last executing test programs: 5m49.186056582s ago: executing program 1 (id=795): mknod$loop(0x0, 0xc000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000002900000004000000d400000000000000180000000000000029"], 0x30}}], 0x2, 0x0) 5m48.711318801s ago: executing program 1 (id=798): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x17, 0x0, @void}, 0x10) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4c800, 0x0) (async, rerun: 32) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)={0x9c, 0xa, 0xc}) (async) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x41}, 0x2000810) (async, rerun: 64) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000300)=r4) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)={0x5, [0x9cdc, 0x81, 0x8, 0x9, 0x2]}, &(0x7f0000000380)=0xe) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x6, 0x200a40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x81, 0xa98c, 0xbdca, 0x5211, r2, 0x9, '\x00', 0x0, r5, 0x4, 0x4, 0x4}, 0x50) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f00000004c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x144, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "453ecc15177b36e6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da396c36f42103a4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "98c3432d5fa512f2"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3f1a49b274644a00cd72c6c71917467e"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "302321b9340fd12a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b34060bae5af1c09"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fb0832e54b9dcb96"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cdae08666ff844dbf34613221eeeec5f9cddab92b0b9e11a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da9c8c869c726934b7fbc31f97d97292"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5094ebd453cec2f691bb49756b121cddaf9906e4cf3edb9c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b0c4982e6b9f84b7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="869f5fe6e8372f3525d6c07c96442cf6aec97356c52fec4e24d0910982ab7893"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eeac9b3f7095abc75ce21371d28c1f6dd02f795e66046b07"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ac03766cc71b42c440466758d5ba2383"}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x1, 0x8800) bind$bt_hci(r5, &(0x7f0000000800)={0x1f, 0x1, 0x1}, 0x6) (async) close_range(r9, r9, 0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000840)) (rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000880)={0x87, 0x8, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x45, 0x2, [0x3, 0x7f, 0x401, 0xfff, 0xfffffffffffffffa, 0x1f69]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x50) (async, rerun: 32) r10 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 32) bind$qrtr(r10, &(0x7f0000000900)={0x2a, 0x4, 0x4000}, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r11, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1b0, r7, 0xb01, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xcfb, 0x51}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x90}, @NL80211_ATTR_IE={0x14d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xe, 0x8}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x3, [{0x35}, {0x2}, {0x16, 0x1}]}, @fast_bss_trans={0x37, 0x103, {0x9b, 0x9, "23b5a2315cffaaf9caebadc20581bac9", "765a706d79c481e183f5a3ecb9bb53dea824a93d9da4c878821fffa416b7c4ca", "5418a4b9cabb3916f673c76850141d45945053947dd82fa858ea50f431a5e374", [{0x4, 0x25, "9c68af740d51d51039f66f4c06984d5074fe6ec74b631f56dc7619b10fe482304dcfbc0157"}, {0x3, 0x16, "14eb5fe9d272b94b926b4d95c499d68ab2d919d54ea0"}, {0x2, 0x17, "20a827fe031ff877d39e4e4642e2b9a9861ec32a782238"}, {0x1, 0x12, "8ff368f78a5512f44c982c8ee451ff52620e"}, {0x3, 0x24, "31bf536f7a13667babf6337463c498e70d24d4ba7c617090e3a97e75aa52a258ce3e8f67"}, {0x3, 0x6, "cec2b24c53dd"}, {0x4, 0x2, "db92"}, {0x1, 0x3, "9e073b"}, {0x3, 0xc, "e540d89a7cc1cee7c742e041"}]}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x6, @device_b, 0x61, @value=@broadcast, 0x1, 0x1, @device_b, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x15, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x0, @void, @val=0x1, @void}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x48}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x1b0}}, 0x850) 5m48.115585032s ago: executing program 1 (id=802): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)='/dev/loop-control\x00') mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x8000008, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x1f, r0, 0x6, 0xf) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0x7}, @mss={0x2, 0x1000}, @mss={0x2, 0x80000000}], 0x4) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x40200, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x4, 0x7, 0x2, 0xfffffff8, 0x40, 0x2, 0x80, 0x6, 0x13, 0x8e8, 0x80000001, 0x5, 0x6, 0x8, 0x7fff, 0x5, 0x5, 0x9, 0xfffffffe, 0xb, 0x2b, 0x4, 0x4, 0x80000001, 0x8, 0x8, 0xe8a, 0x1, 0x1, 0x7, 0x8, 0xa4]}) move_pages(r0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 5m47.589023983s ago: executing program 1 (id=806): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x0, 0x0, 0x3}, @global=@item_012={0x2, 0x1, 0x8, "4c8b"}, @global=@item_012={0x1, 0x1, 0xa, "b4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5m43.921461696s ago: executing program 1 (id=813): syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000101f9b62f8473f400000003000d850000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@bridge_dellink={0x2c, 0x11, 0x10, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x1970d0eb3a326663}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x19af90f06f4514f1}, 0x20000040) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='sctp_probe\x00', r0}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$TIOCGPTPEER(r5, 0x5441, 0x400000000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) 5m43.074589785s ago: executing program 1 (id=817): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x38, 0x4, @tid=0xffffffffffffffff}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m27.273212071s ago: executing program 32 (id=817): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x38, 0x4, @tid=0xffffffffffffffff}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m37.767533422s ago: executing program 2 (id=1449): mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000003800000000000000010000000c"], 0x68}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}, {0x20, 0x2}}, 0x24, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8, 0x837, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x1, 0x6}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@rnullb, r1, &(0x7f00000000c0)={0xe1, 0x0, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eca20ae4000044000380080001"], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xbc, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0xd}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 2m37.694051629s ago: executing program 2 (id=1451): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) msgsnd(r0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m34.963576557s ago: executing program 2 (id=1454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x29, 0x7, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x4000}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="a00100000301030f00000000000000000100000824000f8008000140000000d60800024000000101080003401ebacf15080001400000008008001640c61cec7d9a32b6515c89a40000064f74000e800c00028005000100840000002c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c00028005000100010000002c00018014000300fe8000000000000000000000000000bb140004002001000000000000000000000000000264000180060003400002000006000340000400002c000180140003002001000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100010000000c000280050001002f0000000c000280050001008800000078000e8006000340000300000c00028005000100a50000001400018008000100ffffffff080002007f000001f000028005000100880000002c00018014000300fe88000000000000000000000000000114000400ff0100000000000000000000000000011400018008000100ac1414bb08000200e00000010600124000"], 0x1a0}, 0x1, 0x0, 0x0, 0x2}, 0x40005) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 2m33.732043291s ago: executing program 2 (id=1457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m32.586961504s ago: executing program 2 (id=1461): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfshat={'smackfshat', 0x3d, ',/'}}, {@obj_role={'obj_role', 0x3d, 'sched_switch\x00'}}, {@uid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x62, 0x38, 0x39, 0x63, 0x36, 0x39], 0x2d, [0x67, 0x36, 0x39, 0x65], 0x2d, [0x33, 0x64, 0x39, 0x37], 0x2d, [0x38, 0x38, 0x32, 0x33], 0x2d, [0x34, 0x34, 0x36, 0x62, 0x31, 0x62, 0x31, 0x36]}}}]}) r0 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xaca2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xaca2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e24}, 0xfffffffffffffd34) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000004c0)=""/130, &(0x7f0000000040)=0x82) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000004c0)=""/130, &(0x7f0000000040)=0x82) getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x0, 0x144, 0x22}, 0x18) 2m30.046419301s ago: executing program 2 (id=1465): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x240500, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x240500, 0x0) socket$inet6(0xa, 0x80002, 0x88) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2m28.657234587s ago: executing program 33 (id=1465): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x240500, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x240500, 0x0) socket$inet6(0xa, 0x80002, 0x88) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4.426920785s ago: executing program 6 (id=2209): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 4.015519601s ago: executing program 6 (id=2215): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5819}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 3.804059751s ago: executing program 6 (id=2217): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 3.62151902s ago: executing program 6 (id=2221): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x0) 3.577575456s ago: executing program 5 (id=2223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) 3.511585522s ago: executing program 3 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x80) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.462220554s ago: executing program 6 (id=2225): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055003d0902041000fedbdf2507000000", @ANYRES32, @ANYBLOB="100001"], 0x38}}, 0x24048850) 3.331582802s ago: executing program 3 (id=2227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 3.331270177s ago: executing program 5 (id=2228): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) 3.298970635s ago: executing program 6 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.195821648s ago: executing program 5 (id=2232): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 3.11164889s ago: executing program 3 (id=2233): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffc38, &(0x7f0000000880)=[{0x0, 0x30}, {&(0x7f0000000800)="082384c1070e77595a", 0x9}], 0x2}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r2 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cb1, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 2.871561692s ago: executing program 5 (id=2237): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 2.630752466s ago: executing program 5 (id=2240): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 2.513112399s ago: executing program 4 (id=2242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) 2.443779217s ago: executing program 5 (id=2243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 2.255613607s ago: executing program 0 (id=2244): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0x7, 0xfffffffffffffffa}) 2.157903338s ago: executing program 3 (id=2245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getitimer(0x1, 0x0) 1.281259479s ago: executing program 0 (id=2246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) creat(0x0, 0x0) 1.147013342s ago: executing program 4 (id=2247): mkdir(0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0xebe0, 0x10, 0x3, 0x200008d}, &(0x7f00000004c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, &(0x7f0000010180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r1, 0x3516, 0x7723, 0x2, 0x0, 0x0) 1.111679899s ago: executing program 3 (id=2248): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8269b66f", 0x18, 0x0, 0x0, 0x0) 1.074988829s ago: executing program 0 (id=2249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 899.247607ms ago: executing program 3 (id=2250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setitimer(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62066bd8", "1ef0040000000100"}, 0x28) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="0b60f2de26674449000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7fff}, 0x18) 898.628545ms ago: executing program 4 (id=2251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 661.25974ms ago: executing program 4 (id=2252): r0 = socket(0x10, 0x803, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000200000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717", 0x4}], 0x1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000005c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24000080) 481.471808ms ago: executing program 0 (id=2253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 293.45694ms ago: executing program 4 (id=2254): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x1, 0x3, 0x0, 0x0, @dev, @dev, 0x1, 0x0, 0x1, 0x1}}) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffff8, @remote, 0x2}}, 0x24) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) socket$inet6_sctp(0xa, 0x1, 0x84) 268.752282ms ago: executing program 0 (id=2255): syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) 64.945939ms ago: executing program 4 (id=2256): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 0s ago: executing program 0 (id=2257): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 3 res=1 errno=0 [ 470.338666][T10383] binder: Unknown parameter 'func' [ 470.408170][ T5904] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 470.447067][ T5904] usb 3-1: device descriptor read/8, error -71 [ 470.686151][ T5904] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 470.723451][ T5904] usb 3-1: device descriptor read/8, error -71 [ 471.085628][ T5947] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 471.237380][ T5904] usb usb3-port1: unable to enumerate USB device [ 471.360952][T10399] 9pnet_virtio: no channels available for device syz [ 471.693089][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 472.286888][ T5947] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.294952][ T5947] usb 1-1: config 0 has no interface number 0 [ 472.525713][ T5947] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 472.535583][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.545474][ T5947] usb 1-1: Product: syz [ 472.549711][ T5947] usb 1-1: Manufacturer: syz [ 472.555158][ T5947] usb 1-1: SerialNumber: syz [ 472.581401][ T5947] usb 1-1: config 0 descriptor?? [ 472.604293][ T5947] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 473.033857][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 473.406122][ T5947] gspca_spca1528: reg_w err -110 [ 473.606509][ T9] usb 6-1: device descriptor read/64, error -71 [ 473.715857][ T5947] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 473.745761][ T5947] usb 1-1: USB disconnect, device number 35 [ 473.941469][T10426] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1183'. [ 473.965474][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 473.988971][T10427] usb usb8: usbfs: process 10427 (syz.2.1181) did not claim interface 0 before use [ 474.006276][T10427] usb usb8: selecting invalid altsetting 512 [ 474.125559][ T9] usb 6-1: device descriptor read/64, error -71 [ 474.238282][ T9] usb usb6-port1: attempt power cycle [ 474.393153][T10433] geneve1: entered allmulticast mode [ 474.492816][ T30] audit: type=1326 audit(1755475209.893:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10434 comm="syz.0.1186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ad2f8ebe9 code=0x0 [ 474.553002][T10436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'. [ 474.605592][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 474.636187][ T9] usb 6-1: device descriptor read/8, error -71 [ 474.819861][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 474.840391][T10442] netlink: 'syz.4.1189': attribute type 30 has an invalid length. [ 474.884228][T10442] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.892592][T10442] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.901049][T10442] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.905564][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 474.909310][T10442] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.960915][ T9] usb 6-1: device descriptor read/8, error -71 [ 475.075929][ T9] usb usb6-port1: unable to enumerate USB device [ 475.209894][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 475.221298][T10449] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 475.231946][T10449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.235137][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 475.398588][T10456] overlayfs: missing 'lowerdir' [ 475.430342][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 475.612662][T10464] 9pnet_fd: Insufficient options for proto=fd [ 475.623105][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 475.640700][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 475.667809][T10462] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 475.695664][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 475.868640][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.884388][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 475.909932][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 475.943798][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 475.969011][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.982421][T10458] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 476.004128][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.135804][ T5919] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 476.297849][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 476.321721][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7 [ 476.353222][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024 [ 476.387546][ T5919] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.401523][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.409804][ T5919] usb 6-1: Product: syz [ 476.414322][ T5919] usb 6-1: Manufacturer: syz [ 476.423483][ T5919] usb 6-1: SerialNumber: syz [ 476.431924][ T5919] usb 6-1: config 0 descriptor?? [ 476.450486][ T5919] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 476.725032][ T5919] usb 6-1: USB disconnect, device number 15 [ 477.112168][T10487] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 477.589469][T10494] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1202'. [ 478.496373][T10502] sctp: [Deprecated]: syz.4.1205 (pid 10502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.496373][T10502] Use struct sctp_sack_info instead [ 478.511630][ T30] audit: type=1326 audit(1755475213.903:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc91a78ebe9 code=0x0 [ 478.551678][ T24] usb 1-1: USB disconnect, device number 36 [ 478.611452][T10507] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1204'. [ 478.654168][T10509] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 478.662107][T10509] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 478.668873][T10509] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 478.695700][T10509] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 478.710791][T10509] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 478.733684][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 478.745823][T10509] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 478.762330][T10509] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 478.795635][T10509] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 478.814388][T10509] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 478.834830][T10509] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 478.868972][T10509] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 478.887519][T10509] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 478.890144][T10511] team0: Port device team_slave_0 removed [ 478.913149][T10515] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1208'. [ 478.915642][T10509] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 478.930924][T10509] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 478.941225][T10515] gretap0: entered promiscuous mode [ 478.941791][T10509] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 478.953612][T10509] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 478.961778][T10509] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 478.964517][T10512] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1208'. [ 478.969990][T10509] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 479.005054][T10512] 0{X: renamed from gretap0 [ 479.029009][T10512] 0{X: left promiscuous mode [ 479.036045][T10512] 0{X: entered allmulticast mode [ 479.044602][T10512] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 479.286317][T10524] loop2: detected capacity change from 0 to 7 [ 479.308301][T10524] Dev loop2: unable to read RDB block 7 [ 479.328858][T10524] loop2: AHDI p1 p2 p3 [ 479.353311][T10524] loop2: partition table partially beyond EOD, truncated [ 479.378190][T10524] loop2: p1 start 1601398130 is beyond EOD, truncated [ 479.399778][T10524] loop2: p2 start 1702059890 is beyond EOD, truncated [ 479.454489][T10535] netlink: 'syz.3.1215': attribute type 1 has an invalid length. [ 479.629793][T10542] 9pnet_fd: Insufficient options for proto=fd [ 479.801349][T10538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.812306][T10538] bond1: (slave bond2): making interface the new active one [ 479.821120][T10538] bond1: (slave bond2): Enslaving as an active interface with an up link [ 479.860006][T10549] loop9: detected capacity change from 0 to 8 [ 479.869058][T10546] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 479.882074][T10552] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 479.884863][T10535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.899388][T10549] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 479.906840][T10549] loop9: partition table partially beyond EOD, truncated [ 479.919391][T10535] syz.3.1215 (10535) used greatest stack depth: 19320 bytes left [ 479.950981][T10549] loop9: p1 size 81768186 extends beyond EOD, truncated [ 480.724106][ T5918] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 480.939142][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.950857][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.976487][ T5918] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 480.994833][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.021029][ T5918] usb 6-1: config 0 descriptor?? [ 481.171578][ T30] audit: type=1326 audit(1755475216.573:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.3.1225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc91a78ebe9 code=0x0 [ 481.243578][T10573] __nla_validate_parse: 3 callbacks suppressed [ 481.243602][T10573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1225'. [ 481.549161][ T5918] greenasia 0003:0E8F:0012.0010: ignoring exceeding usage max [ 481.575743][ T5918] greenasia 0003:0E8F:0012.0010: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0 [ 481.589140][ T5918] greenasia 0003:0E8F:0012.0010: no inputs found [ 481.751670][ T5897] usb 6-1: USB disconnect, device number 16 [ 484.390785][T10569] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 485.252936][T10607] tmpfs: Bad value for 'mpol' [ 485.725966][ T9] IPVS: starting estimator thread 0... [ 485.746541][ T5919] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 486.344034][T10608] IPVS: using max 28 ests per chain, 67200 per kthread [ 486.402865][ T5919] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 486.414568][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.444652][ T5919] usb 3-1: Product: syz [ 486.479880][ T5919] usb 3-1: Manufacturer: syz [ 486.499463][ T5919] usb 3-1: SerialNumber: syz [ 486.586172][ T5919] usb 3-1: config 0 descriptor?? [ 486.605040][ T5919] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 486.789852][ T5897] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 486.809860][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 487.205383][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 487.240304][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 487.294883][ T5897] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 487.323499][ T5897] usb 1-1: can't read configurations, error -71 [ 487.350039][ T5904] usb 3-1: USB disconnect, device number 69 [ 487.582778][ T30] audit: type=1326 audit(1755475222.983:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10637 comm="syz.4.1241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f170258ebe9 code=0x0 [ 487.650841][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 487.685805][ T5918] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 487.815582][ T5904] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 487.837938][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.855402][ T5918] usb 6-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 487.873927][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.888582][ T5918] usb 6-1: config 0 descriptor?? [ 487.971152][T10643] netlink: 'syz.0.1242': attribute type 29 has an invalid length. [ 487.979545][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 487.989033][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.002514][T10643] netlink: 'syz.0.1242': attribute type 29 has an invalid length. [ 488.010983][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 488.027428][T10643] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1242'. [ 488.038050][ T5904] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 488.066977][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.104424][ T5904] usb 3-1: config 0 descriptor?? [ 488.305592][ T5918] kye 0003:0458:5017.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 488.328738][ T5918] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 488.354231][ T5918] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 488.362246][ T5918] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 488.370257][ T5918] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 488.377791][ T5918] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 488.390648][ T5918] kye 0003:0458:5017.0011: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.5-1/input0 [ 488.450535][ T5918] kye 0003:0458:5017.0011: tablet-enabling feature report not found [ 488.484053][ T5918] kye 0003:0458:5017.0011: tablet enabling failed [ 488.519033][T10631] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 488.539245][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.552398][ T5904] shield 0003:0955:7214.0012: item fetching failed at offset 0/1 [ 488.571290][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.586103][T10648] XFS (nullb0): Invalid superblock magic number [ 488.586362][ T5904] shield 0003:0955:7214.0012: Parse failed [ 488.613828][ T5904] shield 0003:0955:7214.0012: probe with driver shield failed with error -22 [ 488.750917][ T5897] usb 3-1: USB disconnect, device number 70 [ 488.756759][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 489.796297][ T24] usb 6-1: USB disconnect, device number 17 [ 489.868620][ T5919] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 489.929968][T10668] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 490.041713][ T5919] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 490.064054][ T5919] usb 1-1: config 5 has no interface number 0 [ 490.074657][ T5919] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 490.088848][ T5919] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 490.099326][ T5919] usb 1-1: config 5 interface 123 has no altsetting 0 [ 490.110300][ T5919] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 490.123484][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.133076][ T5919] usb 1-1: Product: syz [ 490.141369][ T5919] usb 1-1: Manufacturer: syz [ 490.146482][ T5919] usb 1-1: SerialNumber: syz [ 490.379425][T10679] netlink: 'syz.2.1253': attribute type 29 has an invalid length. [ 490.408858][T10679] netlink: 'syz.2.1253': attribute type 29 has an invalid length. [ 490.429712][T10679] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1253'. [ 490.445199][T10681] unknown channel width for channel at 909000KHz? [ 490.463005][T10681] 9pnet_fd: Insufficient options for proto=fd [ 490.493893][T10683] 9pnet_fd: Insufficient options for proto=fd [ 490.662132][ T30] audit: type=1326 audit(1755475226.063:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.2.1255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36ec18ebe9 code=0x0 [ 490.739213][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 491.265990][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 491.428229][ T24] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 491.442015][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.461013][ T24] usb 6-1: config 0 descriptor?? [ 491.679641][ T24] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 491.825573][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 491.867109][ T5919] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 491.883087][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 491.893303][ T5919] usb 1-1: USB disconnect, device number 39 [ 491.920235][ T24] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 491.927710][ T24] [drm] Initialized udl on minor 2 [ 491.937536][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.950888][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 491.962746][ T5904] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.974140][ T24] usb 6-1: USB disconnect, device number 18 [ 491.981290][ T5904] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 491.996418][ T9] usb 3-1: no configurations [ 492.003530][ T9] usb 3-1: can't read configurations, error -22 [ 492.165865][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 492.395476][ T9] usb 3-1: no configurations [ 492.419968][ T9] usb 3-1: can't read configurations, error -22 [ 492.523923][T10714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1263'. [ 492.546156][T10714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1263'. [ 492.635416][ T9] usb usb3-port1: attempt power cycle [ 493.065017][T10722] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1265'. [ 493.245542][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 493.271857][ T9] usb 3-1: no configurations [ 493.276876][ T9] usb 3-1: can't read configurations, error -22 [ 493.302507][ T30] audit: type=1326 audit(1755475228.693:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.5.1270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02fff8ebe9 code=0x0 [ 493.366864][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1270'. [ 493.470716][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 493.512933][ T9] usb 3-1: no configurations [ 493.521809][ T9] usb 3-1: can't read configurations, error -22 [ 493.536093][ T9] usb usb3-port1: unable to enumerate USB device [ 494.018216][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 494.094165][T10747] Smack: duplicate mount options [ 494.190259][T10751] overlay: Unknown parameter 'hash' [ 500.605697][ T30] audit: type=1326 audit(1755475235.993:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10788 comm="syz.4.1285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f170258ebe9 code=0x0 [ 500.968575][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 501.763889][ T5947] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 501.803903][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.967603][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.986425][ T5947] usb 6-1: config 0 has no interfaces? [ 501.991984][ T5947] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.022775][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.048885][ T5947] usb 6-1: config 0 descriptor?? [ 502.322135][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'. [ 502.548915][ T5947] usb 6-1: string descriptor 0 read error: -71 [ 502.557257][ T5947] usb 6-1: USB disconnect, device number 19 [ 504.522822][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 507.140112][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 507.169410][ T30] audit: type=1326 audit(1755475242.573:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.2.1300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36ec18ebe9 code=0x0 [ 507.170699][T10849] veth1_macvtap: left promiscuous mode [ 507.323905][T10857] sg_read: process 853 (syz.4.1301) changed security contexts after opening file descriptor, this is not allowed. [ 507.425655][T10858] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1300'. [ 507.471685][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 508.062302][T10870] netlink: 'syz.2.1305': attribute type 3 has an invalid length. [ 509.254028][T10885] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 509.708136][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 509.740590][ T5918] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 510.213978][ T5918] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.921243][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.932248][ T5918] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.943126][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.951593][ T5918] usb 3-1: SerialNumber: syz [ 511.195543][ T5918] usb 3-1: 0:2 : does not exist [ 511.300730][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 511.419449][ T30] audit: type=1326 audit(1755475246.653:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10917 comm="syz.4.1315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f170258ebe9 code=0x0 [ 511.475508][ T5918] usb 3-1: USB disconnect, device number 75 [ 511.735427][ T5897] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 511.865692][ T5897] usb 6-1: device descriptor read/64, error -71 [ 512.179581][ T5897] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 512.355611][ T5897] usb 6-1: device descriptor read/64, error -71 [ 512.415586][ T5918] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 512.580015][ T5897] usb usb6-port1: attempt power cycle [ 512.725544][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 512.733359][ T5918] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.747928][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.771550][ T5918] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.804738][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.971315][ T5918] usb 3-1: Product: syz [ 512.976776][ T5918] usb 3-1: Manufacturer: syz [ 512.981448][ T5918] usb 3-1: SerialNumber: syz [ 513.339759][ T5897] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 513.377768][ T5897] usb 6-1: device descriptor read/8, error -71 [ 513.400650][T10951] x_tables: duplicate underflow at hook 3 [ 513.615609][ T5897] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 513.691467][ T5897] usb 6-1: device descriptor read/8, error -71 [ 513.701639][ T5918] usb 3-1: cannot find UAC_HEADER [ 513.780290][ T5918] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 513.791919][ T5918] usb 3-1: USB disconnect, device number 76 [ 513.816112][ T5897] usb usb6-port1: unable to enumerate USB device [ 515.180474][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 515.290274][T10966] block nbd5: shutting down sockets [ 516.112251][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 516.163299][T10981] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1333'. [ 516.195514][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 516.866785][T10991] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1335'. [ 517.623990][T11005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1339'. [ 517.676288][T11005] bridge0: entered promiscuous mode [ 517.858449][T11005] bridge0: port 2(macvlan2) entered blocking state [ 517.875023][T11005] bridge0: port 2(macvlan2) entered disabled state [ 517.887204][T11005] macvlan2: entered allmulticast mode [ 517.915857][T11005] bridge0: entered allmulticast mode [ 518.313761][T11005] macvlan2: left allmulticast mode [ 518.788852][T11005] bridge0: left allmulticast mode [ 518.821112][T11005] bridge0: left promiscuous mode [ 519.671703][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 520.145377][ T24] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 521.856321][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 521.886381][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 521.907209][ T24] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 521.936179][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 521.952362][ T24] usb 1-1: config 4 has no interface number 0 [ 521.978119][ T24] usb 1-1: Dual-Role OTG device on HNP port [ 521.986011][ T24] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 521.995150][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 522.004864][ T24] usb 1-1: Product: syz [ 522.009285][ T24] usb 1-1: Manufacturer: syz [ 522.027945][ T24] usb 1-1: SerialNumber: syz [ 522.565754][ T5897] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 522.589286][T11046] rdma_op ffff8880271729f0 conn xmit_rdma 0000000000000000 [ 522.735880][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 522.777011][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.815880][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.837312][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.871955][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.888593][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.897922][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.909402][ T5897] usb 3-1: Product: syz [ 522.928636][ T5897] usb 3-1: Manufacturer: syz [ 522.933733][ T5897] usb 3-1: SerialNumber: syz [ 522.944927][ T24] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 522.956615][ T24] usb 1-1: No valid video chain found. [ 522.964724][ T24] usb 1-1: USB disconnect, device number 40 [ 524.223087][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.264381][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.942763][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'. [ 524.993567][ T5897] usb 3-1: USB disconnect, device number 77 [ 525.771293][ T30] audit: type=1800 audit(1755475261.173:207): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1363" name="nullb0" dev="tmpfs" ino=811 res=0 errno=0 [ 528.249221][T11128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1372'. [ 529.110327][T11133] sctp: [Deprecated]: syz.5.1375 (pid 11133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.110327][T11133] Use struct sctp_sack_info instead [ 529.999412][T11153] block nbd0: not configured, cannot reconfigure [ 530.059983][T11161] loop6: detected capacity change from 0 to 7 [ 530.108503][T11161] Dev loop6: unable to read RDB block 7 [ 530.114752][T11161] loop6: unable to read partition table [ 530.122668][T11161] loop6: partition table beyond EOD, truncated [ 530.129195][T11161] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 530.919114][T11169] overlayfs: failed to clone upperpath [ 532.322968][T11187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1389'. [ 532.365456][ T5947] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 532.513275][T11196] ntfs3(nullb0): Primary boot signature is not NTFS. [ 532.539494][ T5947] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 532.549963][T11196] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 532.559556][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.573498][ T5947] usb 1-1: Product: syz [ 532.591254][ T5947] usb 1-1: Manufacturer: syz [ 532.596781][ T5947] usb 1-1: SerialNumber: syz [ 532.658660][ T5947] usb 1-1: config 0 descriptor?? [ 532.676853][ T5947] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 532.852060][ T7094] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 532.877503][T11182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.887159][T11182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.983416][T11202] block nbd5: not configured, cannot reconfigure [ 533.106698][T11204] loop6: detected capacity change from 0 to 7 [ 533.480632][T11204] Dev loop6: unable to read RDB block 7 [ 533.488157][T11204] loop6: unable to read partition table [ 533.495056][T11204] loop6: partition table beyond EOD, truncated [ 533.501879][T11204] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 533.586374][ T5947] gspca_sunplus: reg_r err -110 [ 533.828120][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 533.844477][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 534.066948][T11213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1398'. [ 534.076352][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 534.826992][T11224] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1402'. [ 535.354261][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1402'. [ 535.807229][ T5947] usb 1-1: USB disconnect, device number 41 [ 538.160859][T11236] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 538.185091][T11236] team0: Device hsr_slave_0 failed to register rx_handler [ 538.218219][T11241] program syz.0.1405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.353941][ T30] audit: type=1326 audit(1755475274.753:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11246 comm="syz.4.1409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f170258ebe9 code=0x0 [ 540.052433][T11263] block nbd2: not configured, cannot reconfigure [ 540.169603][T11265] loop6: detected capacity change from 0 to 7 [ 541.165923][T11265] Dev loop6: unable to read RDB block 7 [ 541.171667][T11265] loop6: unable to read partition table [ 541.445987][T11265] loop6: partition table beyond EOD, truncated [ 541.465459][T11265] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 541.500360][T11267] syz.0.1412: attempt to access beyond end of device [ 541.500360][T11267] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 541.516016][T11267] XFS (nbd0): SB validate failed with error -5. [ 542.578746][ T5947] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 542.869622][ T5947] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 542.998634][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.150443][ T5947] usb 6-1: config 0 descriptor?? [ 543.224537][ T5947] cp210x 6-1:0.0: cp210x converter detected [ 544.224647][ T5947] usb 6-1: cp210x converter now attached to ttyUSB0 [ 544.246279][ T5947] usb 6-1: USB disconnect, device number 24 [ 544.282785][ T5947] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 544.375898][ T5947] cp210x 6-1:0.0: device disconnected [ 544.462904][T11313] block nbd4: not configured, cannot reconfigure [ 544.583949][T11321] loop6: detected capacity change from 0 to 7 [ 544.825806][T11321] Dev loop6: unable to read RDB block 7 [ 544.831957][T11321] loop6: unable to read partition table [ 544.838179][T11321] loop6: partition table beyond EOD, truncated [ 544.844371][T11321] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 545.073486][T11329] hsr0: entered promiscuous mode [ 545.080129][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1427'. [ 545.127575][T11329] hsr_slave_0: left promiscuous mode [ 546.144725][T11329] hsr_slave_1: left promiscuous mode [ 547.968187][T11373] block nbd0: not configured, cannot reconfigure [ 548.091551][T11367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.126999][T11378] loop6: detected capacity change from 0 to 7 [ 548.386684][T11367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.438866][T11378] Dev loop6: unable to read RDB block 7 [ 548.458463][T11378] loop6: unable to read partition table [ 548.489009][T11378] loop6: partition table beyond EOD, truncated [ 548.508307][T11378] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 548.529856][T11367] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 548.543017][T11367] bond0 (unregistering): Released all slaves [ 549.175868][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 549.350723][ T9] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 549.395537][ T9] usb 1-1: config 0 has no interface number 0 [ 549.433858][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 549.475367][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.486155][ T9] usb 1-1: Product: syz [ 549.490419][ T9] usb 1-1: Manufacturer: syz [ 549.502379][ T9] usb 1-1: SerialNumber: syz [ 549.511301][ T9] usb 1-1: config 0 descriptor?? [ 549.581068][T11409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1449'. [ 550.169929][ T9] usb 1-1: Firmware: major: 230, minor: 61, hardware type: UNKNOWN (237) [ 550.495097][T11417] syz.3.1450 (11417) used greatest stack depth: 16224 bytes left [ 552.291004][T11423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.328771][T11423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.354270][ T9] usb 1-1: no permanent extended address found, random address set [ 552.410027][ T9] usb 1-1: atusb_probe: initialization failed, error = -524 [ 552.431849][ T9] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 552.642736][T11422] block nbd5: not configured, cannot reconfigure [ 552.652636][T11394] Bluetooth: MGMT ver 1.23 [ 553.187229][T11425] loop6: detected capacity change from 0 to 7 [ 553.500209][T11425] Dev loop6: unable to read RDB block 7 [ 553.590910][T11425] loop6: unable to read partition table [ 553.604203][T11425] loop6: partition table beyond EOD, truncated [ 553.617337][ T9] usb 1-1: USB disconnect, device number 42 [ 553.646694][T11425] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 558.461527][ T8512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.535423][ T8512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.794260][ T8512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.823399][ T8512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.976484][T11474] block nbd0: not configured, cannot reconfigure [ 559.139923][ T8512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.208823][ T8512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.390173][T11475] loop6: detected capacity change from 0 to 7 [ 559.411032][T11475] Dev loop6: unable to read RDB block 7 [ 559.416952][T11475] loop6: unable to read partition table [ 559.424049][T11475] loop6: partition table beyond EOD, truncated [ 559.431395][T11475] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 559.833288][ T8512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.916994][ T8512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.020007][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 560.034030][T11476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.296011][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 560.413241][ T8512] bridge_slave_0: left allmulticast mode [ 560.435800][ T24] usb 1-1: device descriptor read/64, error -71 [ 560.675717][ T8512] bridge_slave_0: left promiscuous mode [ 560.683228][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.979096][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 561.058955][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 561.078373][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 561.089476][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 561.105438][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 561.113165][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 561.235630][ T24] usb 1-1: device descriptor read/64, error -71 [ 561.346373][ T24] usb usb1-port1: attempt power cycle [ 561.427762][T11504] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1477'. [ 561.686219][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 561.719625][ T24] usb 1-1: device descriptor read/8, error -71 [ 562.089620][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 562.159889][ T24] usb 1-1: device descriptor read/8, error -71 [ 562.290998][ T24] usb usb1-port1: unable to enumerate USB device [ 563.182566][ T5845] Bluetooth: hci1: command tx timeout [ 563.243055][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.609165][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 563.618237][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 563.676176][ T8512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.694118][ T8512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.715631][ T8512] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 563.729915][ T8512] bond0 (unregistering): Released all slaves [ 563.752968][T11500] netlink: 'syz.5.1477': attribute type 29 has an invalid length. [ 564.265713][ T5947] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 564.426291][ T5947] usb 6-1: Using ep0 maxpacket: 16 [ 564.456004][ T5947] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 564.489092][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.520258][ T5947] usb 6-1: Product: syz [ 564.543331][ T5947] usb 6-1: Manufacturer: syz [ 564.559442][ T5947] usb 6-1: SerialNumber: syz [ 564.575798][ T5947] usb 6-1: config 0 descriptor?? [ 564.591257][ T5947] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 564.741779][ T8512] hsr_slave_0: left promiscuous mode [ 564.813652][ T8512] hsr_slave_1: left promiscuous mode [ 564.832731][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.872567][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.901594][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.915622][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.960123][ T8512] veth1_macvtap: left promiscuous mode [ 564.966824][ T8512] veth0_macvtap: left promiscuous mode [ 564.972743][ T8512] veth1_vlan: left promiscuous mode [ 564.979499][ T8512] veth0_vlan: left promiscuous mode [ 565.235551][ T5845] Bluetooth: hci1: command tx timeout [ 565.793396][ T5947] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 565.812641][ T5947] visor 6-1:0.0: probe with driver visor failed with error -71 [ 565.834257][ T5947] usb 6-1: USB disconnect, device number 25 [ 566.105610][ T30] audit: type=1326 audit(1755475301.493:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.128914][ T30] audit: type=1326 audit(1755475301.493:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.155615][ T30] audit: type=1326 audit(1755475301.493:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.178996][ T30] audit: type=1326 audit(1755475301.493:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.208420][ T30] audit: type=1326 audit(1755475301.493:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.231148][ T30] audit: type=1326 audit(1755475301.493:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.255024][ T30] audit: type=1326 audit(1755475301.493:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.283859][ T30] audit: type=1326 audit(1755475301.493:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.353740][ T30] audit: type=1326 audit(1755475301.493:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.376669][ T30] audit: type=1326 audit(1755475301.493:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11546 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 566.581910][ T8512] team0 (unregistering): Port device team_slave_1 removed [ 566.652126][ T8512] team0 (unregistering): Port device team_slave_0 removed [ 566.784584][ T5947] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 566.955435][ T5947] usb 6-1: Using ep0 maxpacket: 16 [ 566.965101][ T5947] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 566.980710][ T5947] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 566.992260][ T5947] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.010083][ T5947] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.022349][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.043665][ T5947] usb 6-1: Product: syz [ 567.048878][ T5947] usb 6-1: Manufacturer: syz [ 567.053975][ T5947] usb 6-1: SerialNumber: syz [ 567.315799][ T5845] Bluetooth: hci1: command tx timeout [ 567.547138][T11489] chnl_net:caif_netlink_parms(): no params data found [ 567.612554][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 567.659874][T11567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.754971][T11567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.923046][T11571] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 567.935166][ T5947] usb 6-1: 0:2 : does not exist [ 567.960617][T11571] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1495'. [ 567.964393][ T5947] usb 6-1: USB disconnect, device number 26 [ 568.012444][T11489] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.023923][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.032606][T11489] bridge_slave_0: entered allmulticast mode [ 568.048578][T11489] bridge_slave_0: entered promiscuous mode [ 568.056245][T11574] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 568.079624][T11489] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.576553][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.590448][T11489] bridge_slave_1: entered allmulticast mode [ 568.600355][T11489] bridge_slave_1: entered promiscuous mode [ 568.682419][T11489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.704255][T11489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.814270][T11489] team0: Port device team_slave_0 added [ 568.847007][T11489] team0: Port device team_slave_1 added [ 569.061847][T11489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.094938][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.257769][T11489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.348455][T11489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.381009][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.415974][ T5845] Bluetooth: hci1: command tx timeout [ 569.422232][T11489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.637558][T11603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.808274][T11489] hsr_slave_0: entered promiscuous mode [ 569.827180][T11489] hsr_slave_1: entered promiscuous mode [ 569.833811][T11489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.901404][T11489] Cannot create hsr debugfs directory [ 570.033843][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.074036][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.245442][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 570.332145][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.833087][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.015948][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.042932][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.175034][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.199994][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.239812][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 571.256501][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.280264][T11620] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 571.296884][ T9] usb 6-1: config 0 descriptor?? [ 571.307679][T11620] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 571.527726][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 571.544039][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 571.558066][ T9] usb 6-1: USB disconnect, device number 27 [ 571.596656][T11637] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1512'. [ 571.677150][T11489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.871362][T11641] qnx4: no qnx4 filesystem (no root dir). [ 572.128338][T11489] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.265217][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.273963][ T8500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.298623][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.305807][ T8521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.697605][T11489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.745614][ T5919] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 572.913991][ T5919] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 572.937465][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.961569][ T5919] usb 6-1: config 0 descriptor?? [ 572.971583][ T5919] cp210x 6-1:0.0: cp210x converter detected [ 573.063739][T11489] veth0_vlan: entered promiscuous mode [ 573.082942][T11489] veth1_vlan: entered promiscuous mode [ 573.128207][T11489] veth0_macvtap: entered promiscuous mode [ 573.140744][T11489] veth1_macvtap: entered promiscuous mode [ 573.166517][T11489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.387730][T11489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.702461][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.729648][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.769520][ T5919] usb 6-1: cp210x converter now attached to ttyUSB0 [ 573.869302][ T8521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.908870][ T8521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.934638][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 575.464223][T11683] netlink: 'syz.0.1522': attribute type 4 has an invalid length. [ 575.481385][T11683] netlink: 'syz.0.1522': attribute type 5 has an invalid length. [ 575.523398][T11683] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1522'. [ 576.923373][T11702] wg1 speed is unknown, defaulting to 1000 [ 576.929396][T11702] wg1 speed is unknown, defaulting to 1000 [ 576.935972][T11702] wg1 speed is unknown, defaulting to 1000 [ 576.951944][T11702] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 576.974645][T11702] wg1 speed is unknown, defaulting to 1000 [ 576.981974][T11702] wg1 speed is unknown, defaulting to 1000 [ 576.989257][T11702] wg1 speed is unknown, defaulting to 1000 [ 576.996833][T11702] wg1 speed is unknown, defaulting to 1000 [ 577.004737][T11702] wg1 speed is unknown, defaulting to 1000 [ 577.107129][T11707] x_tables: duplicate underflow at hook 1 [ 577.243658][T11715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1529'. [ 577.660175][T11722] loop8: detected capacity change from 0 to 8 [ 577.673173][T11722] Dev loop8: unable to read RDB block 8 [ 577.689052][T11722] loop8: unable to read partition table [ 577.698631][T11722] loop8: partition table beyond EOD, truncated [ 577.707095][ T5904] usb 6-1: USB disconnect, device number 28 [ 577.711707][T11722] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 577.734784][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 577.762487][ T5904] cp210x 6-1:0.0: device disconnected [ 578.053972][T11729] team0: No ports can be present during mode change [ 578.385790][ T5904] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 578.759452][ T5904] usb 7-1: config 0 has an invalid interface number: 198 but max is 0 [ 578.786833][ T5904] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 578.795863][ T5904] usb 7-1: config 0 has no interface number 0 [ 578.802204][ T5904] usb 7-1: config 0 interface 198 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 578.835350][ T5904] usb 7-1: config 0 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 578.847970][ T5904] usb 7-1: New USB device found, idVendor=1199, idProduct=9006, bcdDevice=b7.37 [ 578.865398][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.896448][ T5904] usb 7-1: config 0 descriptor?? [ 579.132669][ T5904] usb 7-1: USB disconnect, device number 2 [ 579.825501][ T5830] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 579.997600][ T5830] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 580.014478][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.061042][ T5830] usb 1-1: config 0 descriptor?? [ 580.079107][ T5830] cp210x 1-1:0.0: cp210x converter detected [ 581.588682][ T5830] usb 1-1: cp210x converter now attached to ttyUSB0 [ 582.164450][T11785] wg1 speed is unknown, defaulting to 1000 [ 582.496385][T11794] autofs: Unknown parameter './file0' [ 582.722191][T11799] bpq0: entered allmulticast mode [ 586.597849][T11798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 587.319629][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.327973][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.349166][T11804] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.356802][T11804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.366539][T11804] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.374031][T11804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.403575][T11804] team0: Port device bridge0 added [ 588.831740][T11821] overlayfs: failed to resolve './file1': -2 [ 591.206353][ T5830] usb 1-1: USB disconnect, device number 47 [ 591.228317][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 591.265790][ T5830] cp210x 1-1:0.0: device disconnected [ 592.022140][T11858] netlink: 'syz.6.1566': attribute type 29 has an invalid length. [ 592.033225][T11856] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 592.063384][T11856] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 592.089294][T11858] netlink: 'syz.6.1566': attribute type 29 has an invalid length. [ 592.114255][T11858] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1566'. [ 592.615765][ T5918] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 592.815656][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 592.915332][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.041698][ T5918] usb 7-1: config index 0 descriptor too short (expected 15652, got 36) [ 593.362127][ T5918] usb 7-1: config 7 has an invalid interface number: 9 but max is 0 [ 593.371287][ T5918] usb 7-1: config 7 has an invalid descriptor of length 99, skipping remainder of the config [ 593.382363][ T5918] usb 7-1: config 7 has no interface number 0 [ 593.390881][ T5918] usb 7-1: too many endpoints for config 7 interface 9 altsetting 218: 156, using maximum allowed: 30 [ 593.402550][ T5918] usb 7-1: config 7 interface 9 altsetting 218 has 0 endpoint descriptors, different from the interface descriptor's value: 156 [ 593.417281][ T5918] usb 7-1: config 7 interface 9 has no altsetting 0 [ 593.427160][ T5918] usb 7-1: New USB device found, idVendor=1a6c, idProduct=100d, bcdDevice=10.9e [ 593.449391][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.464040][ T5918] usb 7-1: Product: syz [ 593.470394][ T5918] usb 7-1: Manufacturer: syz [ 593.475137][ T5918] usb 7-1: SerialNumber: syz [ 593.719274][ T5918] usb 7-1: USB disconnect, device number 3 [ 594.530057][T11886] hub 8-0:1.0: USB hub found [ 594.540880][T11886] hub 8-0:1.0: 1 port detected [ 595.805395][ T5919] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 595.891466][T11907] Falling back ldisc for ttyS3. [ 595.967826][ T5919] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 595.989578][ T5919] usb 1-1: config 0 has no interface number 0 [ 596.005993][ T5919] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 596.028683][ T5919] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 596.052884][ T5919] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 596.067318][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.085409][ T5919] usb 1-1: Product: syz [ 596.095760][ T5919] usb 1-1: Manufacturer: syz [ 596.100574][ T5919] usb 1-1: SerialNumber: syz [ 596.131303][ T5919] usb 1-1: config 0 descriptor?? [ 596.163026][T11895] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 596.261292][ T5919] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 596.421786][ T5918] usb 1-1: USB disconnect, device number 48 [ 596.437052][ T5918] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 599.056858][T11971] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1599'. [ 600.732234][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 600.732256][ T30] audit: type=1326 audit(1755475336.133:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.1604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x0 [ 602.510612][T12002] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 602.824218][T12014] block nbd0: NBD_DISCONNECT [ 602.833963][T12014] block nbd0: Send disconnect failed -22 [ 602.902334][T12004] block nbd0: Disconnected due to user request. [ 602.938747][T12004] block nbd0: shutting down sockets [ 602.981927][T12024] xt_bpf: check failed: parse error [ 603.365611][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 603.535397][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 603.572095][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.178171][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 604.195298][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 604.212732][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 604.224203][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 604.234174][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 604.248954][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 604.260001][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 604.283686][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 604.294848][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 604.308465][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 604.322110][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.332494][ T9] usb 1-1: Product: syz [ 604.337019][ T9] usb 1-1: Manufacturer: syz [ 604.341704][ T9] usb 1-1: SerialNumber: syz [ 604.386669][ T9] usb 1-1: config 0 descriptor?? [ 604.396398][T12028] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 604.419750][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.636984][ T9] usb 1-1: USB disconnect, device number 49 [ 604.724604][T12051] tipc: Started in network mode [ 604.731434][T12051] tipc: Node identity bec3c8ef1a6, cluster identity 4711 [ 604.741172][T12051] tipc: Enabled bearer , priority 0 [ 604.749641][T12051] syzkaller0: entered promiscuous mode [ 604.756200][T12051] syzkaller0: entered allmulticast mode [ 604.791683][T12051] tipc: Resetting bearer [ 604.818587][T12049] tipc: Resetting bearer [ 604.850341][T12049] tipc: Disabling bearer [ 605.425794][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 605.470708][T12069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1628'. [ 605.706569][ T9] usb 7-1: device descriptor read/64, error -71 [ 606.554746][T12074] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 606.555692][T12075] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 606.732307][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 606.985510][ T9] usb 7-1: device descriptor read/64, error -71 [ 607.096101][ T9] usb usb7-port1: attempt power cycle [ 608.205604][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 608.329446][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 609.147191][ T9] usb 7-1: device not accepting address 6, error -71 [ 610.110719][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 610.153884][ T9] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 610.165687][ T9] usb 7-1: config 0 has no interface number 0 [ 610.171979][ T9] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.246296][ T30] audit: type=1326 audit(1755475345.643:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.0.1640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ad2f8ebe9 code=0x0 [ 610.282184][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 610.308303][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.325503][ T9] usb 7-1: Product: syz [ 610.334573][ T9] usb 7-1: Manufacturer: syz [ 610.341027][ T9] usb 7-1: SerialNumber: syz [ 610.349943][ T9] usb 7-1: config 0 descriptor?? [ 610.362134][ T9] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 610.567438][ C0] yurex 7-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 610.637695][ T5830] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 610.699348][T12131] : entered promiscuous mode [ 610.779561][ T9] usb 7-1: USB disconnect, device number 7 [ 610.793406][ T9] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 610.799479][ T5830] usb 6-1: Using ep0 maxpacket: 32 [ 610.820694][ T5830] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 610.902398][ T5830] usb 6-1: config 0 has no interface number 0 [ 610.920473][ T5830] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid maxpacket 44603, setting to 64 [ 610.945352][ T5830] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 610.975349][ T5830] usb 6-1: config 0 interface 196 has no altsetting 0 [ 610.985401][ T5830] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 610.994532][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.015506][ T5830] usb 6-1: Product: syz [ 611.035631][ T5830] usb 6-1: Manufacturer: syz [ 611.040340][ T5830] usb 6-1: SerialNumber: syz [ 611.049861][ T5830] usb 6-1: config 0 descriptor?? [ 611.306382][ T5830] ipheth 6-1:0.196: Unable to find endpoints [ 611.320418][ T5830] usb 6-1: USB disconnect, device number 29 [ 611.685654][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 611.775827][ T5830] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 611.787464][T12154] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1652'. [ 611.845606][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 611.853870][ T9] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 611.862967][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.877220][ T9] usb 7-1: config 0 has no interface number 0 [ 611.888961][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 611.915446][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.925929][ T9] usb 7-1: Product: syz [ 611.933248][ T9] usb 7-1: Manufacturer: syz [ 611.939967][ T9] usb 7-1: SerialNumber: syz [ 611.945483][ T5830] usb 6-1: Using ep0 maxpacket: 32 [ 611.952340][ T9] usb 7-1: config 0 descriptor?? [ 611.954317][ T5830] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.968367][ T5830] usb 6-1: config 0 has no interface number 0 [ 611.974696][ T5830] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.988753][ T5830] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.999192][ T5830] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 612.010792][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.029027][ T5830] usb 6-1: config 0 descriptor?? [ 612.311039][ T5830] uclogic 0003:28BD:0094.0013: failed retrieving string descriptor #100: -71 [ 612.343855][ T5830] uclogic 0003:28BD:0094.0013: failed retrieving pen parameters: -71 [ 612.379605][ T5830] uclogic 0003:28BD:0094.0013: pen probing failed: -71 [ 612.406857][ T5830] uclogic 0003:28BD:0094.0013: failed probing parameters: -71 [ 612.438932][ T5830] uclogic 0003:28BD:0094.0013: probe with driver uclogic failed with error -71 [ 612.601292][ T5830] usb 6-1: USB disconnect, device number 30 [ 612.720224][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 612.737768][T12174] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.745763][T12174] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.463349][ T5830] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 613.630676][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.643322][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.657668][ T5830] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 613.672177][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.814158][T12179] overlayfs: missing 'lowerdir' [ 613.936203][ T5830] usb 6-1: config 0 descriptor?? [ 614.429800][ T5830] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 614.482616][ T5830] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 614.499094][ T5830] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 614.511580][ T5830] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 614.529511][ T5830] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 614.543317][ T5830] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 614.553104][ T5830] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 614.605543][ T5830] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 614.665541][ T5897] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 614.676593][ T5830] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 614.828484][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 614.841342][ T5897] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 614.853183][ T5897] usb 1-1: config 2 has no interface number 0 [ 614.872906][ T5897] usb 1-1: config 2 interface 31 has no altsetting 0 [ 614.897123][ T5830] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 614.932124][ T5897] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 614.947542][ T5830] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 615.005319][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.013175][ T5830] usb 6-1: USB disconnect, device number 31 [ 615.049919][ T5897] usb 1-1: Product: syz [ 615.065081][ T5897] usb 1-1: Manufacturer: syz [ 615.090440][ T5897] usb 1-1: SerialNumber: syz [ 615.374520][ T5897] ch9200 1-1:2.31: probe with driver ch9200 failed with error -71 [ 615.441840][ T5897] usb 1-1: USB disconnect, device number 50 [ 615.741127][ T24] usb 7-1: USB disconnect, device number 8 [ 615.919313][T12204] binder: Bad value for 'smackfstransmute' [ 616.215667][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 616.433132][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 616.570403][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.602276][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.631906][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 616.665342][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.701427][ T24] usb 1-1: config 0 descriptor?? [ 616.961831][T12218] netlink: 'syz.4.1670': attribute type 12 has an invalid length. [ 616.999773][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1670'. [ 617.043242][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1671'. [ 618.346292][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1674'. [ 619.419095][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 619.458982][T12251] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1680'. [ 619.532491][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1679'. [ 619.589967][T12249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.663813][T12256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.686758][T12256] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 619.709335][T12256] bond0: (slave vti0): Error -95 calling set_mac_address [ 619.797280][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 619.816983][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 619.842929][ T24] usb 1-1: USB disconnect, device number 51 [ 620.305432][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 620.558280][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1684'. [ 620.615931][ T24] usb 1-1: device descriptor read/64, error -71 [ 620.855387][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 621.015560][ T24] usb 1-1: device descriptor read/64, error -71 [ 621.126032][ T24] usb usb1-port1: attempt power cycle [ 621.945406][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 621.994942][ T24] usb 1-1: device descriptor read/8, error -71 [ 622.054950][T12292] netlink: 'syz.6.1694': attribute type 10 has an invalid length. [ 622.265923][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 622.307170][ T24] usb 1-1: device descriptor read/8, error -71 [ 622.416058][ T24] usb usb1-port1: unable to enumerate USB device [ 622.428752][T12316] fuse: Unknown parameter '0000000000000000000000001777777777777777777777' [ 622.455467][ T5947] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 622.595532][ T5947] usb 6-1: device descriptor read/64, error -71 [ 622.720244][T12321] overlay: Bad value for 'workdir' [ 622.791241][T12324] fuse: Bad value for 'user_id' [ 622.796703][T12324] fuse: Bad value for 'user_id' [ 623.235681][ T5947] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 623.416880][ T5947] usb 6-1: device descriptor read/64, error -71 [ 623.497369][T12331] xt_connbytes: Forcing CT accounting to be enabled [ 623.504276][T12331] Cannot find del_set index 1 as target [ 623.533786][ T5947] usb usb6-port1: attempt power cycle [ 623.926858][ T5947] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 623.966131][ T5947] usb 6-1: device descriptor read/8, error -71 [ 624.042831][T12349] netlink: 'syz.6.1710': attribute type 1 has an invalid length. [ 624.050949][T12349] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1710'. [ 624.225548][ T5947] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 624.250901][ T5947] usb 6-1: device descriptor read/8, error -71 [ 624.332642][ T30] audit: type=1800 audit(1755475359.733:232): pid=12361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1713" name="file1" dev="overlay" ino=197 res=0 errno=0 [ 624.377850][ T5947] usb usb6-port1: unable to enumerate USB device [ 624.505534][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 624.686111][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.845770][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 624.857643][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 624.867258][ T9] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 624.875710][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 624.885993][ T9] usb 1-1: config 7 has no interface number 0 [ 625.715402][ T9] usb 1-1: config 7 interface 187 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 625.729362][ T9] usb 1-1: config 7 interface 187 has no altsetting 0 [ 625.745546][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 625.755099][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.764055][ T9] usb 1-1: Product: syz [ 625.768839][ T9] usb 1-1: Manufacturer: syz [ 625.773524][ T9] usb 1-1: SerialNumber: syz [ 625.954726][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1718'. [ 625.976940][T12380] netlink: 'syz.5.1718': attribute type 21 has an invalid length. [ 626.010272][ T9] usb 1-1: Invalid number of CPorts: 0 [ 626.020512][ T9] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -22 [ 626.232029][ T30] audit: type=1800 audit(1755475361.633:233): pid=12359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1712" name="bus" dev="overlay" ino=1073 res=0 errno=0 [ 626.238580][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.252672][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.280042][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.317944][ T9] usb 1-1: USB disconnect, device number 56 [ 626.342590][T12383] CIFS: VFS: Malformed UNC in devname [ 626.808932][T12389] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 626.911267][T12393] vlan3: entered allmulticast mode [ 626.924165][T12393] team0: entered allmulticast mode [ 626.955446][T12393] team_slave_1: entered allmulticast mode [ 626.964638][T12393] dummy0: entered allmulticast mode [ 626.992316][T12393] team0: Device vlan3 is already an upper device of the team interface [ 627.409164][T12410] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.284884][ T5830] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 628.445488][ T5830] usb 6-1: device descriptor read/64, error -71 [ 628.888723][ T5830] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 629.102127][T12446] netlink: 'syz.3.1739': attribute type 10 has an invalid length. [ 629.113844][T12444] overlayfs: overlapping lowerdir path [ 629.127442][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 629.175366][ T5830] usb 6-1: device descriptor read/64, error -71 [ 629.286835][ T5830] usb usb6-port1: attempt power cycle [ 629.906422][ T5830] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 629.937180][ T5830] usb 6-1: device descriptor read/8, error -71 [ 630.175353][ T5830] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 630.216025][ T5830] usb 6-1: device descriptor read/8, error -71 [ 630.369370][ T5830] usb usb6-port1: unable to enumerate USB device [ 631.495964][T12470] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 631.749640][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 632.039348][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 632.069919][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 632.147510][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 633.188287][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.202926][T12470] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 633.284534][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.446066][ T5918] usb 6-1: USB disconnect, device number 40 [ 645.721868][T12530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1761'. [ 646.035447][ T24] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 646.212653][ T24] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 646.223358][ T24] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 646.242130][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 646.254119][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 646.270399][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 646.312901][ T5918] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 646.370124][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 646.385908][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 646.411660][ T24] usb 6-1: language id specifier not provided by device, defaulting to English [ 646.435061][ T24] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 646.449942][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.464764][ T24] usb 6-1: Manufacturer: ␉ [ 646.487338][ T24] usb 6-1: config 0 descriptor?? [ 646.500118][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 646.510755][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 646.530553][ T24] input: ␉ as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 646.556020][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 646.568979][ T5918] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 646.623191][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.646340][ T5918] usb 1-1: Product: syz [ 646.654110][ T5918] usb 1-1: Manufacturer: syz [ 646.670691][ T5918] usb 1-1: SerialNumber: syz [ 646.681748][ T5918] usb 1-1: config 0 descriptor?? [ 646.908766][ T5918] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 646.937668][ T5918] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 647.114900][ T5918] usb 1-1: USB disconnect, device number 57 [ 647.223689][ T24] usb 6-1: USB disconnect, device number 41 [ 647.541651][T12561] wg1 speed is unknown, defaulting to 1000 [ 647.755618][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 648.021343][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 648.045306][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.099341][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 648.127287][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 648.169894][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.219754][T12559] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 648.313881][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.665105][ T24] usb 6-1: USB disconnect, device number 42 [ 648.822371][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 648.895665][ C1] hrtimer: interrupt took 26470 ns [ 650.550438][T12610] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 650.625611][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 650.635504][ T5918] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 650.710570][T12613] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 650.788027][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.801601][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.805986][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 650.814836][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 650.829927][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.843848][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.862198][ T5918] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 650.870603][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.881878][ T5918] usb 6-1: config 0 has no interface number 0 [ 650.889073][ T5918] usb 6-1: config 0 interface 95 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 650.890052][ T9] usb 1-1: config 0 descriptor?? [ 650.900810][ T5918] usb 6-1: config 0 interface 95 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 650.916992][ T5918] usb 6-1: config 0 interface 95 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 650.928837][ T5918] usb 6-1: config 0 interface 95 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 650.943232][ T5918] usb 6-1: config 0 interface 95 altsetting 0 endpoint 0x87 has invalid maxpacket 23774, setting to 1024 [ 650.956684][ T5918] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 650.969931][ T5918] usb 6-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 650.991428][ T5918] usb 6-1: config 0 interface 95 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 651.004266][ T5918] usb 6-1: config 0 interface 95 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 651.019592][ T5918] usb 6-1: config 0 interface 95 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 651.031590][ T5918] usb 6-1: config 0 interface 95 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 651.049939][ T5918] usb 6-1: New USB device found, idVendor=0f11, idProduct=1101, bcdDevice=cb.62 [ 651.060482][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.069730][ T5918] usb 6-1: Product: syz [ 651.074149][ T5918] usb 6-1: Manufacturer: syz [ 651.079894][ T5918] usb 6-1: SerialNumber: syz [ 651.089326][ T5918] usb 6-1: config 0 descriptor?? [ 651.098859][T12602] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 651.121972][ T5918] ldusb 6-1:0.95: Interrupt in endpoint not found [ 651.250149][T12618] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 651.259711][T12618] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 651.272337][T12618] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1790'. [ 651.364065][T12621] usb usb7: usbfs: process 12621 (syz.6.1791) did not claim interface 0 before use [ 651.844774][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.853201][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.864864][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.885465][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.893350][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.901058][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x2 [ 651.913272][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.922780][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.930809][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.938873][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.954825][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.963707][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.980918][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 651.997122][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 652.004678][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 652.026229][ T9] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 652.060226][ T9] usb 1-1: USB disconnect, device number 58 [ 652.325779][ T5947] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 652.405525][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 652.477253][ T5947] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 652.488505][ T5947] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 652.499121][ T5947] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 652.508507][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.519554][T12631] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 652.531761][ T5947] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.538995][ T9] usb 1-1: device descriptor read/64, error -71 [ 652.732669][ T5918] usb 7-1: USB disconnect, device number 9 [ 652.785718][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 652.915418][ T9] usb 1-1: device descriptor read/64, error -71 [ 652.978872][T12643] netlink: 'syz.3.1797': attribute type 12 has an invalid length. [ 652.990938][T12643] overlayfs: failed to clone upperpath [ 653.039214][ T9] usb usb1-port1: attempt power cycle [ 653.341754][T12649] 9pnet_fd: Insufficient options for proto=fd [ 654.345861][ T9] usb 6-1: USB disconnect, device number 43 [ 654.558589][T12657] netlink: 'syz.5.1803': attribute type 29 has an invalid length. [ 654.681585][T12657] netlink: 'syz.5.1803': attribute type 29 has an invalid length. [ 654.843017][T12657] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1803'. [ 657.011332][T12664] binder: 12661:12664 ioctl c00c620f 200000000140 returned -22 [ 657.038959][T12664] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1801'. [ 657.049354][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1801'. [ 657.121559][T12673] vlan0: entered promiscuous mode [ 657.449497][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 658.105364][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.126541][ T9] usb 1-1: config 0 has no interfaces? [ 658.151326][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.171714][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.226935][ T9] usb 1-1: Product: syz [ 658.231238][ T9] usb 1-1: Manufacturer: syz [ 658.302057][ T9] usb 1-1: config 0 descriptor?? [ 658.403427][T12681] wg1 speed is unknown, defaulting to 1000 [ 659.073479][ T5918] usb 1-1: USB disconnect, device number 62 [ 660.002100][T12703] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 661.456407][T12717] fuse: Bad value for 'user_id' [ 661.462412][T12716] netlink: 'syz.6.1815': attribute type 29 has an invalid length. [ 661.491262][T12717] fuse: Bad value for 'user_id' [ 661.558258][T12716] netlink: 'syz.6.1815': attribute type 29 has an invalid length. [ 661.618844][T12721] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1815'. [ 661.849958][T12725] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1818'. [ 663.134777][T12747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.807260][T12758] ip6gretap0: entered promiscuous mode [ 663.812928][T12758] vlan3: entered promiscuous mode [ 663.854318][T12756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1828'. [ 663.856565][T12760] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 663.867753][T12756] overlayfs: failed to resolve '/': -2 [ 664.105062][T12760] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 664.395694][ T5904] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 664.484608][T12760] overlayfs: missing 'lowerdir' [ 664.592639][ T5904] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 665.069133][ T5904] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 665.095030][ T5904] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 665.107903][T12771] program syz.4.1831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.147031][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.191985][T12768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 665.202547][ T5904] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 665.411834][ T5904] usb 1-1: USB disconnect, device number 63 [ 665.941628][T12799] ptrace attach of "./syz-executor exec"[9226] was attempted by "C\x075[xcv@])ϹЪL\x0c\x09oLLw ¯2\x0bVS\x0dX^k7aI'˄?$`g``r@BeHVk<[sW@Ƶ;s93\x0d,2]>.[ }{)R95D2A\x0dE3,ʆUvNFt_ax\x07$,WW/'eo3O((kݒG?c_cǕh\x0a4l%?>CAڽp[k\x0d\x0bd1Z];nSiQQY[zeDopZ_HxG!52)v97P.kefx=ӆv  t޲[s.9>#ז* B@hKgKiFVODONQ0#. Gxr>|5_aT8!J!pU^GW'vT}ǩX\x0a&KdemVgo+V`Z\x0b$bI NWBȨl}#auY9ڌ^\x22]<\x0d5((F_b`Ȓ\x22\x0cT}dNZk07М?mm]\x22/#Yc` 'A\x1bY*<_ʔw\x1b[^AhNZʘ\x22^Zӹ|7@T[''8{%\x09\x0dH<+đFrp\x0aAN'ׂYq\x07+:=ʀe/&J\x1b\x22 [ 666.835981][ T5919] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 667.080476][T12813] input: syz1 as /devices/virtual/input/input33 [ 667.100196][ T5919] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 667.124417][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 667.143063][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 667.234864][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50176, setting to 1024 [ 667.266968][T12819] syz.0.1843: attempt to access beyond end of device [ 667.266968][T12819] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 667.282098][T12819] gfs2: error -5 reading superblock [ 667.287778][ T5919] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 667.303584][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.376350][ T5919] usb 7-1: Product: syz [ 667.380608][ T5919] usb 7-1: Manufacturer: syz [ 667.390248][ T5919] usb 7-1: SerialNumber: syz [ 667.404043][ T5919] usb 7-1: config 0 descriptor?? [ 667.417637][ T5919] usb 7-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 667.524934][T12823] loop6: detected capacity change from 0 to 7 [ 667.535388][T12823] Dev loop6: unable to read RDB block 7 [ 667.541101][T12823] loop6: unable to read partition table [ 667.547921][T12823] loop6: partition table beyond EOD, truncated [ 667.554272][T12823] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 667.871070][ T5919] usb 7-1: USB disconnect, device number 10 [ 668.412432][T12836] netlink: 'syz.3.1850': attribute type 29 has an invalid length. [ 668.424986][T12836] netlink: 'syz.3.1850': attribute type 29 has an invalid length. [ 668.447004][T12836] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1850'. [ 668.484499][T12825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.186150][ T5904] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 671.464131][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 671.474523][T12881] netlink: 'syz.5.1862': attribute type 29 has an invalid length. [ 671.478305][ T5904] usb 7-1: config 83 has an invalid interface number: 255 but max is 3 [ 671.490568][T12881] netlink: 'syz.5.1862': attribute type 29 has an invalid length. [ 671.501038][T12881] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1862'. [ 671.520337][ T5904] usb 7-1: config 83 has an invalid interface number: 40 but max is 3 [ 671.550987][ T5904] usb 7-1: config 83 contains an unexpected descriptor of type 0x1, skipping [ 671.575494][ T5904] usb 7-1: config 83 has an invalid interface number: 132 but max is 3 [ 671.634920][ T5904] usb 7-1: config 83 contains an unexpected descriptor of type 0x1, skipping [ 671.680750][ T5904] usb 7-1: config 83 has an invalid interface number: 249 but max is 3 [ 671.755724][ T5904] usb 7-1: config 83 has no interface number 0 [ 671.769859][ T5904] usb 7-1: config 83 has no interface number 1 [ 671.795464][ T5904] usb 7-1: config 83 has no interface number 2 [ 671.940174][ T5904] usb 7-1: config 83 has no interface number 3 [ 671.947032][ T5904] usb 7-1: config 83 interface 255 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 671.958356][ T5904] usb 7-1: config 83 interface 255 altsetting 2 bulk endpoint 0x89 has invalid maxpacket 32 [ 671.969964][ T5904] usb 7-1: config 83 interface 255 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 671.981109][ T5904] usb 7-1: config 83 interface 255 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 672.012711][ T5904] usb 7-1: config 83 interface 255 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 672.372226][ T5904] usb 7-1: config 83 interface 255 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 672.384276][ T5904] usb 7-1: config 83 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 672.395758][ T5904] usb 7-1: config 83 interface 255 altsetting 2 endpoint 0x4 has an invalid bInterval 255, changing to 7 [ 672.409211][ T5904] usb 7-1: config 83 interface 255 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 672.420221][ T5904] usb 7-1: config 83 interface 40 altsetting 3 endpoint 0xB has invalid maxpacket 1056, setting to 1024 [ 672.431453][ T5904] usb 7-1: config 83 interface 40 altsetting 3 bulk endpoint 0xB has invalid maxpacket 1024 [ 672.442846][ T5904] usb 7-1: config 83 interface 40 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 672.454559][ T5904] usb 7-1: config 83 interface 40 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 672.497594][ T5904] usb 7-1: config 83 interface 40 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 672.531702][ T5904] usb 7-1: config 83 interface 40 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 672.553830][ T5904] usb 7-1: config 83 interface 40 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 672.580128][ T5904] usb 7-1: config 83 interface 40 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 672.615474][ T5904] usb 7-1: config 83 interface 40 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 672.656905][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 672.699822][ T30] audit: type=1326 audit(1755475408.093:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12894 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 672.725305][ T5904] usb 7-1: config 83 interface 132 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 672.771608][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 672.799680][ T30] audit: type=1326 audit(1755475408.093:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12894 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 672.839205][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 672.861691][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 672.883277][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 672.904900][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 672.935801][ T5904] usb 7-1: config 83 interface 132 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 672.986601][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 673.008460][ T5904] usb 7-1: config 83 interface 132 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 673.033380][ T30] audit: type=1326 audit(1755475408.433:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12894 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 673.064930][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 673.122237][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 673.138077][ T30] audit: type=1326 audit(1755475408.483:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12894 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 673.171883][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 673.195360][ T5904] usb 7-1: config 83 interface 132 altsetting 3 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 673.269146][ T5904] usb 7-1: config 83 interface 249 altsetting 168 has a duplicate endpoint with address 0x4, skipping [ 673.295495][ T5904] usb 7-1: config 83 interface 249 altsetting 168 has a duplicate endpoint with address 0x1, skipping [ 673.322442][ T5904] usb 7-1: config 83 interface 249 altsetting 168 has a duplicate endpoint with address 0x2, skipping [ 673.334698][ T5904] usb 7-1: config 83 interface 249 altsetting 168 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 673.376133][ T5904] usb 7-1: config 83 interface 249 altsetting 168 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 673.405406][ T30] audit: type=1326 audit(1755475408.803:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12911 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fff8ebe9 code=0x7ffc0000 [ 673.429478][ T5904] usb 7-1: config 83 interface 249 altsetting 168 has a duplicate endpoint with address 0x8C, skipping [ 673.457671][ T30] audit: type=1326 audit(1755475408.803:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12911 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f02fff8ebe9 code=0x7ffc0000 [ 673.485333][ T5904] usb 7-1: config 83 interface 249 altsetting 168 has a duplicate endpoint with address 0x3, skipping [ 673.502803][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 673.525537][ T5904] usb 7-1: config 83 interface 249 altsetting 168 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 673.562750][ T30] audit: type=1326 audit(1755475408.803:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12911 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fff8ebe9 code=0x7ffc0000 [ 673.595297][ T5904] usb 7-1: config 83 interface 255 has no altsetting 0 [ 673.602228][ T5904] usb 7-1: config 83 interface 40 has no altsetting 0 [ 673.636277][ T5845] Bluetooth: hci1: command 0x0405 tx timeout [ 673.655351][ T5904] usb 7-1: config 83 interface 132 has no altsetting 0 [ 673.662303][ T5904] usb 7-1: config 83 interface 249 has no altsetting 0 [ 673.700791][ T30] audit: type=1326 audit(1755475408.803:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12911 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fff8ebe9 code=0x7ffc0000 [ 673.733482][ T5904] usb 7-1: string descriptor 0 read error: -71 [ 673.751076][ T5904] usb 7-1: New USB device found, idVendor=1f4d, idProduct=c803, bcdDevice=f6.e1 [ 673.775373][ T30] audit: type=1326 audit(1755475408.853:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12910 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 673.785274][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.844312][ T30] audit: type=1326 audit(1755475408.853:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12910 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1702590b07 code=0x7ffc0000 [ 673.848609][ T5904] usb 7-1: can't set config #83, error -71 [ 673.890001][ T5904] usb 7-1: USB disconnect, device number 11 [ 673.943188][T12931] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1883'. [ 673.963626][T12931] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1883'. [ 674.580250][T12958] loop9: detected capacity change from 0 to 7 [ 674.594608][T12958] buffer_io_error: 6 callbacks suppressed [ 674.594630][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 674.634187][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 674.681846][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 674.727515][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 674.756044][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 674.916361][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 674.995542][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 675.085661][T12958] ldm_validate_partition_table(): Disk read failed. [ 675.092421][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 675.175578][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 675.183633][T12958] Buffer I/O error on dev loop9, logical block 0, async page read [ 675.286100][T12958] Dev loop9: unable to read RDB block 0 [ 675.292083][T12958] loop9: unable to read partition table [ 675.348532][T12958] loop9: partition table beyond EOD, truncated [ 675.404596][T12958] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 675.404596][T12958] ) failed (rc=-5) [ 677.370913][T13049] team0: No ports can be present during mode change [ 677.401660][T13054] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 677.630817][T13060] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1919'. [ 678.204547][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 678.229399][T13075] openvswitch: netlink: Flow key attr not present in new flow. [ 678.242997][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 678.243019][ T30] audit: type=1326 audit(1755475413.643:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 678.331473][ T30] audit: type=1326 audit(1755475413.643:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 678.384442][ T30] audit: type=1326 audit(1755475413.643:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 678.456004][ T30] audit: type=1326 audit(1755475413.643:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 678.623646][ T30] audit: type=1326 audit(1755475413.643:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 678.689968][ T30] audit: type=1326 audit(1755475413.643:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 679.055492][ T30] audit: type=1326 audit(1755475413.643:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 679.114509][ T30] audit: type=1326 audit(1755475413.643:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 679.138960][T13091] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1931'. [ 679.193646][ T30] audit: type=1326 audit(1755475413.643:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 679.262489][ T30] audit: type=1326 audit(1755475413.643:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13076 comm="syz.6.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 679.596335][T13104] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 680.602860][T13128] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 680.649962][T13129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1945'. [ 680.677558][T13125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1945'. [ 681.427263][T13149] tipc: Enabled bearer , priority 10 [ 681.474715][T13149] tipc: Bearer : already 2 bearers with priority 10 [ 681.484391][T13149] tipc: Bearer : trying with adjusted priority [ 681.495381][T13149] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 681.510373][T13149] tipc: Enabled bearer , priority 9 [ 681.530603][T13153] netlink: 'syz.5.1958': attribute type 11 has an invalid length. [ 681.890626][T13159] netlink: 'syz.4.1961': attribute type 21 has an invalid length. [ 681.909235][T13159] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1961'. [ 682.078287][T13164] netlink: 'syz.5.1963': attribute type 21 has an invalid length. [ 682.091295][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 682.113359][T13167] openvswitch: netlink: Flow key attr not present in new flow. [ 682.171598][T13167] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 682.213033][T13167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1962'. [ 682.252344][T13167] team0: entered promiscuous mode [ 682.297377][T13167] team_slave_0: entered promiscuous mode [ 682.325731][T13167] team_slave_1: entered promiscuous mode [ 682.346874][T13167] team0: entered allmulticast mode [ 682.365359][T13167] team_slave_0: entered allmulticast mode [ 682.391067][T13167] team_slave_1: entered allmulticast mode [ 682.431617][T13167] bridge0: port 3(team0) entered blocking state [ 682.464211][T13167] bridge0: port 3(team0) entered disabled state [ 682.475786][T13167] bridge0: port 3(team0) entered blocking state [ 682.482273][T13167] bridge0: port 3(team0) entered forwarding state [ 682.859799][ T5897] IPVS: starting estimator thread 0... [ 682.958397][T13188] IPVS: using max 22 ests per chain, 52800 per kthread [ 684.902242][T13018] Set syz1 is full, maxelem 65536 reached [ 685.121561][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 685.121583][ T30] audit: type=1326 audit(1755475420.523:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.225739][ T30] audit: type=1326 audit(1755475420.523:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.254703][ T30] audit: type=1326 audit(1755475420.523:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.281117][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1990'. [ 685.353014][ T30] audit: type=1326 audit(1755475420.523:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.362593][T13234] wg1 speed is unknown, defaulting to 1000 [ 685.380091][ T30] audit: type=1326 audit(1755475420.523:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.405155][ T30] audit: type=1326 audit(1755475420.523:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.456134][ T30] audit: type=1326 audit(1755475420.523:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.506085][ T30] audit: type=1326 audit(1755475420.523:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.592943][ T30] audit: type=1326 audit(1755475420.523:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 685.599446][T13236] wg1 speed is unknown, defaulting to 1000 [ 685.664313][ T30] audit: type=1326 audit(1755475420.523:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 686.123116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.308548][T13257] netlink: 'syz.0.1997': attribute type 21 has an invalid length. [ 686.335584][T13257] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1997'. [ 687.242889][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2002'. [ 687.288088][T13268] usb usb8: usbfs: process 13268 (syz.6.2002) did not claim interface 0 before use [ 687.868507][T13288] tipc: Enabling of bearer rejected, already enabled [ 688.438173][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 688.476867][T13296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2015'. [ 688.926025][T13316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2022'. [ 689.550481][T13341] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2034'. [ 689.754970][T13351] netlink: 'syz.5.2039': attribute type 4 has an invalid length. [ 689.811604][T13351] netlink: 'syz.5.2039': attribute type 4 has an invalid length. [ 689.843880][T13353] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 689.985844][T13353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.079225][T13359] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 690.300782][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 690.300804][ T30] audit: type=1326 audit(1755475425.703:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.423323][ T30] audit: type=1326 audit(1755475425.703:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.500749][ T30] audit: type=1326 audit(1755475425.703:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.537189][ T30] audit: type=1326 audit(1755475425.703:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.569161][T13374] wg1 speed is unknown, defaulting to 1000 [ 690.627877][ T30] audit: type=1326 audit(1755475425.703:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.698508][ T30] audit: type=1326 audit(1755475425.703:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.744871][ T30] audit: type=1326 audit(1755475425.753:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.850400][ T30] audit: type=1326 audit(1755475425.793:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 690.971617][ T30] audit: type=1326 audit(1755475425.793:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 691.049539][ T30] audit: type=1326 audit(1755475425.793:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 691.359327][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 691.387427][T13404] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 691.508882][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 691.528699][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 692.209520][T13440] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 692.665080][T13462] netlink: 'syz.3.2078': attribute type 21 has an invalid length. [ 692.683434][T13462] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2078'. [ 695.488000][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 695.488021][ T30] audit: type=1326 audit(1755475430.893:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.584031][ T30] audit: type=1326 audit(1755475430.923:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.607469][ T30] audit: type=1326 audit(1755475430.923:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.629505][ T30] audit: type=1326 audit(1755475430.933:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.684852][ T30] audit: type=1326 audit(1755475431.083:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.710069][ T30] audit: type=1326 audit(1755475431.083:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.785490][ T30] audit: type=1326 audit(1755475431.083:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.844696][ T30] audit: type=1326 audit(1755475431.083:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.942030][ T30] audit: type=1326 audit(1755475431.083:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439f8ebe9 code=0x7ffc0000 [ 695.993352][ T30] audit: type=1326 audit(1755475431.373:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13527 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2f8ebe9 code=0x7ffc0000 [ 696.503899][T13553] program syz.5.2113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.617920][T13557] 9pnet_fd: Insufficient options for proto=fd [ 697.648153][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 698.282606][T13602] tipc: Bearer : already 2 bearers with priority 10 [ 698.314590][T13602] tipc: Bearer : trying with adjusted priority [ 698.332297][T13602] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 698.621731][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 698.963637][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2146'. [ 699.206384][T13630] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2151'. [ 699.232607][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2151'. [ 699.259195][T13630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.273356][T13630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.311784][T13630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.348257][T13630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.375846][T13639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2154'. [ 699.878298][T13656] netlink: 'syz.0.2161': attribute type 6 has an invalid length. [ 701.297904][T13689] pim6reg1: entered promiscuous mode [ 701.303334][T13689] pim6reg1: entered allmulticast mode [ 701.672273][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 701.672294][ T30] audit: type=1326 audit(1755475437.073:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.3.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 701.743092][ T30] audit: type=1326 audit(1755475437.113:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.3.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 701.783106][ T30] audit: type=1326 audit(1755475437.113:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.3.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 701.837601][ T30] audit: type=1326 audit(1755475437.113:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.3.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 701.908427][ T30] audit: type=1326 audit(1755475437.113:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13703 comm="syz.3.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 701.964778][T13712] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 702.146107][T13720] : renamed from wg2 (while UP) [ 702.170073][ T30] audit: type=1326 audit(1755475437.573:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 702.219094][ T30] audit: type=1326 audit(1755475437.593:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 702.267322][ T30] audit: type=1326 audit(1755475437.593:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 702.329275][ T30] audit: type=1326 audit(1755475437.593:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 702.404472][ T30] audit: type=1326 audit(1755475437.593:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.4.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170258ebe9 code=0x7ffc0000 [ 702.822715][T13751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2203'. [ 703.360213][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2213'. [ 703.370874][T13771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.384421][T13771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.393871][T13771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.410330][T13771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.603994][T13778] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2217'. [ 706.501099][T13847] syz.3.2250 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 706.715595][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 706.715617][ T30] audit: type=1326 audit(1755475442.123:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 706.805610][ T30] audit: type=1326 audit(1755475442.123:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 706.866938][ T30] audit: type=1326 audit(1755475442.123:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 706.941909][ T30] audit: type=1326 audit(1755475442.153:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 707.011665][ T30] audit: type=1326 audit(1755475442.153:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 707.097400][ T30] audit: type=1326 audit(1755475442.153:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 707.154829][ T30] audit: type=1326 audit(1755475442.153:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 707.238613][ T30] audit: type=1326 audit(1755475442.153:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 707.305321][ T30] audit: type=1326 audit(1755475442.153:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 707.376041][ T30] audit: type=1326 audit(1755475442.153:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91a78ebe9 code=0x7ffc0000 [ 707.417528][T13864] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 707.447977][T13864] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 13864, name: syz.4.2256 [ 707.485677][T13864] 2 locks held by syz.4.2256/13864: [ 707.505406][T13864] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 707.537577][T13864] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 707.566605][T13864] CPU: 0 UID: 0 PID: 13864 Comm: syz.4.2256 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 707.566638][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 707.566652][T13864] Call Trace: [ 707.566661][T13864] [ 707.566671][T13864] dump_stack_lvl+0x189/0x250 [ 707.566707][T13864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.566742][T13864] ? print_lock_name+0xde/0x100 [ 707.566777][T13864] __cant_migrate+0x238/0x2e0 [ 707.566807][T13864] ? __pfx___cant_migrate+0x10/0x10 [ 707.566836][T13864] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 707.566872][T13864] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 707.566903][T13864] nf_hook_run_bpf+0x8f/0x1f0 [ 707.566924][T13864] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 707.566958][T13864] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 707.566984][T13864] ? nf_nat_ipv6_out+0x21d/0x380 [ 707.567009][T13864] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 707.567033][T13864] nf_hook_slow+0xc5/0x220 [ 707.567068][T13864] nf_hook+0x217/0x380 [ 707.567103][T13864] ? nf_hook+0x9d/0x380 [ 707.567132][T13864] ? __pfx_nf_hook+0x10/0x10 [ 707.567166][T13864] ? __pfx_ip6_finish_output+0x10/0x10 [ 707.567191][T13864] ? __pfx___ip6_local_out+0x10/0x10 [ 707.567220][T13864] ? __pfx_dst_output+0x10/0x10 [ 707.567243][T13864] ? ip6_send_skb+0x10f/0x390 [ 707.567276][T13864] ip6_output+0x27d/0x3e0 [ 707.567299][T13864] ? __pfx_ip6_finish_output+0x10/0x10 [ 707.567338][T13864] ? ip6_send_skb+0x10f/0x390 [ 707.567378][T13864] ip6_send_skb+0x1d5/0x390 [ 707.567410][T13864] udp_v6_send_skb+0xc17/0x1830 [ 707.567459][T13864] udpv6_sendmsg+0x1bba/0x24c0 [ 707.567497][T13864] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 707.567523][T13864] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 707.567557][T13864] ? __lock_acquire+0xab9/0xd20 [ 707.567597][T13864] ? __local_bh_enable_ip+0x12d/0x1c0 [ 707.567616][T13864] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 707.567650][T13864] ? inet_send_prepare+0x1b9/0x270 [ 707.567676][T13864] ? inet_send_prepare+0x1b9/0x270 [ 707.567706][T13864] ? inet6_sendmsg+0xe4/0x120 [ 707.567734][T13864] __sock_sendmsg+0xe5/0x270 [ 707.567765][T13864] __sys_sendto+0x3bd/0x520 [ 707.567797][T13864] ? __pfx___sys_sendto+0x10/0x10 [ 707.567823][T13864] ? do_futex+0x395/0x420 [ 707.567890][T13864] ? rcu_is_watching+0x15/0xb0 [ 707.567921][T13864] __x64_sys_sendto+0xde/0x100 [ 707.567954][T13864] do_syscall_64+0xfa/0x3b0 [ 707.567978][T13864] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.568000][T13864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.568021][T13864] ? clear_bhb_loop+0x60/0xb0 [ 707.568048][T13864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.568068][T13864] RIP: 0033:0x7f170258ebe9 [ 707.568088][T13864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.568107][T13864] RSP: 002b:00007f17033bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 707.568130][T13864] RAX: ffffffffffffffda RBX: 00007f17027b5fa0 RCX: 00007f170258ebe9 [ 707.568146][T13864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 707.568158][T13864] RBP: 00007f1702611e19 R08: 0000200000000300 R09: 000000000000001c [ 707.568172][T13864] R10: 0000000020000001 R11: 0000000000000246 R12: 0000000000000000 [ 707.568184][T13864] R13: 00007f17027b6038 R14: 00007f17027b5fa0 R15: 00007ffd9382da88 [ 707.568220][T13864]