last executing test programs: 27.082726951s ago: executing program 3 (id=829): r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) unshare(0xc040400) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x14) fcntl$notify(r0, 0x402, 0x8000003d) creat(&(0x7f0000000000)='./file0\x00', 0x0) 27.010968872s ago: executing program 3 (id=830): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40086410, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x1) r5 = fcntl$dupfd(r4, 0x406, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd29, 0x3, {}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x6}}]}, 0x38}}, 0x4002000) r10 = dup(r6) write$UHID_INPUT(r10, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 25.120273034s ago: executing program 3 (id=835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f00000001c0)) close(0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/48, 0x30}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000500)=""/12, 0xc}, 0x6}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000017c0)=""/83, 0x53}], 0x2, &(0x7f0000001900)=""/233, 0xe9}, 0x3ff}, {{&(0x7f0000001a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000003100)=""/4096, 0x1000}, 0x40}, {{0x0, 0x0, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/236, 0xec}, 0x800000}], 0x5, 0x40000202, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x3, "f1c387"}, &(0x7f0000000240)=0xb) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local}}}, 0x3a) 21.261672365s ago: executing program 3 (id=856): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a006300180000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3dd, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x16}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040070) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280), 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@migrate={0xe8, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, 0x0, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x5c}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e22, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xe8}}, 0x0) 16.993741037s ago: executing program 3 (id=871): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [], 0xa, "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"}, 0x223) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) (fail_nth: 6) 16.174514515s ago: executing program 3 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfd}, 0x18) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287090502"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x45, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r5, 0x0, {0x0, 0xf1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xb}, {0x8, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) 11.870855354s ago: executing program 2 (id=888): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) unshare(0xc040400) r1 = open(0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x14) fcntl$notify(r0, 0x402, 0x8000003d) creat(&(0x7f0000000000)='./file0\x00', 0x0) 11.760561542s ago: executing program 2 (id=890): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f00000001c0)) close(0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/48, 0x30}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/173, 0xad}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000017c0)=""/83, 0x53}], 0x2, &(0x7f0000001900)=""/233, 0xe9}, 0x3ff}, {{&(0x7f0000001a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000003100)=""/4096, 0x1000}, 0x40}, {{0x0, 0x0, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/236, 0xec}, 0x800000}], 0x5, 0x40000202, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x3, "f1c387"}, &(0x7f0000000240)=0xb) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local}}}, 0x3a) 8.394534948s ago: executing program 2 (id=902): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a006300180000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3dd, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x16}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040070) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280), 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@migrate={0xe8, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, 0x0, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x5c}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e22, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xe8}}, 0x0) 8.018119077s ago: executing program 1 (id=905): unshare(0x24020400) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0x2, 0xa, 0x7f, 0x0, 0xa4, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, @sadb_ident={0x2, 0xa, 0xe, 0x0, 0x3}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_sec_ctx={0x99, 0x18, 0x4, 0x2, 0x4b9, "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"}]}, 0x520}}, 0x2000c000) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x60, &(0x7f0000001100)}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') (async) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6(0xa, 0x802, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 32) r8 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080)={0x800000, 0x0, 0x21}, 0x18) linkat(r8, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file7\x00', 0xa00) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0x8, 0x2, 0x0, 0x2, 0x6, 0xe, 0xfe, 0xfd, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x4, 0x8000000000005}) 7.780043074s ago: executing program 1 (id=907): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x4f, 0x0, "4112b0eab147b9ae45f74f98770abe97f34292f38ee1fa964dc642eebd353fd01c47dd45ed968f9a341c1a0bb521134e836f2e2506ce34f489a59658403035ef4f69920faf2ff2356f03749ea330c857"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x17, 0x0, "437666fbcc7d512eb54f12fa8716ead6746d64114badddad356760c4d30fd0b51da8fb0b746b3a483c4a094960405afba06fed802fd6dd954f71c6e69cffa1729d514c9db1efb997bd997e221b4ef57e"}, 0xd8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) rseq(0x0, 0x0, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x34, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x9, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @ldst={0x1, 0x2, 0x6, 0x8, 0x6, 0x18, 0x10}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xad}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x1000, 0x52, &(0x7f00000002c0)=""/82, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x1, 0x2, 0x8, 0x1}, {0x3, 0x3, 0x4, 0x4}, {0x2, 0x1, 0xb, 0xa}, {0x3, 0x5, 0x1, 0xc}, {0x5, 0x5, 0x9, 0x4}, {0x0, 0x4, 0x6, 0x3}, {0x0, 0x4, 0x6, 0x9}, {0x3, 0x4, 0x9, 0x2}, {0x1, 0x2, 0x9, 0x4}, {0x2, 0x1, 0x5, 0xb}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x16, &(0x7f0000000940)=@raw=[@generic={0x4, 0x8, 0x3, 0x2, 0x5}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0x9, &(0x7f0000000a40)=""/9, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x7, 0x1392bb1f, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40)=[{0x2, 0x4, 0x1, 0xc}, {0x1, 0x3, 0xa, 0x6}], 0x10, 0x0, @void, @value}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000b00)=0x1, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r3, 0x55) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000100)) 6.530506455s ago: executing program 1 (id=909): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x1100, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 6.434875735s ago: executing program 0 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x2000000, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0x40020}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004850) 6.314239997s ago: executing program 1 (id=912): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f00000001c0)) close(0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/48, 0x30}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/173, 0xad}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000017c0)=""/83, 0x53}], 0x2, &(0x7f0000001900)=""/233, 0xe9}, 0x3ff}, {{&(0x7f0000001a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000003100)=""/4096, 0x1000}, 0x40}, {{0x0, 0x0, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=""/236, 0xec}, 0x800000}], 0x5, 0x40000202, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x3, "f1c387"}, &(0x7f0000000240)=0xb) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local}}}, 0x3a) 6.167027531s ago: executing program 0 (id=913): r0 = socket(0x2, 0x80805, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x54, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x30, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x2c, 0x1, {0x7f, 0x28, 0x1, 0x6, 0x200, [@local, @local]}}}]}, 0x54}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002840)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x3a}]}, 0x8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) chdir(&(0x7f0000000480)='./cgroup\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) lseek(r5, 0x1, 0x1) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000180)={r6, r7, r7, 0x42000000, 0x9, 0x80000001, 0x0, 0x2, 0x4000000, 0xd}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.735027398s ago: executing program 0 (id=914): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0x12, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xf3, 0x0, &(0x7f0000010140)) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2c6001) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008902"]) dup(r2) r6 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0xe, 0xff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1203000247b214d9bd937800be61010203010902000002060512002bde0220bccf69f60000090406f500b0eb6e"], &(0x7f0000000240)={0x61, 0x0, 0x2c, 0x0}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x43, 0x19ef, 0x3, 0x4, 0x1, 0xff, 0x2, 0xba2, 0x8, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) 5.071800724s ago: executing program 2 (id=915): r0 = socket$inet(0xa, 0x1, 0x1) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000005bb04000000000000001d933825594f4910382a88c3afd51c9b6a97000000000000001fa9002172a00024718cb2ab6bb9e32d0d227e25fe4ca534fe6a151a1fde4e90aa275cde124725d6550f2c842ad3fafe338e33f251400f8f6da9273e3d51aa8cd2bac06c434f8219ec9278b2b591aba58e47c59f518319fb9e339e9513a552b07ed4b388e7d2471bec7effa4874385de19a018beb26cdae92d6c5926e62e6d88da5e617406ae38723b61fed3c0de913e7ed7", @ANYRESHEX=r3, @ANYBLOB="8720040000000000240012800b00010062726964676500001400028005001700000000000500180001000000"], 0x44}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0xc040) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000002c0)={0x2, 0x2, 'client0\x00', 0x3, "da182e8025208309", "011448beb2423d0c088ac8ccdbba3b5b18fac68bef5e04a47cc479bb23577571", 0x8, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) listen(r0, 0xffffffff) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)="e76bb8ccb6cd8249c73ee42e386c48fc4932fd2224ba4ab02a8728b4bed9f375037e2d6d004ba01f5e0e471e145f8c37ff95cdb3278c92d8d3bdfad3b76c0ee0aa31a4ebfa5e4b9fbdf6c716b4b9b4820f92313f88af0c2fab9f3e361f2463a597f909545c532a46903c15d2f8ebfdd404aafad2fb19640d7f5df6da84079e905bb3865b9f2364c8046bb8723c7b41b32a101ad289ff450830a3", 0x9a}, {&(0x7f00000002c0)="985163b9eef7abcd8aad7fb30d3580", 0xf}], 0x3, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c00000004000000040000000900002084400600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/12], 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb300102130109952901f70b004f450904000000d076d80e58735a4a198e2210224a40cfe3d9b0d3c7d4df14a312fe108446d1e1f4489e20c6d755800ae9fc642365bdfd24260bf9821fdf6a7900000000b0557708fcbdd0e8e84daeca4fd1ff81229a947243da2cfef3fde7bf6c99df05fe8697"], 0x0) 3.168296922s ago: executing program 1 (id=918): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x98, 0x10001]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0xc0801) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88d40, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xfffffffa) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x11, "00769a7d8200010000001495595915303d6000"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300220009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="400307"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00') socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="46050200340f3c000600002fb96dbcf706060000170000005f", 0x19}], 0x1}, 0x9cdc2384056b48b8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="22c6bfc899a745f97f02611a1e7358f6461e3c47d1a1ea18ea508b297e746bae799a8b3eb573249c6702994f84efa935b0f52a1c812559f53769050bcc1d425fb36186b31d31ad795727c0a8119029f66fbb45cff2f5a3ed", @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYRES32], 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'vlan1\x00', 0x3}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x2, 0x4, 0xdddd0000, 0x1000, &(0x7f00006b4000/0x1000)=nil}) 3.035945233s ago: executing program 4 (id=919): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r1, &(0x7f0000004380)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x20000000}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000007c0)="d097502371", 0x5}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x814) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0x7}, 0x8) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)=0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x40, 0x163b, 0x8, 0x3, 0x6be3, 0x5, 0x4, 0x5, r9}, &(0x7f0000000040)=0x20) 2.573654584s ago: executing program 4 (id=920): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000580)={0x0, 0x0}) close(r0) syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) pipe2(&(0x7f00000000c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x1000, 0x74281) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x8000000000000001, 0x0, 0xc3ad, 0x0, 0x3}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x7, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x9, 0xffffffff, 0x7}, 0x0, 0x0) 2.484172717s ago: executing program 4 (id=921): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) mq_timedsend(r0, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9", 0x7e9, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102360, 0xfffffe36, 0x40000000, 0x0) 2.426064167s ago: executing program 0 (id=922): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) (async) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x2) (async) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000380)=""/73, 0x49}], 0x2) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$key(0xf, 0x3, 0x2) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x3, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}, {{0xa, 0x4e21, 0xffff8000, @rand_addr=' \x01\x00', 0x80000000}}}, 0x104) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) (async) ppoll(&(0x7f0000000000)=[{r1, 0x6490}, {r1, 0xa512}, {r1, 0x43}, {r0, 0x8000}, {r1, 0x51c5b47dd0432654}, {r8, 0x2}, {r0, 0x2}], 0x7, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)={[0x5, 0xf1cc]}, 0x8) (async) shutdown(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2.175801829s ago: executing program 0 (id=923): socket(0x2, 0x80805, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) (fail_nth: 6) 1.685560066s ago: executing program 0 (id=924): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'ip6gretap0\x00', 0x1000}) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000040)=0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c831, 0xffffffffffffffff, 0xd2d6f000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100001300010000000000000000001c01008085013ee98bf0a850b89d66cc57fa58ef4a05a90632128e77f035870bacbd517779f932ac75f1cda52be47ee9aa28ee08000000d25f00dd058c29e21040"], 0x12c}], 0x1}, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$midi(r1, &(0x7f0000000080)=""/181, 0xb5) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500022f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRESOCT, @ANYBLOB="86c05872288f71581a816b1188238500f1c734cc399f2d62ebfe8d6805d9757de73bbf5bceb3b8a80fda191bcd06a5"], 0x0) mbind(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') ioctl$KDSETMODE(r6, 0x4b3a, 0x1) preadv(r6, &(0x7f0000000040), 0x0, 0xffffffff, 0xfffffff9) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) 1.574366159s ago: executing program 2 (id=925): io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="91", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x800, r1, 0x0, 0x0, 0x7}]) r2 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r2) 1.573482741s ago: executing program 4 (id=926): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20040, 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001b0001000000139f50d7865795a0000000d16e31ac00000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000a0010000600000000000000"], 0xc4}}, 0x0) r2 = getpid() r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="aabbcc", 0x3}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0xa000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x430101, 0x0) 1.424422253s ago: executing program 4 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0x40020}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004850) 1.350684865s ago: executing program 4 (id=928): syz_usb_connect(0x6, 0x7a, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x66d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0xfffffffd}}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x4011) ioctl$TCFLSH(r1, 0x541b, 0xffefff1f00000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xc, 0x4004, 0x0, 'queue1\x00', 0xfffffffd}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100}, 0x0, {0x3}, 0x0, 0x1}) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x111, 0xffffffffffffffff, 0x454d6000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x404002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd31, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x3}, {0x0, 0x4}, {0x0, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r8 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r11, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x9) close_range(r2, 0xffffffffffffffff, 0x0) 449.959225ms ago: executing program 2 (id=929): syz_usb_connect(0x3, 0x8c6, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (fail_nth: 6) 384.419018ms ago: executing program 32 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfd}, 0x18) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287090502"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x45, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r5, 0x0, {0x0, 0xf1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xb}, {0x8, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) 0s ago: executing program 1 (id=931): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8, &(0x7f00000005c0), 0x2, 0xa}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) (fail_nth: 6) kernel console output (not intermixed with test programs): criptor?? [ 270.996969][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 271.029421][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 271.060991][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 271.432543][ T5884] apple 0003:05AC:0264.0016: unknown main item tag 0x0 [ 271.467338][ T5884] apple 0003:05AC:0264.0016: unknown main item tag 0x0 [ 271.500686][ T5884] apple 0003:05AC:0264.0016: unknown main item tag 0x0 [ 271.567565][ T52] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 271.567819][ T5884] apple 0003:05AC:0264.0016: hidraw0: USB HID v0.00 Device [HID 05ac:0264] on usb-dummy_hcd.3-1/input0 [ 271.794443][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.852553][ T52] usb 2-1: config 0 has no interfaces? [ 271.885181][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.895198][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.902837][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.927435][ T52] usb 2-1: Product: syz [ 271.931755][ T52] usb 2-1: Manufacturer: syz [ 271.963928][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.992891][ T52] usb 2-1: SerialNumber: syz [ 272.011761][ T52] usb 2-1: config 0 descriptor?? [ 272.027704][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.305695][ T5884] usb 4-1: USB disconnect, device number 39 [ 272.587358][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 272.787529][ T10] usb 5-1: device descriptor read/64, error -71 [ 273.027435][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 273.086404][ T8258] FAULT_INJECTION: forcing a failure. [ 273.086404][ T8258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.111311][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.3.732 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 273.111341][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.111355][ T8258] Call Trace: [ 273.111363][ T8258] [ 273.111372][ T8258] dump_stack_lvl+0x241/0x360 [ 273.111411][ T8258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.111440][ T8258] ? __pfx__printk+0x10/0x10 [ 273.111480][ T8258] should_fail_ex+0x424/0x570 [ 273.111508][ T8258] prepare_alloc_pages+0x220/0x610 [ 273.111539][ T8258] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 273.111566][ T8258] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.111598][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.111631][ T8258] alloc_pages_mpol+0x339/0x690 [ 273.111665][ T8258] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 273.111704][ T8258] vma_alloc_folio_noprof+0x12d/0x260 [ 273.111736][ T8258] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 273.111776][ T8258] folio_prealloc+0x2e/0x170 [ 273.111796][ T8258] do_wp_page+0x14f6/0x5e00 [ 273.111827][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.111860][ T8258] ? __pfx_do_wp_page+0x10/0x10 [ 273.111891][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.111916][ T8258] ? do_raw_spin_lock+0x151/0x370 [ 273.111977][ T8258] handle_pte_fault+0xfaf/0x61c0 [ 273.112013][ T8258] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 273.112045][ T8258] ? __pfx_handle_pte_fault+0x10/0x10 [ 273.112079][ T8258] ? rcu_is_watching+0x15/0xb0 [ 273.112109][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.112145][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.112171][ T8258] ? do_raw_spin_lock+0x151/0x370 [ 273.112211][ T8258] handle_mm_fault+0x1129/0x1bf0 [ 273.112270][ T8258] ? __pfx_handle_mm_fault+0x10/0x10 [ 273.112305][ T8258] ? follow_page_pte+0xec9/0x15e0 [ 273.112337][ T8258] ? __pfx_find_vma+0x10/0x10 [ 273.112368][ T8258] ? vma_is_secretmem+0xd/0x50 [ 273.112393][ T8258] ? check_vma_flags+0x51b/0x590 [ 273.112430][ T8258] __get_user_pages+0x1adc/0x4180 [ 273.112499][ T8258] ? __pfx___get_user_pages+0x10/0x10 [ 273.112528][ T8258] ? __gup_longterm_locked+0xd86/0x1850 [ 273.112561][ T8258] ? __pfx_down_read_killable+0x10/0x10 [ 273.112591][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.112622][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.112646][ T8258] __gup_longterm_locked+0xec1/0x1850 [ 273.112696][ T8258] ? rcu_is_watching+0x15/0xb0 [ 273.112722][ T8258] ? ___pte_offset_map+0x29a/0x350 [ 273.112751][ T8258] ? __pfx___gup_longterm_locked+0x10/0x10 [ 273.112784][ T8258] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 273.112817][ T8258] ? gup_fast_fallback+0x203f/0x2980 [ 273.112851][ T8258] gup_fast_fallback+0x2227/0x2980 [ 273.112916][ T8258] ? __pfx_gup_fast_fallback+0x10/0x10 [ 273.112953][ T8258] ? __lock_acquire+0xad5/0xd80 [ 273.112978][ T8258] ? do_raw_spin_lock+0x151/0x370 [ 273.113022][ T8258] ? lockdep_hardirqs_on+0x9d/0x150 [ 273.113047][ T8258] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 273.113069][ T8258] ? stack_trace_save+0x11a/0x1d0 [ 273.113097][ T8258] ? is_valid_gup_args+0x124/0x200 [ 273.113131][ T8258] pin_user_pages_fast+0xd2/0x160 [ 273.113165][ T8258] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 273.113208][ T8258] iov_iter_extract_pages+0x3bd/0x5c0 [ 273.113240][ T8258] ? __do_fast_syscall_32+0xb4/0x110 [ 273.113269][ T8258] extract_iter_to_sg+0xebc/0x2680 [ 273.113312][ T8258] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 273.113357][ T8258] ? __asan_memset+0x23/0x50 [ 273.113381][ T8258] af_alg_get_rsgl+0x41e/0x860 [ 273.113426][ T8258] skcipher_recvmsg+0x3fa/0x1250 [ 273.113452][ T8258] ? __local_bh_enable_ip+0x168/0x200 [ 273.113480][ T8258] ? skcipher_check_key+0x15c/0x1d0 [ 273.113516][ T8258] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 273.113543][ T8258] ? skcipher_check_key+0x15c/0x1d0 [ 273.113568][ T8258] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 273.113597][ T8258] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 273.113627][ T8258] sock_recvmsg+0x22f/0x280 [ 273.113659][ T8258] __sys_recvfrom+0x204/0x380 [ 273.113685][ T8258] ? __pfx___sys_recvfrom+0x10/0x10 [ 273.113738][ T8258] ? __fget_files+0x2a/0x420 [ 273.113768][ T8258] ? ksys_write+0x275/0x2d0 [ 273.113804][ T8258] __ia32_compat_sys_recvfrom+0xe4/0x100 [ 273.113841][ T8258] __do_fast_syscall_32+0xb4/0x110 [ 273.113866][ T8258] ? exc_page_fault+0x5f8/0x920 [ 273.113893][ T8258] do_fast_syscall_32+0x34/0x80 [ 273.113919][ T8258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.113951][ T8258] RIP: 0023:0xf73cd579 [ 273.113969][ T8258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.113987][ T8258] RSP: 002b:00000000f503555c EFLAGS: 00000206 ORIG_RAX: 0000000000000173 [ 273.114010][ T8258] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800030c0 [ 273.114025][ T8258] RDX: 00000000ffffffbf RSI: 0000000000000001 RDI: 0000000000000000 [ 273.114038][ T8258] RBP: 00000000ffffffb5 R08: 0000000000000000 R09: 0000000000000000 [ 273.114051][ T8258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.114063][ T8258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.114095][ T8258] [ 273.610188][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.647505][ T10] usb 5-1: device descriptor read/64, error -71 [ 273.829941][ T10] usb usb5-port1: attempt power cycle [ 273.928305][ T5929] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 274.079537][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.145728][ T5884] usb 2-1: USB disconnect, device number 29 [ 274.167627][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.191501][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 274.218191][ T10] usb 5-1: device descriptor read/8, error -71 [ 274.231885][ T5929] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 274.351617][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.391033][ T5929] usb 1-1: config 0 descriptor?? [ 274.528371][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 274.597631][ T10] usb 5-1: device descriptor read/8, error -71 [ 274.802609][ T10] usb usb5-port1: unable to enumerate USB device [ 274.819995][ T5929] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 274.838372][ T5929] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 274.857603][ T5929] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 274.871399][ T5929] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 274.897409][ T5929] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 274.907576][ T5929] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 274.924440][ T5929] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 274.954134][ T5929] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 275.440990][ T8290] libceph: resolve '0.' (ret=-3): failed [ 276.130754][ T52] usb 1-1: USB disconnect, device number 30 [ 276.632354][ T5893] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 277.160107][ T5893] usb 4-1: config 0 has no interfaces? [ 277.195577][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 277.224596][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.267539][ T52] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 277.297770][ T5893] usb 4-1: Product: syz [ 277.325748][ T5893] usb 4-1: Manufacturer: syz [ 277.337538][ T5893] usb 4-1: SerialNumber: syz [ 277.355316][ T5893] usb 4-1: config 0 descriptor?? [ 277.431857][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.442881][ T52] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.460498][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.477120][ T52] usb 1-1: config 0 descriptor?? [ 277.503574][ T52] pwc: Askey VC010 type 2 USB webcam detected. [ 277.906438][ T52] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.924613][ T52] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.938724][ T52] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.977722][ T5893] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 278.094111][ T52] pwc: recv_control_msg error -32 req 04 val 1000 [ 278.162635][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.171103][ T52] pwc: recv_control_msg error -32 req 04 val 1300 [ 278.177964][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 278.185417][ T5893] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 278.199685][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 278.218936][ T5893] usb 2-1: can't read configurations, error -61 [ 278.226010][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.279616][ T8329] fuse: Unknown parameter '0x0000000000000005' [ 278.368050][ T5893] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 278.543188][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 278.554921][ T5893] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 278.603839][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 278.624531][ T5893] usb 2-1: can't read configurations, error -61 [ 278.642916][ T5893] usb usb2-port1: attempt power cycle [ 278.713023][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 278.787401][ T5895] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 278.939574][ T5895] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 278.957860][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.969983][ T5895] usb 5-1: config 0 descriptor?? [ 278.975149][ T52] pwc: recv_control_msg error -71 req 02 val 2000 [ 278.991392][ T52] pwc: recv_control_msg error -71 req 02 val 2100 [ 279.013404][ T5893] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 279.017810][ T52] pwc: recv_control_msg error -71 req 04 val 1500 [ 279.043300][ T52] pwc: recv_control_msg error -71 req 02 val 2500 [ 279.064022][ T52] pwc: recv_control_msg error -71 req 02 val 2400 [ 279.071981][ T52] pwc: recv_control_msg error -71 req 02 val 2600 [ 279.090198][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 279.098485][ T52] pwc: recv_control_msg error -71 req 02 val 2900 [ 279.105425][ T5893] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 279.108170][ T52] pwc: recv_control_msg error -71 req 02 val 2800 [ 279.120802][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 279.126093][ T8338] FAULT_INJECTION: forcing a failure. [ 279.126093][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 279.142517][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.0.760 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 279.142547][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.142560][ T8338] Call Trace: [ 279.142572][ T8338] [ 279.142580][ T8338] dump_stack_lvl+0x241/0x360 [ 279.142617][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.142646][ T8338] ? __pfx__printk+0x10/0x10 [ 279.142678][ T8338] ? __pfx___might_resched+0x10/0x10 [ 279.142717][ T8338] should_fail_ex+0x424/0x570 [ 279.142743][ T8338] should_failslab+0xac/0x100 [ 279.142774][ T8338] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 279.142803][ T8338] ? __d_alloc+0x31/0x740 [ 279.142830][ T8338] __d_alloc+0x31/0x740 [ 279.142858][ T8338] d_alloc_parallel+0xe9/0x1660 [ 279.142889][ T8338] ? __lock_acquire+0xad5/0xd80 [ 279.142924][ T8338] ? __pfx_d_alloc_parallel+0x10/0x10 [ 279.142951][ T8338] ? __raw_spin_lock_init+0x45/0x100 [ 279.142983][ T8338] ? __init_waitqueue_head+0xae/0x150 [ 279.143018][ T8338] __lookup_slow+0x127/0x400 [ 279.143043][ T8338] ? __pfx___lookup_slow+0x10/0x10 [ 279.143079][ T8338] ? lookup_fast+0x1a8/0x5a0 [ 279.143103][ T8338] lookup_slow+0x53/0x70 [ 279.143124][ T8338] link_path_walk+0x969/0xeb0 [ 279.143173][ T8338] path_openat+0x26d/0x35d0 [ 279.143201][ T8338] ? __pfx_kstrtoull+0x10/0x10 [ 279.143231][ T8338] ? stack_depot_save_flags+0x44/0x940 [ 279.143262][ T8338] ? kasan_save_track+0x51/0x80 [ 279.143288][ T8338] ? __pfx_path_openat+0x10/0x10 [ 279.143309][ T8338] ? do_fast_syscall_32+0x34/0x80 [ 279.143332][ T8338] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.143378][ T8338] do_filp_open+0x284/0x4e0 [ 279.143404][ T8338] ? __pfx_do_filp_open+0x10/0x10 [ 279.143423][ T8338] ? do_raw_spin_lock+0x151/0x370 [ 279.143461][ T8338] ? __pfx_kfree_link+0x10/0x10 [ 279.143513][ T8338] do_sys_openat2+0x12b/0x1d0 [ 279.143546][ T8338] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.143573][ T8338] ? __fget_files+0x2a/0x420 [ 279.143595][ T8338] ? __fget_files+0x2a/0x420 [ 279.143619][ T8338] __ia32_compat_sys_openat+0x241/0x290 [ 279.143643][ T8338] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 279.143670][ T8338] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 279.143692][ T8338] ? lockdep_hardirqs_on+0x9d/0x150 [ 279.143724][ T8338] __do_fast_syscall_32+0xb4/0x110 [ 279.143747][ T8338] ? exc_page_fault+0x5f8/0x920 [ 279.143782][ T8338] do_fast_syscall_32+0x34/0x80 [ 279.143806][ T8338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.143830][ T8338] RIP: 0023:0xf747d579 [ 279.143847][ T8338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.143864][ T8338] RSP: 002b:00000000f5106490 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 279.143885][ T8338] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f51064e0 [ 279.143900][ T8338] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f746cff4 [ 279.143912][ T8338] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 279.143924][ T8338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.143936][ T8338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.143966][ T8338] [ 279.144157][ T52] pwc: recv_control_msg error -71 req 04 val 1100 [ 279.183270][ T5893] usb 2-1: can't read configurations, error -61 [ 279.185650][ T52] pwc: recv_control_msg error -71 req 04 val 1200 [ 279.347514][ T5893] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 279.360709][ T5895] kaweth 5-1:0.0: Firmware present in device. [ 279.438855][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 279.455798][ T52] pwc: Registered as video103. [ 279.509100][ T5895] kaweth 5-1:0.0: Statistics collection: 0 [ 279.515007][ T5895] kaweth 5-1:0.0: Multicast filter limit: 0 [ 279.521014][ T5895] kaweth 5-1:0.0: MTU: 0 [ 279.525302][ T5895] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 279.537619][ T52] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 279.557009][ T5893] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 279.567922][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 279.570505][ T52] usb 1-1: USB disconnect, device number 31 [ 279.581090][ T5893] usb 2-1: can't read configurations, error -61 [ 279.587413][ T5929] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 279.598088][ T5893] usb usb2-port1: unable to enumerate USB device [ 279.749517][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.772479][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.782969][ T5929] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 279.792198][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.804860][ T5929] usb 3-1: config 0 descriptor?? [ 280.128962][ T5895] kaweth 5-1:0.0: Error setting receive filter [ 280.135430][ T5895] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 280.155368][ T5895] usb 5-1: USB disconnect, device number 37 [ 280.224359][ T5893] usb 4-1: USB disconnect, device number 40 [ 280.226044][ T5929] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 280.249166][ T5929] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 280.266450][ T5929] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 280.345556][ T5929] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 280.360812][ T5929] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 280.398052][ T5929] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 280.410910][ T5929] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 280.435073][ T5929] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 280.984782][ T8363] x_tables: duplicate underflow at hook 3 [ 281.217455][ T5895] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 281.377520][ T5893] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 281.389006][ T5895] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 281.397900][ T5895] usb 2-1: config 0 has no interface number 0 [ 281.405450][ T5895] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 281.416709][ T5895] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.433045][ T5895] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 281.445890][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.454434][ T5895] usb 2-1: Product: syz [ 281.460192][ T5895] usb 2-1: Manufacturer: syz [ 281.464928][ T5895] usb 2-1: SerialNumber: syz [ 281.481282][ T5895] usb 2-1: config 0 descriptor?? [ 281.493989][ T8367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 281.506717][ T5895] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 281.530330][ T5895] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 281.580638][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 281.603681][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.630144][ T5893] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 281.651458][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.655854][ T12] tipc: Subscription rejected, illegal request [ 281.684973][ T5893] usb 5-1: config 0 descriptor?? [ 281.722515][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.734540][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.755957][ T5895] usb 2-1: USB disconnect, device number 34 [ 281.789396][ T5895] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 281.816888][ T5895] cyberjack 2-1:0.69: device disconnected [ 281.941661][ T10] usb 3-1: USB disconnect, device number 35 [ 282.527586][ T5929] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 282.555546][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 282.570312][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 282.616574][ T5893] usb 5-1: USB disconnect, device number 38 [ 282.692950][ T5929] usb 3-1: config 0 has no interfaces? [ 283.053465][ T5929] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 283.062749][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.090131][ T8395] FAULT_INJECTION: forcing a failure. [ 283.090131][ T8395] name failslab, interval 1, probability 0, space 0, times 0 [ 283.104036][ T5929] usb 3-1: Product: syz [ 283.108935][ T5929] usb 3-1: Manufacturer: syz [ 283.113568][ T5929] usb 3-1: SerialNumber: syz [ 283.119376][ T8395] CPU: 1 UID: 0 PID: 8395 Comm: syz.3.777 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 283.119406][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.119420][ T8395] Call Trace: [ 283.119429][ T8395] [ 283.119438][ T8395] dump_stack_lvl+0x241/0x360 [ 283.119477][ T8395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.119508][ T8395] ? __pfx__printk+0x10/0x10 [ 283.119554][ T8395] ? __pfx___might_resched+0x10/0x10 [ 283.119587][ T8395] should_fail_ex+0x424/0x570 [ 283.119615][ T8395] should_failslab+0xac/0x100 [ 283.119646][ T8395] kmem_cache_alloc_noprof+0x78/0x390 [ 283.119675][ T8395] ? __break_lease+0x111/0x1890 [ 283.119705][ T8395] __break_lease+0x111/0x1890 [ 283.119734][ T8395] ? __lock_acquire+0xad5/0xd80 [ 283.119766][ T8395] ? __pfx___break_lease+0x10/0x10 [ 283.119796][ T8395] ? current_time+0x27b/0x3b0 [ 283.119818][ T8395] ? evm_inode_setattr+0x1b9/0x7d0 [ 283.119860][ T8395] try_break_deleg+0xb6/0x120 [ 283.119891][ T8395] notify_change+0xb04/0xe90 [ 283.119931][ T8395] file_remove_privs_flags+0x350/0x590 [ 283.119967][ T8395] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 283.119999][ T8395] ? __pfx_generic_write_checks+0x10/0x10 [ 283.120029][ T8395] ? rcu_read_lock_any_held+0xbb/0x160 [ 283.120058][ T8395] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 283.120097][ T8395] shmem_file_write_iter+0xa8/0x120 [ 283.120122][ T8395] vfs_write+0x70f/0xd10 [ 283.120154][ T8395] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 283.120177][ T8395] ? __pfx_vfs_write+0x10/0x10 [ 283.120205][ T8395] ? __fget_files+0x2a/0x420 [ 283.120228][ T8395] ? __fget_files+0x2a/0x420 [ 283.120258][ T8395] ksys_write+0x19d/0x2d0 [ 283.120285][ T8395] ? __pfx_ksys_write+0x10/0x10 [ 283.120312][ T8395] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 283.120336][ T8395] ? lockdep_hardirqs_on+0x9d/0x150 [ 283.120362][ T8395] __do_fast_syscall_32+0xb4/0x110 [ 283.120399][ T8395] ? exc_page_fault+0x5f8/0x920 [ 283.120427][ T8395] do_fast_syscall_32+0x34/0x80 [ 283.120451][ T8395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.120476][ T8395] RIP: 0023:0xf73cd579 [ 283.120494][ T8395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.120516][ T8395] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 283.120538][ T8395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 283.120553][ T8395] RDX: 0000000000000069 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.120565][ T8395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.120577][ T8395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.120589][ T8395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.120620][ T8395] [ 283.402422][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.511202][ T5929] usb 3-1: config 0 descriptor?? [ 283.907774][ T5884] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 284.087854][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 284.102649][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.125655][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 284.127598][ T5929] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 284.171612][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.354049][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.434019][ T5884] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 284.444199][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 284.458357][ T5884] usb 4-1: Product: syz [ 284.462753][ T5884] usb 4-1: Manufacturer: syz [ 284.471110][ T5884] usb 4-1: SerialNumber: syz [ 284.481197][ T5929] usb 2-1: config 0 has no interfaces? [ 284.483590][ T5884] usb 4-1: config 0 descriptor?? [ 284.515340][ T5929] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 284.525180][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.540993][ T5929] usb 2-1: Product: syz [ 284.552885][ T5929] usb 2-1: Manufacturer: syz [ 284.565896][ T5929] usb 2-1: SerialNumber: syz [ 284.581715][ T5929] usb 2-1: config 0 descriptor?? [ 284.627596][ T5895] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 284.714464][ T5884] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 284.744164][ T5884] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 284.777762][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 284.789260][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.812064][ T5895] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.834259][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.864260][ T5895] usb 1-1: config 0 descriptor?? [ 284.915858][ T8397] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 285.073604][ T5884] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 285.082225][ T5884] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 285.095212][ T5884] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 285.130675][ T5895] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 285.180735][ T8397] bond1: entered promiscuous mode [ 285.186368][ T8397] bond1: entered allmulticast mode [ 285.191807][ T5929] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 285.216131][ T8415] batadv1: entered allmulticast mode [ 285.243844][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 285.261656][ T8415] bond1: (slave batadv1): making interface the new active one [ 285.273962][ T8415] batadv1: entered promiscuous mode [ 285.286633][ T8415] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 285.313393][ T5884] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 285.322149][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.329098][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.335750][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.342447][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.349083][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.351657][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.355722][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.375066][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.382651][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.389507][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.396157][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.403151][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.413019][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.419772][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.426396][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.433046][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.439852][ T5884] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 285.448283][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.454920][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.461578][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.468115][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.474664][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.483710][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.490455][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.497012][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.503651][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.504310][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.510217][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.510445][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.510666][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.539847][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.540107][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.552585][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.559256][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.565919][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.572592][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.580997][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.588434][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.595114][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.601785][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.608468][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.615137][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.621834][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.628542][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.635186][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.641823][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.648459][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.655156][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.661810][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.668458][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.675124][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.683889][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.691162][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.697793][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.704455][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.711151][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.717814][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.724458][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.731119][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.737808][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.744488][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.751149][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.757855][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.764489][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.771131][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.771647][ T5929] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 285.783728][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.794566][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 285.798878][ T5895] usb 1-1: USB disconnect, device number 32 [ 285.801622][ T5884] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 285.864259][ T5893] usb 3-1: USB disconnect, device number 36 [ 285.894949][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.904376][ T8415] syz.3.778 (8415) used greatest stack depth: 19480 bytes left [ 285.929691][ T5884] usb 4-1: USB disconnect, device number 41 [ 285.994570][ T5929] usb 5-1: config 0 descriptor?? [ 286.407473][ T5884] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 286.433052][ T5929] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 286.457356][ T5929] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 286.500967][ T5929] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 286.527054][ T5929] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 286.560253][ T5929] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 286.583141][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.594439][ T5929] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 286.602141][ T5884] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.611885][ T5929] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 286.653723][ T5929] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 286.680494][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.695640][ T5884] usb 4-1: config 0 descriptor?? [ 286.706262][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.790'. [ 286.777488][ T5893] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 286.918367][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 286.924658][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.939036][ T5884] usb 4-1: USB disconnect, device number 42 [ 287.008705][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 287.020562][ T5893] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 287.032331][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.043833][ T5893] usb 1-1: config 0 descriptor?? [ 287.054895][ T5893] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 287.127564][ T5895] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 287.231539][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 287.292080][ T5895] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 287.304679][ T5895] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 287.322049][ T5895] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 287.332805][ T5895] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 287.346826][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 287.359399][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 287.369178][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 287.385811][ T5895] usb 3-1: string descriptor 0 read error: -22 [ 287.392366][ T5895] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 287.401846][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.412934][ T5895] usb 3-1: config 0 descriptor?? [ 287.421374][ T5895] hub 3-1:0.0: bad descriptor, ignoring hub [ 287.428136][ T5895] hub 3-1:0.0: probe with driver hub failed with error -5 [ 287.633086][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.642306][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.653404][ T30] kauditd_printk_skb: 600 callbacks suppressed [ 287.653424][ T30] audit: type=1326 audit(1743808734.538:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.2.790" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 287.752267][ T10] usb 2-1: USB disconnect, device number 35 [ 287.837794][ T5884] usb 3-1: USB disconnect, device number 37 [ 287.886652][ T5895] usb 5-1: USB disconnect, device number 39 [ 288.290578][ T5893] gspca_vc032x: reg_w err -71 [ 288.295591][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.304056][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.313672][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.326163][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.332542][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.342054][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.348323][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.354080][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.361423][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.368109][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.373703][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.380523][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.386321][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.393792][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.400573][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.406830][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.412909][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.418957][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.424785][ T5893] gspca_vc032x: Unknown sensor... [ 288.430766][ T5893] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 288.519451][ T5893] usb 1-1: USB disconnect, device number 33 [ 288.748652][ T52] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 288.934235][ T52] usb 5-1: config 0 has no interfaces? [ 288.948734][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 288.958995][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.984830][ T52] usb 5-1: Product: syz [ 289.000677][ T52] usb 5-1: Manufacturer: syz [ 289.018890][ T52] usb 5-1: SerialNumber: syz [ 289.056341][ T52] usb 5-1: config 0 descriptor?? [ 289.408114][ T8459] set match dimension is over the limit! [ 290.607593][ T5895] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 290.772739][ T5895] usb 2-1: config 0 has no interfaces? [ 291.026976][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 291.055328][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.075245][ T5895] usb 2-1: Product: syz [ 291.097718][ T5895] usb 2-1: Manufacturer: syz [ 291.119396][ T5895] usb 2-1: SerialNumber: syz [ 291.245294][ T5895] usb 2-1: config 0 descriptor?? [ 291.513597][ T5895] usb 5-1: USB disconnect, device number 40 [ 292.018303][ T8484] ipvlan0: entered allmulticast mode [ 292.026272][ T8484] veth0_vlan: entered allmulticast mode [ 292.027367][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 292.116314][ T8486] FAULT_INJECTION: forcing a failure. [ 292.116314][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 292.162317][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.3.807 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 292.162347][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.162360][ T8486] Call Trace: [ 292.162367][ T8486] [ 292.162375][ T8486] dump_stack_lvl+0x241/0x360 [ 292.162410][ T8486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.162444][ T8486] ? __pfx__printk+0x10/0x10 [ 292.162477][ T8486] ? __pfx___might_resched+0x10/0x10 [ 292.162525][ T8486] should_fail_ex+0x424/0x570 [ 292.162554][ T8486] should_failslab+0xac/0x100 [ 292.162585][ T8486] __kmalloc_cache_noprof+0x73/0x370 [ 292.162613][ T8486] ? rtnl_newlink+0x144/0x1fe0 [ 292.162646][ T8486] rtnl_newlink+0x144/0x1fe0 [ 292.162674][ T8486] ? stack_depot_save_flags+0x44/0x940 [ 292.162705][ T8486] ? kasan_save_track+0x51/0x80 [ 292.162726][ T8486] ? kasan_save_track+0x3f/0x80 [ 292.162747][ T8486] ? kasan_save_free_info+0x40/0x50 [ 292.162763][ T8486] ? __kasan_slab_free+0x59/0x70 [ 292.162796][ T8486] ? __pfx_rtnl_newlink+0x10/0x10 [ 292.162822][ T8486] ? __netlink_deliver_tap+0x561/0x7f0 [ 292.162847][ T8486] ? netlink_deliver_tap+0x19d/0x1b0 [ 292.162872][ T8486] ? netlink_unicast+0x7c6/0x9a0 [ 292.162893][ T8486] ? netlink_sendmsg+0x8c3/0xcd0 [ 292.162919][ T8486] ? __sock_sendmsg+0x221/0x270 [ 292.162942][ T8486] ? ____sys_sendmsg+0x523/0x860 [ 292.162956][ T8486] ? __sys_sendmsg+0x271/0x360 [ 292.162969][ T8486] ? __do_fast_syscall_32+0xb4/0x110 [ 292.162987][ T8486] ? do_fast_syscall_32+0x34/0x80 [ 292.163003][ T8486] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.163047][ T8486] ? kasan_quarantine_put+0xdc/0x230 [ 292.163062][ T8486] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.163080][ T8486] ? nlmon_xmit+0xaf/0x100 [ 292.163109][ T8486] ? __local_bh_enable_ip+0x168/0x200 [ 292.163124][ T8486] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.163145][ T8486] ? aa_get_newest_label+0x101/0x6f0 [ 292.163171][ T8486] ? __lock_acquire+0xad5/0xd80 [ 292.163202][ T8486] ? __pfx_rtnl_newlink+0x10/0x10 [ 292.163224][ T8486] rtnetlink_rcv_msg+0x80f/0xd70 [ 292.163243][ T8486] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 292.163266][ T8486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.163292][ T8486] ? ref_tracker_free+0x63e/0x7e0 [ 292.163314][ T8486] netlink_rcv_skb+0x208/0x480 [ 292.163334][ T8486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.163356][ T8486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.163388][ T8486] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.163410][ T8486] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.163431][ T8486] netlink_unicast+0x7f8/0x9a0 [ 292.163455][ T8486] ? __pfx_netlink_unicast+0x10/0x10 [ 292.163475][ T8486] ? skb_put+0x114/0x1f0 [ 292.163492][ T8486] netlink_sendmsg+0x8c3/0xcd0 [ 292.163523][ T8486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.163546][ T8486] ? __import_iovec+0x585/0x830 [ 292.163566][ T8486] ? aa_sock_msg_perm+0x91/0x160 [ 292.163590][ T8486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.163609][ T8486] __sock_sendmsg+0x221/0x270 [ 292.163634][ T8486] ____sys_sendmsg+0x523/0x860 [ 292.163665][ T8486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.163705][ T8486] __sys_sendmsg+0x271/0x360 [ 292.163731][ T8486] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.163800][ T8486] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 292.163817][ T8486] ? lockdep_hardirqs_on+0x9d/0x150 [ 292.163834][ T8486] __do_fast_syscall_32+0xb4/0x110 [ 292.163851][ T8486] ? exc_page_fault+0x5f8/0x920 [ 292.163870][ T8486] do_fast_syscall_32+0x34/0x80 [ 292.163886][ T8486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.163904][ T8486] RIP: 0023:0xf73cd579 [ 292.163916][ T8486] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 292.163929][ T8486] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 292.163944][ T8486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 292.163954][ T8486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.163962][ T8486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.163970][ T8486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.163979][ T8486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.163998][ T8486] [ 292.663113][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.674150][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.684415][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 292.693666][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.727046][ T10] usb 5-1: config 0 descriptor?? [ 293.013587][ T975] usb 2-1: USB disconnect, device number 36 [ 293.155665][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 293.178131][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 293.184994][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 293.217385][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 293.231434][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 293.252253][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 293.274487][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 293.275641][ T8498] FAULT_INJECTION: forcing a failure. [ 293.275641][ T8498] name failslab, interval 1, probability 0, space 0, times 0 [ 293.299277][ T10] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 293.322405][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.2.811 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 293.322438][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.322452][ T8498] Call Trace: [ 293.322467][ T8498] [ 293.322477][ T8498] dump_stack_lvl+0x241/0x360 [ 293.322517][ T8498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.322547][ T8498] ? __pfx__printk+0x10/0x10 [ 293.322581][ T8498] ? __pfx___might_resched+0x10/0x10 [ 293.322611][ T8498] should_fail_ex+0x424/0x570 [ 293.322639][ T8498] should_failslab+0xac/0x100 [ 293.322671][ T8498] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 293.322700][ T8498] ? proc_alloc_inode+0x2a/0xc0 [ 293.322730][ T8498] proc_alloc_inode+0x2a/0xc0 [ 293.322751][ T8498] ? __pfx_proc_alloc_inode+0x10/0x10 [ 293.322773][ T8498] alloc_inode+0x69/0x1b0 [ 293.322805][ T8498] new_inode+0x22/0x180 [ 293.322841][ T8498] proc_pid_make_inode+0x1f/0x130 [ 293.322870][ T8498] proc_pid_instantiate+0x54/0x2b0 [ 293.322897][ T8498] ? proc_pid_lookup+0xa7/0x480 [ 293.322927][ T8498] ? proc_pid_lookup+0xa7/0x480 [ 293.322953][ T8498] proc_pid_lookup+0x31f/0x480 [ 293.322985][ T8498] proc_root_lookup+0x1f/0x50 [ 293.323012][ T8498] __lookup_slow+0x2b1/0x400 [ 293.323038][ T8498] ? __pfx___lookup_slow+0x10/0x10 [ 293.323077][ T8498] ? lookup_fast+0x1a8/0x5a0 [ 293.323120][ T8498] lookup_slow+0x53/0x70 [ 293.323144][ T8498] walk_component+0x2f4/0x420 [ 293.323170][ T8498] path_lookupat+0x169/0x440 [ 293.323202][ T8498] filename_lookup+0x290/0x670 [ 293.323231][ T8498] ? __pfx_filename_lookup+0x10/0x10 [ 293.323283][ T8498] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 293.323310][ T8498] ? kmem_cache_alloc_noprof+0x237/0x390 [ 293.323337][ T8498] ? getname_kernel+0x140/0x2f0 [ 293.323385][ T8498] kern_path+0x35/0x50 [ 293.323407][ T8498] lookup_bdev+0xc8/0x290 [ 293.323435][ T8498] ? rcu_is_watching+0x15/0xb0 [ 293.323470][ T8498] ? __pfx_lookup_bdev+0x10/0x10 [ 293.323497][ T8498] ? kstrndup+0xbb/0x150 [ 293.323536][ T8498] resume_store+0x1e1/0x720 [ 293.323574][ T8498] ? __pfx_resume_store+0x10/0x10 [ 293.323608][ T8498] ? sysfs_file_kobj+0x1a/0x230 [ 293.323642][ T8498] ? sysfs_file_kobj+0x1a/0x230 [ 293.323672][ T8498] ? sysfs_file_kobj+0x1e5/0x230 [ 293.323705][ T8498] ? sysfs_kf_write+0x166/0x260 [ 293.323740][ T8498] ? __pfx_sysfs_kf_write+0x10/0x10 [ 293.323771][ T8498] kernfs_fop_write_iter+0x398/0x510 [ 293.323809][ T8498] vfs_write+0x70f/0xd10 [ 293.323843][ T8498] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 293.323874][ T8498] ? __pfx_vfs_write+0x10/0x10 [ 293.323903][ T8498] ? __fget_files+0x2a/0x420 [ 293.323928][ T8498] ? __fget_files+0x2a/0x420 [ 293.323959][ T8498] ksys_write+0x19d/0x2d0 [ 293.323987][ T8498] ? __pfx_ksys_write+0x10/0x10 [ 293.324016][ T8498] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 293.324042][ T8498] ? lockdep_hardirqs_on+0x9d/0x150 [ 293.324070][ T8498] __do_fast_syscall_32+0xb4/0x110 [ 293.324095][ T8498] ? exc_page_fault+0x5f8/0x920 [ 293.324124][ T8498] do_fast_syscall_32+0x34/0x80 [ 293.324151][ T8498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.324176][ T8498] RIP: 0023:0xf748d579 [ 293.324195][ T8498] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.324214][ T8498] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 293.324249][ T8498] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 293.324264][ T8498] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.324276][ T8498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.324289][ T8498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.324302][ T8498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.324334][ T8498] [ 293.768379][ T975] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 293.960097][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 293.973824][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 293.985298][ T975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 294.132887][ T975] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 294.132921][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.227114][ T975] usb 4-1: config 0 descriptor?? [ 294.387337][ T5929] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 294.583449][ T5929] usb 3-1: config 0 has no interfaces? [ 294.604819][ T5929] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 294.627117][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.636406][ T5929] usb 3-1: Product: syz [ 294.654204][ T5929] usb 3-1: Manufacturer: syz [ 294.669810][ T5929] usb 3-1: SerialNumber: syz [ 294.763868][ T975] kovaplus 0003:1E7D:2D50.001B: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 294.881087][ T5929] usb 3-1: config 0 descriptor?? [ 294.904683][ T5893] usb 5-1: USB disconnect, device number 41 [ 294.962986][ T8500] rtc_cmos 00:00: Alarms can be up to one day in the future [ 294.973220][ T975] kovaplus 0003:1E7D:2D50.001B: couldn't init struct kovaplus_device [ 294.984500][ T975] kovaplus 0003:1E7D:2D50.001B: couldn't install mouse [ 295.051300][ T5894] rtc_cmos 00:00: Alarms can be up to one day in the future [ 295.066926][ T5894] rtc_cmos 00:00: Alarms can be up to one day in the future [ 295.094417][ T5894] rtc_cmos 00:00: Alarms can be up to one day in the future [ 295.117189][ T5894] rtc_cmos 00:00: Alarms can be up to one day in the future [ 295.136984][ T5894] rtc rtc0: __rtc_set_alarm: err=-22 [ 295.144196][ T975] kovaplus 0003:1E7D:2D50.001B: probe with driver kovaplus failed with error -71 [ 295.397721][ T975] usb 4-1: USB disconnect, device number 43 [ 295.504217][ T5894] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 295.704553][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 295.730360][ T5894] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 295.742845][ T5894] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 295.762510][ T5894] usb 5-1: config 0 has no interface number 0 [ 295.783129][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 295.792599][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.812777][ T5894] usb 5-1: Product: syz [ 295.824196][ T5894] usb 5-1: Manufacturer: syz [ 295.849765][ T5894] usb 5-1: SerialNumber: syz [ 295.945228][ T5894] usb 5-1: config 0 descriptor?? [ 295.968315][ T5894] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 295.980465][ T5894] usb 5-1: No valid video chain found. [ 296.144953][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 296.268602][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 296.285320][ T8528] netlink: 'syz.0.820': attribute type 11 has an invalid length. [ 296.293630][ T8528] netlink: 144 bytes leftover after parsing attributes in process `syz.0.820'. [ 296.547369][ T5893] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 296.689202][ T5929] usb 5-1: USB disconnect, device number 42 [ 296.707584][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 296.717510][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.733697][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.788404][ T5893] usb 1-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 296.800217][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.832652][ T5893] usb 1-1: config 0 descriptor?? [ 297.036457][ T10] usb 3-1: USB disconnect, device number 38 [ 297.063075][ T8530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.821'. [ 297.286994][ T5893] aquacomputer_d5next 0003:0C70:F001.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.0-1/input0 [ 297.334436][ T8535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.822'. [ 297.347697][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 297.506917][ T5929] usb 1-1: USB disconnect, device number 34 [ 297.887078][ T8543] FAULT_INJECTION: forcing a failure. [ 297.887078][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 297.900739][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.1.825 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 297.900769][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.900782][ T8543] Call Trace: [ 297.900791][ T8543] [ 297.900800][ T8543] dump_stack_lvl+0x241/0x360 [ 297.900839][ T8543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.900868][ T8543] ? __pfx__printk+0x10/0x10 [ 297.900901][ T8543] ? __pfx___might_resched+0x10/0x10 [ 297.900932][ T8543] should_fail_ex+0x424/0x570 [ 297.900960][ T8543] should_failslab+0xac/0x100 [ 297.900990][ T8543] __kmalloc_noprof+0xdf/0x4d0 [ 297.901019][ T8543] ? cgroup_mkdir+0x29e/0xc30 [ 297.901051][ T8543] cgroup_mkdir+0x29e/0xc30 [ 297.901083][ T8543] ? kernfs_root+0x1c/0x230 [ 297.901102][ T8543] ? __pfx_cgroup_mkdir+0x10/0x10 [ 297.901162][ T8543] kernfs_iop_mkdir+0x22a/0x370 [ 297.901193][ T8543] vfs_mkdir+0x2f9/0x500 [ 297.901228][ T8543] do_mkdirat+0x273/0x3f0 [ 297.901260][ T8543] ? __pfx_do_mkdirat+0x10/0x10 [ 297.901287][ T8543] ? getname_flags+0x1e2/0x530 [ 297.901324][ T8543] __ia32_sys_mkdirat+0x87/0xa0 [ 297.901351][ T8543] __do_fast_syscall_32+0xb4/0x110 [ 297.901377][ T8543] ? exc_page_fault+0x5f8/0x920 [ 297.901406][ T8543] do_fast_syscall_32+0x34/0x80 [ 297.901431][ T8543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.901457][ T8543] RIP: 0023:0xf7f47579 [ 297.901476][ T8543] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.901495][ T8543] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 297.901518][ T8543] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 297.901534][ T8543] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 297.901547][ T8543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.901560][ T8543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.901573][ T8543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.901605][ T8543] [ 298.617444][ T5929] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 298.788456][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.805941][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.819039][ T5929] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 298.828920][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.843374][ T5929] usb 3-1: config 0 descriptor?? [ 299.291335][ T5929] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 299.299870][ T5929] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 299.314420][ T5929] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 299.356453][ T5929] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 299.393306][ T5929] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 299.424848][ T5929] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 299.466390][ T5929] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 299.509713][ T5929] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 299.937666][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 300.131979][ T10] usb 2-1: config 0 has no interfaces? [ 300.144046][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.158616][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.181279][ T10] usb 2-1: Product: syz [ 300.185487][ T10] usb 2-1: Manufacturer: syz [ 300.190993][ T10] usb 2-1: SerialNumber: syz [ 300.205776][ T10] usb 2-1: config 0 descriptor?? [ 300.241093][ T8573] FAULT_INJECTION: forcing a failure. [ 300.241093][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 300.267020][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.0.834 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 300.267044][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.267054][ T8573] Call Trace: [ 300.267060][ T8573] [ 300.267068][ T8573] dump_stack_lvl+0x241/0x360 [ 300.267096][ T8573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.267117][ T8573] ? __pfx__printk+0x10/0x10 [ 300.267141][ T8573] ? __pfx___might_resched+0x10/0x10 [ 300.267163][ T8573] should_fail_ex+0x424/0x570 [ 300.267183][ T8573] should_failslab+0xac/0x100 [ 300.267205][ T8573] __kmalloc_noprof+0xdf/0x4d0 [ 300.267227][ T8573] ? tomoyo_encode+0x26f/0x540 [ 300.267257][ T8573] tomoyo_encode+0x26f/0x540 [ 300.267284][ T8573] tomoyo_realpath_from_path+0x59e/0x5e0 [ 300.267315][ T8573] tomoyo_path_number_perm+0x245/0x790 [ 300.267334][ T8573] ? __lock_acquire+0xad5/0xd80 [ 300.267350][ T8573] ? tomoyo_path_number_perm+0x215/0x790 [ 300.267371][ T8573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 300.267416][ T8573] ? __fget_files+0x2a/0x420 [ 300.267429][ T8573] ? __fget_files+0x2a/0x420 [ 300.267445][ T8573] ? __fget_files+0x2a/0x420 [ 300.267462][ T8573] security_file_ioctl_compat+0xc6/0x2a0 [ 300.267482][ T8573] __se_compat_sys_ioctl+0xd8/0xc30 [ 300.267505][ T8573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.267531][ T8573] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 300.267558][ T8573] ? __fget_files+0x2a/0x420 [ 300.267584][ T8573] ? fput+0x9b/0xd0 [ 300.267603][ T8573] ? ksys_write+0x275/0x2d0 [ 300.267636][ T8573] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 300.267661][ T8573] ? lockdep_hardirqs_on+0x9d/0x150 [ 300.267688][ T8573] __do_fast_syscall_32+0xb4/0x110 [ 300.267712][ T8573] ? exc_page_fault+0x5f8/0x920 [ 300.267740][ T8573] do_fast_syscall_32+0x34/0x80 [ 300.267765][ T8573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.267791][ T8573] RIP: 0023:0xf747d579 [ 300.267808][ T8573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 300.267826][ T8573] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 300.267849][ T8573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001274 [ 300.267864][ T8573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.267878][ T8573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.267890][ T8573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 300.267904][ T8573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.267935][ T8573] [ 300.674292][ T8573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.846840][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 301.282954][ T8584] FAULT_INJECTION: forcing a failure. [ 301.282954][ T8584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.317383][ T30] audit: type=1800 audit(1743808748.188:685): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.838" name="file0" dev="tmpfs" ino=867 res=0 errno=0 [ 301.364057][ T8584] CPU: 1 UID: 0 PID: 8584 Comm: syz.4.837 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 301.364091][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.364105][ T8584] Call Trace: [ 301.364121][ T8584] [ 301.364131][ T8584] dump_stack_lvl+0x241/0x360 [ 301.364172][ T8584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.364202][ T8584] ? __pfx__printk+0x10/0x10 [ 301.364255][ T8584] should_fail_ex+0x424/0x570 [ 301.364281][ T8584] fpu__restore_sig+0x1c3/0x11d0 [ 301.364307][ T8584] ? __lock_acquire+0xad5/0xd80 [ 301.364331][ T8584] ? __pfx_fpu__restore_sig+0x10/0x10 [ 301.364382][ T8584] ia32_restore_sigcontext+0x633/0x9d0 [ 301.364412][ T8584] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 301.364435][ T8584] ? lockdep_hardirqs_on+0x9d/0x150 [ 301.364461][ T8584] ? _raw_spin_unlock_irq+0x2e/0x50 [ 301.364480][ T8584] ? __set_current_blocked+0x312/0x380 [ 301.364527][ T8584] __do_compat_sys_rt_sigreturn+0x17d/0x250 [ 301.364556][ T8584] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 301.364590][ T8584] ? do_int80_emulation+0xe8/0x200 [ 301.364618][ T8584] do_int80_emulation+0x11f/0x200 [ 301.364641][ T8584] ? clear_bhb_loop+0x45/0xa0 [ 301.364663][ T8584] ? clear_bhb_loop+0x45/0xa0 [ 301.364688][ T8584] asm_int80_emulation+0x1a/0x20 [ 301.364708][ T8584] RIP: 0023:0xf7fb4579 [ 301.364726][ T8584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 301.364745][ T8584] RSP: 002b:00000000f50b555c EFLAGS: 00000206 [ 301.364764][ T8584] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000080000500 [ 301.364778][ T8584] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 301.364791][ T8584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.364804][ T8584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 301.364817][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.364887][ T8584] [ 301.567371][ T30] audit: type=1800 audit(1743808748.198:686): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.838" name="file0" dev="tmpfs" ino=867 res=0 errno=0 [ 301.595647][ T5929] usb 3-1: USB disconnect, device number 39 [ 302.915455][ T5929] usb 2-1: USB disconnect, device number 37 [ 303.315699][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 303.352532][ T8611] FAULT_INJECTION: forcing a failure. [ 303.352532][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 303.352892][ T8611] CPU: 1 UID: 0 PID: 8611 Comm: syz.2.848 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 303.352919][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.352932][ T8611] Call Trace: [ 303.352941][ T8611] [ 303.352951][ T8611] dump_stack_lvl+0x241/0x360 [ 303.352990][ T8611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.353020][ T8611] ? __pfx__printk+0x10/0x10 [ 303.353061][ T8611] should_fail_ex+0x424/0x570 [ 303.353090][ T8611] should_failslab+0xac/0x100 [ 303.353121][ T8611] kmem_cache_alloc_noprof+0x78/0x390 [ 303.353150][ T8611] ? dst_alloc+0x12b/0x190 [ 303.353177][ T8611] dst_alloc+0x12b/0x190 [ 303.353205][ T8611] ip_route_input_rcu+0x22b3/0x3930 [ 303.353250][ T8611] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 303.353278][ T8611] ? lockdep_hardirqs_on+0x9d/0x150 [ 303.353337][ T8611] ? ip_route_input_noref+0xaf/0x250 [ 303.353367][ T8611] ip_route_input_noref+0x169/0x250 [ 303.353403][ T8611] ? __pfx_ip_route_input_noref+0x10/0x10 [ 303.353445][ T8611] ? ipt_do_table+0x314/0x1870 [ 303.353477][ T8611] ip_rcv_finish_core+0x5b4/0x1b60 [ 303.353519][ T8611] ip_rcv_finish+0x14a/0x560 [ 303.353544][ T8611] ? NF_HOOK+0x38c/0x450 [ 303.353572][ T8611] NF_HOOK+0x3a0/0x450 [ 303.353599][ T8611] ? __pfx_ip_rcv_finish+0x10/0x10 [ 303.353624][ T8611] ? NF_HOOK+0x9e/0x450 [ 303.353648][ T8611] ? __pfx_NF_HOOK+0x10/0x10 [ 303.353671][ T8611] ? ip_rcv_core+0x80c/0xd20 [ 303.353710][ T8611] ? __pfx_ip_rcv_finish+0x10/0x10 [ 303.353745][ T8611] ? __pfx_ip_rcv+0x10/0x10 [ 303.353772][ T8611] __netif_receive_skb+0x2c9/0x670 [ 303.353807][ T8611] ? __pfx___netif_receive_skb+0x10/0x10 [ 303.353851][ T8611] ? netif_receive_skb+0x133/0x890 [ 303.353877][ T8611] ? netif_receive_skb+0x133/0x890 [ 303.353904][ T8611] netif_receive_skb+0x1ea/0x890 [ 303.353930][ T8611] ? tun_rx_batched+0x14b/0x8d0 [ 303.353951][ T8611] ? __pfx_netif_receive_skb+0x10/0x10 [ 303.353978][ T8611] ? skb_set_owner_w+0x246/0x380 [ 303.354009][ T8611] ? tun_rx_batched+0x14b/0x8d0 [ 303.354029][ T8611] tun_rx_batched+0x1a4/0x8d0 [ 303.354053][ T8611] ? __lock_acquire+0xad5/0xd80 [ 303.354079][ T8611] ? __pfx_tun_rx_batched+0x10/0x10 [ 303.354116][ T8611] ? tun_get_user+0x2a99/0x47c0 [ 303.354147][ T8611] ? tun_get_user+0x2a99/0x47c0 [ 303.354177][ T8611] tun_get_user+0x2fec/0x47c0 [ 303.354214][ T8611] ? aa_file_perm+0x139/0xf60 [ 303.354239][ T8611] ? aa_file_perm+0x139/0xf60 [ 303.354261][ T8611] ? aa_file_perm+0x3f1/0xf60 [ 303.354283][ T8611] ? __pfx_tun_get_user+0x10/0x10 [ 303.354310][ T8611] ? __lock_acquire+0xad5/0xd80 [ 303.354330][ T8611] ? ref_tracker_alloc+0x316/0x4c0 [ 303.354349][ T8611] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 303.354379][ T8611] ? tun_get+0x1e/0x2f0 [ 303.354403][ T8611] ? tun_get+0x1e/0x2f0 [ 303.354424][ T8611] ? tun_get+0x27d/0x2f0 [ 303.354448][ T8611] tun_chr_write_iter+0x10d/0x1f0 [ 303.354474][ T8611] vfs_write+0x70f/0xd10 [ 303.354497][ T8611] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 303.354521][ T8611] ? __pfx_vfs_write+0x10/0x10 [ 303.354541][ T8611] ? __fget_files+0x2a/0x420 [ 303.354557][ T8611] ? __fget_files+0x2a/0x420 [ 303.354578][ T8611] ksys_write+0x19d/0x2d0 [ 303.354597][ T8611] ? __pfx_ksys_write+0x10/0x10 [ 303.354616][ T8611] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 303.354634][ T8611] ? lockdep_hardirqs_on+0x9d/0x150 [ 303.354653][ T8611] __do_fast_syscall_32+0xb4/0x110 [ 303.354671][ T8611] ? exc_page_fault+0x5f8/0x920 [ 303.354696][ T8611] do_fast_syscall_32+0x34/0x80 [ 303.354714][ T8611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.354733][ T8611] RIP: 0023:0xf748d579 [ 303.354747][ T8611] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.354760][ T8611] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 303.354776][ T8611] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 303.354787][ T8611] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.354796][ T8611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.354805][ T8611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.354814][ T8611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.354836][ T8611] [ 303.578616][ T5894] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 303.663814][ T8616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.664144][ T8616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.709570][ T5894] usb 1-1: device descriptor read/64, error -71 [ 303.904228][ T975] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 303.947568][ T5894] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 304.350322][ T5894] usb 1-1: device descriptor read/64, error -71 [ 304.438223][ T55] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 304.458663][ T5894] usb usb1-port1: attempt power cycle [ 304.477577][ T5929] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 304.637432][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 304.645192][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.659797][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.670697][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.680005][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.694908][ T5929] usb 2-1: config 0 descriptor?? [ 304.710371][ T5929] hub 2-1:0.0: USB hub found [ 304.721148][ T8637] input: syz0 as /devices/virtual/input/input34 [ 304.867418][ T5894] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 304.893885][ T5894] usb 1-1: device descriptor read/8, error -71 [ 304.912667][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.942555][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.969821][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.980986][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.990161][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.999192][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.010556][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.023207][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.035834][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.046880][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.067439][ T5893] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 305.077118][ T5929] hub 2-1:0.0: 2 ports detected [ 305.082162][ T52] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 305.147414][ T5894] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 305.169340][ T5894] usb 1-1: device descriptor read/8, error -71 [ 305.231476][ T5893] usb 4-1: config 0 has no interfaces? [ 305.237541][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 305.250542][ T52] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 305.262666][ T52] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.275712][ T52] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 305.288661][ T5894] usb usb1-port1: unable to enumerate USB device [ 305.301827][ T52] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.301984][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 305.315929][ T52] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.341228][ T52] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.351069][ T52] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.359809][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.359848][ T5893] usb 4-1: Product: syz [ 305.359866][ T5893] usb 4-1: Manufacturer: syz [ 305.359882][ T5893] usb 4-1: SerialNumber: syz [ 305.363192][ T5893] usb 4-1: config 0 descriptor?? [ 305.369127][ T52] usb 5-1: Product: syz [ 305.395321][ T52] usb 5-1: Manufacturer: syz [ 305.406105][ T52] usb 5-1: SerialNumber: syz [ 305.422171][ T52] usb 5-1: config 0 descriptor?? [ 305.473593][ T52] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.489718][ T52] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 305.724615][ T30] audit: type=1326 audit(1743808752.608:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.4.857" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 305.861503][ T8645] netlink: zone id is out of range [ 305.872723][ T8645] netlink: zone id is out of range [ 306.159095][ T5929] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 306.166009][ T5929] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 306.241927][ T5929] usbhid 2-1:0.0: can't add hid device: -32 [ 306.253578][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 306.339604][ T8649] FAULT_INJECTION: forcing a failure. [ 306.339604][ T8649] name failslab, interval 1, probability 0, space 0, times 0 [ 306.363825][ T8649] CPU: 1 UID: 0 PID: 8649 Comm: syz.0.861 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 306.363860][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.363875][ T8649] Call Trace: [ 306.363886][ T8649] [ 306.363895][ T8649] dump_stack_lvl+0x241/0x360 [ 306.363935][ T8649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.363964][ T8649] ? __pfx__printk+0x10/0x10 [ 306.363993][ T8649] ? __pfx___might_resched+0x10/0x10 [ 306.364016][ T8649] should_fail_ex+0x424/0x570 [ 306.364037][ T8649] should_failslab+0xac/0x100 [ 306.364059][ T8649] kmem_cache_alloc_noprof+0x78/0x390 [ 306.364081][ T8649] ? skb_clone+0x20c/0x390 [ 306.364102][ T8649] skb_clone+0x20c/0x390 [ 306.364121][ T8649] nfnetlink_rcv+0x52b/0x28f0 [ 306.364140][ T8649] ? __dev_queue_xmit+0x2f9/0x3f60 [ 306.364163][ T8649] ? __dev_queue_xmit+0x2f9/0x3f60 [ 306.364183][ T8649] ? __dev_queue_xmit+0x2f9/0x3f60 [ 306.364201][ T8649] ? __dev_queue_xmit+0x1780/0x3f60 [ 306.364216][ T8649] ? kasan_save_track+0x3f/0x80 [ 306.364232][ T8649] ? __kasan_slab_alloc+0x66/0x80 [ 306.364255][ T8649] ? __do_fast_syscall_32+0xb4/0x110 [ 306.364277][ T8649] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 306.364311][ T8649] ? ref_tracker_free+0x63e/0x7e0 [ 306.364328][ T8649] ? __asan_memcpy+0x40/0x70 [ 306.364343][ T8649] ? __pfx_ref_tracker_free+0x10/0x10 [ 306.364373][ T8649] ? skb_clone+0x240/0x390 [ 306.364397][ T8649] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.364420][ T8649] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.364442][ T8649] netlink_unicast+0x7f8/0x9a0 [ 306.364482][ T8649] ? __pfx_netlink_unicast+0x10/0x10 [ 306.364503][ T8649] ? skb_put+0x114/0x1f0 [ 306.364520][ T8649] netlink_sendmsg+0x8c3/0xcd0 [ 306.364550][ T8649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.364573][ T8649] ? __import_iovec+0x585/0x830 [ 306.364594][ T8649] ? aa_sock_msg_perm+0x91/0x160 [ 306.364619][ T8649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.364639][ T8649] __sock_sendmsg+0x221/0x270 [ 306.364661][ T8649] ____sys_sendmsg+0x523/0x860 [ 306.364684][ T8649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.364711][ T8649] __sys_sendmsg+0x271/0x360 [ 306.364737][ T8649] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.364805][ T8649] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 306.364831][ T8649] ? lockdep_hardirqs_on+0x9d/0x150 [ 306.364858][ T8649] __do_fast_syscall_32+0xb4/0x110 [ 306.364880][ T8649] ? exc_page_fault+0x5f8/0x920 [ 306.364901][ T8649] do_fast_syscall_32+0x34/0x80 [ 306.364919][ T8649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.364937][ T8649] RIP: 0023:0xf747d579 [ 306.364952][ T8649] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 306.364972][ T8649] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 306.364995][ T8649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 306.365011][ T8649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.365025][ T8649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.365038][ T8649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.365051][ T8649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.365076][ T8649] [ 306.367797][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 306.603800][ T8651] FAULT_INJECTION: forcing a failure. [ 306.603800][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 306.749361][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.0.862 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 306.749395][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.749409][ T8651] Call Trace: [ 306.749419][ T8651] [ 306.749429][ T8651] dump_stack_lvl+0x241/0x360 [ 306.749467][ T8651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.749498][ T8651] ? __pfx__printk+0x10/0x10 [ 306.749531][ T8651] ? __pfx___might_resched+0x10/0x10 [ 306.749565][ T8651] should_fail_ex+0x424/0x570 [ 306.749593][ T8651] should_failslab+0xac/0x100 [ 306.749625][ T8651] __kmalloc_noprof+0xdf/0x4d0 [ 306.749653][ T8651] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 306.749677][ T8651] ? apparmor_capable+0x13b/0x1b0 [ 306.749710][ T8651] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 306.749754][ T8651] genl_rcv_msg+0x819/0xf00 [ 306.749785][ T8651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.749804][ T8651] ? __dev_queue_xmit+0x1780/0x3f60 [ 306.749826][ T8651] ? kasan_save_track+0x3f/0x80 [ 306.749847][ T8651] ? __kasan_slab_alloc+0x66/0x80 [ 306.749876][ T8651] ? __do_fast_syscall_32+0xb4/0x110 [ 306.749918][ T8651] ? __lock_acquire+0xad5/0xd80 [ 306.749942][ T8651] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 306.749988][ T8651] netlink_rcv_skb+0x208/0x480 [ 306.750018][ T8651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.750040][ T8651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.750090][ T8651] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.750124][ T8651] genl_rcv+0x28/0x40 [ 306.750142][ T8651] netlink_unicast+0x7f8/0x9a0 [ 306.750177][ T8651] ? __pfx_netlink_unicast+0x10/0x10 [ 306.750204][ T8651] ? skb_put+0x114/0x1f0 [ 306.750229][ T8651] netlink_sendmsg+0x8c3/0xcd0 [ 306.750271][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.750304][ T8651] ? __import_iovec+0x585/0x830 [ 306.750331][ T8651] ? aa_sock_msg_perm+0x91/0x160 [ 306.750366][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.750391][ T8651] __sock_sendmsg+0x221/0x270 [ 306.750422][ T8651] ____sys_sendmsg+0x523/0x860 [ 306.750452][ T8651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.750492][ T8651] __sys_sendmsg+0x271/0x360 [ 306.750519][ T8651] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.750595][ T8651] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 306.750619][ T8651] ? lockdep_hardirqs_on+0x9d/0x150 [ 306.750645][ T8651] __do_fast_syscall_32+0xb4/0x110 [ 306.750668][ T8651] ? exc_page_fault+0x5f8/0x920 [ 306.750696][ T8651] do_fast_syscall_32+0x34/0x80 [ 306.750727][ T8651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.750752][ T8651] RIP: 0023:0xf747d579 [ 306.750770][ T8651] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 306.750788][ T8651] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 306.750810][ T8651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 306.750825][ T8651] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.750838][ T8651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.750851][ T8651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.750863][ T8651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.750894][ T8651] [ 307.072058][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.197772][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 307.216972][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.233023][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.251131][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.273849][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.291776][ T10] usb 3-1: Product: syz [ 307.296522][ T10] usb 3-1: Manufacturer: syz [ 307.305604][ T10] usb 3-1: SerialNumber: syz [ 307.358144][ T5929] usb 2-1: USB disconnect, device number 38 [ 307.530332][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 307.551226][ T10] usb 3-1: 0:2 : does not exist [ 307.567494][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 307.600161][ T10] usb 3-1: USB disconnect, device number 41 [ 307.674724][ T5929] usb 5-1: USB disconnect, device number 43 [ 307.685150][ T5929] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 307.831602][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.926390][ T8661] FAULT_INJECTION: forcing a failure. [ 307.926390][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 307.943420][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.0.866 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 307.943454][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.943468][ T8661] Call Trace: [ 307.943477][ T8661] [ 307.943487][ T8661] dump_stack_lvl+0x241/0x360 [ 307.943526][ T8661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.943558][ T8661] ? __pfx__printk+0x10/0x10 [ 307.943586][ T8661] ? nfnetlink_rcv_msg+0xdfe/0x1190 [ 307.943613][ T8661] ? __pfx___might_resched+0x10/0x10 [ 307.943655][ T8661] should_fail_ex+0x424/0x570 [ 307.943683][ T8661] should_failslab+0xac/0x100 [ 307.943715][ T8661] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 307.943746][ T8661] ? __alloc_skb+0x1c2/0x480 [ 307.943777][ T8661] ? stack_trace_save+0x11a/0x1d0 [ 307.943809][ T8661] __alloc_skb+0x1c2/0x480 [ 307.943847][ T8661] ? __pfx___alloc_skb+0x10/0x10 [ 307.943885][ T8661] ? netlink_ack_tlv_len+0x6e/0x200 [ 307.943917][ T8661] netlink_ack+0x147/0xa70 [ 307.943942][ T8661] ? netlink_sendmsg+0x8c3/0xcd0 [ 307.943967][ T8661] ? __sock_sendmsg+0x221/0x270 [ 307.943994][ T8661] ? __sys_sendmsg+0x271/0x360 [ 307.944031][ T8661] netlink_rcv_skb+0x296/0x480 [ 307.944060][ T8661] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 307.944084][ T8661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.944127][ T8661] ? apparmor_capable+0x13b/0x1b0 [ 307.944153][ T8661] ? bpf_lsm_capable+0x9/0x10 [ 307.944178][ T8661] ? security_capable+0x7e/0x2d0 [ 307.944213][ T8661] nfnetlink_rcv+0x296/0x28f0 [ 307.944239][ T8661] ? __dev_queue_xmit+0x2f9/0x3f60 [ 307.944263][ T8661] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 307.944289][ T8661] ? __dev_queue_xmit+0x2f9/0x3f60 [ 307.944312][ T8661] ? __dev_queue_xmit+0x2f9/0x3f60 [ 307.944338][ T8661] ? __dev_queue_xmit+0x1780/0x3f60 [ 307.944385][ T8661] ? kasan_save_track+0x3f/0x80 [ 307.944407][ T8661] ? __kasan_slab_alloc+0x66/0x80 [ 307.944440][ T8661] ? __do_fast_syscall_32+0xb4/0x110 [ 307.944470][ T8661] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 307.944491][ T8661] ? __dev_queue_xmit+0x2f9/0x3f60 [ 307.944520][ T8661] ? __pfx___dev_queue_xmit+0x10/0x10 [ 307.944562][ T8661] ? ref_tracker_free+0x63e/0x7e0 [ 307.944587][ T8661] ? __asan_memcpy+0x40/0x70 [ 307.944608][ T8661] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.944658][ T8661] ? skb_clone+0x240/0x390 [ 307.944694][ T8661] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.944726][ T8661] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.944757][ T8661] netlink_unicast+0x7f8/0x9a0 [ 307.944793][ T8661] ? __pfx_netlink_unicast+0x10/0x10 [ 307.944822][ T8661] ? skb_put+0x114/0x1f0 [ 307.944847][ T8661] netlink_sendmsg+0x8c3/0xcd0 [ 307.944890][ T8661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.944924][ T8661] ? __import_iovec+0x585/0x830 [ 307.944953][ T8661] ? aa_sock_msg_perm+0x91/0x160 [ 307.944989][ T8661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.945017][ T8661] __sock_sendmsg+0x221/0x270 [ 307.945048][ T8661] ____sys_sendmsg+0x523/0x860 [ 307.945080][ T8661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.945120][ T8661] __sys_sendmsg+0x271/0x360 [ 307.945149][ T8661] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.945225][ T8661] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 307.945249][ T8661] ? lockdep_hardirqs_on+0x9d/0x150 [ 307.945277][ T8661] __do_fast_syscall_32+0xb4/0x110 [ 307.945301][ T8661] ? exc_page_fault+0x5f8/0x920 [ 307.945329][ T8661] do_fast_syscall_32+0x34/0x80 [ 307.945355][ T8661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.945381][ T8661] RIP: 0023:0xf747d579 [ 307.945399][ T8661] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 307.945419][ T8661] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 307.945442][ T8661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 307.945457][ T8661] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.945469][ T8661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.945482][ T8661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.945495][ T8661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.945526][ T8661] [ 308.351072][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.760861][ T5895] usb 4-1: USB disconnect, device number 44 [ 308.893502][ T8670] FAULT_INJECTION: forcing a failure. [ 308.893502][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 308.906898][ T8670] CPU: 0 UID: 0 PID: 8670 Comm: syz.3.871 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 308.906929][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 308.906944][ T8670] Call Trace: [ 308.906953][ T8670] [ 308.906962][ T8670] dump_stack_lvl+0x241/0x360 [ 308.907000][ T8670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.907031][ T8670] ? __pfx__printk+0x10/0x10 [ 308.907065][ T8670] ? __pfx___might_resched+0x10/0x10 [ 308.907097][ T8670] should_fail_ex+0x424/0x570 [ 308.907125][ T8670] should_failslab+0xac/0x100 [ 308.907158][ T8670] kmem_cache_alloc_noprof+0x78/0x390 [ 308.907186][ T8670] ? __kernfs_new_node+0xdf/0x890 [ 308.907215][ T8670] __kernfs_new_node+0xdf/0x890 [ 308.907243][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.907271][ T8670] ? __pfx___kernfs_new_node+0x10/0x10 [ 308.907306][ T8670] ? kernfs_root+0x1c/0x230 [ 308.907329][ T8670] ? kernfs_root+0x1c/0x230 [ 308.907352][ T8670] kernfs_new_node+0x114/0x220 [ 308.907379][ T8670] kernfs_create_dir_ns+0x43/0x120 [ 308.907408][ T8670] internal_create_group+0x528/0x1320 [ 308.907449][ T8670] ? __pfx_internal_create_group+0x10/0x10 [ 308.907478][ T8670] ? loop_update_dio+0x261/0x3a0 [ 308.907511][ T8670] loop_configure+0x8d5/0xe70 [ 308.907560][ T8670] ? __pfx_loop_configure+0x10/0x10 [ 308.907625][ T8670] lo_ioctl+0x891/0x2850 [ 308.907649][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.907684][ T8670] ? __pfx_lo_ioctl+0x10/0x10 [ 308.907715][ T8670] ? is_bpf_text_address+0x26/0x2a0 [ 308.907746][ T8670] ? is_bpf_text_address+0x288/0x2a0 [ 308.907769][ T8670] ? is_bpf_text_address+0x26/0x2a0 [ 308.907795][ T8670] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.907828][ T8670] ? kernel_text_address+0xa7/0xe0 [ 308.907850][ T8670] ? __kernel_text_address+0xd/0x40 [ 308.907869][ T8670] ? unwind_get_return_address+0x4d/0x90 [ 308.907898][ T8670] ? arch_stack_walk+0xff/0x150 [ 308.907939][ T8670] ? stack_trace_save+0x11a/0x1d0 [ 308.907976][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908017][ T8670] ? __update_page_owner_handle+0x5a/0x550 [ 308.908051][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908094][ T8670] ? __page_table_check_zero+0xb8/0x510 [ 308.908126][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908152][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908181][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908207][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908236][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908261][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908303][ T8670] ? is_bpf_text_address+0x26/0x2a0 [ 308.908332][ T8670] ? is_bpf_text_address+0x288/0x2a0 [ 308.908355][ T8670] ? is_bpf_text_address+0x26/0x2a0 [ 308.908382][ T8670] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.908414][ T8670] ? kernel_text_address+0xa7/0xe0 [ 308.908435][ T8670] ? __kernel_text_address+0xd/0x40 [ 308.908455][ T8670] ? unwind_get_return_address+0x4d/0x90 [ 308.908484][ T8670] ? arch_stack_walk+0xff/0x150 [ 308.908526][ T8670] ? stack_trace_save+0x11a/0x1d0 [ 308.908566][ T8670] ? __pfx_stack_trace_save+0x10/0x10 [ 308.908600][ T8670] ? stack_depot_save_flags+0x44/0x940 [ 308.908680][ T8670] lo_compat_ioctl+0x2c5/0x370 [ 308.908711][ T8670] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 308.908736][ T8670] ? lockdep_hardirqs_on+0x9d/0x150 [ 308.908767][ T8670] ? blkdev_common_ioctl+0x1060/0x25a0 [ 308.908795][ T8670] ? tomoyo_path_number_perm+0x215/0x790 [ 308.908828][ T8670] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 308.908853][ T8670] ? tomoyo_path_number_perm+0x684/0x790 [ 308.908879][ T8670] ? __lock_acquire+0xad5/0xd80 [ 308.908904][ T8670] ? tomoyo_path_number_perm+0x215/0x790 [ 308.908934][ T8670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.908996][ T8670] ? file_to_blk_mode+0xcb/0x140 [ 308.909026][ T8670] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 308.909055][ T8670] compat_blkdev_ioctl+0x613/0x7e0 [ 308.909080][ T8670] ? __fget_files+0x2a/0x420 [ 308.909106][ T8670] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 308.909130][ T8670] ? __fget_files+0x2a/0x420 [ 308.909161][ T8670] __se_compat_sys_ioctl+0x50e/0xc30 [ 308.909191][ T8670] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 308.909219][ T8670] ? __fget_files+0x2a/0x420 [ 308.909246][ T8670] ? fput+0x9b/0xd0 [ 308.909265][ T8670] ? ksys_write+0x275/0x2d0 [ 308.909300][ T8670] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 308.909324][ T8670] ? lockdep_hardirqs_on+0x9d/0x150 [ 308.909351][ T8670] __do_fast_syscall_32+0xb4/0x110 [ 308.909376][ T8670] ? exc_page_fault+0x5f8/0x920 [ 308.909405][ T8670] do_fast_syscall_32+0x34/0x80 [ 308.909431][ T8670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.909457][ T8670] RIP: 0023:0xf73cd579 [ 308.909476][ T8670] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 308.909494][ T8670] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 308.909516][ T8670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 308.909531][ T8670] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.909552][ T8670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.909564][ T8670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.909578][ T8670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.909610][ T8670] [ 309.448346][ T8670] loop8: detected capacity change from 0 to 8 [ 309.466427][ T8670] Dev loop8: unable to read RDB block 8 [ 309.496783][ T8670] loop8: unable to read partition table [ 309.505974][ T8670] loop8: partition table beyond EOD, truncated [ 309.542860][ T8670] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 309.687474][ T5929] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 309.860204][ T5929] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 309.874798][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.893439][ T5929] usb 3-1: config 0 has no interface number 0 [ 309.906636][ T5929] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 309.923984][ T5929] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 309.935536][ T5929] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 309.973744][ T5929] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 309.987574][ T5893] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 310.004954][ T5929] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 310.020410][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.031507][ T5929] usb 3-1: Product: syz [ 310.035877][ T5929] usb 3-1: Manufacturer: syz [ 310.045779][ T5929] usb 3-1: SerialNumber: syz [ 310.055878][ T8690] Invalid logical block size (18) [ 310.060046][ T5929] usb 3-1: config 0 descriptor?? [ 310.075226][ T5929] symbolserial 3-1:0.175: symbol converter detected [ 310.088478][ T5929] usb 3-1: symbol converter now attached to ttyUSB0 [ 310.139650][ T5893] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 310.160492][ T5893] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 310.174510][ T5893] usb 4-1: config 4 has no interface number 0 [ 310.182851][ T5893] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.196735][ T5893] usb 4-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.221264][ T5893] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 310.238244][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.256310][ T5893] usb 4-1: Product: syz [ 310.264950][ T5893] usb 4-1: Manufacturer: syz [ 310.270395][ T5893] usb 4-1: SerialNumber: syz [ 310.531264][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 310.691201][ T5893] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 310.697970][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 310.708862][ T5893] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 310.718315][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 310.730193][ T5893] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 310.737815][ T5893] usb 4-1: media controller created [ 310.745937][ T10] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 310.756898][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.767759][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.776792][ T10] usb 1-1: Product: syz [ 310.785235][ T10] usb 1-1: Manufacturer: syz [ 310.792784][ T10] usb 1-1: SerialNumber: syz [ 310.805617][ T10] usb 1-1: config 0 descriptor?? [ 310.820975][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 310.833992][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 310.846356][ T5893] DVB: Unable to find symbol dib7000p_attach() [ 310.857215][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.864955][ T5893] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 310.897948][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 310.971505][ T5893] rc_core: IR keymap rc-dib0700-rc5 not found [ 310.982909][ T5893] Registered IR keymap rc-empty [ 310.989002][ T5893] dvb-usb: could not initialize remote control. [ 310.997940][ T5893] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 311.757523][ T5884] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 311.950175][ T5884] usb 2-1: config 0 has no interfaces? [ 311.969458][ T5884] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 311.983599][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.026179][ T5884] usb 2-1: Product: syz [ 312.035697][ T5884] usb 2-1: Manufacturer: syz [ 312.046566][ T5884] usb 2-1: SerialNumber: syz [ 312.070234][ T5884] usb 2-1: config 0 descriptor?? [ 312.515909][ T5895] usb 3-1: USB disconnect, device number 42 [ 312.622408][ T5895] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 312.650508][ T5895] symbolserial 3-1:0.175: device disconnected [ 313.105536][ T8722] FAULT_INJECTION: forcing a failure. [ 313.105536][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.153549][ T8722] CPU: 0 UID: 0 PID: 8722 Comm: syz.4.885 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 313.153582][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.153596][ T8722] Call Trace: [ 313.153605][ T8722] [ 313.153615][ T8722] dump_stack_lvl+0x241/0x360 [ 313.153653][ T8722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.153684][ T8722] ? __pfx__printk+0x10/0x10 [ 313.153726][ T8722] should_fail_ex+0x424/0x570 [ 313.153754][ T8722] _copy_from_iter+0x43c/0x1c70 [ 313.153797][ T8722] ? __pfx__copy_from_iter+0x10/0x10 [ 313.153836][ T8722] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 313.153864][ T8722] skb_copy_datagram_from_iter+0xec/0x6c0 [ 313.153890][ T8722] ? dev_get_by_index+0x23/0x2d0 [ 313.153915][ T8722] ? skb_put+0x114/0x1f0 [ 313.153939][ T8722] packet_sendmsg+0x4774/0x6ed0 [ 313.153991][ T8722] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 313.154058][ T8722] ? __pfx_packet_sendmsg+0x10/0x10 [ 313.154083][ T8722] ? aa_sk_perm+0x96f/0xac0 [ 313.154118][ T8722] ? __pfx_aa_sk_perm+0x10/0x10 [ 313.154147][ T8722] ? __import_iovec+0x3c2/0x830 [ 313.154175][ T8722] ? aa_sock_msg_perm+0x91/0x160 [ 313.154210][ T8722] ? __pfx_packet_sendmsg+0x10/0x10 [ 313.154235][ T8722] __sock_sendmsg+0x221/0x270 [ 313.154272][ T8722] ____sys_sendmsg+0x523/0x860 [ 313.154304][ T8722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.154343][ T8722] __sys_sendmsg+0x271/0x360 [ 313.154370][ T8722] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.154443][ T8722] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 313.154468][ T8722] ? lockdep_hardirqs_on+0x9d/0x150 [ 313.154493][ T8722] __do_fast_syscall_32+0xb4/0x110 [ 313.154517][ T8722] ? exc_page_fault+0x5f8/0x920 [ 313.154544][ T8722] do_fast_syscall_32+0x34/0x80 [ 313.154570][ T8722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.154595][ T8722] RIP: 0023:0xf7fb4579 [ 313.154613][ T8722] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 313.154631][ T8722] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 313.154654][ T8722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 313.154669][ T8722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.154682][ T8722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.154695][ T8722] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.154709][ T8722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.154738][ T8722] [ 313.482051][ T10] usb 1-1: USB disconnect, device number 39 [ 314.386765][ T8741] bridge0: port 3(erspan0) entered blocking state [ 314.404292][ T8741] bridge0: port 3(erspan0) entered disabled state [ 314.461488][ T8741] erspan0: entered allmulticast mode [ 314.473908][ T8741] erspan0: entered promiscuous mode [ 314.501690][ T8741] bridge0: port 3(erspan0) entered blocking state [ 314.508366][ T8741] bridge0: port 3(erspan0) entered forwarding state [ 314.511289][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.891'. [ 314.575353][ T8741] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 314.641163][ T5895] usb 2-1: USB disconnect, device number 39 [ 314.751501][ T8741] bond1: entered promiscuous mode [ 314.761003][ T8741] bond1: entered allmulticast mode [ 315.198293][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 315.815186][ T8755] netlink: 'syz.4.895': attribute type 3 has an invalid length. [ 315.878797][ T8755] loop2: detected capacity change from 0 to 7 [ 315.942980][ T8755] Dev loop2: unable to read RDB block 7 [ 315.979322][ T8755] loop2: unable to read partition table [ 316.004798][ T8755] loop2: partition table beyond EOD, truncated [ 316.103660][ T8755] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 316.439632][ T8759] FAULT_INJECTION: forcing a failure. [ 316.439632][ T8759] name failslab, interval 1, probability 0, space 0, times 0 [ 316.457206][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: syz.4.896 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 316.457234][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.457249][ T8759] Call Trace: [ 316.457257][ T8759] [ 316.457264][ T8759] dump_stack_lvl+0x241/0x360 [ 316.457299][ T8759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.457326][ T8759] ? __pfx__printk+0x10/0x10 [ 316.457355][ T8759] ? __pfx___might_resched+0x10/0x10 [ 316.457381][ T8759] should_fail_ex+0x424/0x570 [ 316.457404][ T8759] should_failslab+0xac/0x100 [ 316.457428][ T8759] __kmalloc_noprof+0xdf/0x4d0 [ 316.457450][ T8759] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 316.457469][ T8759] ? apparmor_capable+0x13b/0x1b0 [ 316.457490][ T8759] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 316.457516][ T8759] genl_rcv_msg+0x819/0xf00 [ 316.457541][ T8759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.457556][ T8759] ? __dev_queue_xmit+0x1780/0x3f60 [ 316.457573][ T8759] ? kasan_save_track+0x3f/0x80 [ 316.457590][ T8759] ? __kasan_slab_alloc+0x66/0x80 [ 316.457615][ T8759] ? __do_fast_syscall_32+0xb4/0x110 [ 316.457650][ T8759] ? __lock_acquire+0xad5/0xd80 [ 316.457668][ T8759] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 316.457692][ T8759] ? __pfx_nl80211_tdls_mgmt+0x10/0x10 [ 316.457707][ T8759] ? __pfx_nl80211_post_doit+0x10/0x10 [ 316.457751][ T8759] netlink_rcv_skb+0x208/0x480 [ 316.457774][ T8759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.457793][ T8759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.457834][ T8759] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.457863][ T8759] genl_rcv+0x28/0x40 [ 316.457878][ T8759] netlink_unicast+0x7f8/0x9a0 [ 316.457906][ T8759] ? __pfx_netlink_unicast+0x10/0x10 [ 316.457928][ T8759] ? skb_put+0x114/0x1f0 [ 316.457948][ T8759] netlink_sendmsg+0x8c3/0xcd0 [ 316.457981][ T8759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.458007][ T8759] ? __import_iovec+0x585/0x830 [ 316.458029][ T8759] ? aa_sock_msg_perm+0x91/0x160 [ 316.458057][ T8759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.458077][ T8759] __sock_sendmsg+0x221/0x270 [ 316.458103][ T8759] ____sys_sendmsg+0x523/0x860 [ 316.458128][ T8759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.458160][ T8759] __sys_sendmsg+0x271/0x360 [ 316.458183][ T8759] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.458250][ T8759] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 316.458274][ T8759] ? lockdep_hardirqs_on+0x9d/0x150 [ 316.458301][ T8759] __do_fast_syscall_32+0xb4/0x110 [ 316.458325][ T8759] ? exc_page_fault+0x5f8/0x920 [ 316.458353][ T8759] do_fast_syscall_32+0x34/0x80 [ 316.458378][ T8759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.458403][ T8759] RIP: 0023:0xf7fb4579 [ 316.458421][ T8759] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.458439][ T8759] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 316.458462][ T8759] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 316.458482][ T8759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.458495][ T8759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.458507][ T8759] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.458538][ T8759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.458572][ T8759] [ 317.204095][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210531][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.422562][ T975] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 317.594549][ T975] usb 5-1: not running at top speed; connect to a high speed hub [ 317.616772][ T975] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 317.660800][ T975] usb 5-1: config 95 has no interface number 0 [ 317.667073][ T975] usb 5-1: config 95 interface 1 has no altsetting 0 [ 317.701308][ T975] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 317.710725][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.728774][ T975] usb 5-1: Product: syz [ 317.774518][ T975] usb 5-1: Manufacturer: syz [ 317.804197][ T975] usb 5-1: SerialNumber: syz [ 317.809113][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 318.084702][ T8790] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 318.113243][ T30] audit: type=1326 audit(1743808764.968:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.135238][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.140661][ T10] usb 3-1: config 0 has no interfaces? [ 318.144997][ T8790] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 318.155566][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 318.176135][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.194557][ T8790] bond0: (slave netdevsim0): no link monitoring support [ 318.215411][ T10] usb 3-1: Product: syz [ 318.215410][ T8790] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 318.218915][ T8790] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.225164][ T10] usb 3-1: Manufacturer: syz [ 318.247765][ T30] audit: type=1326 audit(1743808764.968:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.265856][ T10] usb 3-1: SerialNumber: syz [ 318.292358][ T975] usb 5-1: USB disconnect, device number 44 [ 318.386904][ T30] audit: type=1326 audit(1743808765.058:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.409510][ T30] audit: type=1326 audit(1743808765.058:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.415156][ T10] usb 3-1: config 0 descriptor?? [ 318.456243][ T30] audit: type=1326 audit(1743808765.058:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.486447][ T8794] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.907'. [ 318.496201][ T30] audit: type=1326 audit(1743808765.058:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.556687][ T30] audit: type=1326 audit(1743808765.058:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.663325][ T30] audit: type=1326 audit(1743808765.058:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.695459][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.732858][ T8799] FAULT_INJECTION: forcing a failure. [ 318.732858][ T8799] name failslab, interval 1, probability 0, space 0, times 0 [ 318.733477][ T30] audit: type=1326 audit(1743808765.058:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 318.785612][ T8799] CPU: 0 UID: 0 PID: 8799 Comm: syz.4.908 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 318.785644][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.785658][ T8799] Call Trace: [ 318.785667][ T8799] [ 318.785676][ T8799] dump_stack_lvl+0x241/0x360 [ 318.785713][ T8799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.785743][ T8799] ? __pfx__printk+0x10/0x10 [ 318.785775][ T8799] ? __pfx___might_resched+0x10/0x10 [ 318.785806][ T8799] should_fail_ex+0x424/0x570 [ 318.785842][ T8799] should_failslab+0xac/0x100 [ 318.785871][ T8799] __kmalloc_noprof+0xdf/0x4d0 [ 318.785897][ T8799] ? tomoyo_encode+0x26f/0x540 [ 318.785932][ T8799] tomoyo_encode+0x26f/0x540 [ 318.785969][ T8799] tomoyo_realpath_from_path+0x59e/0x5e0 [ 318.786013][ T8799] tomoyo_check_open_permission+0x25a/0x4f0 [ 318.786044][ T8799] ? tomoyo_check_open_permission+0x209/0x4f0 [ 318.786072][ T8799] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 318.786097][ T8799] ? seqcount_lockdep_reader_access+0x1cf/0x230 [ 318.786168][ T8799] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.786207][ T8799] ? tomoyo_file_open+0x168/0x220 [ 318.786233][ T8799] security_file_open+0xac/0x250 [ 318.786258][ T8799] do_dentry_open+0x320/0x1960 [ 318.786297][ T8799] ? vfs_open+0x31/0x370 [ 318.786331][ T8799] vfs_open+0x3b/0x370 [ 318.786365][ T8799] path_openat+0x2caf/0x35d0 [ 318.786396][ T8799] ? __pfx_kstrtoull+0x10/0x10 [ 318.786426][ T8799] ? stack_depot_save_flags+0x44/0x940 [ 318.786455][ T8799] ? kasan_save_track+0x51/0x80 [ 318.786482][ T8799] ? __pfx_path_openat+0x10/0x10 [ 318.786503][ T8799] ? do_fast_syscall_32+0x34/0x80 [ 318.786528][ T8799] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.786579][ T8799] do_filp_open+0x284/0x4e0 [ 318.786608][ T8799] ? __pfx_do_filp_open+0x10/0x10 [ 318.786631][ T8799] ? do_raw_spin_lock+0x151/0x370 [ 318.786702][ T8799] do_sys_openat2+0x12b/0x1d0 [ 318.786737][ T8799] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.786775][ T8799] ? __fget_files+0x2a/0x420 [ 318.786798][ T8799] ? __fget_files+0x2a/0x420 [ 318.786825][ T8799] __ia32_compat_sys_openat+0x241/0x290 [ 318.786856][ T8799] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 318.786883][ T8799] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 318.786908][ T8799] ? lockdep_hardirqs_on+0x9d/0x150 [ 318.786935][ T8799] __do_fast_syscall_32+0xb4/0x110 [ 318.786960][ T8799] ? exc_page_fault+0x5f8/0x920 [ 318.786988][ T8799] do_fast_syscall_32+0x34/0x80 [ 318.787013][ T8799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.787039][ T8799] RIP: 0023:0xf7fb4579 [ 318.787057][ T8799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 318.787074][ T8799] RSP: 002b:00000000f50d6100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 318.787098][ T8799] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50d6150 [ 318.787114][ T8799] RDX: 00000000000a0a41 RSI: 0000000000000000 RDI: 00000000f743cff4 [ 318.787128][ T8799] RBP: 00000000000a0a41 R08: 0000000000000000 R09: 0000000000000000 [ 318.787142][ T8799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 318.787155][ T8799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.787187][ T8799] [ 318.801918][ T30] audit: type=1326 audit(1743808765.058:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 319.133928][ T8799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.503757][ T8803] netdevsim netdevsim0 netdevsim0: Device is already in use. [ 319.862530][ T8812] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 319.900359][ T975] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 320.066440][ T975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.078323][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 320.110715][ T975] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 320.221908][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 320.245356][ T975] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 320.277611][ T975] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 320.302427][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.319782][ T975] usb 5-1: Product: syz [ 320.326952][ T975] usb 5-1: Manufacturer: syz [ 320.336638][ T975] usb 5-1: SerialNumber: syz [ 320.358554][ T975] usb 5-1: config 0 descriptor?? [ 320.381449][ T975] usb 5-1: NFC: Unable to get FW version [ 320.387757][ T5929] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 320.423607][ T975] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 320.527986][ T5929] usb 1-1: device descriptor read/64, error -71 [ 320.580805][ T52] usb 5-1: USB disconnect, device number 45 [ 320.666546][ T975] usb 3-1: USB disconnect, device number 43 [ 320.767483][ T5929] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 320.897605][ T5929] usb 1-1: device descriptor read/64, error -71 [ 321.057628][ T5929] usb usb1-port1: attempt power cycle [ 321.427456][ T5929] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 321.449110][ T5929] usb 1-1: device descriptor read/8, error -71 [ 321.637449][ T975] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 321.687519][ T5929] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 321.707541][ T52] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 321.715681][ T5929] usb 1-1: device descriptor read/8, error -71 [ 321.787565][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 321.798396][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 321.806210][ T975] usb 3-1: can't read configurations, error -61 [ 321.827630][ T5929] usb usb1-port1: unable to enumerate USB device [ 321.869621][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.881078][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.891774][ T52] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 321.901053][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 321.909394][ T52] usb 5-1: SerialNumber: syz [ 321.949055][ T975] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 322.107385][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 322.115199][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 322.123215][ T975] usb 3-1: can't read configurations, error -61 [ 322.132940][ T975] usb usb3-port1: attempt power cycle [ 322.143461][ T52] usb 5-1: 0:2 : does not exist [ 322.167813][ T52] usb 5-1: USB disconnect, device number 46 [ 322.348741][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.497842][ T975] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 322.519357][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 322.531498][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 322.541582][ T975] usb 3-1: can't read configurations, error -61 [ 322.677588][ T975] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 322.706485][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 322.713815][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 322.722157][ T975] usb 3-1: can't read configurations, error -61 [ 322.730136][ T975] usb usb3-port1: unable to enumerate USB device [ 322.927808][ T52] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 323.080015][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.097218][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.131169][ T52] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 323.150744][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.205738][ T52] usb 2-1: config 0 descriptor?? [ 323.623909][ T52] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 323.639750][ T52] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 323.653188][ T52] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 323.664568][ T8864] FAULT_INJECTION: forcing a failure. [ 323.664568][ T8864] name failslab, interval 1, probability 0, space 0, times 0 [ 323.678137][ T52] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 323.685056][ T52] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 323.692263][ T8864] CPU: 1 UID: 0 PID: 8864 Comm: syz.0.923 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 323.692294][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.692308][ T8864] Call Trace: [ 323.692318][ T8864] [ 323.692328][ T8864] dump_stack_lvl+0x241/0x360 [ 323.692368][ T8864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.692399][ T8864] ? __pfx__printk+0x10/0x10 [ 323.692434][ T8864] ? __pfx___might_resched+0x10/0x10 [ 323.692475][ T8864] should_fail_ex+0x424/0x570 [ 323.692503][ T8864] should_failslab+0xac/0x100 [ 323.692536][ T8864] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 323.692568][ T8864] ? __alloc_skb+0x1c2/0x480 [ 323.692599][ T8864] ? lockdep_hardirqs_on+0x9d/0x150 [ 323.692627][ T8864] __alloc_skb+0x1c2/0x480 [ 323.692666][ T8864] ? __pfx___alloc_skb+0x10/0x10 [ 323.692707][ T8864] ? netlink_ack_tlv_len+0x6e/0x200 [ 323.692739][ T8864] netlink_ack+0x147/0xa70 [ 323.692766][ T8864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.692804][ T8864] ? ref_tracker_free+0x63e/0x7e0 [ 323.692836][ T8864] netlink_rcv_skb+0x296/0x480 [ 323.692866][ T8864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.692898][ T8864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.692946][ T8864] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.692978][ T8864] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.693010][ T8864] netlink_unicast+0x7f8/0x9a0 [ 323.693046][ T8864] ? __pfx_netlink_unicast+0x10/0x10 [ 323.693075][ T8864] ? skb_put+0x114/0x1f0 [ 323.693101][ T8864] netlink_sendmsg+0x8c3/0xcd0 [ 323.693144][ T8864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.693178][ T8864] ? __import_iovec+0x585/0x830 [ 323.693207][ T8864] ? aa_sock_msg_perm+0x91/0x160 [ 323.693244][ T8864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.693278][ T8864] __sock_sendmsg+0x221/0x270 [ 323.693309][ T8864] ____sys_sendmsg+0x523/0x860 [ 323.693342][ T8864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.693383][ T8864] __sys_sendmsg+0x271/0x360 [ 323.693411][ T8864] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.693494][ T8864] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 323.693520][ T8864] ? lockdep_hardirqs_on+0x9d/0x150 [ 323.693547][ T8864] __do_fast_syscall_32+0xb4/0x110 [ 323.693573][ T8864] ? exc_page_fault+0x5f8/0x920 [ 323.693601][ T8864] do_fast_syscall_32+0x34/0x80 [ 323.693628][ T8864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.693654][ T8864] RIP: 0023:0xf747d579 [ 323.693672][ T8864] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 323.693690][ T8864] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 323.693714][ T8864] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 323.693729][ T8864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.693743][ T8864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.693756][ T8864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.693769][ T8864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.693799][ T8864] [ 323.996418][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.004468][ T52] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 324.012050][ T52] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 324.082617][ T52] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 324.552121][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.575272][ T8872] netlink: 76 bytes leftover after parsing attributes in process `syz.0.924'. [ 324.780293][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.974293][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.057549][ T975] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 325.082256][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.207975][ T975] usb 1-1: device descriptor read/64, error -71 [ 325.458697][ T975] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 325.579913][ T62] erspan0: left allmulticast mode [ 325.604040][ T62] erspan0: left promiscuous mode [ 325.622818][ T62] bridge0: port 3(erspan0) entered disabled state [ 325.656265][ T975] usb 1-1: device descriptor read/64, error -71 [ 325.735847][ T62] bridge_slave_1: left allmulticast mode [ 325.766158][ T52] usb 2-1: USB disconnect, device number 40 [ 325.779775][ T62] bridge_slave_1: left promiscuous mode [ 325.803941][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.836090][ T975] usb usb1-port1: attempt power cycle [ 325.923930][ T62] bridge_slave_0: left allmulticast mode [ 325.936061][ T8886] FAULT_INJECTION: forcing a failure. [ 325.936061][ T8886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.997644][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.1.931 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 325.997677][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.997691][ T8886] Call Trace: [ 325.997701][ T8886] [ 325.997711][ T8886] dump_stack_lvl+0x241/0x360 [ 325.997750][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.997781][ T8886] ? __pfx__printk+0x10/0x10 [ 325.997824][ T8886] should_fail_ex+0x424/0x570 [ 325.997852][ T8886] _copy_to_user+0x31/0xb0 [ 325.997886][ T8886] ucma_create_id+0x3b4/0x520 [ 325.997924][ T8886] ? __pfx_ucma_create_id+0x10/0x10 [ 325.997971][ T8886] ? __pfx_ucma_create_id+0x10/0x10 [ 325.998000][ T8886] ucma_write+0x2db/0x430 [ 325.998035][ T8886] ? __pfx_ucma_write+0x10/0x10 [ 325.998062][ T8886] ? bpf_lsm_file_permission+0x9/0x10 [ 325.998087][ T8886] ? rw_verify_area+0x246/0x630 [ 325.998136][ T8886] vfs_writev+0x5ba/0xbc0 [ 325.998167][ T8886] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 325.998205][ T8886] ? __pfx_ucma_write+0x10/0x10 [ 325.998234][ T8886] ? __pfx_vfs_writev+0x10/0x10 [ 325.998284][ T8886] ? __fget_files+0x2a/0x420 [ 325.998305][ T8886] ? __fget_files+0x39d/0x420 [ 325.998323][ T8886] ? __fget_files+0x2a/0x420 [ 325.998351][ T8886] do_writev+0x1b8/0x360 [ 325.998389][ T8886] ? __pfx_do_writev+0x10/0x10 [ 325.998425][ T8886] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 325.998450][ T8886] ? lockdep_hardirqs_on+0x9d/0x150 [ 325.998477][ T8886] __do_fast_syscall_32+0xb4/0x110 [ 325.998507][ T8886] ? exc_page_fault+0x5f8/0x920 [ 325.998536][ T8886] do_fast_syscall_32+0x34/0x80 [ 325.998562][ T8886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.998588][ T8886] RIP: 0023:0xf7f47579 [ 325.998606][ T8886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 325.998624][ T8886] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 325.998647][ T8886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 325.998662][ T8886] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.998675][ T8886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.998687][ T8886] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 325.998700][ T8886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.998730][ T8886] [ 326.257290][ T62] bridge_slave_0: left promiscuous mode [ 326.263094][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.349462][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.354854][ T12] [ 326.359045][ T12] ============================= [ 326.363920][ T12] WARNING: suspicious RCU usage [ 326.368926][ T12] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 326.372025][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.375691][ T12] ----------------------------- [ 326.375705][ T12] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 326.387334][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.387744][ T12] [ 326.387744][ T12] other info that might help us debug this: [ 326.387744][ T12] [ 326.401424][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.403465][ T12] [ 326.403465][ T12] rcu_scheduler_active = 2, debug_locks = 1 [ 326.416376][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.420809][ T12] 3 locks held by kworker/u8:0/12: [ 326.420827][ T12] #0: ffff88805eab2148 [ 326.431904][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.437347][ T12] ( [ 326.447071][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.453486][ T12] (wq_completion)bond0 [ 326.455962][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.461898][ T12] #2 [ 326.468481][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.472932][ T12] ){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 326.487917][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.489661][ T12] #1: ffffc90000117c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 326.509588][ T12] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 326.519352][ T12] [ 326.519352][ T12] stack backtrace: [ 326.525270][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 326.525297][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.525312][ T12] Workqueue: bond0 bond_mii_monitor [ 326.525346][ T12] Call Trace: [ 326.525354][ T12] [ 326.525364][ T12] dump_stack_lvl+0x241/0x360 [ 326.525400][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.525430][ T12] ? __pfx__printk+0x10/0x10 [ 326.525463][ T12] ? print_lock+0x171/0x1a0 [ 326.525494][ T12] lockdep_rcu_suspicious+0x175/0x200 [ 326.525523][ T12] dev_deactivate_queue+0x8f/0x1b0 [ 326.525558][ T12] dev_deactivate_many+0x14c/0xca0 [ 326.525594][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 326.525629][ T12] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 326.525655][ T12] dev_deactivate+0x186/0x280 [ 326.525686][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 326.525713][ T12] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 326.525733][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.525753][ T12] ? sched_clock+0x4a/0x70 [ 326.525785][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 326.525810][ T12] linkwatch_do_dev+0x10a/0x170 [ 326.525833][ T12] ethtool_op_get_link+0x15/0x60 [ 326.525862][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 326.525891][ T12] bond_check_dev_link+0x1fb/0x4b0 [ 326.525922][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 326.525969][ T12] bond_mii_monitor+0x49d/0x3170 [ 326.526010][ T12] ? bond_mii_monitor+0x17f/0x3170 [ 326.526041][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 326.526078][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 326.526108][ T12] ? register_lock_class+0x54/0x330 [ 326.526137][ T12] ? __lock_acquire+0xad5/0xd80 [ 326.526185][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 326.526220][ T12] process_scheduled_works+0xac3/0x18e0 [ 326.526277][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.526310][ T12] ? assign_work+0x367/0x3d0 [ 326.526357][ T12] worker_thread+0x870/0xd50 [ 326.526398][ T12] ? __kthread_parkme+0x1a8/0x200 [ 326.526427][ T12] ? __pfx_worker_thread+0x10/0x10 [ 326.526453][ T12] kthread+0x7b7/0x940 [ 326.526483][ T12] ? __pfx_worker_thread+0x10/0x10 [ 326.526509][ T12] ? __pfx_kthread+0x10/0x10 [ 326.526540][ T12] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 326.526568][ T12] ? __pfx_kthread+0x10/0x10 [ 326.526596][ T12] ? __pfx_kthread+0x10/0x10 [ 326.526623][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.526642][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 326.526664][ T12] ? __pfx_kthread+0x10/0x10 [ 326.526694][ T12] ret_from_fork+0x4b/0x80 [ 326.526715][ T12] ? __pfx_kthread+0x10/0x10 [ 326.526743][ T12] ret_from_fork_asm+0x1a/0x30 [ 326.526780][ T12] [ 326.799989][ T12] [ 326.802424][ T12] ============================= [ 326.807469][ T12] WARNING: suspicious RCU usage [ 326.812367][ T12] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 326.819542][ T12] ----------------------------- [ 326.824502][ T12] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 326.833598][ T12] [ 326.833598][ T12] other info that might help us debug this: [ 326.833598][ T12] [ 326.844411][ T12] [ 326.844411][ T12] rcu_scheduler_active = 2, debug_locks = 1 [ 326.852916][ T12] 3 locks held by kworker/u8:0/12: [ 326.858077][ T12] #0: ffff88805eab2148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 326.869276][ T12] #1: ffffc90000117c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 326.882424][ T12] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 326.892242][ T12] [ 326.892242][ T12] stack backtrace: [ 326.898377][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 326.898405][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.898419][ T12] Workqueue: bond0 bond_mii_monitor [ 326.898451][ T12] Call Trace: [ 326.898460][ T12] [ 326.898469][ T12] dump_stack_lvl+0x241/0x360 [ 326.898509][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.898556][ T12] ? __pfx__printk+0x10/0x10 [ 326.898599][ T12] lockdep_rcu_suspicious+0x175/0x200 [ 326.898630][ T12] dev_deactivate_many+0x228/0xca0 [ 326.898670][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 326.898706][ T12] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 326.898733][ T12] dev_deactivate+0x186/0x280 [ 326.898766][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 326.898794][ T12] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 326.898816][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.898836][ T12] ? sched_clock+0x4a/0x70 [ 326.898871][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 326.898896][ T12] linkwatch_do_dev+0x10a/0x170 [ 326.898921][ T12] ethtool_op_get_link+0x15/0x60 [ 326.898950][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 326.898980][ T12] bond_check_dev_link+0x1fb/0x4b0 [ 326.899013][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 326.899060][ T12] bond_mii_monitor+0x49d/0x3170 [ 326.899103][ T12] ? bond_mii_monitor+0x17f/0x3170 [ 326.899136][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 326.899174][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 326.899207][ T12] ? register_lock_class+0x54/0x330 [ 326.899236][ T12] ? __lock_acquire+0xad5/0xd80 [ 326.899286][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 326.899317][ T12] process_scheduled_works+0xac3/0x18e0 [ 326.899373][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.899409][ T12] ? assign_work+0x367/0x3d0 [ 326.899440][ T12] worker_thread+0x870/0xd50 [ 326.899483][ T12] ? __kthread_parkme+0x1a8/0x200 [ 326.899515][ T12] ? __pfx_worker_thread+0x10/0x10 [ 326.899541][ T12] kthread+0x7b7/0x940 [ 326.899573][ T12] ? __pfx_worker_thread+0x10/0x10 [ 326.899600][ T12] ? __pfx_kthread+0x10/0x10 [ 326.899627][ T12] ? __pfx_kthread+0x10/0x10 [ 326.899655][ T12] ? __pfx_kthread+0x10/0x10 [ 326.899696][ T12] ? __pfx_kthread+0x10/0x10 [ 326.899735][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.899752][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 326.899773][ T12] ? __pfx_kthread+0x10/0x10 [ 326.899800][ T12] ret_from_fork+0x4b/0x80 [ 326.899820][ T12] ? __pfx_kthread+0x10/0x10 [ 326.899847][ T12] ret_from_fork_asm+0x1a/0x30 [ 326.899881][ T12] [ 327.217358][ T975] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 327.282698][ T12] [ 327.285090][ T12] ============================= [ 327.290055][ T12] WARNING: suspicious RCU usage [ 327.294927][ T12] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 327.301794][ T12] ----------------------------- [ 327.306655][ T12] net/sched/sch_generic.c:1301 suspicious rcu_dereference_protected() usage! [ 327.315489][ T12] [ 327.315489][ T12] other info that might help us debug this: [ 327.315489][ T12] [ 327.317640][ T975] usb 1-1: device descriptor read/8, error -71 [ 327.325775][ T12] [ 327.325775][ T12] rcu_scheduler_active = 2, debug_locks = 1 [ 327.340045][ T12] 3 locks held by kworker/u8:0/12: [ 327.345169][ T12] #0: ffff88805eab2148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 327.357587][ T12] #1: ffffc90000117c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 327.370596][ T12] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 327.380495][ T12] [ 327.380495][ T12] stack backtrace: [ 327.387430][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 327.387458][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.387473][ T12] Workqueue: bond0 bond_mii_monitor [ 327.387505][ T12] Call Trace: [ 327.387513][ T12] [ 327.387522][ T12] dump_stack_lvl+0x241/0x360 [ 327.387555][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.387584][ T12] ? __pfx__printk+0x10/0x10 [ 327.387615][ T12] ? print_lock+0x171/0x1a0 [ 327.387646][ T12] lockdep_rcu_suspicious+0x175/0x200 [ 327.387675][ T12] dev_reset_queue+0x88/0x1b0 [ 327.387704][ T12] dev_deactivate_many+0x61d/0xca0 [ 327.387735][ T12] ? dev_deactivate_many+0x2e5/0xca0 [ 327.387765][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 327.387800][ T12] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 327.387823][ T12] dev_deactivate+0x186/0x280 [ 327.387854][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 327.387881][ T12] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 327.387901][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.387920][ T12] ? sched_clock+0x4a/0x70 [ 327.387961][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 327.387985][ T12] linkwatch_do_dev+0x10a/0x170 [ 327.388009][ T12] ethtool_op_get_link+0x15/0x60 [ 327.388038][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 327.388066][ T12] bond_check_dev_link+0x1fb/0x4b0 [ 327.388098][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 327.388144][ T12] bond_mii_monitor+0x49d/0x3170 [ 327.388185][ T12] ? bond_mii_monitor+0x17f/0x3170 [ 327.388217][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 327.388252][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 327.388284][ T12] ? register_lock_class+0x54/0x330 [ 327.388312][ T12] ? __lock_acquire+0xad5/0xd80 [ 327.388359][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 327.388381][ T12] process_scheduled_works+0xac3/0x18e0 [ 327.388437][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.388471][ T12] ? assign_work+0x367/0x3d0 [ 327.388500][ T12] worker_thread+0x870/0xd50 [ 327.388559][ T12] ? __kthread_parkme+0x1a8/0x200 [ 327.388590][ T12] ? __pfx_worker_thread+0x10/0x10 [ 327.388616][ T12] kthread+0x7b7/0x940 [ 327.388648][ T12] ? __pfx_worker_thread+0x10/0x10 [ 327.388675][ T12] ? __pfx_kthread+0x10/0x10 [ 327.388703][ T12] ? __pfx_kthread+0x10/0x10 [ 327.388732][ T12] ? __pfx_kthread+0x10/0x10 [ 327.388760][ T12] ? __pfx_kthread+0x10/0x10 [ 327.388788][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.388806][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 327.388828][ T12] ? __pfx_kthread+0x10/0x10 [ 327.388859][ T12] ret_from_fork+0x4b/0x80 [ 327.388879][ T12] ? __pfx_kthread+0x10/0x10 [ 327.388908][ T12] ret_from_fork_asm+0x1a/0x30 [ 327.388955][ T12] [ 327.389087][ T12] [ 327.669433][ T12] ============================= [ 327.674317][ T12] WARNING: suspicious RCU usage [ 327.679233][ T12] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 327.686008][ T12] ----------------------------- [ 327.690887][ T12] net/sched/sch_generic.c:1332 suspicious rcu_dereference_protected() usage! [ 327.699685][ T12] [ 327.699685][ T12] other info that might help us debug this: [ 327.699685][ T12] [ 327.709952][ T12] [ 327.709952][ T12] rcu_scheduler_active = 2, debug_locks = 1 [ 327.718160][ T12] 3 locks held by kworker/u8:0/12: [ 327.723272][ T12] #0: ffff88805eab2148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 327.734427][ T12] #1: ffffc90000117c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 327.747394][ T12] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 327.757112][ T12] [ 327.757112][ T12] stack backtrace: [ 327.763504][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 327.763533][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.763548][ T12] Workqueue: bond0 bond_mii_monitor [ 327.763580][ T12] Call Trace: [ 327.763589][ T12] [ 327.763598][ T12] dump_stack_lvl+0x241/0x360 [ 327.763635][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.763666][ T12] ? __pfx__printk+0x10/0x10 [ 327.763709][ T12] lockdep_rcu_suspicious+0x175/0x200 [ 327.763740][ T12] dev_deactivate_many+0x93b/0xca0 [ 327.763777][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 327.763812][ T12] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 327.763838][ T12] dev_deactivate+0x186/0x280 [ 327.763870][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 327.763897][ T12] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 327.763927][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.763948][ T12] ? sched_clock+0x4a/0x70 [ 327.763975][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 327.763992][ T12] linkwatch_do_dev+0x10a/0x170 [ 327.764009][ T12] ethtool_op_get_link+0x15/0x60 [ 327.764030][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 327.764052][ T12] bond_check_dev_link+0x1fb/0x4b0 [ 327.764074][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 327.764119][ T12] bond_mii_monitor+0x49d/0x3170 [ 327.764159][ T12] ? bond_mii_monitor+0x17f/0x3170 [ 327.764178][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 327.764201][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 327.764224][ T12] ? register_lock_class+0x54/0x330 [ 327.764241][ T12] ? __lock_acquire+0xad5/0xd80 [ 327.764270][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 327.764284][ T12] process_scheduled_works+0xac3/0x18e0 [ 327.764317][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.764338][ T12] ? assign_work+0x367/0x3d0 [ 327.764355][ T12] worker_thread+0x870/0xd50 [ 327.764380][ T12] ? __kthread_parkme+0x1a8/0x200 [ 327.764398][ T12] ? __pfx_worker_thread+0x10/0x10 [ 327.764413][ T12] kthread+0x7b7/0x940 [ 327.764432][ T12] ? __pfx_worker_thread+0x10/0x10 [ 327.764448][ T12] ? __pfx_kthread+0x10/0x10 [ 327.764464][ T12] ? __pfx_kthread+0x10/0x10 [ 327.764481][ T12] ? __pfx_kthread+0x10/0x10 [ 327.764498][ T12] ? __pfx_kthread+0x10/0x10 [ 327.764515][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.764527][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 327.764541][ T12] ? __pfx_kthread+0x10/0x10 [ 327.764559][ T12] ret_from_fork+0x4b/0x80 [ 327.764571][ T12] ? __pfx_kthread+0x10/0x10 [ 327.764589][ T12] ret_from_fork_asm+0x1a/0x30 [ 327.764611][ T12] [ 328.027379][ T12] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 328.074340][ T12] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 12, name: kworker/u8:0 [ 328.083995][ T12] preempt_count: 0, expected: 0 [ 328.088952][ T12] RCU nest depth: 1, expected: 0 [ 328.093921][ T12] 3 locks held by kworker/u8:0/12: [ 328.099091][ T12] #0: ffff88805eab2148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 328.110195][ T12] #1: ffffc90000117c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 328.123115][ T12] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 328.132953][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 328.132974][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.132997][ T12] Workqueue: bond0 bond_mii_monitor [ 328.133020][ T12] Call Trace: [ 328.133026][ T12] [ 328.133033][ T12] dump_stack_lvl+0x241/0x360 [ 328.133077][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.133112][ T12] __might_resched+0x558/0x6c0 [ 328.133136][ T12] ? __pfx___might_resched+0x10/0x10 [ 328.133168][ T12] down_read+0x90/0xa50 [ 328.133189][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 328.133203][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.133222][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 328.133237][ T12] ? __pfx_down_read+0x10/0x10 [ 328.133254][ T12] ? dev_deactivate_many+0xa9b/0xca0 [ 328.133276][ T12] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 328.133299][ T12] ? dev_get_flags+0x147/0x1d0 [ 328.133327][ T12] wext_netdev_notifier_call+0x1f/0x120 [ 328.133353][ T12] notifier_call_chain+0x1a5/0x3f0 [ 328.133377][ T12] netdev_state_change+0x123/0x1a0 [ 328.133398][ T12] ? __pfx_netdev_state_change+0x10/0x10 [ 328.133419][ T12] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 328.133435][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.133449][ T12] ? sched_clock+0x4a/0x70 [ 328.133473][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 328.133491][ T12] linkwatch_do_dev+0x112/0x170 [ 328.133507][ T12] ethtool_op_get_link+0x15/0x60 [ 328.133529][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 328.133550][ T12] bond_check_dev_link+0x1fb/0x4b0 [ 328.133572][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 328.133605][ T12] bond_mii_monitor+0x49d/0x3170 [ 328.133635][ T12] ? bond_mii_monitor+0x17f/0x3170 [ 328.133658][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 328.133685][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 328.133707][ T12] ? register_lock_class+0x54/0x330 [ 328.133727][ T12] ? __lock_acquire+0xad5/0xd80 [ 328.133761][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 328.133778][ T12] process_scheduled_works+0xac3/0x18e0 [ 328.133817][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.133842][ T12] ? assign_work+0x367/0x3d0 [ 328.133863][ T12] worker_thread+0x870/0xd50 [ 328.133900][ T12] ? __kthread_parkme+0x1a8/0x200 [ 328.133922][ T12] ? __pfx_worker_thread+0x10/0x10 [ 328.133941][ T12] kthread+0x7b7/0x940 [ 328.133963][ T12] ? __pfx_worker_thread+0x10/0x10 [ 328.133982][ T12] ? __pfx_kthread+0x10/0x10 [ 328.134001][ T12] ? __pfx_kthread+0x10/0x10 [ 328.134021][ T12] ? __pfx_kthread+0x10/0x10 [ 328.134041][ T12] ? __pfx_kthread+0x10/0x10 [ 328.134061][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.134074][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.134090][ T12] ? __pfx_kthread+0x10/0x10 [ 328.134112][ T12] ret_from_fork+0x4b/0x80 [ 328.134127][ T12] ? __pfx_kthread+0x10/0x10 [ 328.134148][ T12] ret_from_fork_asm+0x1a/0x30 [ 328.134174][ T12] [ 328.134196][ T12] [ 328.425352][ T12] ============================= [ 328.430222][ T12] [ BUG: Invalid wait context ] [ 328.435084][ T12] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Tainted: G W [ 328.443417][ T12] ----------------------------- [ 328.448264][ T12] kworker/u8:0/12 is trying to lock: [ 328.453545][ T12] ffffffff900efb10 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 328.463051][ T12] other info that might help us debug this: [ 328.468937][ T12] context-{5:5} [ 328.472393][ T12] 3 locks held by kworker/u8:0/12: [ 328.477498][ T12] #0: ffff88805eab2148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 328.488576][ T12] #1: ffffc90000117c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 328.501483][ T12] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 328.511172][ T12] stack backtrace: [ 328.514937][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 328.514965][ T12] Tainted: [W]=WARN [ 328.514971][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.514984][ T12] Workqueue: bond0 bond_mii_monitor [ 328.515008][ T12] Call Trace: [ 328.515016][ T12] [ 328.515024][ T12] dump_stack_lvl+0x241/0x360 [ 328.515062][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.515085][ T12] ? __pfx__printk+0x10/0x10 [ 328.515115][ T12] __lock_acquire+0xc30/0xd80 [ 328.515135][ T12] lock_acquire+0x116/0x2f0 [ 328.515151][ T12] ? wext_netdev_notifier_call+0x1f/0x120 [ 328.515180][ T12] down_read+0xb3/0xa50 [ 328.515199][ T12] ? wext_netdev_notifier_call+0x1f/0x120 [ 328.515223][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 328.515239][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.515256][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 328.515272][ T12] ? __pfx_down_read+0x10/0x10 [ 328.515291][ T12] ? dev_deactivate_many+0xa9b/0xca0 [ 328.515314][ T12] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 328.515333][ T12] ? dev_get_flags+0x147/0x1d0 [ 328.515359][ T12] wext_netdev_notifier_call+0x1f/0x120 [ 328.515384][ T12] notifier_call_chain+0x1a5/0x3f0 [ 328.515407][ T12] netdev_state_change+0x123/0x1a0 [ 328.515428][ T12] ? __pfx_netdev_state_change+0x10/0x10 [ 328.515450][ T12] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 328.515466][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.515481][ T12] ? sched_clock+0x4a/0x70 [ 328.515505][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 328.515522][ T12] linkwatch_do_dev+0x112/0x170 [ 328.515538][ T12] ethtool_op_get_link+0x15/0x60 [ 328.515562][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 328.515584][ T12] bond_check_dev_link+0x1fb/0x4b0 [ 328.515607][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 328.515634][ T12] bond_mii_monitor+0x49d/0x3170 [ 328.515660][ T12] ? bond_mii_monitor+0x17f/0x3170 [ 328.515682][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 328.515707][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 328.515730][ T12] ? register_lock_class+0x54/0x330 [ 328.515748][ T12] ? __lock_acquire+0xad5/0xd80 [ 328.515773][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 328.515790][ T12] process_scheduled_works+0xac3/0x18e0 [ 328.515818][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.515840][ T12] ? assign_work+0x367/0x3d0 [ 328.515860][ T12] worker_thread+0x870/0xd50 [ 328.515884][ T12] ? __kthread_parkme+0x1a8/0x200 [ 328.515905][ T12] ? __pfx_worker_thread+0x10/0x10 [ 328.515923][ T12] kthread+0x7b7/0x940 [ 328.515945][ T12] ? __pfx_worker_thread+0x10/0x10 [ 328.515963][ T12] ? __pfx_kthread+0x10/0x10 [ 328.515984][ T12] ? __pfx_kthread+0x10/0x10 [ 328.516004][ T12] ? __pfx_kthread+0x10/0x10 [ 328.516026][ T12] ? __pfx_kthread+0x10/0x10 [ 328.516046][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.516061][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.516077][ T12] ? __pfx_kthread+0x10/0x10 [ 328.516105][ T12] ret_from_fork+0x4b/0x80 [ 328.516121][ T12] ? __pfx_kthread+0x10/0x10 [ 328.516143][ T12] ret_from_fork_asm+0x1a/0x30 [ 328.516163][ T12] [ 328.904225][ T5847] Bluetooth: hci5: command tx timeout [ 329.200078][ T5847] Bluetooth: hci3: command tx timeout [ 329.310702][ T62] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 329.373787][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.384014][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.393821][ T62] bond0 (unregistering): Released all slaves [ 329.405571][ T62] bond1 (unregistering): Released all slaves [ 329.725687][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 329.854781][ T62] hsr_slave_0: left promiscuous mode [ 329.871264][ T62] hsr_slave_1: left promiscuous mode [ 329.877138][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.887802][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.896910][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.904448][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.914949][ T62] veth1_macvtap: left promiscuous mode [ 329.921475][ T62] veth0_macvtap: left promiscuous mode [ 329.927136][ T62] veth1_vlan: left promiscuous mode [ 329.932558][ T62] veth0_vlan: left promiscuous mode [ 330.090085][ T62] team0 (unregistering): Port device team_slave_1 removed [ 330.113554][ T62] team0 (unregistering): Port device team_slave_0 removed [ 330.251350][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.258600][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.265718][ T8892] bridge_slave_0: entered allmulticast mode [ 330.272547][ T8892] bridge_slave_0: entered promiscuous mode [ 330.288117][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.295796][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.303364][ T8892] bridge_slave_1: entered allmulticast mode [ 330.310835][ T8892] bridge_slave_1: entered promiscuous mode [ 330.341391][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.357082][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.382987][ T8892] team0: Port device team_slave_0 added [ 330.391014][ T8892] team0: Port device team_slave_1 added [ 330.436756][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.445235][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.471913][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.493072][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.500373][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.529461][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.571088][ T8892] hsr_slave_0: entered promiscuous mode [ 330.577894][ T8892] hsr_slave_1: entered promiscuous mode [ 330.584065][ T8892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.592059][ T8892] Cannot create hsr debugfs directory [ 331.031954][ T8892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.045760][ T8892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.064004][ T8892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.073386][ T8892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.139618][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.158179][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.172456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.179591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.195375][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.202504][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.271498][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.287425][ T5847] Bluetooth: hci3: command tx timeout [ 331.314387][ T8892] veth0_vlan: entered promiscuous mode [ 331.325595][ T8892] veth1_vlan: entered promiscuous mode [ 331.352064][ T8892] veth0_macvtap: entered promiscuous mode [ 331.361339][ T8892] veth1_macvtap: entered promiscuous mode [ 331.377057][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.388327][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.398556][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.409629][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.419729][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.430445][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.442354][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.456338][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.470712][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.482005][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.495133][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.505458][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.517705][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.527984][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.538816][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.550261][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.561466][ T8892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.570988][ T8892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.580447][ T8892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.589517][ T8892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.632848][ T8892] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 331.662762][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.672653][ T8892] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 331.680765][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.706941][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.723067][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50