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 1060.746755][ T993] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1060.746797][ T993] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1060.746817][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.792752][ T993] usb 7-1: config 0 descriptor?? [ 1060.798685][ T993] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1060.973259][T11087] netlink: 'syz.5.1010': attribute type 25 has an invalid length. [ 1061.158205][T10192] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1061.158245][T10192] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1061.158277][T10192] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1061.158303][T10192] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1061.158329][T10192] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 1061.159602][T10192] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1061.357322][T10192] usb 8-1: USB disconnect, device number 16 [ 1061.402937][T11091] syz_tun: entered allmulticast mode [ 1061.591545][T11091] syz_tun: left allmulticast mode [ 1062.065311][ T5945] usb 7-1: USB disconnect, device number 14 [ 1062.561448][T11107] syz.4.1013 (11107): drop_caches: 2 [ 1063.023310][T11094] lo speed is unknown, defaulting to 1000 [ 1064.313081][T11130] netlink: 'syz.7.1021': attribute type 25 has an invalid length. [ 1066.160614][T11147] binder: 11141:11147 ioctl 4018620d 0 returned -22 [ 1066.253180][T11147] syz.4.1026 (11147): drop_caches: 2 [ 1066.369369][T10039] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1067.388944][T10039] usb 3-1: Using ep0 maxpacket: 16 [ 1067.390830][T10039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.390860][T10039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.432608][T10039] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1067.432636][T10039] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1067.432654][T10039] usb 3-1: Manufacturer: syz [ 1067.438041][T10039] usb 3-1: config 0 descriptor?? [ 1067.688385][T11159] syz_tun: entered allmulticast mode [ 1067.894274][T10039] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1067.894312][T10039] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1067.894338][T10039] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1067.894363][T10039] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1067.894389][T10039] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 1067.895375][T10039] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1068.100669][T10039] usb 3-1: USB disconnect, device number 14 [ 1068.231987][T11166] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1032'. [ 1068.558907][T11023] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1068.711293][T11023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.711310][T11023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1068.712397][T11023] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1068.712416][T11023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1068.712428][T11023] usb 8-1: SerialNumber: syz [ 1069.139741][T11023] usb 8-1: 0:2 : does not exist [ 1069.139860][T11023] usb 8-1: unit 255 not found! [ 1069.300435][T11023] usb 8-1: USB disconnect, device number 17 [ 1069.385568][T10494] udevd[10494]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.459104][ T6207] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1069.616742][ T6207] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1069.616759][ T6207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.616769][ T6207] usb 3-1: Product: syz [ 1069.616776][ T6207] usb 3-1: Manufacturer: syz [ 1069.616784][ T6207] usb 3-1: SerialNumber: syz [ 1069.679826][ T6207] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1069.744414][ T5817] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1069.833351][T11176] binder: 11173:11176 ioctl 4018620d 0 returned -22 [ 1069.878632][T11176] syz.4.1035 (11176): drop_caches: 2 [ 1071.086130][ T5817] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1071.172491][ T5817] ath9k_htc: Failed to initialize the device [ 1071.249202][ T5817] usb 3-1: ath9k_htc: USB layer deinitialized [ 1072.059219][T10192] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1072.231242][T10192] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.231268][T10192] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.234051][T10192] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1072.234077][T10192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1072.234096][T10192] usb 8-1: SerialNumber: syz [ 1072.370214][ T6059] usb 3-1: USB disconnect, device number 15 [ 1072.637673][T10192] usb 8-1: 0:2 : does not exist [ 1072.637730][T10192] usb 8-1: unit 255 not found! [ 1072.739328][T10192] usb 8-1: USB disconnect, device number 18 [ 1073.142114][T10494] udevd[10494]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.947069][T11197] binder: 11191:11197 ioctl 4018620d 0 returned -22 [ 1073.957777][T11197] syz.6.1040 (11197): drop_caches: 2 [ 1075.651071][T11217] kAFS: unable to lookup cell 'ÿ' [ 1075.651198][T11217] kAFS: unable to lookup cell '(,c¾Ì' [ 1075.702194][T11218] kAFS: unable to lookup cell 'ÿ' [ 1075.702658][T11218] kAFS: unable to lookup cell '(,c¾Ì' [ 1076.098960][ T9785] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1076.266642][ T9785] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.266667][ T9785] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1076.268546][ T9785] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1076.268564][ T9785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1076.268575][ T9785] usb 8-1: SerialNumber: syz [ 1077.371691][ T9785] usb 8-1: 0:2 : does not exist [ 1077.371793][ T9785] usb 8-1: unit 255 not found! [ 1077.476454][ T9785] usb 8-1: USB disconnect, device number 19 [ 1077.834246][T11237] syz.4.1049 (11237): drop_caches: 2 [ 1078.550657][T10039] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1078.933284][T10039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.933316][T10039] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1078.933328][T10039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.939821][T10039] usb 7-1: config 0 descriptor?? [ 1079.154343][T11239] lo speed is unknown, defaulting to 1000 [ 1079.189829][T10039] usbhid 7-1:0.0: can't add hid device: -71 [ 1079.189911][T10039] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1079.222518][T10039] usb 7-1: USB disconnect, device number 15 [ 1079.873888][T10039] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1080.024468][T10039] usb 7-1: Using ep0 maxpacket: 16 [ 1080.026937][T10039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.026965][T10039] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1080.026978][T10039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.127643][T10039] usb 7-1: config 0 descriptor?? [ 1080.190748][T11264] kAFS: unable to lookup cell 'ÿ' [ 1080.585629][T10039] kye 0003:0458:5016.000E: control desc unexpectedly large [ 1080.620018][T10039] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.000E/input/input35 [ 1080.663767][T10039] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.000E/input/input36 [ 1081.116561][T10039] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 1081.429564][T10039] usb 7-1: USB disconnect, device number 16 [ 1081.552379][T11275] fido_id[11275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1081.672113][T11277] syz.7.1063 (11277): drop_caches: 2 [ 1083.199533][T10039] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1083.363061][T10039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.363110][T10039] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1083.363128][T10039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.413540][T10039] usb 7-1: config 0 descriptor?? [ 1083.649407][T10039] usbhid 7-1:0.0: can't add hid device: -71 [ 1083.649531][T10039] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1083.687217][T10039] usb 7-1: USB disconnect, device number 17 [ 1088.997920][T11350] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1090.194521][T11345] binder: 11337:11345 ioctl 4018620d 0 returned -22 [ 1090.591083][T11344] syz.6.1079 (11344): drop_caches: 2 [ 1090.910563][T11364] loop2: detected capacity change from 0 to 7 [ 1090.915912][T11364] Dev loop2: unable to read RDB block 7 [ 1090.915943][T11364] loop2: AHDI p1 p2 p3 [ 1090.915974][T11364] loop2: partition table partially beyond EOD, truncated [ 1090.916235][T11364] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1090.916253][T11364] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1091.211553][T11364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.330926][T11372] siw: device registration error -23 [ 1092.028244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.447700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.570019][ C0] vkms_vblank_simulate: vblank timer overrun [ 1094.669809][T11377] lo speed is unknown, defaulting to 1000 [ 1094.688880][ T8527] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1094.978032][ T8527] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1094.978062][ T8527] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.978080][ T8527] usb 8-1: Product: syz [ 1094.978091][ T8527] usb 8-1: Manufacturer: syz [ 1094.978102][ T8527] usb 8-1: SerialNumber: syz [ 1095.053012][ T8527] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1095.071995][T10192] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1095.570536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1095.678096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1095.729342][ T6207] usb 8-1: USB disconnect, device number 20 [ 1096.279697][T10192] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1096.336789][T10192] ath9k_htc: Failed to initialize the device [ 1096.338326][ T6207] usb 8-1: ath9k_htc: USB layer deinitialized [ 1096.689464][T11405] syz.5.1094 (11405): drop_caches: 2 [ 1096.701083][T11392] lo speed is unknown, defaulting to 1000 [ 1098.081123][T11409] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1100.353008][T11434] binder: 11429:11434 ioctl 4018620d 0 returned -22 [ 1100.401664][T11434] syz.6.1101 (11434): drop_caches: 2 [ 1101.138948][ T5874] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1101.353577][ T5874] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.355515][ T5874] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1101.355532][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1101.355560][ T5874] usb 8-1: Product: syz [ 1101.355567][ T5874] usb 8-1: Manufacturer: syz [ 1101.355574][ T5874] usb 8-1: SerialNumber: syz [ 1101.706944][ T5874] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1101.995916][ T9785] usb 8-1: USB disconnect, device number 21 [ 1102.011691][ T9785] usblp0: removed [ 1102.238955][ T5874] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1102.401948][ T5874] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.424511][ T5874] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1102.424530][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1102.424540][ T5874] usb 5-1: Product: syz [ 1102.424547][ T5874] usb 5-1: Manufacturer: syz [ 1102.424554][ T5874] usb 5-1: SerialNumber: syz [ 1102.684544][ T5874] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1104.788084][ T9785] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1105.741127][ T9785] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.741143][ T9785] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.742287][ T9785] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1105.742303][ T9785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1105.742313][ T9785] usb 6-1: SerialNumber: syz [ 1106.076041][ T9785] usb 6-1: 0:2 : does not exist [ 1106.076101][ T9785] usb 6-1: unit 5 not found! [ 1106.166752][ T9785] usb 6-1: USB disconnect, device number 10 [ 1106.170268][ T5817] usb 5-1: USB disconnect, device number 25 [ 1106.522024][ T5817] usblp0: removed [ 1106.859037][ T5817] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1107.931790][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 1107.940397][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.940429][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.946668][ T5817] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1107.946695][ T5817] usb 5-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1107.946714][ T5817] usb 5-1: Manufacturer: syz [ 1107.988531][ T5817] usb 5-1: config 0 descriptor?? [ 1108.486282][ T5817] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1108.486325][ T5817] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1108.486351][ T5817] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1108.486376][ T5817] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1108.486400][ T5817] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1108.487377][ T5817] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1109.702531][T11512] syz.2.1118 (11512): drop_caches: 2 [ 1109.808907][ T5874] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 1112.499956][T10234] usb 5-1: USB disconnect, device number 26 [ 1113.689215][T11426] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1113.840978][T11426] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.841021][T11426] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1113.841033][T11426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.844688][T11426] usb 6-1: config 0 descriptor?? [ 1114.060099][T11426] usbhid 6-1:0.0: can't add hid device: -71 [ 1114.060231][T11426] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1114.105036][T11426] usb 6-1: USB disconnect, device number 11 [ 1114.529746][T10039] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1114.738899][T10039] usb 8-1: Using ep0 maxpacket: 16 [ 1114.743154][T10039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.743184][T10039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.744483][T10039] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1114.744508][T10039] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1114.744526][T10039] usb 8-1: Manufacturer: syz [ 1114.748586][T10039] usb 8-1: config 0 descriptor?? [ 1114.909381][T11559] binder: 11556:11559 ioctl 4018620d 0 returned -22 [ 1115.121841][T11559] syz.6.1129 (11559): drop_caches: 2 [ 1115.210915][T10039] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1115.210947][T10039] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1115.210963][T10039] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1115.210979][T10039] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1115.210993][T10039] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1115.273324][T10039] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1115.416331][T10039] usb 8-1: USB disconnect, device number 22 [ 1116.546694][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.546738][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.316080][T10234] IPVS: starting estimator thread 0... [ 1118.599820][T11585] IPVS: using max 14 ests per chain, 33600 per kthread [ 1118.675995][T11589] syz.4.1140 (11589): drop_caches: 2 [ 1121.188926][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1121.361114][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1121.385150][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1121.385189][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1121.385209][ T9] usb 7-1: Product: syz [ 1121.385221][ T9] usb 7-1: Manufacturer: syz [ 1121.385233][ T9] usb 7-1: SerialNumber: syz [ 1121.658730][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1123.363496][ T6059] usb 7-1: USB disconnect, device number 18 [ 1123.376892][ T6059] usblp0: removed [ 1125.210348][ T6059] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1125.382136][ T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1126.128889][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 1126.131287][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.131316][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.248794][T11642] siw: device registration error -23 [ 1127.065732][ T6059] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.065938][ T43] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1127.065952][ T43] usb 7-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1127.065968][ T43] usb 7-1: Manufacturer: syz [ 1127.072442][ T43] usb 7-1: config 0 descriptor?? [ 1127.100781][ T6059] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1127.100862][ T6059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1127.100881][ T6059] usb 6-1: Product: syz [ 1127.100894][ T6059] usb 6-1: Manufacturer: syz [ 1127.100906][ T6059] usb 6-1: SerialNumber: syz [ 1127.375724][ T6059] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1127.501551][T11648] binder: 11643:11648 ioctl 4018620d 0 returned -22 [ 1127.584695][T11648] syz.4.1155 (11648): drop_caches: 2 [ 1127.619010][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1127.786583][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.786631][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1127.786653][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.788198][ T43] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1127.788231][ T43] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1127.788258][ T43] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1127.788284][ T43] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1127.788310][ T43] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1127.803331][ T6059] usb 6-1: USB disconnect, device number 12 [ 1127.834295][ T43] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1127.835916][ T6059] usblp0: removed [ 1127.897392][ T9] usb 8-1: config 0 descriptor?? [ 1128.078314][ T43] usb 7-1: USB disconnect, device number 19 [ 1128.146694][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1128.146827][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1128.249150][ T9] usb 8-1: USB disconnect, device number 23 [ 1128.877967][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1129.979048][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1130.110330][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.110377][ T9] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1130.110396][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.181055][ T9] usb 8-1: config 0 descriptor?? [ 1130.307327][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1130.307453][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1130.327208][ T9] usb 8-1: USB disconnect, device number 24 [ 1130.605813][T11672] binder: 11665:11672 ioctl 4018620d 0 returned -22 [ 1130.857492][T11672] syz.6.1160 (11672): drop_caches: 2 [ 1131.843647][T11681] kAFS: unable to lookup cell 'ÿ' [ 1131.947180][T11682] kAFS: unable to lookup cell '(,c¾Ì' [ 1134.580277][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1134.728936][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1134.746686][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.746710][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.747860][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1134.747876][ T9] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1134.747887][ T9] usb 6-1: Manufacturer: syz [ 1134.825208][ T9] usb 6-1: config 0 descriptor?? [ 1135.269029][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 1135.269056][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 1135.269072][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 1135.269088][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 1135.269122][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 1135.269915][ T9] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1135.475758][ T9847] usb 6-1: USB disconnect, device number 13 [ 1135.945008][T11718] binder: 11713:11718 ioctl 4018620d 0 returned -22 [ 1135.952144][T11718] syz.2.1173 (11718): drop_caches: 2 [ 1138.562313][T11733] syz.2.1176 (11733): drop_caches: 2 [ 1140.788386][T11756] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1183'. [ 1141.129303][T11764] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1141.129452][T11764] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1141.254982][T11769] binder: 11758:11769 ioctl 4018620d 0 returned -22 [ 1141.261830][T11763] syz.4.1184 (11763): drop_caches: 2 [ 1141.718996][T11023] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1142.004071][T11023] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.253961][T11023] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1142.253980][T11023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1142.253990][T11023] usb 7-1: Product: syz [ 1142.253997][T11023] usb 7-1: Manufacturer: syz [ 1142.254004][T11023] usb 7-1: SerialNumber: syz [ 1142.557664][T11023] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1142.923750][T11023] usb 7-1: USB disconnect, device number 20 [ 1142.934765][T11023] usblp0: removed [ 1146.879953][T11813] syz.5.1199 (11813): drop_caches: 2 [ 1146.982666][T11814] kAFS: unable to lookup cell 'ÿ' [ 1146.983385][T11814] kAFS: unable to lookup cell '(,c¾Ì' [ 1147.319007][ T9847] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1147.483141][ T9847] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1147.486169][ T9847] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1147.486197][ T9847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1147.486215][ T9847] usb 7-1: Product: syz [ 1147.486228][ T9847] usb 7-1: Manufacturer: syz [ 1147.486240][ T9847] usb 7-1: SerialNumber: syz [ 1147.935086][ T9847] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1148.248380][ T5817] usb 7-1: USB disconnect, device number 21 [ 1148.275116][ T5817] usblp0: removed [ 1151.052203][T11845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.369305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.942266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1153.101613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1153.739007][T11861] binder: 11856:11861 ioctl 4018620d 0 returned -22 [ 1153.819877][T11861] syz.4.1212 (11861): drop_caches: 2 [ 1154.063252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.769671][T11874] kAFS: unable to lookup cell 'ÿ' [ 1154.770275][T11874] kAFS: unable to lookup cell '(,c¾Ì' [ 1154.952694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.808343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.900129][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.368992][T11879] kAFS: unable to lookup cell 'ÿ' [ 1156.370650][T11879] kAFS: unable to lookup cell '(,c¾Ì' [ 1159.445685][T11896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1160.126753][T11911] syz.6.1224 (11911): drop_caches: 2 [ 1160.272903][T11910] syz.5.1223 (11910): drop_caches: 2 [ 1160.721228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.561587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.985090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.546340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.409425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.565574][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.914116][T11935] binder: 11932:11935 ioctl 4018620d 0 returned -22 [ 1165.953301][T11935] syz.2.1234 (11935): drop_caches: 2 [ 1166.987232][T11945] syz.6.1235 (11945): drop_caches: 2 [ 1167.982100][T11963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1168.259337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.141805][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.286602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.128115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.979009][ T9785] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1173.758695][T11999] syz.4.1248 (11999): drop_caches: 2 [ 1173.891807][ T9785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.891854][ T9785] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1173.891875][ T9785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.897329][ T9785] usb 7-1: config 0 descriptor?? [ 1175.114148][ T9785] usbhid 7-1:0.0: can't add hid device: -71 [ 1175.114275][ T9785] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1175.153713][ T9785] usb 7-1: USB disconnect, device number 22 [ 1177.642907][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.642951][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.964286][T12047] binder: 12044:12047 ioctl 4018620d 0 returned -22 [ 1178.973421][T12047] syz.4.1261 (12047): drop_caches: 2 [ 1179.574512][T12051] syz.2.1256 (12051): drop_caches: 2 [ 1181.973225][ T43] IPVS: starting estimator thread 0... [ 1182.079000][T12070] IPVS: using max 14 ests per chain, 33600 per kthread [ 1184.541297][T12083] fuse: Bad value for 'fd' [ 1188.556564][ T8527] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1188.723751][ T8527] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1188.723780][ T8527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.723799][ T8527] usb 5-1: Product: syz [ 1188.723812][ T8527] usb 5-1: Manufacturer: syz [ 1188.723826][ T8527] usb 5-1: SerialNumber: syz [ 1188.792656][ T8527] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1188.848178][T10039] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1191.408777][T10039] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1191.408962][T10039] ath9k_htc: Failed to initialize the device [ 1191.992645][T10039] usb 5-1: ath9k_htc: USB layer deinitialized [ 1193.123355][T11023] usb 5-1: USB disconnect, device number 27 [ 1193.543773][T12126] siw: device registration error -23 [ 1194.865199][T12141] kAFS: unable to lookup cell 'ÿ' [ 1194.877617][T12141] kAFS: unable to lookup cell '(,c¾Ì' [ 1195.136163][T12145] syz.4.1287 (12145): drop_caches: 2 [ 1199.538904][T10234] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1199.706305][T12179] syz.5.1297 (12179): drop_caches: 2 [ 1199.731886][T10234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.731919][T10234] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1199.731931][T10234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.781847][T10234] usb 7-1: config 0 descriptor?? [ 1200.054584][T12191] binder: 12185:12191 ioctl 4018620d 0 returned -22 [ 1200.066735][T12191] syz.4.1299 (12191): drop_caches: 2 [ 1200.098619][T10234] usbhid 7-1:0.0: can't add hid device: -71 [ 1200.105143][T10234] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1200.118628][T10234] usb 7-1: USB disconnect, device number 24 [ 1201.639919][T12200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.660180][T10234] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1201.851026][T10234] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.851074][T10234] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1201.851095][T10234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.922287][T10234] usb 7-1: config 0 descriptor?? [ 1202.331892][T10234] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 1202.335728][T10234] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0013/input/input37 [ 1202.918820][T10234] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1202.981876][T10234] usb 7-1: USB disconnect, device number 25 [ 1203.162686][T12202] fido_id[12202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1203.718968][T12206] kAFS: unable to lookup cell 'ÿ' [ 1204.667930][ T9757] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1204.811134][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.821397][ T9757] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.824413][ T9757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1204.824439][ T9757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1204.824455][ T9757] usb 6-1: Product: syz [ 1204.824468][ T9757] usb 6-1: Manufacturer: syz [ 1204.824480][ T9757] usb 6-1: SerialNumber: syz [ 1205.099062][ T9757] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1205.427147][T10039] usb 6-1: USB disconnect, device number 14 [ 1205.436513][T10039] usblp0: removed [ 1206.019936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.003497][T12259] binder: 12255:12259 ioctl 4018620d 0 returned -22 [ 1210.009796][T12259] syz.6.1319 (12259): drop_caches: 2 [ 1212.808406][ C1] vkms_vblank_simulate: vblank timer overrun [ 1213.669974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1213.751473][T12280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.897330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.588887][T10234] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1214.761803][T10234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.761823][T10234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.761844][T10234] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1214.761856][T10234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.766121][T10234] usb 6-1: config 0 descriptor?? [ 1215.394061][T10234] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1215.616700][T10234] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1215.705414][T10234] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 1216.089714][T10234] cp2112 0003:10C4:EA90.0014: error setting SMBus config [ 1216.092532][T10234] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 1216.159353][T10234] usb 6-1: USB disconnect, device number 15 [ 1216.674848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.589371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.931572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.629326][T10233] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1218.803029][T10233] usb 6-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 1218.803048][T10233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.806225][T10233] usb 6-1: config 0 descriptor?? [ 1218.840025][T10233] ldusb 6-1:0.0: Interrupt in endpoint not found [ 1221.035188][T12348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.248466][T10233] usb 6-1: USB disconnect, device number 16 [ 1221.581517][T12356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.419709][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.262227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.663908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1225.210478][T12379] binder: 12372:12379 ioctl 4018620d 0 returned -22 [ 1225.222829][T12379] syz.6.1353 (12379): drop_caches: 2 [ 1225.987695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.061102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1226.297596][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1357'. [ 1226.628532][T10039] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1226.791242][T10039] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.791269][T10039] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1226.792759][T10039] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1226.792783][T10039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1226.792801][T10039] usb 5-1: SerialNumber: syz [ 1226.861470][T12408] syzkaller0: entered promiscuous mode [ 1226.861499][T12408] syzkaller0: entered allmulticast mode [ 1227.073074][T10039] usb 5-1: 0:2 : does not exist [ 1227.073134][T10039] usb 5-1: unit 255 not found! [ 1227.203031][T10039] usb 5-1: USB disconnect, device number 28 [ 1227.436161][T12399] udevd[12399]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1227.670224][T12420] kAFS: unable to lookup cell 'ÿ' [ 1227.670355][T12420] kAFS: unable to lookup cell '(,c¾Ì' [ 1229.674289][T12431] binder: 12426:12431 ioctl 4018620d 0 returned -22 [ 1229.764607][T12431] syz.4.1367 (12431): drop_caches: 2 [ 1229.936829][T12445] syz.2.1371 (12445): drop_caches: 2 [ 1231.389001][ T9785] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1231.540895][ T9785] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1231.543336][ T9785] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1231.543364][ T9785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1231.543381][ T9785] usb 6-1: Product: syz [ 1231.543390][ T9785] usb 6-1: Manufacturer: syz [ 1231.543397][ T9785] usb 6-1: SerialNumber: syz [ 1231.841914][ T9785] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1232.377422][ T9785] usb 6-1: USB disconnect, device number 17 [ 1232.425466][ T9785] usblp0: removed [ 1233.085284][T12472] kAFS: unable to lookup cell 'ÿ' [ 1233.085390][T12472] kAFS: unable to lookup cell '(,c¾Ì' [ 1234.541035][T12504] binder: 12494:12504 ioctl 4018620d 0 returned -22 [ 1234.552852][T12504] syz.5.1386 (12504): drop_caches: 2 [ 1236.362571][T12524] kAFS: unable to lookup cell 'ÿ' [ 1236.362686][T12524] kAFS: unable to lookup cell '(,c¾Ì' [ 1236.688403][T12491] syz.6.1384 (12491) used greatest stack depth: 15048 bytes left [ 1237.958918][ T5874] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1238.116499][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1238.132789][ T5874] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1238.132817][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1238.132834][ T5874] usb 6-1: Product: syz [ 1238.132843][ T5874] usb 6-1: Manufacturer: syz [ 1238.132850][ T5874] usb 6-1: SerialNumber: syz [ 1238.373920][ T5874] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1238.680569][ T6059] usb 6-1: USB disconnect, device number 18 [ 1238.696261][ T6059] usblp0: removed [ 1239.134786][T12565] binder: 12562:12565 ioctl 4018620d 0 returned -22 [ 1239.147974][T12565] syz.2.1404 (12565): drop_caches: 2 [ 1239.165089][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.165157][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.289852][T12556] syz.6.1403 (12556) used greatest stack depth: 13256 bytes left [ 1240.437956][T12585] binder: 12581:12585 ioctl 4018620d 0 returned -22 [ 1240.448189][T12585] syz.5.1409 (12585): drop_caches: 2 [ 1241.464715][T12600] syz.5.1414 (12600): drop_caches: 2 [ 1247.678873][ T8515] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1248.553246][ T8515] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1248.553276][ T8515] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.553295][ T8515] usb 7-1: Product: syz [ 1248.553307][ T8515] usb 7-1: Manufacturer: syz [ 1248.553320][ T8515] usb 7-1: SerialNumber: syz [ 1248.598851][T10233] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1248.622918][ T8515] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1248.682171][ T6059] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1248.748932][T10233] usb 5-1: Using ep0 maxpacket: 16 [ 1248.785591][T10233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.785647][T10233] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1248.785766][T10233] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1248.785786][T10233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.910774][T10233] usb 5-1: config 0 descriptor?? [ 1249.144551][T10233] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1250.220761][ T6059] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1250.221228][ T6059] ath9k_htc: Failed to initialize the device [ 1250.257842][ T6059] usb 7-1: ath9k_htc: USB layer deinitialized [ 1250.485151][ T8515] usb 5-1: USB disconnect, device number 29 [ 1252.120325][ T5966] usb 7-1: USB disconnect, device number 26 [ 1252.335086][T12698] kAFS: unable to lookup cell 'ÿ' [ 1252.336139][T12698] kAFS: unable to lookup cell '(,c¾Ì' [ 1257.356593][T12714] syz.4.1444 (12714): drop_caches: 2 [ 1259.390824][T12739] syz.5.1452 (12739): drop_caches: 2 [ 1259.936039][T12745] siw: device registration error -23 [ 1261.618913][T10233] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1261.771627][T10233] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1261.774945][T10233] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1261.774974][T10233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1261.774992][T10233] usb 5-1: Product: syz [ 1261.775005][T10233] usb 5-1: Manufacturer: syz [ 1261.775047][T10233] usb 5-1: SerialNumber: syz [ 1262.041749][T10233] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1262.849682][ T6059] usb 5-1: USB disconnect, device number 30 [ 1262.911032][ T6059] usblp0: removed [ 1264.099039][T12789] syz_tun: entered allmulticast mode [ 1264.101573][T12788] syz_tun: left allmulticast mode [ 1265.599021][T11426] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1265.658479][T12800] syz_tun: entered allmulticast mode [ 1265.669645][T12800] syz_tun: left allmulticast mode [ 1265.968961][T11426] usb 6-1: Using ep0 maxpacket: 16 [ 1265.972937][T11426] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.972992][T11426] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1265.973033][T11426] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1265.973054][T11426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.026671][T11426] usb 6-1: config 0 descriptor?? [ 1266.328449][T11426] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1266.916704][T12819] syz.6.1474 (12819): drop_caches: 2 [ 1267.415726][ T993] usb 6-1: USB disconnect, device number 19 [ 1270.037874][T12850] kAFS: unable to lookup cell 'ÿ' [ 1270.038249][T12850] kAFS: unable to lookup cell '(,c¾Ì' [ 1270.149274][T12852] syz_tun: entered allmulticast mode [ 1270.150854][T12851] syz_tun: left allmulticast mode [ 1271.229210][ T8515] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1271.381678][ T8515] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1271.387796][ T8515] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1271.387824][ T8515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1271.387842][ T8515] usb 6-1: Product: syz [ 1271.387854][ T8515] usb 6-1: Manufacturer: syz [ 1271.387867][ T8515] usb 6-1: SerialNumber: syz [ 1272.178850][T12876] binder: 12872:12876 ioctl c0306201 0 returned -14 [ 1272.196011][ T8515] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1272.305960][T12874] syz.2.1490 (12874): drop_caches: 2 [ 1272.506589][ T993] usb 6-1: USB disconnect, device number 20 [ 1272.592769][ T993] usblp0: removed [ 1272.808516][T12894] binder: 12888:12894 ioctl 4018620d 0 returned -22 [ 1272.820692][T12894] syz.6.1494 (12894): drop_caches: 2 [ 1273.027027][T12896] syz_tun: entered allmulticast mode [ 1273.080473][T12895] syz_tun: left allmulticast mode [ 1274.228154][T12909] lo speed is unknown, defaulting to 1000 [ 1275.448897][ T8515] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1275.619274][ T8515] usb 5-1: device descriptor read/64, error -71 [ 1275.939019][ T8515] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1276.069069][ T8515] usb 5-1: device descriptor read/64, error -71 [ 1276.182436][ T8515] usb usb5-port1: attempt power cycle [ 1276.548890][ T8515] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1276.579855][ T8515] usb 5-1: device descriptor read/8, error -71 [ 1276.818868][ T8515] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1276.849823][ T8515] usb 5-1: device descriptor read/8, error -71 [ 1276.942833][T12945] syz.5.1511 (12945): drop_caches: 2 [ 1276.959252][ T8515] usb usb5-port1: unable to enumerate USB device [ 1277.561820][T12956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.143852][T12964] lo speed is unknown, defaulting to 1000 [ 1280.132594][T12985] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1525'. [ 1282.942877][T10192] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1283.899389][T10192] usb 7-1: device descriptor read/64, error -71 [ 1284.498789][T10192] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1284.628936][T10192] usb 7-1: device descriptor read/64, error -71 [ 1284.682046][ T12] ------------[ cut here ]------------ [ 1284.682068][ T12] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x6f0, CPU#0: kworker/u8:0/12 [ 1284.682216][ T12] Modules linked in: [ 1284.682246][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1284.682268][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1284.682281][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 1284.682410][ T12] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 1284.682438][ T12] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 61 1d ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 c9 a2 00 09 89 c0 48 c7 c7 38 82 aa [ 1284.682455][ T12] RSP: 0018:ffffc90000117938 EFLAGS: 00010202 [ 1284.682472][ T12] RAX: 0000000000000002 RBX: ffff88801b6a5a00 RCX: 0000000000000000 [ 1284.682485][ T12] RDX: 0000000000000000 RSI: ffffffff8b3e94c0 RDI: ffffffff8b3e9480 [ 1284.682499][ T12] RBP: ffff88805abc5780 R08: ffffffff8ac2b3f1 R09: ffffffff8d5aec20 [ 1284.682513][ T12] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: ffff88805e405d08 [ 1284.682527][ T12] R13: ffff8880545707c0 R14: 0000000000000000 R15: ffff88805e405d20 [ 1284.682541][ T12] FS: 0000000000000000(0000) GS:ffff888126d81000(0000) knlGS:0000000000000000 [ 1284.682557][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1284.682570][ T12] CR2: 00007f8db88be470 CR3: 0000000071750000 CR4: 00000000003526f0 [ 1284.682586][ T12] Call Trace: [ 1284.682594][ T12] [ 1284.682609][ T12] ieee80211_iface_work+0x211/0x12d0 [ 1284.682683][ T12] cfg80211_wiphy_work+0x2ab/0x450 [ 1284.682704][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 1284.682741][ T12] process_scheduled_works+0xad1/0x1770 [ 1284.682793][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1284.682833][ T12] worker_thread+0x8a0/0xda0 [ 1284.682884][ T12] kthread+0x711/0x8a0 [ 1284.682918][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1284.682937][ T12] ? __pfx_kthread+0x10/0x10 [ 1284.682956][ T12] ? rt_spin_unlock+0x150/0x200 [ 1284.683031][ T12] ? rt_spin_unlock+0x161/0x200 [ 1284.683045][ T12] ? __pfx_kthread+0x10/0x10 [ 1284.683070][ T12] ret_from_fork+0x599/0xb30 [ 1284.683104][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1284.683135][ T12] ? __switch_to_asm+0x39/0x70 [ 1284.683177][ T12] ? __switch_to_asm+0x33/0x70 [ 1284.683197][ T12] ? __pfx_kthread+0x10/0x10 [ 1284.683220][ T12] ret_from_fork_asm+0x1a/0x30 [ 1284.683260][ T12] [ 1284.683280][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1284.683294][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1284.683315][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1284.683326][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 1284.683347][ T12] Call Trace: [ 1284.683355][ T12] [ 1284.683363][ T12] dump_stack_lvl+0x99/0x250 [ 1284.683385][ T12] ? __asan_memcpy+0x40/0x70 [ 1284.683454][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1284.683475][ T12] ? __pfx__printk+0x10/0x10 [ 1284.683523][ T12] vpanic+0x237/0x6d0 [ 1284.683546][ T12] ? __pfx_vpanic+0x10/0x10 [ 1284.683566][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 1284.683595][ T12] ? is_bpf_text_address+0x26/0x2b0 [ 1284.683622][ T12] panic+0xb9/0xc0 [ 1284.683643][ T12] ? __pfx_panic+0x10/0x10 [ 1284.683675][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1284.683704][ T12] __warn+0x317/0x4b0 [ 1284.683724][ T12] ? kcov_remote_start+0x5d9/0x6f0 [ 1284.683753][ T12] ? kcov_remote_start+0x5d9/0x6f0 [ 1284.683778][ T12] __report_bug+0x288/0x500 [ 1284.683867][ T12] ? kcov_remote_start+0x5d9/0x6f0 [ 1284.683906][ T12] ? __pfx___report_bug+0x10/0x10 [ 1284.683941][ T12] ? rt_spin_lock+0x1c1/0x3e0 [ 1284.683969][ T12] ? kcov_remote_start+0x5d9/0x6f0 [ 1284.683994][ T12] report_bug+0x16a/0x220 [ 1284.684013][ T12] ? kcov_remote_start+0x5d9/0x6f0 [ 1284.684036][ T12] ? kcov_remote_start+0x5db/0x6f0 [ 1284.684060][ T12] handle_bug+0x98/0x200 [ 1284.684144][ T12] exc_invalid_op+0x1a/0x50 [ 1284.684168][ T12] asm_exc_invalid_op+0x1a/0x20 [ 1284.684200][ T12] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 1284.684225][ T12] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 61 1d ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 c9 a2 00 09 89 c0 48 c7 c7 38 82 aa [ 1284.684241][ T12] RSP: 0018:ffffc90000117938 EFLAGS: 00010202 [ 1284.684257][ T12] RAX: 0000000000000002 RBX: ffff88801b6a5a00 RCX: 0000000000000000 [ 1284.684270][ T12] RDX: 0000000000000000 RSI: ffffffff8b3e94c0 RDI: ffffffff8b3e9480 [ 1284.684283][ T12] RBP: ffff88805abc5780 R08: ffffffff8ac2b3f1 R09: ffffffff8d5aec20 [ 1284.684297][ T12] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: ffff88805e405d08 [ 1284.684311][ T12] R13: ffff8880545707c0 R14: 0000000000000000 R15: ffff88805e405d20 [ 1284.684333][ T12] ? rt_spin_lock+0x1c1/0x3e0 [ 1284.684365][ T12] ? kcov_remote_start+0xe1/0x6f0 [ 1284.684393][ T12] ieee80211_iface_work+0x211/0x12d0 [ 1284.684425][ T12] cfg80211_wiphy_work+0x2ab/0x450 [ 1284.684446][ T12] ? process_scheduled_works+0x9ef/0x1770 [ 1284.684469][ T12] process_scheduled_works+0xad1/0x1770 [ 1284.684522][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1284.684562][ T12] worker_thread+0x8a0/0xda0 [ 1284.684611][ T12] kthread+0x711/0x8a0 [ 1284.684638][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1284.684656][ T12] ? __pfx_kthread+0x10/0x10 [ 1284.684676][ T12] ? rt_spin_unlock+0x150/0x200 [ 1284.684698][ T12] ? rt_spin_unlock+0x161/0x200 [ 1284.684713][ T12] ? __pfx_kthread+0x10/0x10 [ 1284.684737][ T12] ret_from_fork+0x599/0xb30 [ 1284.684759][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1284.684790][ T12] ? __switch_to_asm+0x39/0x70 [ 1284.684811][ T12] ? __switch_to_asm+0x33/0x70 [ 1284.684831][ T12] ? __pfx_kthread+0x10/0x10 [ 1284.684855][ T12] ret_from_fork_asm+0x1a/0x30 [ 1284.684904][ T12] [ 1284.685355][ T12] Kernel Offset: disabled