last executing test programs: 13.985156632s ago: executing program 3 (id=1183): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0xb}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x2484}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000001bc19c774f6f3b99a2a63751a9717b8af8ff00000000bfa100000000000007020000f8ffffffb7030000000000000000850000000100000095000000000000b6a001e8cf2bf2cec2092d28d98d78754916aa2392af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfd, 0x0, r0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x5, &(0x7f0000000180)=0xfffffffffffffff3) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2f}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18007259d24fd7", @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="715a2b0eb1878a771726b87373a0081507c84dcf6bc7289223dc43f0a24d0e867620ac08f13f492196d2f784b068f1b3108f3940a73fa0d1e18312bb948a45c844da4a77b99d6de5", @ANYRES32, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x90) r6 = gettid() rt_sigqueueinfo(r6, 0x0, &(0x7f0000000000)) 13.485996849s ago: executing program 3 (id=1185): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000280)="f697079a161ceb4d4d2800"/27, 0x1b}, {&(0x7f0000000640)="528802587e0a4247ad18", 0xa}], 0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x3, [@union={0x6, 0x2, 0x0, 0x5, 0x1, 0x4, [{0x1, 0x1, 0x5}, {0x5, 0x1, 0xd}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8}, {0xa, 0x5}, {0x2, 0x2}, {0xd, 0x2}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0x4c, 0x6}, @struct={0xe, 0x9, 0x0, 0x4, 0x1, 0x800, [{0x2, 0x2, 0xff}, {0x5, 0x5}, {0x6, 0x4, 0x8}, {0x6, 0x1, 0x4e000000}, {0x1, 0x2, 0x3}, {0xa, 0x4, 0x1}, {0x2, 0x4, 0x2}, {0x4, 0x4, 0x9}, {0x3, 0x5, 0x81}]}]}, {0x0, [0x61]}}, &(0x7f0000000300)=""/98, 0x11f, 0x62, 0x0, 0x3}, 0x20) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xffffffffffffff66) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x200000100000011, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r6}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) fstat(r8, &(0x7f0000000380)) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x800) 12.092170438s ago: executing program 2 (id=1191): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000020000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50}, 0x50) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 11.286583649s ago: executing program 3 (id=1192): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000100)) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x10, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="b9740b00000f32ea0000000021000f019e6f750000b906030000b800500000ba000000000f300f0e0f01c466660f38305c311366baa10066b8001066efb805000000b9800000000f01d9f2ac", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, 0x0}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) dup(r2) 9.958672263s ago: executing program 4 (id=1198): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7ffc2001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000000000000100000020000008500000005000000950000000000edff9500a50500000000000000000000000000a6996264deaf79709b2b17830dd60ecad4e55201e2a75cb6ff645102a3d347a3d489374d8f14ef9ae9c2d346191d1ec8b2bf3e519eb4626699f3"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xf}, {0xb}, {0xfff3, 0x3}}, ["", "", "", "", "", ""]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00000008070052f27dc26a79e4caaadec1e90000b455c132832014ce0000", @ANYBLOB="6abcc61a02715f7813ad0a5b15560348eb592c4b131cd7de7b89da02b1394db60a04a92ddec8eb2ff35b20a61782ab1fd5f034a2bf59d75e09176815e95e741532e088154b53acc7f7b3c1d007dec9c5b158d4b3f035b6bb0712d8db8f2cc5e021ad683f1ea12599c80d2066d643e29f6e94783130e4e63168486216044ba60d33b67f72a508506fb69d4868963f20cafe327f1193203ce0e0b9cfc2e40df0804642518d4c40b0aefbf06ece438fee3d210998cce96e", @ANYBLOB="4200990000000000680000000000fe009d9eb687aa5d2faf6f78cdaebcb4dbd20000fe00cef2237fdb69c8d785323be3fa32e3ab0000020167f4cbe05777ae30d75cd531f445d75700000201d0b41ff9b656f9b859d24851b029ef4c000002018646e51b1ff1995f4198aef5f0aa90850000020193269f69629cc50aef814c40361b5af2000006000802110000000000000002018c1c1d9a2be5bd92a54c931421b3c4fa"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080810) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r8, 0x0, 0x81, 0x1f, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000}, 0x8000, 0x0, 0x8000, 0x3}}) sendmsg$nl_route(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="34000000190002002cbd7000ffdbdf2580202019fd04ff080300000008001e000010000008000400", @ANYRES32=r8, @ANYBLOB="08000b0080000000"], 0x34}}, 0xa43166c5be0ae608) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000f8ffffff000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000000a27ffff0700000018180000", @ANYRES32=r3, @ANYBLOB="000000000000000018250000", @ANYRES32=r3, @ANYBLOB="e6550000880800009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x7, 0xab, &(0x7f0000000a40)=""/171, 0x41100, 0x44, '\x00', r8, 0x0, r3, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0xffffffffffffffff, r3, r3], &(0x7f0000000b80)=[{0x2, 0xfffffffd, 0x4, 0xa}, {0x0, 0x4, 0x3, 0x6}, {0x4, 0x2, 0xa, 0xb}]}, 0x90) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x4000000000}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000780)={@mcast2}, &(0x7f00000007c0)=0x14) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00dd8c6f424fb816bf000000f42dac55"}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000000020000fddbdf250200000000000400ff070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012cbd7000fbdbdf25090000000d0005000100000005000500000000000c00018008000300ffffffff0c000680080000050005004794587732052b40090000000800040009000000000000000028358dc840eda3c77f3807045dff21c51b"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4040880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000900000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.847521291s ago: executing program 4 (id=1203): socket$packet(0x11, 0x0, 0x300) socket$inet6(0xa, 0x0, 0x88) syz_emit_ethernet(0x83, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0xd000, 0xf9, &(0x7f0000000640)=""/249}, {0x2000, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 7.390319169s ago: executing program 1 (id=1207): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000180)=ANY=[@ANYRES64]) (fail_nth: 1) 6.812733072s ago: executing program 1 (id=1208): timer_create(0xa000000, &(0x7f0000000340)={0x0, 0x3d, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)) 6.548709455s ago: executing program 1 (id=1209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x3) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) socket$kcm(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) 6.512737776s ago: executing program 4 (id=1210): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f01cab9800000c00f3235004000000f30f30fbd6900b80000c0fe0f23c80f21f835080040000f23f866b868000f00d81c009a08000000a60066ba6100ecb900060000b807000000ba000000000f309aa00000008700", 0x56}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6.378501685s ago: executing program 4 (id=1212): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) listen(r0, 0x80) 6.377519549s ago: executing program 1 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) 6.313243279s ago: executing program 4 (id=1214): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) io_uring_enter(r1, 0x1085, 0xf4d9, 0x10, &(0x7f0000010280)={[0x5]}, 0x8) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000010140)={0x44, &(0x7f00000102c0)={0x0, 0x0, 0x35, "e79fe79dbcdb1a57ee36900f10644bdb61babce89782270e9bd32a839d4c7eadb965c55fda58a029991a5c450a985755aa63e5e896da1b164a1d718942c6f98b94c3ef4c55c9bedc631fa097ed5495964b813e73d3cc0e306a602edb9e6541cc0a6f85e67b1ed1edb47fbdc5145a11f65a85b6205fe704201a2e1ba607815eeed62dbe020bd364e84a59cf7a181e96a5ea08f4e0d36e559515d4c01f8440fbd3f73c47709f0d7e52d87db6ac4415d8612b4d0ef204e300b57c5df5d2a73d7f10742fba23ef48acada67121f23057e1d72b7115f60d693a80f7858776fe8f15f4820613b5ab121398b15fe7105caa7abae10c3caaf700"/256}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)) 4.306740384s ago: executing program 0 (id=1216): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x2006}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x5, 0x2, 0x7}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioprio_get$uid(0x2, 0x0) 2.997397351s ago: executing program 0 (id=1217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)) 2.68298053s ago: executing program 0 (id=1218): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000010000305000000000000000000000080", @ANYRES8=r1, @ANYBLOB="00008cef190000000000e8280012800b0001006d61637365630000180002800c00010000000000000000000500090000000000080005004fd2bb3fe1aff8835dfdc901e42d1b0f883467f2ce0e8fad8175da66f7461c3a82bfa4c5677eaa897c5b8ef31ec17587715cb4809498a8847c917bce4e8c43808fe234467910d8ca227b9fadc6a1e5b37b7813bd017258070bf0543f08d1ec37c702b30fc1ee00fd7252b735392b82452afa6c3f94d05f83815c7c5af990c939c52a5f", @ANYRES16=r1, @ANYBLOB], 0x50}}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0x1c) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x247}], 0x1, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getpid() (async) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140), 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 2.390907948s ago: executing program 1 (id=1219): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x90) 2.3842653s ago: executing program 1 (id=1220): write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x234) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000002c0)='!', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r2}, &(0x7f0000000480)=""/257, 0x152, &(0x7f0000000200)={&(0x7f0000000740)={'rmd160\x00'}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0x208e24b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1, &(0x7f00000011c0)=""/4067, &(0x7f0000001180)=0xfe3) syz_emit_vhci(0x0, 0x7) r7 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "0200", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="14e74c34e636c39bbe5bef93000006000000040000ae5600"], 0x14}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c80012000e0001000f0004007a486d0e8100014702000000871aad3f"], 0x17) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="03c9009118d0673f8b265702f0654f83f117c6ce4558bddc2125dd4d18ec34cd4ab050131ea3032c7f889320c0496d342fc9e3445b3073a5450767e286c2051db98067f3b6e283ad43290d901b89294daf597db210dd66f9597aec3638affa49c1ebecb5022a6df2a6fc1d9dc8f33708becdc5758591c37e24bbb96ed3a8fda836070f0f1bee93ca86d821ff95321155f7d4e6cc93e2164c6f31c16e"], 0x95) mknod$loop(0x0, 0x0, 0x0) inotify_init() 2.237328202s ago: executing program 0 (id=1221): r0 = socket(0x28, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) socket$netlink(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x800000000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_1\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x20, 0x36, "55cfeaaa3e444dad14c334af607c95cd5136ba5bc1d7b974c86610bf0c4aff20583d02d96155877a862f3434d873ffd70df205356f16"}}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0xfff7, [0x401, 0x81, 0x7, 0x9, 0x0, 0x5, 0x4, 0xb, 0x7ff, 0x8000, 0xd53, 0x4, 0x1, 0xb, 0x6, 0x8, 0x8000, 0x9, 0x10, 0x6, 0x4, 0x2, 0x9, 0x0, 0x5, 0xd, 0x5, 0xd, 0xfff, 0x1, 0x6b11, 0x401, 0x4, 0xa38, 0x1, 0x81, 0xff7f, 0x9, 0x7, 0x3, 0x7, 0x8000, 0x9, 0x4, 0x4, 0x5, 0x6, 0x7c], 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) unshare(0xe010400) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) signalfd4(r3, &(0x7f0000000000), 0x8, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0414f9f40700090400819680ffffff0000585b0000", 0x1c) 2.14970374s ago: executing program 3 (id=1222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.148542907s ago: executing program 2 (id=1223): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/70, 0x46, 0x0, &(0x7f0000000080), 0x12) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000), 0x8) listen(r4, 0x0) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x7a05, 0x1700) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$udambuf(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000080)=ANY=[]) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_procfs(0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/44, 0x2c) 2.015884486s ago: executing program 0 (id=1224): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x8, 0x81}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) unshare(0xa000600) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x8, 0x81}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) unshare(0xa000600) (async) inotify_init() (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) (async) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 957.143058ms ago: executing program 2 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x3) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r5, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) 905.694721ms ago: executing program 3 (id=1226): prctl$PR_MCE_KILL(0x23, 0x4, 0x7fffffffeffe) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r1, 0x0, 0xa) r2 = socket(0x10, 0xcd66d47a7ccd92b, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="0f0fac271add706b2891a05f6f42c5fedc254f54a3448d34c80bd5f63978fec19be871af7f263d3f116548184eea361c7acb2f7f26f2b7b3c112c9d116c6e05fe00f17accc4bb06653601fa4f9013ce1c4c88ad425b74ac91253c6da201d7c06be8a72021cb87f6370e0d342272dfa97d18a0a212f6723e55e8df6df1b066332dcde0a86e14edaafd4a1cf61523cd5251c3d79446099ca21d7d6d24eb151962f0dcbee6ad1b4b3", @ANYBLOB="02437cc5d3dd7fc3048d48a4df4481c477f1e6e9c8e1cb48de1edd5b256e8bf36a22f737bf6fb3c61b4bd46b3d82108114513a8004f68d3ba75c30d009e206361bfb60ebcae94bfc76ea6f7fc576db56cf72ba8e3e42398c5ddab0962de3a0f8f251647f57c3e3764db690e38c023f2621aa808c699bfb54a1c2f0ecacb5f0e72b2f04edeb67776a9e6114c3aad0d38c19d8eb0956062547e0890ef81279ebf802f094b2f21f6f498329121bf8fd1890284c3afd8e9fe222f5e6c7187ba3717f715c5b290f3172e1ed6802185be5cab1831d5a", @ANYRES16=r1, @ANYRESOCT=r2, @ANYRESOCT=r3], 0x40}}, 0x4000) close(r0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) (async) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000180)="020000000980fffffc2dcb5e1be755401b6c1904", 0x14) (async) shutdown(r4, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) syz_io_uring_setup(0x4076, 0x0, &(0x7f0000000380), 0x0) (async) fchdir(r2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdir(0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x3, 0x3a) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000009c0)={'netdevsim0\x00'}) 34.84351ms ago: executing program 4 (id=1227): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x2006}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x5, 0x2, 0x7}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioprio_get$uid(0x2, 0x0) 27.612106ms ago: executing program 2 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000004500)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000009c0)='cachefiles_ondemand_cread\x00', r8}, 0x10) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r9, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40010000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r4, r10}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0xe, 0xe, 0x15a8, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 0s ago: executing program 0 (id=1229): socket$packet(0x11, 0x0, 0x300) socket$inet6(0xa, 0x0, 0x88) syz_emit_ethernet(0x83, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0xd000, 0xf9, &(0x7f0000000640)=""/249}, {0x2000, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) kernel console output (not intermixed with test programs): one upperpath [ 384.447796][ T8741] netlink: 'syz.1.842': attribute type 10 has an invalid length. [ 384.554890][ T939] usb 1-1: string descriptor 0 read error: -71 [ 384.572047][ T8741] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 384.585690][ T939] usb 1-1: New USB device found, idVendor=12d1, idProduct=65b9, bcdDevice=11.4a [ 384.595689][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.844'. [ 384.616848][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.633843][ T8743] gre1: entered allmulticast mode [ 384.662555][ T939] usb 1-1: can't set config #116, error -71 [ 384.691784][ T939] usb 1-1: USB disconnect, device number 37 [ 384.876637][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 384.883173][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 384.900760][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 384.926139][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 384.981206][ T9] usb 5-1: USB disconnect, device number 41 [ 385.073678][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 385.095860][ T9] em28xx 5-1:0.0: Freeing device [ 385.247292][ T46] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 386.121517][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.132730][ T46] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 386.165900][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.235893][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.256196][ T8748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.268821][ T5227] Bluetooth: hci3: command 0x0406 tx timeout [ 386.281998][ T46] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.640908][ T46] usb 2-1: USB disconnect, device number 27 [ 386.974426][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 387.474875][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 388.255577][ T9] usb 4-1: device descriptor read/64, error -32 [ 389.017242][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 389.328397][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 389.471250][ T9] usb 4-1: device descriptor read/all, error -71 [ 389.481460][ T9] usb usb4-port1: attempt power cycle [ 389.904692][ T8783] FAULT_INJECTION: forcing a failure. [ 389.904692][ T8783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.929771][ T8783] CPU: 1 UID: 0 PID: 8783 Comm: syz.0.854 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 389.940405][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 389.950726][ T8783] Call Trace: [ 389.954003][ T8783] [ 389.956935][ T8783] dump_stack_lvl+0x241/0x360 [ 389.961607][ T8783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.966792][ T8783] ? __pfx__printk+0x10/0x10 [ 389.971370][ T8783] ? snprintf+0xda/0x120 [ 389.975615][ T8783] should_fail_ex+0x3b0/0x4e0 [ 389.980304][ T8783] _copy_to_user+0x2f/0xb0 [ 389.984712][ T8783] simple_read_from_buffer+0xca/0x150 [ 389.990170][ T8783] proc_fail_nth_read+0x1e9/0x250 [ 389.995317][ T8783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.000860][ T8783] ? rw_verify_area+0x520/0x6b0 [ 390.005709][ T8783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.011247][ T8783] vfs_read+0x204/0xbc0 [ 390.015393][ T8783] ? __pfx_lock_release+0x10/0x10 [ 390.020417][ T8783] ? __pfx_vfs_read+0x10/0x10 [ 390.025082][ T8783] ? __fget_files+0x29/0x470 [ 390.029658][ T8783] ? __fget_files+0x3f6/0x470 [ 390.034334][ T8783] ksys_read+0x1a0/0x2c0 [ 390.038587][ T8783] ? __pfx_ksys_read+0x10/0x10 [ 390.043356][ T8783] ? do_syscall_64+0x100/0x230 [ 390.048179][ T8783] ? do_syscall_64+0xb6/0x230 [ 390.052859][ T8783] do_syscall_64+0xf3/0x230 [ 390.057373][ T8783] ? clear_bhb_loop+0x35/0x90 [ 390.062062][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.067952][ T8783] RIP: 0033:0x7f1701375dfc [ 390.072359][ T8783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 390.091963][ T8783] RSP: 002b:00007f17020b1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.100369][ T8783] RAX: ffffffffffffffda RBX: 00007f1701505f80 RCX: 00007f1701375dfc [ 390.108343][ T8783] RDX: 000000000000000f RSI: 00007f17020b10b0 RDI: 0000000000000005 [ 390.116311][ T8783] RBP: 00007f17020b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 390.124280][ T8783] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 390.132262][ T8783] R13: 000000000000000b R14: 00007f1701505f80 R15: 00007fff1881e668 [ 390.140234][ T8783] [ 390.305804][ T2637] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 390.487602][ T2637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.508231][ T2637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.671741][ T2637] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 391.640284][ T2637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.668996][ T2637] usb 2-1: config 0 descriptor?? [ 391.993473][ T8819] fuse: Bad value for 'rootmode' [ 392.100489][ T2637] usbhid 2-1:0.0: can't add hid device: -71 [ 392.128026][ T2637] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 392.150526][ T2637] usb 2-1: USB disconnect, device number 28 [ 392.165657][ T939] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 392.167122][ T8824] FAULT_INJECTION: forcing a failure. [ 392.167122][ T8824] name failslab, interval 1, probability 0, space 0, times 0 [ 392.187245][ T8824] CPU: 1 UID: 0 PID: 8824 Comm: syz.4.866 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 392.197879][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 392.208336][ T8824] Call Trace: [ 392.211612][ T8824] [ 392.214532][ T8824] dump_stack_lvl+0x241/0x360 [ 392.219227][ T8824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.224423][ T8824] ? __pfx__printk+0x10/0x10 [ 392.229008][ T8824] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 392.234998][ T8824] ? __pfx___might_resched+0x10/0x10 [ 392.240289][ T8824] should_fail_ex+0x3b0/0x4e0 [ 392.244966][ T8824] should_failslab+0xac/0x100 [ 392.249638][ T8824] ? __alloc_skb+0x1c3/0x440 [ 392.254223][ T8824] kmem_cache_alloc_node_noprof+0x71/0x320 [ 392.260030][ T8824] __alloc_skb+0x1c3/0x440 [ 392.264448][ T8824] ? __pfx___alloc_skb+0x10/0x10 [ 392.269388][ T8824] ? netlink_autobind+0xd6/0x2f0 [ 392.274334][ T8824] ? netlink_autobind+0x2b0/0x2f0 [ 392.279355][ T8824] netlink_sendmsg+0x638/0xcb0 [ 392.284123][ T8824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.289402][ T8824] ? __import_iovec+0x536/0x820 [ 392.294245][ T8824] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 392.299521][ T8824] ? security_socket_sendmsg+0x87/0xb0 [ 392.304981][ T8824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.310260][ T8824] __sock_sendmsg+0x221/0x270 [ 392.314941][ T8824] ____sys_sendmsg+0x525/0x7d0 [ 392.319709][ T8824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.324998][ T8824] __sys_sendmsg+0x2b0/0x3a0 [ 392.329583][ T8824] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.334681][ T8824] ? vfs_write+0x7c4/0xc90 [ 392.339117][ T8824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.345443][ T8824] ? do_syscall_64+0x100/0x230 [ 392.350209][ T8824] ? do_syscall_64+0xb6/0x230 [ 392.354965][ T8824] do_syscall_64+0xf3/0x230 [ 392.359460][ T8824] ? clear_bhb_loop+0x35/0x90 [ 392.364133][ T8824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.370018][ T8824] RIP: 0033:0x7efc851773b9 [ 392.374424][ T8824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.394060][ T8824] RSP: 002b:00007efc86029048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.402474][ T8824] RAX: ffffffffffffffda RBX: 00007efc85305f80 RCX: 00007efc851773b9 [ 392.410435][ T8824] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 392.418404][ T8824] RBP: 00007efc860290a0 R08: 0000000000000000 R09: 0000000000000000 [ 392.426370][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.434331][ T8824] R13: 000000000000000b R14: 00007efc85305f80 R15: 00007ffe68e78bc8 [ 392.442306][ T8824] [ 394.605256][ T939] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 394.719204][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.826890][ T939] usb 3-1: config 0 descriptor?? [ 395.145662][ T939] usb 3-1: can't set config #0, error -71 [ 395.163154][ T939] usb 3-1: USB disconnect, device number 23 [ 395.783687][ T29] audit: type=1326 audit(1722501246.959:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.0.873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17013773b9 code=0x0 [ 395.802284][ T8845] can: request_module (can-proto-0) failed. [ 395.816865][ T8847] netlink: 88 bytes leftover after parsing attributes in process `syz.1.872'. [ 395.841631][ T8847] netlink: 88 bytes leftover after parsing attributes in process `syz.1.872'. [ 395.872817][ T8861] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 395.886834][ T8861] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 396.218475][ T8865] hub 9-0:1.0: USB hub found [ 396.224793][ T8865] hub 9-0:1.0: 8 ports detected [ 396.771244][ T8862] netlink: 96 bytes leftover after parsing attributes in process `syz.2.875'. [ 397.095599][ T2637] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 397.289869][ T8878] FAULT_INJECTION: forcing a failure. [ 397.289869][ T8878] name failslab, interval 1, probability 0, space 0, times 0 [ 397.321025][ T8878] CPU: 1 UID: 0 PID: 8878 Comm: syz.4.880 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 397.331638][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 397.341693][ T8878] Call Trace: [ 397.344969][ T8878] [ 397.347896][ T8878] dump_stack_lvl+0x241/0x360 [ 397.352581][ T8878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.357779][ T8878] ? __pfx__printk+0x10/0x10 [ 397.362382][ T8878] ? __kmalloc_noprof+0xb0/0x400 [ 397.367318][ T8878] ? __pfx___might_resched+0x10/0x10 [ 397.372606][ T8878] should_fail_ex+0x3b0/0x4e0 [ 397.377278][ T8878] ? bpf_test_init+0xe1/0x180 [ 397.381955][ T8878] should_failslab+0xac/0x100 [ 397.386629][ T8878] ? bpf_test_init+0xe1/0x180 [ 397.391300][ T8878] __kmalloc_noprof+0xd8/0x400 [ 397.396071][ T8878] bpf_test_init+0xe1/0x180 [ 397.400571][ T8878] bpf_prog_test_run_skb+0x2bb/0x1820 [ 397.405947][ T8878] ? __pfx_lock_release+0x10/0x10 [ 397.410982][ T8878] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 397.416793][ T8878] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 397.422599][ T8878] bpf_prog_test_run+0x33a/0x3b0 [ 397.427537][ T8878] __sys_bpf+0x48d/0x810 [ 397.431787][ T8878] ? __pfx___sys_bpf+0x10/0x10 [ 397.436591][ T8878] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 397.442578][ T8878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 397.448906][ T8878] ? do_syscall_64+0x100/0x230 [ 397.453671][ T8878] __x64_sys_bpf+0x7c/0x90 [ 397.458082][ T8878] do_syscall_64+0xf3/0x230 [ 397.462582][ T8878] ? clear_bhb_loop+0x35/0x90 [ 397.467257][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.473144][ T8878] RIP: 0033:0x7efc851773b9 [ 397.477554][ T8878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.497182][ T8878] RSP: 002b:00007efc86029048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.505596][ T8878] RAX: ffffffffffffffda RBX: 00007efc85305f80 RCX: 00007efc851773b9 [ 397.513560][ T8878] RDX: 0000000000000048 RSI: 00000000200002c0 RDI: 000000000000000a [ 397.521548][ T8878] RBP: 00007efc860290a0 R08: 0000000000000000 R09: 0000000000000000 [ 397.529520][ T8878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.537495][ T8878] R13: 000000000000000b R14: 00007efc85305f80 R15: 00007ffe68e78bc8 [ 397.545480][ T8878] [ 398.395633][ T2637] usb 3-1: Using ep0 maxpacket: 8 [ 398.498963][ T2637] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 398.544095][ T2637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.606951][ T2637] usb 3-1: config 0 descriptor?? [ 398.628168][ T2637] usb 3-1: unknown interface protocol 0x3f, assuming v1 [ 398.673322][ T2637] usb 3-1: cannot find UAC_HEADER [ 398.840412][ T8862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.842400][ T2637] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 399.165693][ T5225] Bluetooth: hci3: command 0x0406 tx timeout [ 399.736107][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.746191][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.015608][ T939] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 400.041884][ T8903] fuse: Bad value for 'rootmode' [ 400.085922][ T2637] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 400.216202][ T939] usb 4-1: Using ep0 maxpacket: 16 [ 400.237229][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.273092][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.326542][ T2637] usb 5-1: Using ep0 maxpacket: 32 [ 400.335784][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.351710][ T2637] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 400.363452][ T2637] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 400.376401][ T2637] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.389677][ T939] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 400.399900][ T2637] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.409501][ T2637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.417837][ T2637] usb 5-1: Product: syz [ 400.422751][ T2637] usb 5-1: Manufacturer: syz [ 400.427636][ T2637] usb 5-1: SerialNumber: syz [ 400.448149][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.484638][ T939] usb 4-1: config 0 descriptor?? [ 400.640969][ T8913] fuse: Bad value for 'rootmode' [ 401.034531][ T939] shield 0003:0955:7214.0005: item fetching failed at offset 1/5 [ 401.062506][ T939] shield 0003:0955:7214.0005: Parse failed [ 401.072479][ T939] shield 0003:0955:7214.0005: probe with driver shield failed with error -22 [ 401.291370][ T8918] vivid-004: ================= START STATUS ================= [ 401.300494][ T8918] vivid-004: Radio HW Seek Mode: Bounded [ 401.306860][ T8918] vivid-004: Radio Programmable HW Seek: false [ 401.313681][ T8918] vivid-004: RDS Rx I/O Mode: Block I/O [ 401.319606][ T8918] vivid-004: Generate RBDS Instead of RDS: false [ 401.327476][ T8918] vivid-004: RDS Reception: true [ 401.332667][ T8918] vivid-004: RDS Program Type: 0 inactive [ 401.338796][ T8918] vivid-004: RDS PS Name: inactive [ 401.344249][ T8918] vivid-004: RDS Radio Text: inactive [ 401.350034][ T8918] vivid-004: RDS Traffic Announcement: false inactive [ 401.357160][ T8918] vivid-004: RDS Traffic Program: false inactive [ 401.363882][ T8918] vivid-004: RDS Music: false inactive [ 401.369749][ T8918] vivid-004: ================== END STATUS ================== [ 401.392155][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 401.563276][ T5225] Bluetooth: hci2: command 0x0406 tx timeout [ 401.635978][ T939] usb 4-1: USB disconnect, device number 24 [ 401.676105][ T6851] usb 3-1: USB disconnect, device number 24 [ 402.936683][ T2637] usb 5-1: 0:2 : does not exist [ 405.033639][ T2637] usb 5-1: USB disconnect, device number 42 [ 405.854044][ T8951] FAULT_INJECTION: forcing a failure. [ 405.854044][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.880456][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 405.895700][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.1.899 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 405.906427][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 405.916510][ T8951] Call Trace: [ 405.919814][ T8951] [ 405.922763][ T8951] dump_stack_lvl+0x241/0x360 [ 405.927472][ T8951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.932880][ T8951] ? __pfx__printk+0x10/0x10 [ 405.937472][ T8951] ? __pfx_lock_release+0x10/0x10 [ 405.942594][ T8951] should_fail_ex+0x3b0/0x4e0 [ 405.947366][ T8951] _copy_from_iter+0x1f6/0x1960 [ 405.952214][ T8951] ? __virt_addr_valid+0x183/0x530 [ 405.957323][ T8951] ? __pfx_lock_release+0x10/0x10 [ 405.962354][ T8951] ? __alloc_skb+0x28f/0x440 [ 405.966944][ T8951] ? __pfx__copy_from_iter+0x10/0x10 [ 405.972222][ T8951] ? __virt_addr_valid+0x183/0x530 [ 405.977323][ T8951] ? __virt_addr_valid+0x183/0x530 [ 405.982684][ T8951] ? __virt_addr_valid+0x45f/0x530 [ 405.987817][ T8951] ? __check_object_size+0x49c/0x900 [ 405.993125][ T8951] netlink_sendmsg+0x73d/0xcb0 [ 405.997914][ T8951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.003211][ T8951] ? __import_iovec+0x536/0x820 [ 406.008099][ T8951] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 406.013499][ T8951] ? security_socket_sendmsg+0x87/0xb0 [ 406.018955][ T8951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.024240][ T8951] __sock_sendmsg+0x221/0x270 [ 406.029088][ T8951] ____sys_sendmsg+0x525/0x7d0 [ 406.033850][ T8951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.039145][ T8951] __sys_sendmsg+0x2b0/0x3a0 [ 406.043735][ T8951] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.049012][ T8951] ? vfs_write+0x7c4/0xc90 [ 406.053539][ T8951] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.059869][ T8951] ? do_syscall_64+0x100/0x230 [ 406.064631][ T8951] ? do_syscall_64+0xb6/0x230 [ 406.069304][ T8951] do_syscall_64+0xf3/0x230 [ 406.073804][ T8951] ? clear_bhb_loop+0x35/0x90 [ 406.078510][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.084424][ T8951] RIP: 0033:0x7f5d61d773b9 [ 406.088865][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.108594][ T8951] RSP: 002b:00007f5d62c01048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.117106][ T8951] RAX: ffffffffffffffda RBX: 00007f5d61f05f80 RCX: 00007f5d61d773b9 [ 406.125086][ T8951] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 406.133236][ T8951] RBP: 00007f5d62c010a0 R08: 0000000000000000 R09: 0000000000000000 [ 406.141224][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.149362][ T8951] R13: 000000000000000b R14: 00007f5d61f05f80 R15: 00007ffc36ae2a78 [ 406.157341][ T8951] [ 406.202478][ T8953] gre1: entered allmulticast mode [ 406.581561][ T8982] fuse: Bad value for 'rootmode' [ 407.795542][ T5267] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 408.372414][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 409.019165][ T5267] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 409.034134][ T5267] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 409.062127][ T5267] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.085142][ T5267] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.106099][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.118892][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.914'. [ 409.119587][ T5267] usb 1-1: Product: syz [ 409.132647][ T5267] usb 1-1: Manufacturer: syz [ 409.370863][ T9007] gre1: entered allmulticast mode [ 409.503177][ T5267] usb 1-1: SerialNumber: syz [ 409.604349][ T5267] usb 1-1: 0:2 : does not exist [ 409.642995][ T5267] usb 1-1: USB disconnect, device number 38 [ 413.205654][ T6851] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 413.338454][ T9074] netlink: 96 bytes leftover after parsing attributes in process `syz.4.930'. [ 413.395570][ T6851] usb 1-1: Using ep0 maxpacket: 8 [ 413.439861][ T6851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 413.607347][ T6851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 413.621056][ T6851] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.385515][ T5274] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 414.497040][ T6851] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 414.511099][ T6851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.546594][ T6851] usb 1-1: Product: syz [ 414.550878][ T6851] usb 1-1: Manufacturer: syz [ 414.585348][ T6851] usb 1-1: SerialNumber: syz [ 414.881303][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 414.893511][ T5274] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 414.903690][ T6851] usbhid 1-1:1.0: can't add hid device: -22 [ 414.913305][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.919070][ T6851] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 415.409418][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.761577][ T5274] usb 5-1: config 0 descriptor?? [ 415.774009][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.856367][ T5274] usb 5-1: unknown interface protocol 0x3f, assuming v1 [ 415.875012][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.890789][ T5274] usb 5-1: cannot find UAC_HEADER [ 415.923171][ T5274] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 415.972212][ T5274] usb 1-1: USB disconnect, device number 39 [ 416.228414][ T9074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.434303][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.317341][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.654556][ T9120] netlink: 15 bytes leftover after parsing attributes in process `syz.0.940'. [ 417.751544][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 417.773107][ T9124] fuse: Bad value for 'rootmode' [ 417.775165][ T9122] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.942'. [ 419.330165][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 419.439356][ T5267] usb 5-1: USB disconnect, device number 43 [ 421.085635][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 421.275733][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 421.326621][ T5267] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 421.385887][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 422.020093][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.020272][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 422.031345][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 422.031385][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.093001][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 422.117323][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.118478][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 422.136551][ T46] usb 4-1: Product: syz [ 422.140739][ T46] usb 4-1: Manufacturer: syz [ 422.151001][ T46] usb 4-1: SerialNumber: syz [ 422.155633][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 422.155662][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.155683][ T9] usb 3-1: Product: syz [ 422.155697][ T9] usb 3-1: Manufacturer: syz [ 422.155711][ T9] usb 3-1: SerialNumber: syz [ 422.169854][ T9] usb 3-1: config 0 descriptor?? [ 422.196063][ T9156] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.203545][ T9156] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.214811][ T9174] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 422.225646][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 422.259297][ T5267] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 422.267746][ T5267] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 422.280002][ T5267] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 422.291440][ T5267] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 422.311083][ T5267] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.329631][ T5267] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 422.342099][ T5267] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 422.367889][ T5267] usb 5-1: Product: syz [ 422.372389][ T5267] usb 5-1: Manufacturer: syz [ 422.377309][ T5267] usb 5-1: SerialNumber: syz [ 422.387827][ T5267] usb 5-1: config 0 descriptor?? [ 422.391470][ T46] usbhid 4-1:1.0: can't add hid device: -22 [ 422.396221][ T5267] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 422.404615][ T46] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 422.412035][ T5267] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 422.423054][ T9156] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.434955][ T9156] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.640861][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.662711][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.707759][ T9156] pim6reg1: entered promiscuous mode [ 423.755615][ T9156] pim6reg1: entered allmulticast mode [ 423.805889][ T46] usb 4-1: USB disconnect, device number 25 [ 424.095811][ T9] Error reading MAC address [ 424.603175][ T2637] usb 3-1: USB disconnect, device number 25 [ 425.041961][ T5322] usb 5-1: USB disconnect, device number 44 [ 425.064799][ T5322] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 425.114495][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.049540][ T939] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 426.285110][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 426.297827][ T9209] FAULT_INJECTION: forcing a failure. [ 426.297827][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 426.313924][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.4.965 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 426.324574][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 426.334731][ T9209] Call Trace: [ 426.338033][ T9209] [ 426.340967][ T9209] dump_stack_lvl+0x241/0x360 [ 426.345720][ T9209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.350922][ T9209] ? __pfx__printk+0x10/0x10 [ 426.355539][ T9209] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 426.360151][ T939] usb 2-1: Using ep0 maxpacket: 8 [ 426.361520][ T9209] ? __pfx___might_resched+0x10/0x10 [ 426.371841][ T9209] should_fail_ex+0x3b0/0x4e0 [ 426.376520][ T9209] should_failslab+0xac/0x100 [ 426.381191][ T9209] ? __alloc_skb+0x1c3/0x440 [ 426.385772][ T9209] kmem_cache_alloc_node_noprof+0x71/0x320 [ 426.391588][ T9209] __alloc_skb+0x1c3/0x440 [ 426.396003][ T9209] ? __pfx___alloc_skb+0x10/0x10 [ 426.400932][ T9209] ? netlink_autobind+0xd6/0x2f0 [ 426.405873][ T9209] ? netlink_autobind+0x2b0/0x2f0 [ 426.410924][ T9209] netlink_sendmsg+0x638/0xcb0 [ 426.415708][ T9209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.420992][ T9209] ? __import_iovec+0x536/0x820 [ 426.425839][ T9209] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 426.431117][ T9209] ? security_socket_sendmsg+0x87/0xb0 [ 426.436569][ T9209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.441843][ T9209] __sock_sendmsg+0x221/0x270 [ 426.446511][ T9209] ____sys_sendmsg+0x525/0x7d0 [ 426.451264][ T9209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.456542][ T9209] __sys_sendmsg+0x2b0/0x3a0 [ 426.461125][ T9209] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.466312][ T9209] ? vfs_write+0x7c4/0xc90 [ 426.470751][ T9209] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.477178][ T9209] ? do_syscall_64+0x100/0x230 [ 426.481946][ T9209] ? do_syscall_64+0xb6/0x230 [ 426.486613][ T9209] do_syscall_64+0xf3/0x230 [ 426.491369][ T9209] ? clear_bhb_loop+0x35/0x90 [ 426.496038][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.501928][ T9209] RIP: 0033:0x7efc851773b9 [ 426.506331][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.525941][ T9209] RSP: 002b:00007efc86029048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.534343][ T9209] RAX: ffffffffffffffda RBX: 00007efc85305f80 RCX: 00007efc851773b9 [ 426.542302][ T9209] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 426.550262][ T9209] RBP: 00007efc860290a0 R08: 0000000000000000 R09: 0000000000000000 [ 426.558227][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.566184][ T9209] R13: 000000000000000b R14: 00007efc85305f80 R15: 00007ffe68e78bc8 [ 426.574206][ T9209] [ 426.616070][ T939] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 426.625960][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.680962][ T939] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.693715][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.719024][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.750887][ T939] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 426.758837][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.777944][ T939] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.806829][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.838875][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.870930][ T939] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 426.878625][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.895491][ T939] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.924886][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.969664][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.998289][ T939] usb 2-1: string descriptor 0 read error: -22 [ 427.148293][ T939] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 427.174185][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.151202][ T939] usb 2-1: can't set config #168, error -71 [ 428.189348][ T939] usb 2-1: USB disconnect, device number 29 [ 428.580130][ T9239] FAULT_INJECTION: forcing a failure. [ 428.580130][ T9239] name failslab, interval 1, probability 0, space 0, times 0 [ 428.593290][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.3.976 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 428.603983][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 428.614051][ T9239] Call Trace: [ 428.617338][ T9239] [ 428.620276][ T9239] dump_stack_lvl+0x241/0x360 [ 428.624975][ T9239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.630192][ T9239] ? __pfx__printk+0x10/0x10 [ 428.634799][ T9239] ? __pfx_lock_acquire+0x10/0x10 [ 428.639845][ T9239] should_fail_ex+0x3b0/0x4e0 [ 428.644538][ T9239] ? sctp_get_port_local+0x78e/0x1740 [ 428.649929][ T9239] should_failslab+0xac/0x100 [ 428.654632][ T9239] ? sctp_get_port_local+0x78e/0x1740 [ 428.660063][ T9239] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 428.665460][ T9239] sctp_get_port_local+0x78e/0x1740 [ 428.670679][ T9239] ? __pfx_lock_release+0x10/0x10 [ 428.675823][ T9239] ? __pfx_sctp_get_port_local+0x10/0x10 [ 428.681469][ T9239] ? sctp_bind_addr_match+0x295/0x2b0 [ 428.686851][ T9239] ? sctp_v6_available+0x76/0x3e0 [ 428.691889][ T9239] sctp_do_bind+0x513/0x950 [ 428.696421][ T9239] sctp_connect_new_asoc+0x277/0x6c0 [ 428.701723][ T9239] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 428.707550][ T9239] ? sctp_get_af_specific+0x2a/0x80 [ 428.712758][ T9239] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 428.718580][ T9239] __sctp_connect+0x66d/0xe30 [ 428.723283][ T9239] ? __pfx___sctp_connect+0x10/0x10 [ 428.728493][ T9239] ? __might_fault+0xc6/0x120 [ 428.733191][ T9239] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 428.738748][ T9239] ? security_sctp_bind_connect+0x90/0xb0 [ 428.744481][ T9239] sctp_getsockopt_connectx3+0x46f/0x730 [ 428.750131][ T9239] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 428.756392][ T9239] ? __local_bh_enable_ip+0x179/0x200 [ 428.761778][ T9239] ? sctp_getsockopt+0x13a/0xbb0 [ 428.766732][ T9239] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 428.772486][ T9239] sctp_getsockopt+0x8de/0xbb0 [ 428.777262][ T9239] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 428.783174][ T9239] do_sock_getsockopt+0x373/0x850 [ 428.788219][ T9239] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 428.793774][ T9239] ? __fget_files+0x3f6/0x470 [ 428.798474][ T9239] __sys_getsockopt+0x271/0x330 [ 428.803440][ T9239] ? __pfx___sys_getsockopt+0x10/0x10 [ 428.808830][ T9239] __x64_sys_getsockopt+0xb5/0xd0 [ 428.813957][ T9239] do_syscall_64+0xf3/0x230 [ 428.818669][ T9239] ? clear_bhb_loop+0x35/0x90 [ 428.823374][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.829286][ T9239] RIP: 0033:0x7f65211773b9 [ 428.833723][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.853357][ T9239] RSP: 002b:00007f6521f08048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 428.861799][ T9239] RAX: ffffffffffffffda RBX: 00007f6521306130 RCX: 00007f65211773b9 [ 428.869874][ T9239] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000008 [ 428.877857][ T9239] RBP: 00007f6521f080a0 R08: 0000000020000140 R09: 0000000000000000 [ 428.885818][ T9239] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.893779][ T9239] R13: 000000000000006e R14: 00007f6521306130 R15: 00007ffff82a0d48 [ 428.901749][ T9239] [ 428.928789][ T9236] netlink: 96 bytes leftover after parsing attributes in process `syz.1.975'. [ 428.975699][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 429.245606][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 429.255314][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 429.284705][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 429.298001][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.317964][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 429.333295][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.357945][ T46] usb 3-1: Product: syz [ 429.365520][ T46] usb 3-1: Manufacturer: syz [ 429.375508][ T46] usb 3-1: SerialNumber: syz [ 429.385914][ T5268] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 429.565727][ T5322] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 429.605559][ T5268] usb 2-1: Using ep0 maxpacket: 8 [ 429.616229][ T46] usbhid 3-1:1.0: can't add hid device: -22 [ 429.634831][ T46] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 429.644583][ T5268] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 429.672576][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.698091][ T5268] usb 2-1: config 0 descriptor?? [ 429.717947][ T5268] usb 2-1: unknown interface protocol 0x3f, assuming v1 [ 429.735382][ T5268] usb 2-1: cannot find UAC_HEADER [ 429.757726][ T5268] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 429.777614][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.800437][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.825200][ T5322] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 429.841957][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.864140][ T5322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.875932][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.886648][ T5322] usb 5-1: config 0 descriptor?? [ 429.930128][ T5268] usb 3-1: USB disconnect, device number 26 [ 430.012309][ T9236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.083944][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.112796][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.247899][ T9254] FAULT_INJECTION: forcing a failure. [ 430.247899][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.286334][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.3.983 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 430.297232][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 430.307394][ T9254] Call Trace: [ 430.310696][ T9254] [ 430.313811][ T9254] dump_stack_lvl+0x241/0x360 [ 430.318518][ T9254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.323752][ T9254] ? __pfx__printk+0x10/0x10 [ 430.328477][ T9254] ? snprintf+0xda/0x120 [ 430.332767][ T9254] should_fail_ex+0x3b0/0x4e0 [ 430.337464][ T9254] _copy_to_user+0x2f/0xb0 [ 430.341904][ T9254] simple_read_from_buffer+0xca/0x150 [ 430.347300][ T9254] proc_fail_nth_read+0x1e9/0x250 [ 430.352353][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.357908][ T9254] ? rw_verify_area+0x520/0x6b0 [ 430.362779][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.368607][ T9254] vfs_read+0x204/0xbc0 [ 430.372766][ T9254] ? __pfx_lock_release+0x10/0x10 [ 430.377809][ T9254] ? __pfx_vfs_read+0x10/0x10 [ 430.382483][ T9254] ? __fget_files+0x29/0x470 [ 430.387084][ T9254] ? __fget_files+0x3f6/0x470 [ 430.391766][ T9254] ksys_read+0x1a0/0x2c0 [ 430.396031][ T9254] ? __pfx_ksys_read+0x10/0x10 [ 430.400796][ T9254] ? do_syscall_64+0x100/0x230 [ 430.405578][ T9254] ? do_syscall_64+0xb6/0x230 [ 430.410280][ T9254] do_syscall_64+0xf3/0x230 [ 430.414797][ T9254] ? clear_bhb_loop+0x35/0x90 [ 430.419492][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.425446][ T9254] RIP: 0033:0x7f6521175dfc [ 430.429879][ T9254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 430.449640][ T9254] RSP: 002b:00007f6521f4a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.458070][ T9254] RAX: ffffffffffffffda RBX: 00007f6521305f80 RCX: 00007f6521175dfc [ 430.466153][ T9254] RDX: 000000000000000f RSI: 00007f6521f4a0b0 RDI: 0000000000000004 [ 430.474142][ T9254] RBP: 00007f6521f4a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 430.482127][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.490119][ T9254] R13: 000000000000000b R14: 00007f6521305f80 R15: 00007ffff82a0d48 [ 430.498308][ T9254] [ 430.788464][ T5322] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 431.157066][ T5322] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 431.962549][ T2637] usb 2-1: USB disconnect, device number 30 [ 432.770683][ T9275] 9pnet_fd: Insufficient options for proto=fd [ 432.945239][ T6851] usb 5-1: USB disconnect, device number 45 [ 433.091042][ T9286] ptrace attach of "./syz-executor exec"[5215] was attempted by "./syz-executor exec"[9286] [ 433.325546][ T2637] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 433.537778][ T2637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.585820][ T2637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.721974][ T2637] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 433.731734][ T2637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.754270][ T2637] usb 2-1: config 0 descriptor?? [ 433.895654][ T5271] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 434.100920][ T5271] usb 5-1: Using ep0 maxpacket: 8 [ 434.133234][ T5271] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 434.152844][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.177350][ T5271] usb 5-1: Product: syz [ 434.188078][ T5271] usb 5-1: Manufacturer: syz [ 434.194742][ T2637] usbhid 2-1:0.0: can't add hid device: -71 [ 434.209674][ T5271] usb 5-1: SerialNumber: syz [ 434.225613][ T2637] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 434.232401][ T5271] usb 5-1: config 0 descriptor?? [ 434.256130][ T2637] usb 2-1: USB disconnect, device number 31 [ 434.281551][ T5271] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 435.207188][ T5227] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 436.192327][ T9326] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 436.344839][ T9328] FAULT_INJECTION: forcing a failure. [ 436.344839][ T9328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.375532][ T9328] CPU: 0 UID: 0 PID: 9328 Comm: syz.0.1007 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 436.386257][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 436.396309][ T9328] Call Trace: [ 436.399582][ T9328] [ 436.402512][ T9328] dump_stack_lvl+0x241/0x360 [ 436.407197][ T9328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.412391][ T9328] ? __pfx__printk+0x10/0x10 [ 436.416982][ T9328] ? snprintf+0xda/0x120 [ 436.421229][ T9328] should_fail_ex+0x3b0/0x4e0 [ 436.426006][ T9328] _copy_to_user+0x2f/0xb0 [ 436.430423][ T9328] simple_read_from_buffer+0xca/0x150 [ 436.435915][ T9328] proc_fail_nth_read+0x1e9/0x250 [ 436.440942][ T9328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.446493][ T9328] ? rw_verify_area+0x520/0x6b0 [ 436.451436][ T9328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.456983][ T9328] vfs_read+0x204/0xbc0 [ 436.461134][ T9328] ? __pfx_lock_release+0x10/0x10 [ 436.466259][ T9328] ? __pfx_vfs_read+0x10/0x10 [ 436.470928][ T9328] ? __fget_files+0x29/0x470 [ 436.475602][ T9328] ? __fget_files+0x3f6/0x470 [ 436.480279][ T9328] ksys_read+0x1a0/0x2c0 [ 436.484527][ T9328] ? __pfx_ksys_read+0x10/0x10 [ 436.489370][ T9328] ? do_syscall_64+0x100/0x230 [ 436.494136][ T9328] ? do_syscall_64+0xb6/0x230 [ 436.498816][ T9328] do_syscall_64+0xf3/0x230 [ 436.503327][ T9328] ? clear_bhb_loop+0x35/0x90 [ 436.508014][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.513926][ T9328] RIP: 0033:0x7f1701375dfc [ 436.518356][ T9328] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 436.538238][ T9328] RSP: 002b:00007f17020b1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.546741][ T9328] RAX: ffffffffffffffda RBX: 00007f1701505f80 RCX: 00007f1701375dfc [ 436.554983][ T9328] RDX: 000000000000000f RSI: 00007f17020b10b0 RDI: 0000000000000006 [ 436.563013][ T9328] RBP: 00007f17020b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 436.571013][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.579245][ T9328] R13: 000000000000000b R14: 00007f1701505f80 R15: 00007fff1881e668 [ 436.587487][ T9328] [ 436.770027][ T5271] gspca_m5602: Failed to find a sensor [ 436.788873][ T5271] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 436.807839][ T5271] usb 5-1: USB disconnect, device number 46 [ 437.287785][ T9351] netlink: 'syz.4.1013': attribute type 21 has an invalid length. [ 437.435739][ T9351] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1013'. [ 437.960957][ T5227] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 438.064594][ T9358] tipc: Started in network mode [ 438.077673][ T9358] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711 [ 438.091065][ T9358] tipc: Enabled bearer , priority 10 [ 438.895757][ T5268] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 439.521836][ T5271] tipc: Node number set to 4269801489 [ 439.733057][ T5268] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.775345][ T5268] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 439.793516][ T5268] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.803129][ T9368] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 439.827094][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.871008][ T9351] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.880886][ T9368] netlink: 'syz.3.1018': attribute type 9 has an invalid length. [ 439.919091][ T5268] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.438352][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.447964][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.777230][ T939] usb 5-1: USB disconnect, device number 47 [ 441.401524][ T5268] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 441.736766][ T5268] usb 3-1: device descriptor read/64, error -71 [ 442.176111][ T5268] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 442.467436][ T29] audit: type=1326 audit(1722501293.649:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d61d773b9 code=0x7ffc0000 [ 442.549052][ T29] audit: type=1326 audit(1722501293.649:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d61d773b9 code=0x7ffc0000 [ 442.595743][ T5268] usb 3-1: device descriptor read/64, error -71 [ 442.646868][ T29] audit: type=1326 audit(1722501293.669:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f5d61d773b9 code=0x7ffc0000 [ 442.672848][ T29] audit: type=1326 audit(1722501293.669:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d61d773b9 code=0x7ffc0000 [ 442.699332][ T29] audit: type=1326 audit(1722501293.669:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d61d773b9 code=0x7ffc0000 [ 442.739118][ T5268] usb usb3-port1: attempt power cycle [ 443.305887][ T5322] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 443.313914][ T5268] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 443.376295][ T5268] usb 3-1: device descriptor read/8, error -71 [ 443.402621][ T9430] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 443.444509][ T9430] tipc: Enabling of bearer rejected, failed to enable media [ 443.525939][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.573025][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.605525][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.639817][ T5322] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 443.655636][ T5268] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 443.690544][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.709966][ T5268] usb 3-1: device descriptor read/8, error -71 [ 443.729650][ T5322] usb 4-1: config 0 descriptor?? [ 443.732028][ T9436] FAULT_INJECTION: forcing a failure. [ 443.732028][ T9436] name failslab, interval 1, probability 0, space 0, times 0 [ 443.752270][ T9436] CPU: 0 UID: 0 PID: 9436 Comm: syz.0.1033 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 443.762990][ T9436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 443.773076][ T9436] Call Trace: [ 443.776369][ T9436] [ 443.779308][ T9436] dump_stack_lvl+0x241/0x360 [ 443.784008][ T9436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.789228][ T9436] ? __pfx__printk+0x10/0x10 [ 443.793852][ T9436] ? __kmalloc_noprof+0xb0/0x400 [ 443.798810][ T9436] ? __pfx___might_resched+0x10/0x10 [ 443.804118][ T9436] should_fail_ex+0x3b0/0x4e0 [ 443.808838][ T9436] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 443.815110][ T9436] should_failslab+0xac/0x100 [ 443.819818][ T9436] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 443.826080][ T9436] __kmalloc_noprof+0xd8/0x400 [ 443.830867][ T9436] ? safesetid_security_capable+0xb2/0x1d0 [ 443.836784][ T9436] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 443.842885][ T9436] genl_rcv_msg+0x802/0xec0 [ 443.846736][ T5268] usb usb3-port1: unable to enumerate USB device [ 443.847387][ T9436] ? mark_lock+0x9a/0x350 [ 443.858081][ T9436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.863153][ T9436] ? __pfx_lock_acquire+0x10/0x10 [ 443.868202][ T9436] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 443.873593][ T9436] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 443.879502][ T9436] ? __pfx_nl80211_post_doit+0x10/0x10 [ 443.885065][ T9436] ? __pfx___might_resched+0x10/0x10 [ 443.890377][ T9436] netlink_rcv_skb+0x1e3/0x430 [ 443.895159][ T9436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.900203][ T9436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.905527][ T9436] ? __netlink_deliver_tap+0x77e/0x7c0 [ 443.911021][ T9436] genl_rcv+0x28/0x40 [ 443.915015][ T9436] netlink_unicast+0x7f0/0x990 [ 443.919814][ T9436] ? __pfx_netlink_unicast+0x10/0x10 [ 443.925117][ T9436] ? __virt_addr_valid+0x183/0x530 [ 443.930251][ T9436] ? __check_object_size+0x49c/0x900 [ 443.935565][ T9436] ? bpf_lsm_netlink_send+0x9/0x10 [ 443.940699][ T9436] netlink_sendmsg+0x8e4/0xcb0 [ 443.945488][ T9436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.950789][ T9436] ? __import_iovec+0x536/0x820 [ 443.955662][ T9436] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 443.960979][ T9436] ? security_socket_sendmsg+0x87/0xb0 [ 443.966468][ T9436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.971783][ T9436] __sock_sendmsg+0x221/0x270 [ 443.976493][ T9436] ____sys_sendmsg+0x525/0x7d0 [ 443.981293][ T9436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.986617][ T9436] __sys_sendmsg+0x2b0/0x3a0 [ 443.991320][ T9436] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.996458][ T9436] ? vfs_write+0x7c4/0xc90 [ 444.000945][ T9436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.007306][ T9436] ? do_syscall_64+0x100/0x230 [ 444.012125][ T9436] ? do_syscall_64+0xb6/0x230 [ 444.016837][ T9436] do_syscall_64+0xf3/0x230 [ 444.021369][ T9436] ? clear_bhb_loop+0x35/0x90 [ 444.026434][ T9436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.032443][ T9436] RIP: 0033:0x7f17013773b9 [ 444.036971][ T9436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.040297][ T5227] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 444.056678][ T9436] RSP: 002b:00007f17020b1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.056710][ T9436] RAX: ffffffffffffffda RBX: 00007f1701505f80 RCX: 00007f17013773b9 [ 444.056723][ T9436] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 444.056733][ T9436] RBP: 00007f17020b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 444.056743][ T9436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.056753][ T9436] R13: 000000000000000b R14: 00007f1701505f80 R15: 00007fff1881e668 [ 444.056781][ T9436] [ 444.269573][ T5322] betop 0003:11C0:5506.0007: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 444.291350][ T5322] betop 0003:11C0:5506.0007: no inputs found [ 444.519279][ T5322] usb 4-1: USB disconnect, device number 26 [ 445.965731][ T5322] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 446.123338][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 446.152684][ T9464] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1041'. [ 446.165623][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.188680][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.209992][ T5322] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 446.219174][ T5322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.231794][ T5322] usb 5-1: config 0 descriptor?? [ 446.495578][ T5267] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 446.715591][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 446.742933][ T5267] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 446.791865][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.858161][ T5267] usb 3-1: config 0 descriptor?? [ 446.880226][ T5267] usb 3-1: unknown interface protocol 0x3f, assuming v1 [ 446.901150][ T5322] usbhid 5-1:0.0: can't add hid device: -71 [ 446.907556][ T5267] usb 3-1: cannot find UAC_HEADER [ 446.935831][ T5322] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 446.947961][ T5322] usb 5-1: USB disconnect, device number 48 [ 447.006770][ T5267] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 447.153270][ T9464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.320167][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.329320][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.108037][ T5227] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 448.119617][ T5227] Bluetooth: hci2: Injecting HCI hardware error event [ 448.129448][ T5225] Bluetooth: hci2: hardware error 0x00 [ 448.457414][ T9489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.215086][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 449.255034][ T5268] usb 3-1: USB disconnect, device number 31 [ 450.185631][ T5225] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 451.999455][ T5322] libceph: connect (1)[c::]:6789 error -101 [ 452.052119][ T5322] libceph: mon0 (1)[c::]:6789 connect error [ 452.160696][ T9532] ceph: No mds server is up or the cluster is laggy [ 452.406315][ T939] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 453.621835][ T5267] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 454.719375][ T5225] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 454.727366][ T5267] usb 3-1: Using ep0 maxpacket: 32 [ 454.736387][ T5267] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 454.752344][ T5267] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 454.801667][ T5267] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 454.819788][ T5267] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 454.845525][ T5267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 454.958831][ T5267] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 454.968210][ T5267] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 454.976914][ T5267] usb 3-1: Product: syz [ 454.990259][ T5267] usb 3-1: Manufacturer: syz [ 454.998084][ T5267] usb 3-1: SerialNumber: syz [ 454.999404][ T9595] fuse: Bad value for 'rootmode' [ 455.568509][ T5267] usb 3-1: config 0 descriptor?? [ 455.595376][ T5267] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 455.661926][ T5267] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 455.811311][ T9609] netlink: 199356 bytes leftover after parsing attributes in process `syz.4.1079'. [ 455.821251][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 456.282804][ T5267] usb 3-1: USB disconnect, device number 32 [ 456.298592][ T5267] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 456.872031][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1083'. [ 456.894764][ T9624] gre2: entered allmulticast mode [ 457.105593][ T5322] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 457.265618][ T5268] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 457.321774][ T5322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.441043][ T5322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.452422][ T5322] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 457.479039][ T5322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.510281][ T5322] usb 1-1: config 0 descriptor?? [ 457.643100][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.703250][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.726019][ T5268] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 457.822045][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.861085][ T5268] usb 3-1: config 0 descriptor?? [ 458.353181][ T5322] usbhid 1-1:0.0: can't add hid device: -71 [ 458.405987][ T5322] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 458.918147][ T5322] usb 1-1: USB disconnect, device number 41 [ 458.925139][ T5268] cougar 0003:060B:700A.0008: item fetching failed at offset 2/5 [ 458.966650][ T5268] cougar 0003:060B:700A.0008: parse failed [ 458.987974][ T5268] cougar 0003:060B:700A.0008: probe with driver cougar failed with error -22 [ 461.832601][ T939] usb 3-1: USB disconnect, device number 33 [ 462.366883][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 464.422308][ T9698] fuse: Bad value for 'rootmode' [ 468.647784][ T9741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1113'. [ 468.705964][ T939] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 468.898304][ T939] usb 2-1: not running at top speed; connect to a high speed hub [ 469.057600][ T939] usb 2-1: config 3 has an invalid interface number: 219 but max is 2 [ 469.065977][ T939] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 469.074875][ T939] usb 2-1: config 3 has an invalid interface number: 60 but max is 2 [ 469.085855][ T939] usb 2-1: config 3 has an invalid interface number: 128 but max is 2 [ 469.488775][ T939] usb 2-1: config 3 has an invalid interface number: 253 but max is 2 [ 469.497154][ T939] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 469.507304][ T939] usb 2-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 469.575578][ T939] usb 2-1: config 3 has no interface number 0 [ 469.596382][ T939] usb 2-1: config 3 has no interface number 1 [ 469.602511][ T939] usb 2-1: config 3 has no interface number 2 [ 469.629986][ T9750] xt_policy: too many policy elements [ 469.638573][ T939] usb 2-1: config 3 has no interface number 3 [ 469.852408][ T939] usb 2-1: config 3 interface 219 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 469.866071][ T939] usb 2-1: config 3 interface 60 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 469.885507][ T939] usb 2-1: config 3 interface 60 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 469.913067][ T939] usb 2-1: config 3 interface 60 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 469.932787][ T939] usb 2-1: config 3 interface 60 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 469.946600][ T939] usb 2-1: config 3 interface 60 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 469.959108][ T939] usb 2-1: config 3 interface 60 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 469.973018][ T939] usb 2-1: config 3 interface 60 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 469.984173][ T939] usb 2-1: config 3 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 1120, setting to 64 [ 469.995262][ T939] usb 2-1: config 3 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 470.023210][ T939] usb 2-1: config 3 interface 60 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 470.039871][ T939] usb 2-1: config 3 interface 128 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 470.040025][ T5225] Bluetooth: hci4: unexpected subevent 0x01 length: 25 > 18 [ 470.110684][ T939] usb 2-1: config 3 interface 128 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 470.123936][ T9759] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 470.141278][ T939] usb 2-1: config 3 interface 128 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 470.155560][ T939] usb 2-1: config 3 interface 128 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 470.176200][ T939] usb 2-1: config 3 interface 128 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 470.215548][ T5267] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 470.229525][ T939] usb 2-1: config 3 interface 128 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 470.285644][ T939] usb 2-1: config 3 interface 128 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 470.297168][ T939] usb 2-1: config 3 interface 128 altsetting 6 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 470.310769][ T939] usb 2-1: too many endpoints for config 3 interface 253 altsetting 68: 129, using maximum allowed: 30 [ 470.333522][ T939] usb 2-1: config 3 interface 253 altsetting 68 has a duplicate endpoint with address 0x8E, skipping [ 470.345971][ T939] usb 2-1: config 3 interface 253 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 470.357041][ T939] usb 2-1: config 3 interface 253 altsetting 68 has a duplicate endpoint with address 0xC, skipping [ 470.375711][ T939] usb 2-1: config 3 interface 253 altsetting 68 has 3 endpoint descriptors, different from the interface descriptor's value: 129 [ 470.389360][ T939] usb 2-1: config 3 interface 219 has no altsetting 0 [ 470.396268][ T5267] usb 4-1: Using ep0 maxpacket: 16 [ 470.401655][ T939] usb 2-1: config 3 interface 128 has no altsetting 0 [ 470.412011][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.423117][ T939] usb 2-1: config 3 interface 253 has no altsetting 0 [ 470.430088][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.441377][ T5267] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 470.450661][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.463231][ T939] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01fb, bcdDevice=93.fd [ 470.474857][ T5267] usb 4-1: config 0 descriptor?? [ 470.479982][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.497494][ T939] usb 2-1: Product: 昗⸥鱚䧀➙⫯駃뙴꒥豽ꘀ垥噧억旽잰倬횿䊗폸䢯䯴䨩炘긢㢱ᩧ⬊炝墦솟⥝ꧥᘰ峤淣ꄀᐣꢤ [ 470.542246][ T939] usb 2-1: Manufacturer: ࠉ [ 470.564351][ T939] usb 2-1: SerialNumber: Н [ 470.852655][ T939] ftdi_sio 2-1:3.219: FTDI USB Serial Device converter detected [ 470.927572][ T939] ftdi_sio ttyUSB0: unknown device type: 0x93fd [ 470.960978][ T5267] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 470.980166][ T939] ftdi_sio 2-1:3.60: FTDI USB Serial Device converter detected [ 470.989487][ T5267] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 470.998700][ T939] ftdi_sio ttyUSB1: unknown device type: 0x93fd [ 471.005566][ T5267] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 471.012575][ T5267] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 471.025992][ T5267] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 471.034463][ T939] ftdi_sio 2-1:3.128: FTDI USB Serial Device converter detected [ 471.058283][ T5267] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 471.073455][ T939] ftdi_sio ttyUSB2: unknown device type: 0x93fd [ 471.082188][ T9770] FAULT_INJECTION: forcing a failure. [ 471.082188][ T9770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.102082][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.2.1121 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 471.112791][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 471.122838][ T9770] Call Trace: [ 471.126109][ T9770] [ 471.129026][ T9770] dump_stack_lvl+0x241/0x360 [ 471.133695][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.138879][ T9770] ? __pfx__printk+0x10/0x10 [ 471.143455][ T9770] ? uhid_char_write+0x78/0xb50 [ 471.148303][ T9770] should_fail_ex+0x3b0/0x4e0 [ 471.152970][ T9770] _copy_from_user+0x2f/0xe0 [ 471.157561][ T9770] uhid_char_write+0x1f9/0xb50 [ 471.162353][ T9770] vfs_writev+0x5af/0xbb0 [ 471.166699][ T9770] ? __pfx_uhid_char_write+0x10/0x10 [ 471.171971][ T9770] ? __pfx_vfs_writev+0x10/0x10 [ 471.176805][ T9770] ? vfs_write+0x7c4/0xc90 [ 471.182272][ T9770] ? __fget_files+0x29/0x470 [ 471.186871][ T9770] do_writev+0x1b1/0x350 [ 471.191137][ T9770] ? __pfx_do_writev+0x10/0x10 [ 471.195902][ T9770] ? do_syscall_64+0x100/0x230 [ 471.200678][ T9770] ? do_syscall_64+0xb6/0x230 [ 471.205360][ T9770] do_syscall_64+0xf3/0x230 [ 471.209859][ T9770] ? clear_bhb_loop+0x35/0x90 [ 471.214561][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.220477][ T9770] RIP: 0033:0x7f2044f773b9 [ 471.224889][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.244582][ T9770] RSP: 002b:00007f2045d40048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 471.252985][ T9770] RAX: ffffffffffffffda RBX: 00007f2045105f80 RCX: 00007f2044f773b9 [ 471.260954][ T9770] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 471.268932][ T9770] RBP: 00007f2045d400a0 R08: 0000000000000000 R09: 0000000000000000 [ 471.276914][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.284878][ T9770] R13: 000000000000000b R14: 00007f2045105f80 R15: 00007ffecaeffb08 [ 471.292849][ T9770] [ 471.315715][ T5267] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 471.473023][ T939] ftdi_sio 2-1:3.253: FTDI USB Serial Device converter detected [ 471.486820][ T939] ftdi_sio ttyUSB3: unknown device type: 0x93fd [ 471.497001][ T939] usb 2-1: USB disconnect, device number 32 [ 471.504177][ T939] ftdi_sio 2-1:3.219: device disconnected [ 471.540405][ T939] ftdi_sio 2-1:3.60: device disconnected [ 471.580629][ T939] ftdi_sio 2-1:3.128: device disconnected [ 471.597699][ T939] ftdi_sio 2-1:3.253: device disconnected [ 471.716330][ T9776] FAULT_INJECTION: forcing a failure. [ 471.716330][ T9776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.789176][ T9776] CPU: 0 UID: 0 PID: 9776 Comm: syz.2.1123 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 471.799902][ T9776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 471.809972][ T9776] Call Trace: [ 471.813249][ T9776] [ 471.816173][ T9776] dump_stack_lvl+0x241/0x360 [ 471.820853][ T9776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.826047][ T9776] ? __pfx__printk+0x10/0x10 [ 471.830632][ T9776] ? snprintf+0xda/0x120 [ 471.834878][ T9776] should_fail_ex+0x3b0/0x4e0 [ 471.839552][ T9776] _copy_to_user+0x2f/0xb0 [ 471.843966][ T9776] simple_read_from_buffer+0xca/0x150 [ 471.849341][ T9776] proc_fail_nth_read+0x1e9/0x250 [ 471.854368][ T9776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.859915][ T9776] ? rw_verify_area+0x52a/0x6b0 [ 471.864762][ T9776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.870307][ T9776] vfs_read+0x204/0xbc0 [ 471.874459][ T9776] ? __pfx_lock_release+0x10/0x10 [ 471.879498][ T9776] ? __pfx_vfs_read+0x10/0x10 [ 471.884346][ T9776] ? __fget_files+0x29/0x470 [ 471.888931][ T9776] ? __fget_files+0x3f6/0x470 [ 471.893606][ T9776] ksys_read+0x1a0/0x2c0 [ 471.897936][ T9776] ? __pfx_ksys_read+0x10/0x10 [ 471.902692][ T9776] ? do_syscall_64+0x100/0x230 [ 471.907468][ T9776] ? do_syscall_64+0xb6/0x230 [ 471.912145][ T9776] do_syscall_64+0xf3/0x230 [ 471.916644][ T9776] ? clear_bhb_loop+0x35/0x90 [ 471.921336][ T9776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.927227][ T9776] RIP: 0033:0x7f2044f75dfc [ 471.931724][ T9776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 471.951942][ T9776] RSP: 002b:00007f2045d40040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.960357][ T9776] RAX: ffffffffffffffda RBX: 00007f2045105f80 RCX: 00007f2044f75dfc [ 471.968340][ T9776] RDX: 000000000000000f RSI: 00007f2045d400b0 RDI: 0000000000000004 [ 471.976328][ T9776] RBP: 00007f2045d400a0 R08: 0000000000000000 R09: 0000000000000000 [ 471.984306][ T9776] R10: 0000000020001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 471.992271][ T9776] R13: 000000000000000b R14: 00007f2045105f80 R15: 00007ffecaeffb08 [ 472.000258][ T9776] [ 472.003425][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.105843][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 472.235864][ T939] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 472.316607][ T9] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 472.405961][ T5267] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 472.467939][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.511416][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.566809][ T939] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 472.622356][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.631019][ T5267] usb 3-1: Using ep0 maxpacket: 32 [ 472.663362][ T5267] usb 3-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 472.680048][ T939] usb 2-1: config 0 descriptor?? [ 472.688327][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.707652][ T5267] usb 3-1: Product: syz [ 472.717229][ T5267] usb 3-1: Manufacturer: syz [ 472.722083][ T5267] usb 3-1: SerialNumber: syz [ 472.739338][ T5267] usb 3-1: config 0 descriptor?? [ 472.951161][ T9782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.960393][ T9782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.153562][ T939] prodikeys 0003:041E:2801.000A: unknown main item tag 0x1 [ 473.187793][ T939] prodikeys 0003:041E:2801.000A: item fetching failed at offset 5/7 [ 473.202348][ T939] prodikeys 0003:041E:2801.000A: hid parse failed [ 473.212071][ T5267] usb 3-1: Found UVC 0.00 device syz (199e:8102) [ 473.218663][ T939] prodikeys 0003:041E:2801.000A: probe with driver prodikeys failed with error -22 [ 473.228447][ T5267] usb 3-1: No valid video chain found. [ 473.246671][ T5267] usb 3-1: USB disconnect, device number 34 [ 474.000278][ T5322] usb 2-1: USB disconnect, device number 33 [ 474.000535][ T5271] usb 4-1: USB disconnect, device number 27 [ 474.186389][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 474.573286][ T9812] xt_policy: too many policy elements [ 474.799999][ T9818] FAULT_INJECTION: forcing a failure. [ 474.799999][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 474.842152][ T9818] CPU: 1 UID: 0 PID: 9818 Comm: syz.0.1134 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 474.852899][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 474.862970][ T9818] Call Trace: [ 474.866243][ T9818] [ 474.869164][ T9818] dump_stack_lvl+0x241/0x360 [ 474.873834][ T9818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.879021][ T9818] ? __pfx__printk+0x10/0x10 [ 474.883604][ T9818] should_fail_ex+0x3b0/0x4e0 [ 474.888265][ T9818] should_failslab+0xac/0x100 [ 474.892926][ T9818] ? __alloc_skb+0x1c3/0x440 [ 474.897506][ T9818] kmem_cache_alloc_node_noprof+0x71/0x320 [ 474.903305][ T9818] __alloc_skb+0x1c3/0x440 [ 474.907715][ T9818] ? __pfx___alloc_skb+0x10/0x10 [ 474.912648][ T9818] xfrm_send_acquire+0x14d/0x1240 [ 474.917662][ T9818] ? lockdep_init_map_type+0xa1/0x910 [ 474.923056][ T9818] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 474.928505][ T9818] ? xfrm_init_tempstate+0x9a3/0x1240 [ 474.933865][ T9818] ? km_query+0x30/0x220 [ 474.938180][ T9818] km_query+0x120/0x220 [ 474.942401][ T9818] ? km_query+0x30/0x220 [ 474.946644][ T9818] xfrm_state_find+0x328e/0x4d60 [ 474.951593][ T9818] ? __rt6_find_exception_rcu+0x128/0x4c0 [ 474.957307][ T9818] ? xfrm_state_find+0x42f/0x4d60 [ 474.962490][ T9818] ? __pfx_xfrm_state_find+0x10/0x10 [ 474.967846][ T9818] ? __pfx_validate_chain+0x10/0x10 [ 474.973031][ T9818] ? ip6_pol_route+0x198/0x15d0 [ 474.977871][ T9818] ? __lock_acquire+0x137a/0x2040 [ 474.982890][ T9818] xfrm_resolve_and_create_bundle+0x6d2/0x2c80 [ 474.989058][ T9818] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 474.995643][ T9818] ? xfrm_sk_policy_lookup+0x7ef/0x840 [ 475.001090][ T9818] ? xfrm_sk_policy_lookup+0x93/0x840 [ 475.006452][ T9818] ? xfrm_expand_policies+0x3fb/0x690 [ 475.011900][ T9818] xfrm_lookup_with_ifid+0x334/0x1ed0 [ 475.017312][ T9818] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 475.023214][ T9818] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 475.028846][ T9818] ? __pfx_lock_release+0x10/0x10 [ 475.033860][ T9818] ? up_write+0x1a9/0x590 [ 475.038181][ T9818] xfrm_lookup_route+0x3c/0x1c0 [ 475.043021][ T9818] ip6_dst_lookup_flow+0x13e/0x180 [ 475.048144][ T9818] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 475.053847][ T9818] ? validate_chain+0x11e/0x5900 [ 475.058778][ T9818] ? rawv6_sendmsg+0xfe9/0x23c0 [ 475.063625][ T9818] rawv6_sendmsg+0x1283/0x23c0 [ 475.068396][ T9818] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 475.073497][ T9818] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 475.079208][ T9818] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 475.085620][ T9818] ? iovec_from_user+0x61/0x240 [ 475.090463][ T9818] ? inet_sendmsg+0x330/0x390 [ 475.095123][ T9818] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 475.100404][ T9818] ? security_socket_sendmsg+0x87/0xb0 [ 475.105857][ T9818] __sock_sendmsg+0x1a6/0x270 [ 475.110524][ T9818] ____sys_sendmsg+0x525/0x7d0 [ 475.115283][ T9818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.120560][ T9818] __sys_sendmmsg+0x3b2/0x740 [ 475.125251][ T9818] ? __pfx___sys_sendmmsg+0x10/0x10 [ 475.130459][ T9818] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 475.136346][ T9818] ? ksys_write+0x23e/0x2c0 [ 475.140834][ T9818] ? __pfx_lock_release+0x10/0x10 [ 475.145853][ T9818] ? vfs_write+0x7c4/0xc90 [ 475.150258][ T9818] ? __mutex_unlock_slowpath+0x21d/0x750 [ 475.155887][ T9818] ? __pfx_vfs_write+0x10/0x10 [ 475.160668][ T9818] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 475.166640][ T9818] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 475.172963][ T9818] ? do_syscall_64+0x100/0x230 [ 475.177716][ T9818] __x64_sys_sendmmsg+0xa0/0xb0 [ 475.182576][ T9818] do_syscall_64+0xf3/0x230 [ 475.187095][ T9818] ? clear_bhb_loop+0x35/0x90 [ 475.191856][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.197743][ T9818] RIP: 0033:0x7f17013773b9 [ 475.202148][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.221746][ T9818] RSP: 002b:00007f17020b1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 475.230150][ T9818] RAX: ffffffffffffffda RBX: 00007f1701505f80 RCX: 00007f17013773b9 [ 475.238108][ T9818] RDX: 0000000000000021 RSI: 0000000020000480 RDI: 0000000000000004 [ 475.246136][ T9818] RBP: 00007f17020b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.254138][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.262126][ T9818] R13: 000000000000000b R14: 00007f1701505f80 R15: 00007fff1881e668 [ 475.270126][ T9818] [ 475.542888][ T9822] FAULT_INJECTION: forcing a failure. [ 475.542888][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.578379][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.0.1135 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 475.589074][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 475.599154][ T9822] Call Trace: [ 475.602421][ T9822] [ 475.605340][ T9822] dump_stack_lvl+0x241/0x360 [ 475.610022][ T9822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.615213][ T9822] ? __pfx__printk+0x10/0x10 [ 475.619809][ T9822] ? snprintf+0xda/0x120 [ 475.624047][ T9822] should_fail_ex+0x3b0/0x4e0 [ 475.628719][ T9822] _copy_to_user+0x2f/0xb0 [ 475.633127][ T9822] simple_read_from_buffer+0xca/0x150 [ 475.638491][ T9822] proc_fail_nth_read+0x1e9/0x250 [ 475.643629][ T9822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.649178][ T9822] ? rw_verify_area+0x520/0x6b0 [ 475.654018][ T9822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.659819][ T9822] vfs_read+0x204/0xbc0 [ 475.663966][ T9822] ? __pfx_lock_release+0x10/0x10 [ 475.668995][ T9822] ? __pfx_vfs_read+0x10/0x10 [ 475.673661][ T9822] ? __fget_files+0x29/0x470 [ 475.678262][ T9822] ? __fget_files+0x3f6/0x470 [ 475.682935][ T9822] ksys_read+0x1a0/0x2c0 [ 475.687171][ T9822] ? __pfx_ksys_read+0x10/0x10 [ 475.691920][ T9822] ? do_syscall_64+0x100/0x230 [ 475.696676][ T9822] ? do_syscall_64+0xb6/0x230 [ 475.701346][ T9822] do_syscall_64+0xf3/0x230 [ 475.705843][ T9822] ? clear_bhb_loop+0x35/0x90 [ 475.710596][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.716481][ T9822] RIP: 0033:0x7f1701375dfc [ 475.720886][ T9822] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 475.740486][ T9822] RSP: 002b:00007f17020b1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 475.748891][ T9822] RAX: ffffffffffffffda RBX: 00007f1701505f80 RCX: 00007f1701375dfc [ 475.756856][ T9822] RDX: 000000000000000f RSI: 00007f17020b10b0 RDI: 0000000000000006 [ 475.764815][ T9822] RBP: 00007f17020b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.772783][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.780748][ T9822] R13: 000000000000000b R14: 00007f1701505f80 R15: 00007fff1881e668 [ 475.788725][ T9822] [ 475.791758][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.012220][ T5225] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 476.022531][ T5225] CPU: 1 UID: 0 PID: 5225 Comm: kworker/u9:3 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 476.033501][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 476.043642][ T5225] Workqueue: hci4 hci_rx_work [ 476.048321][ T5225] Call Trace: [ 476.051612][ T5225] [ 476.054534][ T5225] dump_stack_lvl+0x241/0x360 [ 476.059231][ T5225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.064607][ T5225] ? __pfx__printk+0x10/0x10 [ 476.069206][ T5225] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 476.074501][ T5225] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 476.080076][ T5225] sysfs_create_dir_ns+0x2ce/0x3a0 [ 476.085384][ T5225] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 476.091053][ T5225] kobject_add_internal+0x435/0x8d0 [ 476.096270][ T5225] kobject_add+0x152/0x220 [ 476.100684][ T5225] ? do_raw_spin_unlock+0x13c/0x8b0 [ 476.105878][ T5225] ? device_add+0x3e7/0xbf0 [ 476.110380][ T5225] ? __pfx_kobject_add+0x10/0x10 [ 476.115318][ T5225] ? _raw_spin_unlock+0x28/0x50 [ 476.120169][ T5225] ? get_device_parent+0x165/0x410 [ 476.125303][ T5225] device_add+0x4e5/0xbf0 [ 476.129652][ T5225] hci_conn_add_sysfs+0xe8/0x200 [ 476.134605][ T5225] le_conn_complete_evt+0xc9f/0x12e0 [ 476.139921][ T5225] ? trace_contention_end+0x3c/0x120 [ 476.145199][ T5225] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 476.150913][ T5225] ? __mutex_unlock_slowpath+0x21d/0x750 [ 476.156542][ T5225] ? __copy_skb_header+0x437/0x5b0 [ 476.161667][ T5225] ? skb_pull_data+0x112/0x230 [ 476.166444][ T5225] hci_le_enh_conn_complete_evt+0x185/0x420 [ 476.172374][ T5225] hci_event_packet+0xa55/0x1540 [ 476.177322][ T5225] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 476.182606][ T5225] ? __pfx_hci_event_packet+0x10/0x10 [ 476.187979][ T5225] ? do_raw_spin_unlock+0x13c/0x8b0 [ 476.193176][ T5225] ? hci_send_to_monitor+0xd8/0x7f0 [ 476.198367][ T5225] ? kcov_remote_start+0x9e/0x7e0 [ 476.203388][ T5225] hci_rx_work+0x3e8/0xca0 [ 476.207799][ T5225] ? process_scheduled_works+0x945/0x1830 [ 476.213509][ T5225] process_scheduled_works+0xa2c/0x1830 [ 476.219066][ T5225] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.225232][ T5225] ? assign_work+0x364/0x3d0 [ 476.229839][ T5225] worker_thread+0x86d/0xd40 [ 476.234436][ T5225] ? __kthread_parkme+0x169/0x1d0 [ 476.239604][ T5225] ? __pfx_worker_thread+0x10/0x10 [ 476.244792][ T5225] kthread+0x2f0/0x390 [ 476.248860][ T5225] ? __pfx_worker_thread+0x10/0x10 [ 476.253967][ T5225] ? __pfx_kthread+0x10/0x10 [ 476.258593][ T5225] ret_from_fork+0x4b/0x80 [ 476.263173][ T5225] ? __pfx_kthread+0x10/0x10 [ 476.267753][ T5225] ret_from_fork_asm+0x1a/0x30 [ 476.272519][ T5225] [ 476.279018][ T5225] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 476.292916][ T5225] Bluetooth: hci4: failed to register connection device [ 476.695582][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.832000][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.842477][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.855364][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.873697][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 476.881353][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.145520][ T5322] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 477.340333][ T9834] chnl_net:caif_netlink_parms(): no params data found [ 477.365604][ T5322] usb 4-1: Using ep0 maxpacket: 16 [ 477.379658][ T5322] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.401256][ T5322] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.419665][ T5322] usb 4-1: config 1 interface 0 has no altsetting 0 [ 477.430309][ T5322] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 477.450636][ T5322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.476196][ T5322] usb 4-1: Product: syz [ 477.486126][ T5322] usb 4-1: Manufacturer: syz [ 477.499989][ T5322] usb 4-1: SerialNumber: syz [ 477.511870][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.525980][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.533638][ T9834] bridge_slave_0: entered allmulticast mode [ 477.544890][ T9834] bridge_slave_0: entered promiscuous mode [ 477.554915][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.565878][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.573166][ T9834] bridge_slave_1: entered allmulticast mode [ 477.586858][ T9834] bridge_slave_1: entered promiscuous mode [ 477.605501][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 477.697528][ T9834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.718894][ T9834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.728186][ T5267] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 477.819505][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.839211][ T9834] team0: Port device team_slave_0 added [ 477.850201][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.917507][ T9834] team0: Port device team_slave_1 added [ 477.936904][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 477.956462][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.967568][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.975770][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.988124][ T9] usb 2-1: config 0 descriptor?? [ 477.993159][ T5267] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 478.002821][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.022330][ T5267] usb 3-1: config 0 descriptor?? [ 478.149749][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.165887][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.345879][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 478.350382][ T9834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.391416][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.423661][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.475346][ T9834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.515029][ T9] prodikeys 0003:041E:2801.000B: unknown main item tag 0x1 [ 478.534239][ T9] prodikeys 0003:041E:2801.000B: item fetching failed at offset 5/7 [ 478.553651][ T5267] prodikeys 0003:041E:2801.000C: unknown main item tag 0x1 [ 478.567006][ T5267] prodikeys 0003:041E:2801.000C: item fetching failed at offset 5/7 [ 478.575685][ T9] prodikeys 0003:041E:2801.000B: hid parse failed [ 478.591968][ T9] prodikeys 0003:041E:2801.000B: probe with driver prodikeys failed with error -22 [ 478.603742][ T5267] prodikeys 0003:041E:2801.000C: hid parse failed [ 478.621847][ T5267] prodikeys 0003:041E:2801.000C: probe with driver prodikeys failed with error -22 [ 478.708223][ T2637] usb 2-1: USB disconnect, device number 34 [ 478.753726][ T9834] hsr_slave_0: entered promiscuous mode [ 478.762712][ T9834] hsr_slave_1: entered promiscuous mode [ 478.781092][ T9834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.789780][ T9834] Cannot create hsr debugfs directory [ 478.820216][ T5267] usb 3-1: USB disconnect, device number 35 [ 478.905556][ T5227] Bluetooth: hci5: command tx timeout [ 478.938229][ T9857] netlink: 'syz.0.1145': attribute type 21 has an invalid length. [ 478.952387][ T9857] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1145'. [ 479.324643][ T9834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.551753][ T9834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.590588][ T5267] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 479.731989][ T9834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.808248][ T5267] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.872458][ T5267] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.900334][ T5267] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.913304][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.951476][ T9857] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 480.023487][ T5267] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.062981][ T5322] usbhid 4-1:1.0: can't add hid device: -22 [ 480.074716][ T9834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.093203][ T5322] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 480.160041][ T5322] usb 4-1: USB disconnect, device number 28 [ 480.454516][ T5227] Bluetooth: hci4: command 0x0406 tx timeout [ 480.689961][ T9834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 480.754379][ T9834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 480.811950][ T9834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 480.863349][ T9834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 480.996001][ T5225] Bluetooth: hci5: command tx timeout [ 481.342904][ T9834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.406931][ T9834] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.460073][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.467281][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.506588][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.513872][ T6851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.740841][ T6851] usb 1-1: USB disconnect, device number 42 [ 481.866437][ T9885] fuse: Bad value for 'fd' [ 482.053695][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.753312][ T9834] veth0_vlan: entered promiscuous mode [ 482.793110][ T9834] veth1_vlan: entered promiscuous mode [ 482.943978][ T9834] veth0_macvtap: entered promiscuous mode [ 482.982006][ T9919] netlink: 'syz.1.1159': attribute type 21 has an invalid length. [ 482.992400][ T9919] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1159'. [ 483.018478][ T9834] veth1_macvtap: entered promiscuous mode [ 483.065575][ T5225] Bluetooth: hci5: command tx timeout [ 483.108141][ T5225] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 483.192430][ T29] audit: type=1326 audit(1722501334.369:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.3.1158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65211773b9 code=0x0 [ 483.197377][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.267745][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.320304][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.373619][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.426132][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.451782][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.523608][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.566404][ T46] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 483.592195][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.620835][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.672064][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.720542][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.799953][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.825620][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.839925][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.885243][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.903836][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.915138][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.954987][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.119503][ T46] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 484.175518][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.186790][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.216231][ T9919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.225468][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.249294][ T46] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.262236][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.293657][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.358618][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.400970][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.519263][ T9834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.554077][ T9834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.590542][ T9834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.611993][ T9834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.051416][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.087792][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.135194][ T9] usb 2-1: USB disconnect, device number 35 [ 485.145966][ T5225] Bluetooth: hci5: command tx timeout [ 485.262546][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.306524][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.429353][ T5225] Bluetooth: hci4: unexpected event for opcode 0x043d [ 485.945204][ T29] audit: type=1326 audit(1722501337.119:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.034517][ T29] audit: type=1326 audit(1722501337.159:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.061476][ T29] audit: type=1326 audit(1722501337.159:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.099309][ T29] audit: type=1326 audit(1722501337.159:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.138401][ T29] audit: type=1326 audit(1722501337.159:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.222564][ T29] audit: type=1326 audit(1722501337.159:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.246969][ T29] audit: type=1326 audit(1722501337.159:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.269240][ T29] audit: type=1326 audit(1722501337.159:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.291559][ T29] audit: type=1326 audit(1722501337.169:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2044f773b9 code=0x7ffc0000 [ 486.480926][ T9975] netlink: 'syz.1.1169': attribute type 4 has an invalid length. [ 487.409418][ T9999] FAULT_INJECTION: forcing a failure. [ 487.409418][ T9999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.470248][ T9999] CPU: 1 UID: 0 PID: 9999 Comm: syz.2.1176 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 487.480979][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 487.491065][ T9999] Call Trace: [ 487.494370][ T9999] [ 487.497326][ T9999] dump_stack_lvl+0x241/0x360 [ 487.502038][ T9999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.507272][ T9999] ? __pfx__printk+0x10/0x10 [ 487.511907][ T9999] ? snprintf+0xda/0x120 [ 487.513035][T10002] tipc: Enabling of bearer rejected, failed to enable media [ 487.516169][ T9999] should_fail_ex+0x3b0/0x4e0 [ 487.516199][ T9999] _copy_to_user+0x2f/0xb0 [ 487.516224][ T9999] simple_read_from_buffer+0xca/0x150 [ 487.516252][ T9999] proc_fail_nth_read+0x1e9/0x250 [ 487.516279][ T9999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.516309][ T9999] ? rw_verify_area+0x52a/0x6b0 [ 487.516332][ T9999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.516358][ T9999] vfs_read+0x204/0xbc0 [ 487.516376][ T9999] ? __pfx_lock_release+0x10/0x10 [ 487.516400][ T9999] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 487.516428][ T9999] ? __pfx_vfs_read+0x10/0x10 [ 487.516448][ T9999] ? __fget_files+0x29/0x470 [ 487.516469][ T9999] ? __fget_files+0x3f6/0x470 [ 487.516499][ T9999] ksys_read+0x1a0/0x2c0 [ 487.593828][ T9999] ? __pfx_ksys_read+0x10/0x10 [ 487.598595][ T9999] ? do_syscall_64+0x100/0x230 [ 487.603358][ T9999] ? do_syscall_64+0xb6/0x230 [ 487.608032][ T9999] do_syscall_64+0xf3/0x230 [ 487.612538][ T9999] ? clear_bhb_loop+0x35/0x90 [ 487.617214][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.623105][ T9999] RIP: 0033:0x7f2044f75dfc [ 487.627512][ T9999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 487.647110][ T9999] RSP: 002b:00007f2045d40040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.655519][ T9999] RAX: ffffffffffffffda RBX: 00007f2045105f80 RCX: 00007f2044f75dfc [ 487.663530][ T9999] RDX: 000000000000000f RSI: 00007f2045d400b0 RDI: 0000000000000005 [ 487.671491][ T9999] RBP: 00007f2045d400a0 R08: 0000000000000000 R09: 0000000000000000 [ 487.679453][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.687415][ T9999] R13: 000000000000000b R14: 00007f2045105f80 R15: 00007ffecaeffb08 [ 487.695396][ T9999] [ 487.784849][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 488.000210][T10008] loop7: detected capacity change from 0 to 16384 [ 488.130225][T10015] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1180'. [ 488.209475][T10008] I/O error, dev loop7, sector 864 op 0x1:(WRITE) flags 0x800 phys_seg 4 prio class 0 [ 488.242702][T10016] I/O error, dev loop7, sector 776 op 0x1:(WRITE) flags 0x800 phys_seg 11 prio class 0 [ 488.256000][T10008] Buffer I/O error on dev loop7, logical block 108, lost async page write [ 488.262913][T10016] Buffer I/O error on dev loop7, logical block 97, lost async page write [ 488.276424][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 488.283709][T10016] Buffer I/O error on dev loop7, logical block 98, lost async page write [ 488.302851][T10008] Buffer I/O error on dev loop7, logical block 109, lost async page write [ 488.335622][T10016] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 488.354468][T10008] Buffer I/O error on dev loop7, logical block 110, lost async page write [ 488.390036][T10016] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 488.426256][T10008] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 488.444385][T10016] Buffer I/O error on dev loop7, logical block 101, lost async page write [ 488.501010][ T9] usb 2-1: too many configurations: 211, using maximum allowed: 8 [ 488.530920][ T9] usb 2-1: config index 0 descriptor too short (expected 64979, got 137) [ 488.537465][T10016] Buffer I/O error on dev loop7, logical block 102, lost async page write [ 488.555627][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.587221][ T9] usb 2-1: config index 1 descriptor too short (expected 64979, got 137) [ 488.596086][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.643226][ T9] usb 2-1: config index 2 descriptor too short (expected 64979, got 137) [ 488.685552][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.698735][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.726146][ T9] usb 2-1: config index 3 descriptor too short (expected 64979, got 137) [ 488.748969][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.760177][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.786688][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.819178][ T9] usb 2-1: config index 4 descriptor too short (expected 64979, got 137) [ 488.839499][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.847335][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.882182][ T9] usb 2-1: config index 5 descriptor too short (expected 64979, got 137) [ 488.900863][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.911300][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 488.911316][ T29] audit: type=1326 audit(1722501340.079:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 488.949766][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.967288][ T9] usb 2-1: config index 6 descriptor too short (expected 64979, got 137) [ 488.985711][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 489.005322][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.005780][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 489.030873][ T29] audit: type=1326 audit(1722501340.119:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 489.050498][ T9] usb 2-1: config index 7 descriptor too short (expected 64979, got 137) [ 489.062289][T10016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 489.102335][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.103638][T10016] ldm_validate_partition_table(): Disk read failed. [ 489.124510][ T29] audit: type=1326 audit(1722501340.119:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 489.164616][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 489.174737][T10016] Dev loop7: unable to read RDB block 0 [ 489.192429][T10016] loop7: unable to read partition table [ 489.200967][T10016] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 489.205510][ T29] audit: type=1326 audit(1722501340.119:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 489.259580][ T2523] bridge_slave_1: left allmulticast mode [ 489.276693][ T2523] bridge_slave_1: left promiscuous mode [ 489.286246][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.299782][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.312338][ T2523] bridge_slave_0: left allmulticast mode [ 489.335735][ T9] usb 2-1: Product: syz [ 489.343410][ T9] usb 2-1: Manufacturer: syz [ 489.351601][ T2523] bridge_slave_0: left promiscuous mode [ 489.375647][ T9] usb 2-1: SerialNumber: syz [ 489.381068][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.427206][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 489.435548][ T5268] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 489.440049][ T29] audit: type=1326 audit(1722501340.129:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 489.569107][ T29] audit: type=1326 audit(1722501340.129:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 489.622676][ T29] audit: type=1326 audit(1722501340.129:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 489.661336][ T5268] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 489.671129][ T5267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 489.682365][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.705507][ T29] audit: type=1326 audit(1722501340.129:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 489.734364][ T5268] usb 5-1: config 0 descriptor?? [ 490.091399][ T29] audit: type=1326 audit(1722501340.129:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 490.149312][ T29] audit: type=1326 audit(1722501340.139:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10019 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17013773b9 code=0x7ffc0000 [ 490.250040][ T5268] gspca_main: spca508-2.14.0 probing 8086:0110 [ 490.991295][ T5267] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 490.999177][ T5267] ath9k_htc: Failed to initialize the device [ 491.040852][ T5268] gspca_spca508: reg_read err -110 [ 491.056157][ T5268] gspca_spca508: reg_read err -32 [ 491.062495][ T5268] gspca_spca508: reg_read err -32 [ 491.075804][ T5268] gspca_spca508: reg_read err -32 [ 491.093750][ T5268] gspca_spca508: reg_read err -32 [ 491.200866][ T5267] usb 2-1: ath9k_htc: USB layer deinitialized [ 491.216380][ T5269] usb 2-1: USB disconnect, device number 36 [ 491.268010][T10037] FAULT_INJECTION: forcing a failure. [ 491.268010][T10037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.268045][T10037] CPU: 0 UID: 0 PID: 10037 Comm: syz.2.1187 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 491.268068][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 491.268080][T10037] Call Trace: [ 491.268088][T10037] [ 491.268097][T10037] dump_stack_lvl+0x241/0x360 [ 491.268130][T10037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.268153][T10037] ? __pfx__printk+0x10/0x10 [ 491.268177][T10037] ? __pfx_lock_release+0x10/0x10 [ 491.268208][T10037] should_fail_ex+0x3b0/0x4e0 [ 491.268233][T10037] _copy_from_user+0x2f/0xe0 [ 491.268259][T10037] copy_msghdr_from_user+0xae/0x680 [ 491.268290][T10037] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 491.268329][T10037] __sys_sendmsg+0x23d/0x3a0 [ 491.268352][T10037] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.268369][T10037] ? vfs_write+0x7c4/0xc90 [ 491.268426][T10037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 491.268452][T10037] ? do_syscall_64+0x100/0x230 [ 491.268476][T10037] ? do_syscall_64+0xb6/0x230 [ 491.268501][T10037] do_syscall_64+0xf3/0x230 [ 491.268524][T10037] ? clear_bhb_loop+0x35/0x90 [ 491.268552][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.268576][T10037] RIP: 0033:0x7f2044f773b9 [ 491.268593][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.268608][T10037] RSP: 002b:00007f2045d40048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.268631][T10037] RAX: ffffffffffffffda RBX: 00007f2045105f80 RCX: 00007f2044f773b9 [ 491.268645][T10037] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 491.268658][T10037] RBP: 00007f2045d400a0 R08: 0000000000000000 R09: 0000000000000000 [ 491.268671][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.268683][T10037] R13: 000000000000000b R14: 00007f2045105f80 R15: 00007ffecaeffb08 [ 491.268710][T10037] [ 491.348476][T10042] FAULT_INJECTION: forcing a failure. [ 491.348476][T10042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.348508][T10042] CPU: 0 UID: 0 PID: 10042 Comm: syz.1.1186 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 491.348530][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 491.348541][T10042] Call Trace: [ 491.348549][T10042] [ 491.348557][T10042] dump_stack_lvl+0x241/0x360 [ 491.348590][T10042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.348614][T10042] ? __pfx__printk+0x10/0x10 [ 491.348641][T10042] ? snprintf+0xda/0x120 [ 491.348669][T10042] should_fail_ex+0x3b0/0x4e0 [ 491.348692][T10042] _copy_to_user+0x2f/0xb0 [ 491.348715][T10042] simple_read_from_buffer+0xca/0x150 [ 491.348750][T10042] proc_fail_nth_read+0x1e9/0x250 [ 491.348777][T10042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.348803][T10042] ? rw_verify_area+0x520/0x6b0 [ 491.348829][T10042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.348854][T10042] vfs_read+0x204/0xbc0 [ 491.348871][T10042] ? __pfx_lock_release+0x10/0x10 [ 491.348902][T10042] ? __pfx_vfs_read+0x10/0x10 [ 491.348921][T10042] ? __fget_files+0x29/0x470 [ 491.348943][T10042] ? __fget_files+0x3f6/0x470 [ 491.348976][T10042] ksys_read+0x1a0/0x2c0 [ 491.348999][T10042] ? __pfx_ksys_read+0x10/0x10 [ 491.349018][T10042] ? do_syscall_64+0x100/0x230 [ 491.349041][T10042] ? do_syscall_64+0xb6/0x230 [ 491.349066][T10042] do_syscall_64+0xf3/0x230 [ 491.349088][T10042] ? clear_bhb_loop+0x35/0x90 [ 491.349115][T10042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.349138][T10042] RIP: 0033:0x7f5d61d75dfc [ 491.349155][T10042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 491.349170][T10042] RSP: 002b:00007f5d62be0040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.349191][T10042] RAX: ffffffffffffffda RBX: 00007f5d61f06058 RCX: 00007f5d61d75dfc [ 491.349205][T10042] RDX: 000000000000000f RSI: 00007f5d62be00b0 RDI: 0000000000000005 [ 491.349217][T10042] RBP: 00007f5d62be00a0 R08: 0000000000000000 R09: 0000000000000000 [ 491.349230][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.349241][T10042] R13: 000000000000006e R14: 00007f5d61f06058 R15: 00007ffc36ae2a78 [ 491.349271][T10042] [ 491.585136][T10018] overlayfs: invalid origin (0000) [ 491.885783][ T5268] gspca_spca508: reg write: error -110 [ 492.128731][ T5268] spca508 5-1:0.0: probe with driver spca508 failed with error -110 [ 492.139205][ T5268] usb 5-1: USB disconnect, device number 49 [ 492.655611][T10068] sctp: [Deprecated]: syz.1.1193 (pid 10068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.655611][T10068] Use struct sctp_sack_info instead [ 492.940580][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.977306][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.012852][ T2523] bond0 (unregistering): Released all slaves [ 493.053062][T10041] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 493.213197][T10075] FAULT_INJECTION: forcing a failure. [ 493.213197][T10075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.267240][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.4.1197 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 493.278142][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 493.288207][T10075] Call Trace: [ 493.291478][T10075] [ 493.294596][T10075] dump_stack_lvl+0x241/0x360 [ 493.299271][T10075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.304456][T10075] ? __pfx__printk+0x10/0x10 [ 493.309038][T10075] ? __pfx_lock_release+0x10/0x10 [ 493.314067][T10075] should_fail_ex+0x3b0/0x4e0 [ 493.318755][T10075] _copy_from_user+0x2f/0xe0 [ 493.323357][T10075] core_sys_select+0x508/0x910 [ 493.328115][T10075] ? __pfx_core_sys_select+0x10/0x10 [ 493.333384][T10075] ? rcu_read_lock_any_held+0xb7/0x160 [ 493.338829][T10075] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 493.344460][T10075] ? __pfx_set_user_sigmask+0x10/0x10 [ 493.349814][T10075] ? __pfx_do_sys_openat2+0x10/0x10 [ 493.355000][T10075] __se_sys_pselect6+0x319/0x3f0 [ 493.359928][T10075] ? __pfx___se_sys_pselect6+0x10/0x10 [ 493.365376][T10075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.371706][T10075] ? do_syscall_64+0x100/0x230 [ 493.376464][T10075] ? __x64_sys_pselect6+0x21/0xf0 [ 493.381483][T10075] do_syscall_64+0xf3/0x230 [ 493.385986][T10075] ? clear_bhb_loop+0x35/0x90 [ 493.390661][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.396542][T10075] RIP: 0033:0x7fabfdf773b9 [ 493.401124][T10075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.420820][T10075] RSP: 002b:00007fabfee32048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 493.429260][T10075] RAX: ffffffffffffffda RBX: 00007fabfe105f80 RCX: 00007fabfdf773b9 [ 493.437253][T10075] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 493.445233][T10075] RBP: 00007fabfee320a0 R08: 0000000000000000 R09: 0000000000000000 [ 493.453218][T10075] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 493.461208][T10075] R13: 000000000000000b R14: 00007fabfe105f80 R15: 00007ffdc28eccd8 [ 493.469221][T10075] [ 493.784884][T10081] loop7: detected capacity change from 0 to 16384 [ 494.247089][T10081] blk_print_req_error: 9 callbacks suppressed [ 494.247105][T10081] I/O error, dev loop7, sector 1352 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 494.361770][T10081] buffer_io_error: 22 callbacks suppressed [ 494.361789][T10081] Buffer I/O error on dev loop7, logical block 169, lost async page write [ 494.406968][T10089] netlink: 'syz.2.1199': attribute type 29 has an invalid length. [ 494.436497][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.446161][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.455089][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.465683][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.495557][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.508404][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.533559][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.579885][T10089] netlink: 'syz.2.1199': attribute type 29 has an invalid length. [ 494.614689][T10089] netlink: 'syz.2.1199': attribute type 29 has an invalid length. [ 494.632905][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.663403][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.738440][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.768044][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.782225][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.796993][ T2523] hsr_slave_0: left promiscuous mode [ 494.802402][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.822854][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.834539][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.849392][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.859379][T10084] ldm_validate_partition_table(): Disk read failed. [ 494.868997][ T2523] hsr_slave_1: left promiscuous mode [ 494.877708][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.887866][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.900492][T10084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.918038][T10084] Buffer I/O error on dev loop7, logical block 0, async page read [ 494.929560][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.939944][T10084] Dev loop7: unable to read RDB block 0 [ 494.947664][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.955229][T10084] loop7: unable to read partition table [ 494.973407][T10084] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 494.998899][ T2523] veth1_macvtap: left promiscuous mode [ 495.004659][ T2523] veth0_macvtap: left promiscuous mode [ 495.020632][ T2523] veth1_vlan: left promiscuous mode [ 495.073856][ T2523] veth0_vlan: left promiscuous mode [ 495.873321][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 496.005867][ T5322] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 496.070681][T10097] netlink: 'syz.0.1202': attribute type 7 has an invalid length. [ 496.078631][T10097] netlink: 'syz.0.1202': attribute type 8 has an invalid length. [ 496.086490][T10097] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1202'. [ 496.265174][T10118] FAULT_INJECTION: forcing a failure. [ 496.265174][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 496.288748][ T5322] usb 3-1: Using ep0 maxpacket: 8 [ 496.298983][T10118] CPU: 1 UID: 0 PID: 10118 Comm: syz.1.1207 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 496.309798][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 496.319875][T10118] Call Trace: [ 496.323172][T10118] [ 496.326116][T10118] dump_stack_lvl+0x241/0x360 [ 496.330815][T10118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.336037][T10118] ? __pfx__printk+0x10/0x10 [ 496.340674][T10118] ? fs_reclaim_acquire+0x93/0x140 [ 496.345799][T10118] ? __pfx___might_resched+0x10/0x10 [ 496.351115][T10118] should_fail_ex+0x3b0/0x4e0 [ 496.355822][T10118] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 496.361565][T10118] should_failslab+0xac/0x100 [ 496.366270][T10118] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 496.372014][T10118] __kmalloc_noprof+0xd8/0x400 [ 496.376817][T10118] ? kfree+0x4e/0x360 [ 496.380823][T10118] tomoyo_realpath_from_path+0xcf/0x5e0 [ 496.386402][T10118] tomoyo_path_number_perm+0x23a/0x880 [ 496.391893][T10118] ? tomoyo_path_number_perm+0x208/0x880 [ 496.397544][T10118] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 496.403589][T10118] ? __fget_files+0x29/0x470 [ 496.408199][T10118] ? __fget_files+0x3f6/0x470 [ 496.412897][T10118] ? __fget_files+0x29/0x470 [ 496.417511][T10118] security_file_ioctl+0x75/0xb0 [ 496.422471][T10118] __se_sys_ioctl+0x47/0x170 [ 496.427084][T10118] do_syscall_64+0xf3/0x230 [ 496.431607][T10118] ? clear_bhb_loop+0x35/0x90 [ 496.436312][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.442230][T10118] RIP: 0033:0x7f5d61d773b9 [ 496.446667][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.466383][T10118] RSP: 002b:00007f5d62c01048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.474844][T10118] RAX: ffffffffffffffda RBX: 00007f5d61f05f80 RCX: 00007f5d61d773b9 [ 496.482815][T10118] RDX: 0000000020000180 RSI: 0000000040045201 RDI: 0000000000000003 [ 496.490810][T10118] RBP: 00007f5d62c010a0 R08: 0000000000000000 R09: 0000000000000000 [ 496.498800][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.506797][T10118] R13: 000000000000000b R14: 00007f5d61f05f80 R15: 00007ffc36ae2a78 [ 496.514811][T10118] [ 496.589351][ T5322] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.599292][ T5322] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 496.616025][T10118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 496.622872][ T5322] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 496.706227][ T5322] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.729290][ T5322] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.745319][ T5322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.003566][ T5322] usb 3-1: GET_CAPABILITIES returned 0 [ 497.052145][ T5322] usbtmc 3-1:16.0: can't read capabilities [ 498.328051][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 499.271975][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 499.304787][ T5322] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 499.516742][ T5322] usb 5-1: Using ep0 maxpacket: 8 [ 499.554677][ T5322] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 499.563855][ T5322] usb 5-1: config 0 has no interface number 0 [ 499.675581][ T5322] usb 5-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 500.490879][ T5322] usb 5-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 500.514647][ T5322] usb 5-1: config 0 interface 97 has no altsetting 0 [ 500.525308][ T5322] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.541213][ T5322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.551683][ T5322] usb 5-1: Product: syz [ 500.562834][ T5322] usb 5-1: Manufacturer: syz [ 500.567523][ T5322] usb 5-1: SerialNumber: syz [ 500.596629][ T5322] usb 5-1: config 0 descriptor?? [ 500.918616][ T2523] smc: removing net device vxcan1 with user defined pnetid SYZ1 [ 501.281187][T10104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.420939][ T5267] usb 3-1: USB disconnect, device number 36 [ 501.564467][ T5225] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 501.933241][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.941778][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.500536][ T5267] usb 5-1: USB disconnect, device number 50 [ 503.541609][ T2523] IPVS: stop unused estimator thread 0... [ 503.655641][ T6851] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 503.808753][ C0] ================================================================== [ 503.816861][ C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x231/0x240 [ 503.825156][ C0] Read of size 4 at addr ffffc9000520f7f8 by task syz.2.1228/10224 [ 503.833069][ C0] [ 503.835526][ C0] CPU: 0 UID: 0 PID: 10224 Comm: syz.2.1228 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 503.846318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 503.856392][ C0] Call Trace: [ 503.859682][ C0] [ 503.862621][ C0] dump_stack_lvl+0x241/0x360 [ 503.867335][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.872556][ C0] ? __pfx__printk+0x10/0x10 [ 503.877248][ C0] ? _printk+0xd5/0x120 [ 503.881428][ C0] print_report+0x169/0x550 [ 503.886123][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 503.891334][ C0] ? __virt_addr_valid+0xbd/0x530 [ 503.896464][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 503.901871][ C0] kasan_report+0x143/0x180 [ 503.906403][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 503.911794][ C0] xdp_do_check_flushed+0x231/0x240 [ 503.917016][ C0] __napi_poll+0xe4/0x490 [ 503.921366][ C0] net_rx_action+0x89b/0x1240 [ 503.926074][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 503.931292][ C0] ? sched_clock+0x4a/0x70 [ 503.935734][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.942088][ C0] handle_softirqs+0x2c4/0x970 [ 503.946951][ C0] ? do_softirq+0x11b/0x1e0 [ 503.951449][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 503.956807][ C0] do_softirq+0x11b/0x1e0 [ 503.961120][ C0] [ 503.964031][ C0] [ 503.966955][ C0] ? __pfx_do_softirq+0x10/0x10 [ 503.971811][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 503.977449][ C0] ? rcu_is_watching+0x15/0xb0 [ 503.982270][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 503.987462][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 503.992735][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 503.997834][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.003721][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 504.008813][ C0] __dev_queue_xmit+0x1763/0x3e90 [ 504.013823][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 504.018915][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 504.024344][ C0] ? mark_lock+0x9a/0x350 [ 504.028679][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.034662][ C0] ? ip_finish_output2+0xa14/0x1390 [ 504.039864][ C0] ? ip_finish_output2+0x45f/0x1390 [ 504.045076][ C0] ip_finish_output2+0xd41/0x1390 [ 504.050099][ C0] ? ip_finish_output2+0x45f/0x1390 [ 504.055295][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 504.060825][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 504.065673][ C0] ? __ip_finish_output+0x349/0x400 [ 504.070916][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 504.075889][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 504.080827][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 504.085941][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 504.091161][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 504.096729][ C0] ? __asan_memset+0x23/0x50 [ 504.101316][ C0] ? tcp_rbtree_insert+0x12e/0x180 [ 504.106507][ C0] tcp_connect+0x1b89/0x4840 [ 504.111101][ C0] ? __pfx_tcp_connect+0x10/0x10 [ 504.116029][ C0] ? sk_setup_caps+0x816/0xa50 [ 504.120783][ C0] tcp_v4_connect+0x1127/0x1ba0 [ 504.125633][ C0] ? __pfx_tcp_v4_connect+0x10/0x10 [ 504.130845][ C0] ? mark_lock+0x9a/0x350 [ 504.135280][ C0] __inet_stream_connect+0x262/0xf30 [ 504.140571][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.146921][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 504.152306][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 504.157515][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 504.163316][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 504.168685][ C0] ? inet_stream_connect+0x50/0xa0 [ 504.173790][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.179504][ C0] inet_stream_connect+0x65/0xa0 [ 504.184436][ C0] __sys_connect+0x2df/0x310 [ 504.189027][ C0] ? __pfx___sys_connect+0x10/0x10 [ 504.194135][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.200454][ C0] ? do_syscall_64+0x100/0x230 [ 504.205317][ C0] __x64_sys_connect+0x7a/0x90 [ 504.210101][ C0] do_syscall_64+0xf3/0x230 [ 504.214608][ C0] ? clear_bhb_loop+0x35/0x90 [ 504.219291][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.225877][ C0] RIP: 0033:0x7f2044f773b9 [ 504.230281][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.249889][ C0] RSP: 002b:00007f2045d40048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 504.258301][ C0] RAX: ffffffffffffffda RBX: 00007f2045105f80 RCX: 00007f2044f773b9 [ 504.266263][ C0] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000007 [ 504.274221][ C0] RBP: 00007f2044fe48e6 R08: 0000000000000000 R09: 0000000000000000 [ 504.282268][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.290229][ C0] R13: 000000000000000b R14: 00007f2045105f80 R15: 00007ffecaeffb08 [ 504.298198][ C0] [ 504.301205][ C0] [ 504.303535][ C0] The buggy address belongs to stack of task syz.2.1228/10224 [ 504.310990][ C0] and is located at offset 248 in frame: [ 504.316718][ C0] __tcp_transmit_skb+0x0/0x3b30 [ 504.321653][ C0] [ 504.323963][ C0] This frame has 3 objects: [ 504.328453][ C0] [32, 96) 'sock_ops.i' [ 504.328464][ C0] [128, 216) 'opts' [ 504.332779][ C0] [256, 288) 'key' [ 504.336662][ C0] [ 504.342767][ C0] The buggy address belongs to the virtual mapping at [ 504.342767][ C0] [ffffc90005208000, ffffc90005211000) created by: [ 504.342767][ C0] copy_process+0x5d1/0x3dc0 [ 504.360383][ C0] [ 504.362700][ C0] The buggy address belongs to the physical page: [ 504.369158][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ec03 [ 504.377919][ C0] memcg:ffff888029813e02 [ 504.382152][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 504.389272][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 504.397841][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888029813e02 [ 504.406403][ C0] page dumped because: kasan: bad access detected [ 504.412796][ C0] page_owner tracks the page as allocated [ 504.418500][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 215289689230, free_ts 214981259095 [ 504.436108][ C0] post_alloc_hook+0x1f3/0x230 [ 504.440867][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 504.446404][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 504.451604][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 504.457081][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 504.462969][ C0] dup_task_struct+0x444/0x8c0 [ 504.467729][ C0] copy_process+0x5d1/0x3dc0 [ 504.472360][ C0] kernel_clone+0x223/0x870 [ 504.476938][ C0] kernel_thread+0x1bc/0x240 [ 504.481514][ C0] kthreadd+0x60d/0x810 [ 504.485658][ C0] ret_from_fork+0x4b/0x80 [ 504.490063][ C0] ret_from_fork_asm+0x1a/0x30 [ 504.494817][ C0] page last free pid 6883 tgid 6883 stack trace: [ 504.501125][ C0] free_unref_page+0xd19/0xea0 [ 504.505875][ C0] __put_partials+0xeb/0x130 [ 504.510445][ C0] put_cpu_partial+0x17c/0x250 [ 504.515192][ C0] __slab_free+0x2ea/0x3d0 [ 504.519593][ C0] qlist_free_all+0x9e/0x140 [ 504.524173][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 504.529617][ C0] __kasan_slab_alloc+0x23/0x80 [ 504.534453][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 504.540337][ C0] kmalloc_reserve+0xa8/0x2a0 [ 504.545002][ C0] __alloc_skb+0x1f3/0x440 [ 504.549409][ C0] alloc_uevent_skb+0x74/0x230 [ 504.554173][ C0] kobject_uevent_net_broadcast+0x182/0x580 [ 504.560149][ C0] kobject_uevent_env+0x57d/0x8e0 [ 504.565159][ C0] netdev_queue_update_kobjects+0x2c4/0x5f0 [ 504.571040][ C0] netdev_register_kobject+0x265/0x320 [ 504.576488][ C0] register_netdevice+0x12c5/0x1b00 [ 504.581677][ C0] [ 504.583983][ C0] Memory state around the buggy address: [ 504.589677][ C0] ffffc9000520f680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.597722][ C0] ffffc9000520f700: f1 f1 f1 f1 00 00 00 00 00 00 00 00 f2 f2 f2 f2 [ 504.605761][ C0] >ffffc9000520f780: 00 00 00 00 00 00 00 00 00 00 00 f2 f2 f2 f2 f2 [ 504.613803][ C0] ^ [ 504.621770][ C0] ffffc9000520f800: 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 504.629813][ C0] ffffc9000520f880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.637853][ C0] ================================================================== [ 504.646087][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 504.653300][ C0] CPU: 0 UID: 0 PID: 10224 Comm: syz.2.1228 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 504.664071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 504.674108][ C0] Call Trace: [ 504.677372][ C0] [ 504.680197][ C0] dump_stack_lvl+0x241/0x360 [ 504.684859][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.690573][ C0] ? __pfx__printk+0x10/0x10 [ 504.695141][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.701105][ C0] ? vscnprintf+0x5d/0x90 [ 504.705424][ C0] panic+0x349/0x860 [ 504.709317][ C0] ? check_panic_on_warn+0x21/0xb0 [ 504.714404][ C0] ? __pfx_panic+0x10/0x10 [ 504.718801][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 504.724669][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 504.730576][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 504.736885][ C0] check_panic_on_warn+0x86/0xb0 [ 504.741806][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 504.747194][ C0] end_report+0x77/0x160 [ 504.751420][ C0] kasan_report+0x154/0x180 [ 504.755905][ C0] ? xdp_do_check_flushed+0x231/0x240 [ 504.761276][ C0] xdp_do_check_flushed+0x231/0x240 [ 504.766458][ C0] __napi_poll+0xe4/0x490 [ 504.770770][ C0] net_rx_action+0x89b/0x1240 [ 504.775445][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 504.780539][ C0] ? sched_clock+0x4a/0x70 [ 504.784936][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.791246][ C0] handle_softirqs+0x2c4/0x970 [ 504.796008][ C0] ? do_softirq+0x11b/0x1e0 [ 504.800504][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 504.805784][ C0] do_softirq+0x11b/0x1e0 [ 504.810102][ C0] [ 504.813013][ C0] [ 504.815938][ C0] ? __pfx_do_softirq+0x10/0x10 [ 504.820788][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 504.826414][ C0] ? rcu_is_watching+0x15/0xb0 [ 504.831172][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 504.836448][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 504.841711][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 504.846811][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.852535][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 504.857629][ C0] __dev_queue_xmit+0x1763/0x3e90 [ 504.862637][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 504.867728][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 504.873086][ C0] ? mark_lock+0x9a/0x350 [ 504.877402][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.883369][ C0] ? ip_finish_output2+0xa14/0x1390 [ 504.888549][ C0] ? ip_finish_output2+0x45f/0x1390 [ 504.893729][ C0] ip_finish_output2+0xd41/0x1390 [ 504.898749][ C0] ? ip_finish_output2+0x45f/0x1390 [ 504.903926][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 504.909365][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 504.914207][ C0] ? __ip_finish_output+0x349/0x400 [ 504.919388][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 504.924326][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 504.929259][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 504.934355][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 504.939565][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 504.945096][ C0] ? __asan_memset+0x23/0x50 [ 504.949693][ C0] ? tcp_rbtree_insert+0x12e/0x180 [ 504.954838][ C0] tcp_connect+0x1b89/0x4840 [ 504.959533][ C0] ? __pfx_tcp_connect+0x10/0x10 [ 504.964458][ C0] ? sk_setup_caps+0x816/0xa50 [ 504.969207][ C0] tcp_v4_connect+0x1127/0x1ba0 [ 504.974047][ C0] ? __pfx_tcp_v4_connect+0x10/0x10 [ 504.979227][ C0] ? mark_lock+0x9a/0x350 [ 504.983558][ C0] __inet_stream_connect+0x262/0xf30 [ 504.988844][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.995192][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 505.000562][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 505.005751][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 505.011557][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 505.016926][ C0] ? inet_stream_connect+0x50/0xa0 [ 505.022019][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 505.027727][ C0] inet_stream_connect+0x65/0xa0 [ 505.032747][ C0] __sys_connect+0x2df/0x310 [ 505.037411][ C0] ? __pfx___sys_connect+0x10/0x10 [ 505.042508][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 505.048821][ C0] ? do_syscall_64+0x100/0x230 [ 505.053761][ C0] __x64_sys_connect+0x7a/0x90 [ 505.058562][ C0] do_syscall_64+0xf3/0x230 [ 505.063052][ C0] ? clear_bhb_loop+0x35/0x90 [ 505.067763][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.073642][ C0] RIP: 0033:0x7f2044f773b9 [ 505.078139][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.097921][ C0] RSP: 002b:00007f2045d40048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 505.106420][ C0] RAX: ffffffffffffffda RBX: 00007f2045105f80 RCX: 00007f2044f773b9 [ 505.114378][ C0] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000007 [ 505.122341][ C0] RBP: 00007f2044fe48e6 R08: 0000000000000000 R09: 0000000000000000 [ 505.130294][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.138249][ C0] R13: 000000000000000b R14: 00007f2045105f80 R15: 00007ffecaeffb08 [ 505.146213][ C0] [ 505.149337][ C0] Kernel Offset: disabled [ 505.153645][ C0] Rebooting in 86400 seconds..