last executing test programs: 7m12.652562012s ago: executing program 4 (id=2525): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1d, 0x802, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x30000001}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) syz_clone3(&(0x7f0000000480)={0x16040000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000200), {0xa}, &(0x7f0000000240)=""/44, 0x2c, &(0x7f0000000280)=""/213, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) process_vm_readv(r5, &(0x7f0000001c40)=[{&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/105, 0x69}, {&(0x7f0000001a40)=""/144, 0x90}, {&(0x7f0000001b40)=""/241, 0xf1}], 0x9, &(0x7f0000002000)=[{&(0x7f0000001d00)=""/41, 0x29}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000001ec0)=""/7, 0x7}, {&(0x7f0000001f00)=""/91, 0x5b}, {&(0x7f0000001f80)=""/56, 0x38}, {&(0x7f0000001fc0)=""/11, 0xb}], 0x6, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r9, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r8, &(0x7f0000000080)='=', 0x11}]) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0500feffffff000000004400000008000300", @ANYRES32=r6, @ANYBLOB="1c00238005000f"], 0x38}}, 0x0) 7m12.449858306s ago: executing program 4 (id=2526): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40040) r3 = epoll_create1(0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x4, 0x0, 0x34325852, 0x4, 0x800, 0x4, 0x5, 0x4, 0x0, 0x7, 0x1, 0x6}}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x28c9c1, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x20, 0x5, 0x20, 0x7133}, 0x48) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='a', 0x1}, {&(0x7f00000003c0)="f062b64aa5878ddd72f02f5c9fe0eb7351de5cdd0aa802b42d3d560f8c2239d405bb4081965adf3588851f6c7448f67d6a1361d282508e3d6327b3f2eb71d365d4dc81b51ebb57dccd3ab157a801df4d39d977499d4afb3901a4b0bc7dd253deca71035ccb3e9423b291c07131d469d2e03d", 0x72}, {&(0x7f0000000500)="48425929fab09c62ca3b6ddbaf44227e89c706fa8aae9542f8779a06a870239179092fdc05a08c6717b86c4ce074b810939bcb07e3d3a7d2eee40ee2fe7dd14bcdd38ef7a06995a5291e5eaefd80de9abf711aeb3e4ff10492172c93260cc8", 0x5f}], 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000000000000000000000000000000000039a6d172f18a", @ANYRES32=0x0], 0x30}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000002}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_DEV_DESTROY(r9, 0x5502) listen(r0, 0x2) 7m9.368664836s ago: executing program 4 (id=2537): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000000)=""/52, 0x34}], 0x2) 7m9.232260239s ago: executing program 4 (id=2538): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, 0x0, r2, &(0x7f0000000100)='./file0\x00', 0x126) 7m8.372030338s ago: executing program 4 (id=2548): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000002180)='-', 0x1}], 0x2}}], 0x2, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x400}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffff7f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc000000060a0b0400000000000000000200000090000480240001800b000100736f636b657400002ace54031400028008000240000000030800014000000001680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3e, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x9, @remote, 0x3e}, 0x1c) 7m8.011154138s ago: executing program 4 (id=2550): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0xfe34, &(0x7f0000000040)={0x60, 0x31, 0xc, "ddff0899000000000600f5d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="001428000000ac99d06c39b01fd290f678e2776d96a2abc93422c685e77b539c25cf808b00"/46], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x8, 0x0, 0x1, 0xfffffffc, 0x6, 0xffffaa01}]}) syz_usb_control_io(r0, 0x0, 0x0) 7m7.86468607s ago: executing program 32 (id=2550): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0xfe34, &(0x7f0000000040)={0x60, 0x31, 0xc, "ddff0899000000000600f5d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="001428000000ac99d06c39b01fd290f678e2776d96a2abc93422c685e77b539c25cf808b00"/46], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x8, 0x0, 0x1, 0xfffffffc, 0x6, 0xffffaa01}]}) syz_usb_control_io(r0, 0x0, 0x0) 3m40.176222801s ago: executing program 5 (id=3753): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f00000001c0)={0x2, 0x100, 0xd9, 0xf23, 0xf, 0x6}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x7e1809a3a2544461) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) fanotify_init(0x4000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00198008000100", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "000000ffff000000010100"}) syz_open_pts(r0, 0x2) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020) 3m39.54751602s ago: executing program 5 (id=3759): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x9, 0x1}, 0x8) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x200000005c831, r2, 0xbe8e2000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0xc000) socket$kcm(0x29, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a8", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000010140)={0x28, 0x2, r9, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) socket$nl_netfilter(0x10, 0x3, 0xc) 3m38.571697941s ago: executing program 5 (id=3763): unshare(0x20000400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 3m38.534680882s ago: executing program 5 (id=3764): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126) 3m37.662977099s ago: executing program 5 (id=3768): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x113102, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x4000) 3m37.328352266s ago: executing program 5 (id=3769): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x2c8, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 3m36.892460259s ago: executing program 33 (id=3769): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x2c8, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 7.909100263s ago: executing program 1 (id=4680): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8553}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0xa) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0xd) landlock_restrict_self(r1, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x7) landlock_restrict_self(r3, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 7.539373876s ago: executing program 1 (id=4681): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000200)={0x6, 0x5, 0xffff, 0x2, 0x8, 0x9, 0x7f, 0x0, 0x56, 0x1, 0x4, "b5d72907ea37b7b092797149c74bf5f559fb52e95e5a2cafb3c5322e13ef2346"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xc, 0xfa11, 0xffffffff}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = inotify_init() r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) lseek(r6, 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYBLOB], 0x16a0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 5.728022819s ago: executing program 6 (id=4692): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\v/'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 5.1122463s ago: executing program 1 (id=4695): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.111593612s ago: executing program 0 (id=4696): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 4.948535546s ago: executing program 0 (id=4697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf, 0x3, "91abc12404cf378042f26c"}]}], {0x14}}, 0x58}}, 0x0) 4.863888885s ago: executing program 6 (id=4698): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0xfffffe9c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(0x0, 0x0) ioctl$TIOCGSOFTCAR(r6, 0x4b46, &(0x7f0000000140)) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000400)=""/113, &(0x7f0000000480)=0x71) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x50, 0xfc, 0x2, 0xfff00002}, {0x16, 0x0, 0x0, 0x8000000}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000101e010800003492fddbdf2500000000046a06000000479208bb1d0ea6ab16a0425ac5ff8b211d989d1b342c1d3e4c0152dc3e2e975944f955565da458e455297d218665e7a8f39f10e0a6f7447adafb712bb63607aad87947da68f8e466d52504a4c9", @ANYRES32=r0, @ANYRES16=r1, @ANYRESDEC=r8, @ANYRES32=r8], 0x2c}}, 0x0) 4.763183547s ago: executing program 2 (id=4699): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x8, 0x6, @multicast}, 0x14) 4.584175047s ago: executing program 0 (id=4700): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0x10, 0x5e, 0xe25, 0x0, 0x3}, 0x10}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) 4.526202543s ago: executing program 2 (id=4701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/6, 0x6}], 0x1, 0x0, 0xfffffffe) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.428570764s ago: executing program 0 (id=4702): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.208756477s ago: executing program 0 (id=4703): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x1, 0x2090) 4.002221579s ago: executing program 2 (id=4704): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040000) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 3.763220653s ago: executing program 2 (id=4705): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)="37ef8954a3", 0x5) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.413336293s ago: executing program 3 (id=4706): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x8, 0x222001) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1}) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1, 0xd) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 3.075487608s ago: executing program 0 (id=4707): syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(0x0, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r3) 2.406044826s ago: executing program 3 (id=4708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.336230394s ago: executing program 6 (id=4709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/162, 0xa2}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 2.008453565s ago: executing program 6 (id=4710): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) 1.913415382s ago: executing program 3 (id=4711): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.851894871s ago: executing program 1 (id=4712): r0 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f002, 0x5}) 1.789063907s ago: executing program 2 (id=4713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706c3950000000000001e00010000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close(0x3) 1.622951735s ago: executing program 3 (id=4714): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000007c0)='1', 0x1, 0x4004, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @remote, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000500)="01", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x3}, 0x8) 1.61457043s ago: executing program 6 (id=4715): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040000) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.540133971s ago: executing program 1 (id=4716): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1.368139081s ago: executing program 3 (id=4717): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x1, 0x2090) 1.307936825s ago: executing program 1 (id=4718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f0000004400)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000055c0)={0x0, 0x5}, &(0x7f0000005600)=0x8) 1.159975952s ago: executing program 6 (id=4719): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r1) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10010, 0xffffffffffffffff, 0x28f43000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.001156298s ago: executing program 2 (id=4720): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(r0, &(0x7f00000001c0)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xab402) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xa08}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas', 0xd) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=4721): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): UID: 0 PID: 19798 Comm: syz.1.4206 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.186276][T19798] Tainted: [L]=SOFTLOCKUP [ 829.186284][T19798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 829.186295][T19798] Call Trace: [ 829.186303][T19798] [ 829.186311][T19798] dump_stack_lvl+0xe8/0x150 [ 829.186345][T19798] should_fail_ex+0x412/0x560 [ 829.186377][T19798] should_failslab+0xa8/0x100 [ 829.186401][T19798] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 829.186424][T19798] ? __alloc_skb+0x186/0x7d0 [ 829.186443][T19798] ? __alloc_skb+0x1d0/0x7d0 [ 829.186461][T19798] ? __local_bh_enable_ip+0xd0/0x130 [ 829.186489][T19798] __alloc_skb+0x1d0/0x7d0 [ 829.186512][T19798] netlink_sendmsg+0x5d4/0xb40 [ 829.186534][T19798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.186553][T19798] ? aa_sock_msg_perm+0xf1/0x1b0 [ 829.186574][T19798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 829.186595][T19798] ____sys_sendmsg+0x972/0x9f0 [ 829.186618][T19798] ? __might_fault+0xaf/0x130 [ 829.186644][T19798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.186673][T19798] ? import_iovec+0x73/0xa0 [ 829.186692][T19798] ___sys_sendmsg+0x2a5/0x360 [ 829.186722][T19798] ? __lock_acquire+0x6b5/0x2cf0 [ 829.186749][T19798] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.186802][T19798] ? __fget_files+0x2a/0x420 [ 829.186819][T19798] ? __fget_files+0x3a0/0x420 [ 829.186844][T19798] __x64_sys_sendmsg+0x1bd/0x2a0 [ 829.186870][T19798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 829.186900][T19798] ? __pfx_ksys_write+0x10/0x10 [ 829.186928][T19798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.186947][T19798] do_syscall_64+0x15f/0xf80 [ 829.186971][T19798] ? trace_irq_disable+0x3b/0x140 [ 829.186994][T19798] ? clear_bhb_loop+0x40/0x90 [ 829.187016][T19798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.187034][T19798] RIP: 0033:0x7fdd1499c819 [ 829.187051][T19798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.187068][T19798] RSP: 002b:00007fdd15936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.187087][T19798] RAX: ffffffffffffffda RBX: 00007fdd14c15fa0 RCX: 00007fdd1499c819 [ 829.187100][T19798] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 829.187112][T19798] RBP: 00007fdd15936090 R08: 0000000000000000 R09: 0000000000000000 [ 829.187124][T19798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.187134][T19798] R13: 00007fdd14c16038 R14: 00007fdd14c15fa0 R15: 00007fdd14d3fa48 [ 829.187160][T19798] [ 829.746466][T19800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.757058][T19557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 829.804407][T19557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.866844][T19806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.923064][T19806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.976381][T19557] veth0_vlan: entered promiscuous mode [ 830.014584][T19557] veth1_vlan: entered promiscuous mode [ 830.158485][T19557] veth0_macvtap: entered promiscuous mode [ 830.202233][T19557] veth1_macvtap: entered promiscuous mode [ 830.259194][T19557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.298847][T19557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.330704][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'. [ 830.407881][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.423188][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.465627][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.526092][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.833089][T19832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.882835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.911478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.102154][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.132274][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.164482][T19844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.218011][T19844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.692629][T19863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.726257][T19863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.249264][T19874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4222'. [ 832.517642][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.553548][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.794410][T19886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.828726][T19886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.632160][T19900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.649927][T19900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.388198][T19902] loop2: detected capacity change from 0 to 7 [ 834.409813][T19902] Dev loop2: unable to read RDB block 7 [ 834.429715][T19902] loop2: unable to read partition table [ 834.450010][T19902] loop2: partition table beyond EOD, truncated [ 834.502614][T19902] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 835.401594][T19923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.460843][T19923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.688917][T19930] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4240'. [ 835.763271][T19932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.785327][T19932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.617659][T19944] 8021q: VLANs not supported on vcan0 [ 836.626485][T19945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.663571][T19944] ip6gre1: entered promiscuous mode [ 836.681823][T19944] ip6gre1: entered allmulticast mode [ 836.698100][T19945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.774843][ T5920] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 836.845372][T19948] netlink: 'syz.1.4247': attribute type 1 has an invalid length. [ 836.949285][ T5920] usb 1-1: config index 0 descriptor too short (expected 65230, got 72) [ 836.983940][ T5920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 837.013596][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.044781][ T5920] usb 1-1: Product: syz [ 837.051406][ T5920] usb 1-1: Manufacturer: syz [ 837.067322][ T5920] usb 1-1: SerialNumber: syz [ 837.101832][ T5920] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 837.125687][T19956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.207125][T19956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.233943][T10911] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 837.342724][T19957] fuse: Unknown parameter '' [ 837.687477][T19940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.739575][T19940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.767506][T10919] usb 1-1: USB disconnect, device number 16 [ 837.841023][T19967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.884934][T19967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.347988][T10911] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 838.387106][T10911] ath9k_htc: Failed to initialize the device [ 838.422555][T10919] usb 1-1: ath9k_htc: USB layer deinitialized [ 838.616399][T19976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.641990][T19976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.146328][T19973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.207756][T19973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.316504][T19984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.388318][T19984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.418917][T19973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.490569][T19973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.086098][ T29] audit: type=1326 audit(1776660860.191:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19998 comm="syz.2.4262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7ced9c819 code=0x0 [ 841.577034][T20005] tipc: Started in network mode [ 841.595596][T20005] tipc: Node identity c2aedd9e29d2, cluster identity 4711 [ 841.621232][T20005] tipc: Enabled bearer , priority 0 [ 841.653284][T20006] syzkaller0: entered promiscuous mode [ 841.673844][T20006] syzkaller0: entered allmulticast mode [ 842.121436][T20004] tipc: Resetting bearer [ 842.143797][T20009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.175064][T20009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.198868][T20004] tipc: Disabling bearer [ 842.727736][T10919] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 842.917099][T10919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.953749][T10919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.984275][T10919] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 843.008055][T10919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 843.030710][T10919] usb 1-1: SerialNumber: syz [ 843.249868][T20022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.310951][T20022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.367053][T10919] usb 1-1: 0:2 : does not exist [ 843.480686][T10919] usb 1-1: USB disconnect, device number 17 [ 843.600535][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.786058][T20025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4271'. [ 844.648963][T20044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.666190][T20046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4280'. [ 844.670725][T20044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.915414][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4281'. [ 845.335175][T20056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.355045][T10917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 845.369038][T20056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.409539][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'. [ 845.539498][T10917] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 845.592226][T10917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.620251][T10917] usb 1-1: Product: syz [ 845.632357][T10917] usb 1-1: Manufacturer: syz [ 845.640520][T10917] usb 1-1: SerialNumber: syz [ 845.664462][T10917] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 845.695794][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 846.072590][T20064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.131145][T20064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.255892][T20064] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.263273][T20064] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.296221][ T807] usb 1-1: USB disconnect, device number 18 [ 846.825288][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 846.860818][ T9] ath9k_htc: Failed to initialize the device [ 846.891689][ T807] usb 1-1: ath9k_htc: USB layer deinitialized [ 848.084310][T20089] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4291'. [ 848.264527][T20092] netlink: 'syz.0.4292': attribute type 10 has an invalid length. [ 848.323799][T20092] veth0_vlan: left promiscuous mode [ 848.376965][T20092] veth0_vlan: entered promiscuous mode [ 848.445721][T20092] team0: Device veth0_vlan failed to register rx_handler [ 849.314925][ T5920] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 849.513881][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.577992][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 849.640705][ T5920] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 849.688453][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.708564][T20110] syz.1.4298: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 849.751107][ T5920] usb 1-1: config 0 descriptor?? [ 849.798017][T20110] CPU: 0 UID: 0 PID: 20110 Comm: syz.1.4298 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.798048][T20110] Tainted: [L]=SOFTLOCKUP [ 849.798056][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 849.798063][T20110] Call Trace: [ 849.798068][T20110] [ 849.798074][T20110] dump_stack_lvl+0xe8/0x150 [ 849.798104][T20110] warn_alloc+0x249/0x340 [ 849.798137][T20110] ? __pfx_warn_alloc+0x10/0x10 [ 849.798184][T20110] __vmalloc_node_range_noprof+0x132/0x1750 [ 849.798199][T20110] ? __mutex_trylock_common+0x158/0x260 [ 849.798212][T20110] ? __pfx___mutex_trylock_common+0x10/0x10 [ 849.798227][T20110] ? trace_contention_end+0x3d/0x140 [ 849.798240][T20110] ? __mutex_lock+0x319/0x1550 [ 849.798266][T20110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 849.798289][T20110] ? tomoyo_path_number_perm+0x219/0x630 [ 849.798317][T20110] ? dvb_demux_do_ioctl+0x320/0x540 [ 849.798338][T20110] ? __pfx___mutex_lock+0x10/0x10 [ 849.798349][T20110] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 849.798361][T20110] vmalloc_noprof+0xb2/0xe0 [ 849.798373][T20110] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 849.798385][T20110] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 849.798404][T20110] dvb_demux_do_ioctl+0x45d/0x540 [ 849.798430][T20110] dvb_usercopy+0x199/0x2e0 [ 849.798451][T20110] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 849.798473][T20110] ? __pfx_dvb_usercopy+0x10/0x10 [ 849.798496][T20110] ? __fget_files+0x3a0/0x420 [ 849.798506][T20110] ? __fget_files+0x2a/0x420 [ 849.798518][T20110] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 849.798529][T20110] dvb_demux_ioctl+0x29/0x40 [ 849.798541][T20110] __se_sys_ioctl+0xfc/0x170 [ 849.798561][T20110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.798583][T20110] do_syscall_64+0x15f/0xf80 [ 849.798609][T20110] ? trace_irq_disable+0x3b/0x140 [ 849.798634][T20110] ? clear_bhb_loop+0x40/0x90 [ 849.798649][T20110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.798659][T20110] RIP: 0033:0x7fdd1499c819 [ 849.798671][T20110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.798679][T20110] RSP: 002b:00007fdd15936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.798691][T20110] RAX: ffffffffffffffda RBX: 00007fdd14c15fa0 RCX: 00007fdd1499c819 [ 849.798701][T20110] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 849.798713][T20110] RBP: 00007fdd14a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 849.798727][T20110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.798739][T20110] R13: 00007fdd14c16038 R14: 00007fdd14c15fa0 R15: 00007fdd14d3fa48 [ 849.798772][T20110] [ 849.798868][T20110] Mem-Info: [ 850.176376][T20110] active_anon:10367 inactive_anon:0 isolated_anon:0 [ 850.176376][T20110] active_file:21260 inactive_file:4452 isolated_file:0 [ 850.176376][T20110] unevictable:768 dirty:382 writeback:0 [ 850.176376][T20110] slab_reclaimable:7786 slab_unreclaimable:152446 [ 850.176376][T20110] mapped:58696 shmem:1365 pagetables:2492 [ 850.176376][T20110] sec_pagetables:0 bounce:0 [ 850.176376][T20110] kernel_misc_reclaimable:0 [ 850.176376][T20110] free:1236104 free_pcp:18169 free_cma:0 [ 850.354315][ T5920] Bluetooth: Can't get state to change to load ram patch err [ 850.378028][T20110] Node 0 active_anon:41768kB inactive_anon:0kB active_file:84976kB inactive_file:17676kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:238760kB dirty:1524kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15456kB pagetables:9732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 850.429123][ T5920] Bluetooth: Loading patch file failed [ 850.435740][T20110] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 850.493131][T20110] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.494697][ T5920] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 850.601523][T20110] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 850.644078][T20110] Node 0 DMA32 free:1015076kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42168kB inactive_anon:0kB active_file:84976kB inactive_file:17676kB unevictable:1536kB writepending:1524kB zspages:0kB present:3129332kB managed:2551016kB mlocked:0kB bounce:0kB free_pcp:73440kB local_pcp:35584kB free_cma:0kB [ 850.764566][T20110] lowmem_reserve[]: 0 0 0 0 0 [ 850.776344][T20110] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:592kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.821566][T20110] lowmem_reserve[]: 0 0 0 0 0 [ 850.845877][T20110] Node 1 Normal free:3926300kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.880453][T20123] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4303'. [ 850.973913][T20110] lowmem_reserve[]: 0 0 0 0 0 [ 850.990393][T20110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 851.019792][T20110] Node 0 DMA32: 4511*4kB (UM) 4544*8kB (UME) 3423*16kB (UE) 521*32kB (UME) 337*64kB (UME) 418*128kB (UME) 452*256kB (UME) 142*512kB (UME) 128*1024kB (UME) 26*2048kB (UME) 107*4096kB (UM) = 1011916kB [ 851.069558][T20110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 851.093590][T20110] Node 1 Normal: 9*4kB (UM) 13*8kB (UM) 15*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 1*512kB (M) 3*1024kB (UM) 4*2048kB (UM) 955*4096kB (UM) = 3926300kB [ 851.128841][T20110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 851.161736][T20110] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 851.181177][T20110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 851.200574][T20110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 851.220171][T20110] 29921 total pagecache pages [ 851.235638][T20110] 0 pages in swap cache [ 851.247390][T20110] Free swap = 124996kB [ 851.274501][T20110] Total swap = 124996kB [ 851.315369][T20110] 2097051 pages RAM [ 851.323810][T20110] 0 pages HighMem/MovableOnly [ 851.336654][T20110] 427534 pages reserved [ 851.342781][T20110] 0 pages cma reserved [ 851.437049][T20130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.455455][T20130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.529220][T20130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.576073][T20130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.604536][T20133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.666609][T20134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.679603][T20133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.691568][T20134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.763845][ T807] usb 1-1: USB disconnect, device number 19 [ 852.455584][T20143] fuse: Bad value for 'user_id' [ 852.469425][T20143] fuse: Bad value for 'user_id' [ 852.483702][T20143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4309'. [ 852.573959][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.603026][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.171117][T20160] x_tables: duplicate underflow at hook 4 [ 853.366635][T20160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.465849][T20160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.596615][T20160] xt_hashlimit: max too large, truncated to 1048576 [ 854.108718][ T35] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.139807][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.173174][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 854.226096][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.255176][T20169] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 854.265067][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.285397][T20169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 854.301599][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 854.335131][T20169] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 854.357811][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.405434][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.454861][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 854.507238][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.542867][T20169] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 854.548835][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.548866][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 854.941731][T20175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.985934][T20175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.994454][T20160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.181576][T20160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.119424][T20199] usb usb8: usbfs: process 20199 (syz.1.4324) did not claim interface 0 before use [ 856.129237][T20199] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 856.145236][T20199] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 856.265199][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 856.344789][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 856.985035][T10926] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 857.176476][T10926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.211644][T10926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.250195][T10926] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 857.288686][T10926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.329551][T10926] usb 1-1: config 0 descriptor?? [ 857.772783][T20216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.773413][T10926] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 857.812899][T20216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.859876][T10926] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0030/input/input136 [ 858.019474][T20219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4329'. [ 858.058820][T20219] netlink: 'syz.3.4329': attribute type 2 has an invalid length. [ 858.228924][T20219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.268586][T20219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.426509][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 858.490889][T10926] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 859.056126][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4332'. [ 859.728468][T20163] usb 1-1: USB disconnect, device number 20 [ 859.765684][T20248] netlink: zone id is out of range [ 859.812593][T20248] netlink: zone id is out of range [ 859.858539][T20248] netlink: zone id is out of range [ 859.876567][T20248] netlink: zone id is out of range [ 859.886880][T20246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.901100][T20248] netlink: zone id is out of range [ 859.933059][T20248] netlink: zone id is out of range [ 859.943393][T20246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.981668][T20248] netlink: zone id is out of range [ 860.009991][T20248] netlink: zone id is out of range [ 860.064165][T20248] netlink: zone id is out of range [ 860.111449][T20248] netlink: zone id is out of range [ 860.505081][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 860.818658][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4344'. [ 861.090777][T20265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.117093][T20265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.842558][T20275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.870526][T20275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.117727][ T29] audit: type=1400 audit(1776660881.211:1498): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20253 comm="syz.0.4342" [ 863.628134][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.667725][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.973433][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.016138][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.424779][T20305] FAULT_INJECTION: forcing a failure. [ 864.424779][T20305] name failslab, interval 1, probability 0, space 0, times 0 [ 864.439587][T20305] CPU: 0 UID: 0 PID: 20305 Comm: syz.0.4357 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.439616][T20305] Tainted: [L]=SOFTLOCKUP [ 864.439623][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 864.439634][T20305] Call Trace: [ 864.439643][T20305] [ 864.439651][T20305] dump_stack_lvl+0xe8/0x150 [ 864.439684][T20305] should_fail_ex+0x412/0x560 [ 864.439714][T20305] should_failslab+0xa8/0x100 [ 864.439741][T20305] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 864.439764][T20305] ? __alloc_skb+0x186/0x7d0 [ 864.439785][T20305] ? __alloc_skb+0x1d0/0x7d0 [ 864.439804][T20305] ? __local_bh_enable_ip+0xd0/0x130 [ 864.439834][T20305] __alloc_skb+0x1d0/0x7d0 [ 864.439855][T20305] ? netlink_ack_tlv_len+0x6c/0x210 [ 864.439879][T20305] netlink_ack+0x146/0xa50 [ 864.439906][T20305] ? __kmalloc_cache_noprof+0x31c/0x660 [ 864.439935][T20305] nfnetlink_rcv+0x251a/0x27b0 [ 864.439987][T20305] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 864.440021][T20305] ? ref_tracker_free+0x693/0x840 [ 864.440075][T20305] ? __netlink_deliver_tap+0x807/0x850 [ 864.440105][T20305] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.440125][T20305] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.440152][T20305] netlink_unicast+0x75c/0x8e0 [ 864.440182][T20305] netlink_sendmsg+0x813/0xb40 [ 864.440212][T20305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.440238][T20305] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.440266][T20305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.440292][T20305] ____sys_sendmsg+0x972/0x9f0 [ 864.440317][T20305] ? __might_fault+0xaf/0x130 [ 864.440344][T20305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.440383][T20305] ? import_iovec+0x73/0xa0 [ 864.440406][T20305] ___sys_sendmsg+0x2a5/0x360 [ 864.440429][T20305] ? __lock_acquire+0x6b5/0x2cf0 [ 864.440460][T20305] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.440516][T20305] ? __fget_files+0x2a/0x420 [ 864.440535][T20305] ? __fget_files+0x3a0/0x420 [ 864.440564][T20305] __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.440590][T20305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.440623][T20305] ? __pfx_ksys_write+0x10/0x10 [ 864.440652][T20305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.440672][T20305] do_syscall_64+0x15f/0xf80 [ 864.440698][T20305] ? trace_irq_disable+0x3b/0x140 [ 864.440723][T20305] ? clear_bhb_loop+0x40/0x90 [ 864.440746][T20305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.440765][T20305] RIP: 0033:0x7f9afef9c819 [ 864.440784][T20305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.440801][T20305] RSP: 002b:00007f9affe33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.440821][T20305] RAX: ffffffffffffffda RBX: 00007f9aff215fa0 RCX: 00007f9afef9c819 [ 864.440835][T20305] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 864.440848][T20305] RBP: 00007f9affe33090 R08: 0000000000000000 R09: 0000000000000000 [ 864.440860][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.440872][T20305] R13: 00007f9aff216038 R14: 00007f9aff215fa0 R15: 00007f9aff33fa48 [ 864.440902][T20305] [ 864.838183][T20163] hid_parser_main: 403 callbacks suppressed [ 864.838205][T20163] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 864.923488][T20163] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 865.083149][T20312] libceph: resolve '9' (ret=-3): failed [ 865.105160][T20315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.135448][T20315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.143315][T20316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.161828][T20312] binder: 20311:20312 ioctl c0306201 200000000280 returned -14 [ 865.180149][T20316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.231353][T20319] usb usb8: usbfs: process 20319 (syz.0.4362) did not claim interface 0 before use [ 865.243209][T20319] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 865.251280][T20319] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 865.534976][T20163] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 865.576916][ T29] audit: type=1326 audit(1776660884.681:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fa99c819 code=0x7ffc0000 [ 865.621580][ T29] audit: type=1326 audit(1776660884.681:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f64fa99c819 code=0x7ffc0000 [ 865.678050][ T29] audit: type=1326 audit(1776660884.681:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fa99c819 code=0x7ffc0000 [ 865.719818][ T29] audit: type=1326 audit(1776660884.681:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64fa99c4ab code=0x7ffc0000 [ 865.743461][T20163] usb 1-1: Using ep0 maxpacket: 32 [ 865.775777][T20163] usb 1-1: unable to get BOS descriptor or descriptor too short [ 865.822268][T20163] usb 1-1: config 7 has an invalid interface number: 57 but max is 0 [ 865.843137][T20163] usb 1-1: config 7 has no interface number 0 [ 865.849792][ T29] audit: type=1326 audit(1776660884.681:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64fa99c4ab code=0x7ffc0000 [ 865.878612][T20163] usb 1-1: config 7 interface 57 has no altsetting 0 [ 865.912519][T20163] usb 1-1: New USB device found, idVendor=10b8, idProduct=1ebe, bcdDevice=e5.1e [ 865.927866][T20163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.938220][ T29] audit: type=1326 audit(1776660884.681:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64fa99c4ab code=0x7ffc0000 [ 865.984148][T20163] usb 1-1: Product: syz [ 866.004428][T20163] usb 1-1: Manufacturer: syz [ 866.020307][T20163] usb 1-1: SerialNumber: syz [ 866.047194][ T29] audit: type=1326 audit(1776660884.681:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64fa99c4ab code=0x7ffc0000 [ 866.078544][ T29] audit: type=1326 audit(1776660884.681:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64fa99c4ab code=0x7ffc0000 [ 866.130986][ T29] audit: type=1326 audit(1776660884.681:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.6.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64fa99c4ab code=0x7ffc0000 [ 866.248236][T20341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.259337][T20341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.286012][T20163] dvb-usb: found a 'DiBcom STK7070PD reference design' in cold state, will try to load a firmware [ 866.357028][T20339] PKCS7: Unknown OID: [5] (bad) [ 866.367262][T20339] PKCS7: Only support pkcs7_signedData type [ 866.379078][T20163] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 866.396254][T20339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.407938][T20163] dib0700: firmware download failed at 7 with -22 [ 866.437909][T20339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.468639][T20163] usb 1-1: USB disconnect, device number 21 [ 867.705543][T10918] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 867.731146][T20365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.766468][T20365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.855031][T10918] usb 1-1: device descriptor read/64, error -71 [ 868.209732][T10918] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 868.348629][T20369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.364480][T20369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.372795][T10918] usb 1-1: device descriptor read/64, error -71 [ 868.383354][T20369] kAFS: unable to lookup cell '(' [ 868.487541][T10918] usb usb1-port1: attempt power cycle [ 868.844897][T10918] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 868.878279][T10918] usb 1-1: device descriptor read/8, error -71 [ 869.017366][T20377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.029922][T20377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.134941][T10918] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 869.167551][T10918] usb 1-1: device descriptor read/8, error -71 [ 869.281913][T10918] usb usb1-port1: unable to enumerate USB device [ 869.742683][T20380] FAULT_INJECTION: forcing a failure. [ 869.742683][T20380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 869.760902][T20380] CPU: 0 UID: 0 PID: 20380 Comm: syz.3.4382 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.760933][T20380] Tainted: [L]=SOFTLOCKUP [ 869.760941][T20380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 869.760952][T20380] Call Trace: [ 869.760961][T20380] [ 869.760970][T20380] dump_stack_lvl+0xe8/0x150 [ 869.761003][T20380] should_fail_ex+0x412/0x560 [ 869.761035][T20380] prepare_alloc_pages+0x22a/0x650 [ 869.761067][T20380] __alloc_frozen_pages_noprof+0x12f/0x380 [ 869.761097][T20380] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 869.761129][T20380] ? __pfx_try_to_migrate+0x10/0x10 [ 869.761162][T20380] __alloc_pages_noprof+0x10/0x100 [ 869.761189][T20380] __folio_alloc_noprof+0x18/0x120 [ 869.761215][T20380] migrate_pages_batch+0xa55/0x4ca0 [ 869.761260][T20380] ? __pfx_alloc_migration_target+0x10/0x10 [ 869.761293][T20380] ? __pfx_migrate_pages_batch+0x10/0x10 [ 869.761328][T20380] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 869.761366][T20380] ? walk_pgd_range+0x1cbb/0x1d90 [ 869.761412][T20380] migrate_pages+0x1c74/0x2a10 [ 869.761454][T20380] ? __pfx_alloc_migration_target+0x10/0x10 [ 869.761487][T20380] ? __pfx_migrate_pages+0x10/0x10 [ 869.761512][T20380] ? find_vma+0xed/0x160 [ 869.761530][T20380] ? vma_migratable+0x2e8/0x390 [ 869.761555][T20380] ? queue_pages_test_walk+0x43c/0x470 [ 869.761588][T20380] ? walk_page_range_mm_unsafe+0x595/0x680 [ 869.761630][T20380] ? __pfx___up_read+0x10/0x10 [ 869.761662][T20380] do_migrate_pages+0x6ba/0x910 [ 869.761697][T20380] ? __pfx_do_migrate_pages+0x10/0x10 [ 869.761739][T20380] ? security_capable+0xb9/0x2c0 [ 869.761771][T20380] __se_sys_migrate_pages+0xabc/0xca0 [ 869.761805][T20380] ? fput+0xa0/0xd0 [ 869.761822][T20380] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 869.761845][T20380] ? ksys_write+0x242/0x270 [ 869.761869][T20380] ? __pfx_ksys_write+0x10/0x10 [ 869.761900][T20380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.761920][T20380] do_syscall_64+0x15f/0xf80 [ 869.761947][T20380] ? trace_irq_disable+0x3b/0x140 [ 869.761971][T20380] ? clear_bhb_loop+0x40/0x90 [ 869.761994][T20380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.762014][T20380] RIP: 0033:0x7f9cd519c819 [ 869.762033][T20380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.762049][T20380] RSP: 002b:00007f9cd5fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 869.762071][T20380] RAX: ffffffffffffffda RBX: 00007f9cd5415fa0 RCX: 00007f9cd519c819 [ 869.762085][T20380] RDX: 0000200000000040 RSI: 0000000000000009 RDI: 0000000000000000 [ 869.762098][T20380] RBP: 00007f9cd5fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 869.762110][T20380] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.762123][T20380] R13: 00007f9cd5416038 R14: 00007f9cd5415fa0 R15: 00007f9cd553fa48 [ 869.762153][T20380] [ 870.055479][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.064497][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.498888][T10916] raw-gadget.0 gadget.6: failed to queue reset event [ 870.558543][T20390] FAULT_INJECTION: forcing a failure. [ 870.558543][T20390] name failslab, interval 1, probability 0, space 0, times 0 [ 870.573312][T20390] CPU: 0 UID: 0 PID: 20390 Comm: syz.1.4385 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.573342][T20390] Tainted: [L]=SOFTLOCKUP [ 870.573350][T20390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 870.573362][T20390] Call Trace: [ 870.573370][T20390] [ 870.573379][T20390] dump_stack_lvl+0xe8/0x150 [ 870.573416][T20390] should_fail_ex+0x412/0x560 [ 870.573448][T20390] should_failslab+0xa8/0x100 [ 870.573475][T20390] __kmalloc_noprof+0xe8/0x760 [ 870.573499][T20390] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 870.573525][T20390] tomoyo_realpath_from_path+0xe3/0x5d0 [ 870.573555][T20390] tomoyo_check_open_permission+0x229/0x470 [ 870.573582][T20390] ? tomoyo_check_open_permission+0x1d3/0x470 [ 870.573607][T20390] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 870.573674][T20390] security_file_open+0xa9/0x240 [ 870.573700][T20390] do_dentry_open+0x384/0x14e0 [ 870.573735][T20390] ? vfs_open+0x31/0x340 [ 870.573765][T20390] vfs_open+0x3b/0x340 [ 870.573790][T20390] ? path_openat+0x2df0/0x3860 [ 870.573823][T20390] path_openat+0x2e08/0x3860 [ 870.573878][T20390] ? __pfx_path_openat+0x10/0x10 [ 870.573899][T20390] ? __x64_sys_openat+0x138/0x170 [ 870.573937][T20390] do_file_open+0x23e/0x4a0 [ 870.573965][T20390] ? __pfx_do_file_open+0x10/0x10 [ 870.574009][T20390] ? _raw_spin_unlock+0x28/0x50 [ 870.574033][T20390] ? alloc_fd+0x64b/0x6c0 [ 870.574062][T20390] do_sys_openat2+0x113/0x200 [ 870.574085][T20390] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.574105][T20390] ? ksys_write+0x242/0x270 [ 870.574130][T20390] ? __pfx_ksys_write+0x10/0x10 [ 870.574156][T20390] __x64_sys_openat+0x138/0x170 [ 870.574179][T20390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.574200][T20390] do_syscall_64+0x15f/0xf80 [ 870.574226][T20390] ? trace_irq_disable+0x3b/0x140 [ 870.574250][T20390] ? clear_bhb_loop+0x40/0x90 [ 870.574273][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.574293][T20390] RIP: 0033:0x7fdd1499c819 [ 870.574311][T20390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.574327][T20390] RSP: 002b:00007fdd15936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 870.574347][T20390] RAX: ffffffffffffffda RBX: 00007fdd14c15fa0 RCX: 00007fdd1499c819 [ 870.574362][T20390] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 870.574375][T20390] RBP: 00007fdd15936090 R08: 0000000000000000 R09: 0000000000000000 [ 870.574387][T20390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 870.574399][T20390] R13: 00007fdd14c16038 R14: 00007fdd14c15fa0 R15: 00007fdd14d3fa48 [ 870.574430][T20390] [ 870.574559][T20390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 870.815136][T20393] qrtr: Invalid version 0 [ 870.820370][T10916] raw-gadget.0 gadget.6: failed to queue resume event [ 870.976454][T10916] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 870.991112][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 871.000729][T10916] raw-gadget.0 gadget.6: failed to queue reset event [ 871.008271][T20396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.022304][T20396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.084846][T10916] raw-gadget.0 gadget.6: failed to queue resume event [ 871.113236][T20396] xt_CT: No such helper "netbios-ns" [ 871.146143][T10916] usb 7-1: device descriptor read/64, error -32 [ 871.174815][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 871.174833][ T29] audit: type=1326 audit(1776660890.271:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.207243][ T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 871.218520][ T29] audit: type=1326 audit(1776660890.271:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.245488][ T29] audit: type=1326 audit(1776660890.321:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.268975][T10916] raw-gadget.0 gadget.6: failed to queue suspend event [ 871.293597][T10916] raw-gadget.0 gadget.6: failed to queue reset event [ 871.343961][ T29] audit: type=1326 audit(1776660890.321:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.388081][T10916] raw-gadget.0 gadget.6: failed to queue resume event [ 871.405147][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 871.419821][ T29] audit: type=1326 audit(1776660890.321:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.421062][ T46] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 871.455526][T10916] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 871.478686][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 871.486323][T10916] raw-gadget.0 gadget.6: failed to queue reset event [ 871.507657][ T46] usb 1-1: config 252 has no interface number 0 [ 871.522245][ T29] audit: type=1326 audit(1776660890.321:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.535632][ T46] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 871.561928][T10916] raw-gadget.0 gadget.6: failed to queue resume event [ 871.596248][ T29] audit: type=1326 audit(1776660890.321:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.622787][ T46] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 871.635316][T10916] usb 7-1: device descriptor read/64, error -32 [ 871.636139][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.666856][ T29] audit: type=1326 audit(1776660890.321:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 871.674791][ T46] usb 1-1: Product: syz [ 871.754830][T10916] raw-gadget.0 gadget.6: failed to queue suspend event [ 871.779076][T10916] usb usb7-port1: attempt power cycle [ 871.793632][ T46] usb 1-1: Manufacturer: syz [ 871.794067][T10916] raw-gadget.0 gadget.6: failed to queue disconnect event [ 871.824897][T10916] raw-gadget.0 gadget.6: failed to queue reset event [ 871.826394][ T46] usb 1-1: SerialNumber: syz [ 871.916390][T10916] raw-gadget.0 gadget.6: failed to queue resume event [ 871.935787][T10916] raw-gadget.0 gadget.6: failed to queue reset event [ 871.937647][ T46] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 871.991342][T20410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.056802][T20410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.215253][T10916] raw-gadget.0 gadget.6: failed to queue resume event [ 872.315008][T10916] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 872.370412][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 872.393290][T10916] usb 7-1: device descriptor read/8, error -32 [ 872.525450][T10916] raw-gadget.0 gadget.6: failed to queue suspend event [ 872.571614][T10916] raw-gadget.0 gadget.6: failed to queue reset event [ 872.737547][T10916] raw-gadget.0 gadget.6: failed to queue resume event [ 872.844900][T10916] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 872.905057][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 872.930363][T10916] usb 7-1: device descriptor read/8, error -32 [ 872.995136][ T35] usb 1-1: Failed to submit usb control message: -110 [ 873.038782][ T35] usb 1-1: unable to send the bmi data to the device: -110 [ 873.039872][T20423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.040221][T20423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.069482][T10916] raw-gadget.0 gadget.6: failed to queue suspend event [ 873.112105][T10916] usb usb7-port1: unable to enumerate USB device [ 873.135681][ T46] usb 1-1: USB disconnect, device number 26 [ 873.158077][ T35] usb 1-1: unable to get target info from device [ 873.189286][ T35] usb 1-1: could not get target info (-110) [ 873.237514][ T35] usb 1-1: could not probe fw (-110) [ 873.973503][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 874.036345][T20427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.102028][T20427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.278049][T10918] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 874.426573][T10918] usb 1-1: device descriptor read/64, error -71 [ 874.716949][T10918] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 874.776615][T20451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.828943][T20451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.874996][T10918] usb 1-1: device descriptor read/64, error -71 [ 875.001687][T10918] usb usb1-port1: attempt power cycle [ 875.354831][T10918] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 875.400088][T10918] usb 1-1: device descriptor read/8, error -71 [ 875.546759][T20462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.559752][T20462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.674858][T10918] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 875.735508][T10918] usb 1-1: device descriptor read/8, error -71 [ 875.856051][T10918] usb usb1-port1: unable to enumerate USB device [ 875.960396][T20466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.069433][T20466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.347353][T20464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.742701][T14397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 876.766236][T14397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 876.775522][T14397] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 876.789842][T14397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 876.797697][T14397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 878.195936][T20470] chnl_net:caif_netlink_parms(): no params data found [ 878.352122][T11442] syz_tun (unregistering): left allmulticast mode [ 878.464441][T11442] raw-gadget.10 gadget.2: failed to queue disconnect event [ 878.905008][T14397] Bluetooth: hci4: command tx timeout [ 878.928419][T20101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.983809][T20101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.034217][T20101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 879.116479][T10918] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 879.347192][T10918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.408062][T10918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 879.451699][T10918] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 879.464129][T20509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.480734][T10918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.508297][T20509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.521326][T10918] usb 1-1: config 0 descriptor?? [ 879.591547][T20101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.617079][T20101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.644838][T20101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 879.686724][T20470] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.709335][T20470] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.719892][T20470] bridge_slave_0: entered allmulticast mode [ 879.758980][T20470] bridge_slave_0: entered promiscuous mode [ 879.898337][T20101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.924899][T20101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.946488][T20101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 879.967117][T10918] Bluetooth: Can't get state to change to load ram patch err [ 879.996979][T10918] Bluetooth: Loading patch file failed [ 880.004299][T10918] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 880.025268][T20470] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.045180][T20470] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.071469][T20470] bridge_slave_1: entered allmulticast mode [ 880.084136][T20470] bridge_slave_1: entered promiscuous mode [ 880.162970][T20101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.191311][T20101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.221161][T20101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 880.421771][T20470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.462033][T20470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.588952][T20470] team0: Port device team_slave_0 added [ 880.652509][T20470] team0: Port device team_slave_1 added [ 880.869930][T20470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.894489][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.976901][T20470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.998835][T14397] Bluetooth: hci4: command tx timeout [ 881.076643][T20470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.086272][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.114026][T20470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.460457][T20101] bridge_slave_1: left allmulticast mode [ 881.469973][T20101] bridge_slave_1: left promiscuous mode [ 881.478702][T20101] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.491189][T20101] bridge_slave_0: left allmulticast mode [ 881.500776][T20101] bridge_slave_0: left promiscuous mode [ 881.513038][T20101] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.673930][T10912] usb 1-1: USB disconnect, device number 31 [ 881.901871][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4426'. [ 881.978540][T20527] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 882.187854][ T29] audit: type=1326 audit(1776660901.291:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.252429][ T29] audit: type=1326 audit(1776660901.291:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.377191][ T29] audit: type=1326 audit(1776660901.331:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.535040][ T29] audit: type=1326 audit(1776660901.331:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.647139][ T29] audit: type=1326 audit(1776660901.331:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.670842][ T29] audit: type=1326 audit(1776660901.331:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.753663][T20101] bond3 (unregistering): (slave geneve2): Releasing active interface [ 882.803993][ T29] audit: type=1326 audit(1776660901.341:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.884031][ T29] audit: type=1326 audit(1776660901.341:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 882.958202][T20101] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 882.988090][T20101] bridge1 (unregistering): left promiscuous mode [ 883.002787][ T29] audit: type=1326 audit(1776660901.341:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 883.039750][T20101] bridge1 (unregistering): left allmulticast mode [ 883.065485][T14397] Bluetooth: hci4: command tx timeout [ 883.178646][ T29] audit: type=1326 audit(1776660901.351:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 883.321377][T20101] bond0 (unregistering): left promiscuous mode [ 883.361204][T20101] bond_slave_1: left promiscuous mode [ 883.394310][T20101] dummy0: left promiscuous mode [ 883.458135][T20101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.604145][T20101] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 883.691919][T20101] bond0 (unregistering): Released all slaves [ 883.736387][T20101] bond1 (unregistering): Released all slaves [ 883.821041][T20101] bond2 (unregistering): Released all slaves [ 883.892250][T20101] bond3 (unregistering): Released all slaves [ 883.949383][T20101] bond4 (unregistering): Released all slaves [ 884.071652][T20101] bond5 (unregistering): Released all slaves [ 884.375742][T20470] hsr_slave_0: entered promiscuous mode [ 884.405891][T20470] hsr_slave_1: entered promiscuous mode [ 884.469715][T20470] debugfs: 'hsr0' already exists in 'hsr' [ 884.494205][T20470] Cannot create hsr debugfs directory [ 884.509378][T20561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.540343][T20101] tipc: Disabling bearer [ 884.582610][T20101] tipc: Left network mode [ 884.590669][T20556] tipc: New replicast peer: 0.0.0.0 [ 884.623777][T20561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.649964][T20556] tipc: Enabled bearer , priority 10 [ 885.149169][T14397] Bluetooth: hci4: command tx timeout [ 885.315875][T10913] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 885.515842][T10913] usb 1-1: device descriptor read/64, error -71 [ 885.636058][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 885.705275][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 885.798065][ T46] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 885.814874][T10913] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 885.824342][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 885.861233][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 885.923239][T10912] tipc: Node number set to 3596750200 [ 885.966076][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 886.050540][ T46] usb 7-1: device descriptor read/64, error -32 [ 886.054863][T10913] usb 1-1: device descriptor read/64, error -71 [ 886.174299][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 886.199305][T10913] usb usb1-port1: attempt power cycle [ 886.210416][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 886.325364][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 886.419254][ T46] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 886.452094][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 886.466957][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 886.558349][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 886.587823][T10913] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 886.651642][T10913] usb 1-1: device descriptor read/8, error -71 [ 886.657044][ T46] usb 7-1: device descriptor read/64, error -32 [ 886.804955][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 886.843811][ T46] usb usb7-port1: attempt power cycle [ 886.874591][ T46] raw-gadget.0 gadget.6: failed to queue disconnect event [ 886.913621][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 886.935746][T10913] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 886.992365][T10913] usb 1-1: device descriptor read/8, error -71 [ 887.005074][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 887.056465][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 887.147706][T10913] usb usb1-port1: unable to enumerate USB device [ 887.306282][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 887.441454][ T46] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 887.532437][T20590] netlink: 'syz.1.4442': attribute type 10 has an invalid length. [ 887.561147][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 887.585166][ T46] usb 7-1: device descriptor read/8, error -32 [ 887.714831][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 887.743719][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 887.845827][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 887.925979][ T46] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 887.944812][T20590] team0 (unregistering): Port device team_slave_0 removed [ 887.964943][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 887.972587][ T46] usb 7-1: device descriptor read/8, error -32 [ 888.095069][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 888.124561][ T46] usb usb7-port1: unable to enumerate USB device [ 888.184047][T20590] team0 (unregistering): Port device team_slave_1 removed [ 888.711806][T20612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.769066][T20612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.889587][T20612] netlink: 'syz.3.4448': attribute type 1 has an invalid length. [ 889.310349][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.376067][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.607678][T20612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 889.732783][T20615] bond2: (slave geneve3): making interface the new active one [ 889.784605][T20615] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 889.926448][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.950097][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.975703][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.211427][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.778634][T20626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.885096][T20626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.090688][T20470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 891.147445][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.171310][T20470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 891.218737][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.272812][T20470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 891.318242][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.391170][T20101] batadv0: left promiscuous mode [ 891.467570][T20101] hsr_slave_0: left promiscuous mode [ 891.492793][T20101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.522512][T20101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.566905][T20101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.631668][T20101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.720238][T20101] veth1_macvtap: left promiscuous mode [ 891.743955][T20101] veth0_macvtap: left promiscuous mode [ 891.781436][T20101] veth1_vlan: left promiscuous mode [ 891.802444][T20101] veth0_vlan: left promiscuous mode [ 892.030330][T20643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.100805][T20643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.932185][T10914] raw-gadget.0 gadget.6: failed to queue reset event [ 893.029086][T10914] raw-gadget.0 gadget.6: failed to queue resume event [ 893.114959][T10914] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 893.143343][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 893.159957][T20655] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4458'. [ 893.175631][T10914] raw-gadget.0 gadget.6: failed to queue reset event [ 893.190565][T20101] team_slave_1 (unregistering): left allmulticast mode [ 893.213114][T20655] netlink: 'syz.1.4458': attribute type 1 has an invalid length. [ 893.224405][T20101] team0 (unregistering): Port device team_slave_1 removed [ 893.264821][T10914] raw-gadget.0 gadget.6: failed to queue resume event [ 893.279470][T20101] team_slave_0 (unregistering): left allmulticast mode [ 893.311545][T20101] team0 (unregistering): Port device team_slave_0 removed [ 893.334809][T10914] usb 7-1: device descriptor read/64, error -32 [ 893.455915][T10914] raw-gadget.0 gadget.6: failed to queue suspend event [ 893.471562][T10914] raw-gadget.0 gadget.6: failed to queue reset event [ 893.555895][T10914] raw-gadget.0 gadget.6: failed to queue resume event [ 893.613098][T20470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 893.636516][T10914] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 893.646597][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 893.672175][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 893.689633][T20657] : renamed from bond_slave_0 (while UP) [ 893.697961][T10914] raw-gadget.0 gadget.6: failed to queue reset event [ 893.777193][T10914] raw-gadget.0 gadget.6: failed to queue resume event [ 893.815778][T20655] bond1: entered promiscuous mode [ 893.850410][T20655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 893.872718][T10914] usb 7-1: device descriptor read/64, error -32 [ 893.899996][T20661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.950628][T20661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.982640][T20668] overlayfs: missing 'lowerdir' [ 894.025438][T10914] raw-gadget.0 gadget.6: failed to queue suspend event [ 894.060723][T10914] usb usb7-port1: attempt power cycle [ 894.082010][T10914] raw-gadget.0 gadget.6: failed to queue disconnect event [ 894.144003][T10914] raw-gadget.0 gadget.6: failed to queue reset event [ 894.239351][T10914] raw-gadget.0 gadget.6: failed to queue resume event [ 894.256066][T10914] raw-gadget.0 gadget.6: failed to queue reset event [ 894.261401][T20101] IPVS: stop unused estimator thread 0... [ 894.378685][T20470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.445117][T20470] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.503524][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.510794][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.526706][T10914] raw-gadget.0 gadget.6: failed to queue resume event [ 894.596940][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.604100][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.615246][T10914] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 894.655186][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 894.664016][T10914] usb 7-1: device descriptor read/8, error -32 [ 894.774910][T10914] raw-gadget.0 gadget.6: failed to queue suspend event [ 894.789792][T10914] raw-gadget.0 gadget.6: failed to queue reset event [ 894.875806][T10914] raw-gadget.0 gadget.6: failed to queue resume event [ 894.955114][T10914] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 894.998802][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 895.009642][T10914] usb 7-1: device descriptor read/8, error -32 [ 895.085377][T20470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.125613][T10914] raw-gadget.0 gadget.6: failed to queue suspend event [ 895.160947][T10914] usb usb7-port1: unable to enumerate USB device [ 895.273501][T20470] veth0_vlan: entered promiscuous mode [ 895.340417][T20470] veth1_vlan: entered promiscuous mode [ 895.479122][T20470] veth0_macvtap: entered promiscuous mode [ 895.491494][T20470] veth1_macvtap: entered promiscuous mode [ 895.581552][T20470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.642487][T20470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.700082][ T1117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.757934][ T1117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.324869][T10913] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 896.417315][ T1117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.558110][T10913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 896.574787][T10913] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 896.584419][T10913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.644050][T10913] usb 1-1: config 0 descriptor?? [ 896.667634][T20699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 896.758730][ T1117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.410953][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.468267][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.522038][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.609271][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.660078][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.722155][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.779111][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.828600][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.870378][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.920832][T10913] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 897.926032][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.973171][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.049737][T10913] logitech-djreceiver 0003:046D:C71F.0032: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 898.114377][T20706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.209310][T20101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.245484][T20706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.265104][T20101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.338644][T20710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.387833][T20710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.681166][T20715] xt_hashlimit: size too large, truncated to 1048576 [ 899.147011][T10912] raw-gadget.0 gadget.6: failed to queue reset event [ 899.234914][T10912] raw-gadget.0 gadget.6: failed to queue resume event [ 899.325091][T10912] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 899.352946][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 899.372687][T10912] raw-gadget.0 gadget.6: failed to queue reset event [ 899.376577][T10913] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 899.465263][T10912] raw-gadget.0 gadget.6: failed to queue resume event [ 899.524137][T20731] usb usb8: usbfs: process 20731 (syz.0.4480) did not claim interface 0 before use [ 899.545091][T10912] usb 7-1: device descriptor read/64, error -32 [ 899.576885][T20731] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 899.598576][T20731] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 899.675867][T10912] raw-gadget.0 gadget.6: failed to queue suspend event [ 899.697652][T10912] raw-gadget.0 gadget.6: failed to queue reset event [ 899.740250][T20731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.779663][T20731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.795603][T10912] raw-gadget.0 gadget.6: failed to queue resume event [ 899.865037][T10912] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 899.886269][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 899.893657][T10912] raw-gadget.0 gadget.6: failed to queue reset event [ 899.982907][T10912] raw-gadget.0 gadget.6: failed to queue resume event [ 900.064953][T10912] usb 7-1: device descriptor read/64, error -32 [ 900.189241][T10912] raw-gadget.0 gadget.6: failed to queue suspend event [ 900.212765][T10912] usb usb7-port1: attempt power cycle [ 900.234199][T10912] raw-gadget.0 gadget.6: failed to queue disconnect event [ 900.260556][T10912] raw-gadget.0 gadget.6: failed to queue reset event [ 900.352941][T10912] raw-gadget.0 gadget.6: failed to queue resume event [ 900.381018][T10912] raw-gadget.0 gadget.6: failed to queue reset event [ 900.606779][T10912] raw-gadget.0 gadget.6: failed to queue resume event [ 900.696258][T10912] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 900.724938][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 900.732388][T10912] usb 7-1: device descriptor read/8, error -32 [ 900.846895][T10912] raw-gadget.0 gadget.6: failed to queue suspend event [ 900.867295][T10912] raw-gadget.0 gadget.6: failed to queue reset event [ 900.955061][T10912] raw-gadget.0 gadget.6: failed to queue resume event [ 901.006591][T20744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.024836][T10912] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 901.063783][T20744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.084851][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 901.092053][T10912] usb 7-1: device descriptor read/8, error -32 [ 901.204860][T10912] raw-gadget.0 gadget.6: failed to queue suspend event [ 901.225750][T10912] usb usb7-port1: unable to enumerate USB device [ 901.436219][T20740] syzkaller0: entered promiscuous mode [ 901.446059][T20740] syzkaller0: entered allmulticast mode [ 901.476701][T20751] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 901.512994][T20751] net_ratelimit: 14 callbacks suppressed [ 901.513012][T20751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 901.804986][T10931] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 901.935541][T10931] usb 3-1: device descriptor read/64, error -71 [ 902.068918][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 902.165713][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 902.194816][T10931] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 902.244939][ T46] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 902.269567][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 902.276861][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 902.345232][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 902.364876][T10931] usb 3-1: device descriptor read/64, error -71 [ 902.414768][ T46] usb 7-1: device descriptor read/64, error -32 [ 902.491782][T10931] usb usb3-port1: attempt power cycle [ 902.536953][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 902.564566][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 902.655448][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 902.734971][ T46] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 902.759902][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 902.767286][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 902.835038][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 902.845738][T10931] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 902.895271][T10931] usb 3-1: device descriptor read/8, error -71 [ 902.934868][ T46] usb 7-1: device descriptor read/64, error -32 [ 903.054846][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 903.075613][ T46] usb usb7-port1: attempt power cycle [ 903.097260][ T46] raw-gadget.0 gadget.6: failed to queue disconnect event [ 903.123905][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 903.154903][T10931] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 903.199131][T10931] usb 3-1: device descriptor read/8, error -71 [ 903.226423][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 903.249854][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 903.338099][T10931] usb usb3-port1: unable to enumerate USB device [ 903.485097][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 903.564979][ T46] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 903.605685][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 903.612852][ T46] usb 7-1: device descriptor read/8, error -32 [ 903.725677][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 903.747852][ T46] raw-gadget.0 gadget.6: failed to queue reset event [ 903.846584][ T46] raw-gadget.0 gadget.6: failed to queue resume event [ 903.934951][ T46] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 903.974922][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 903.982147][ T46] usb 7-1: device descriptor read/8, error -32 [ 904.036188][T20785] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4499'. [ 904.046159][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4499'. [ 904.095725][ T46] raw-gadget.0 gadget.6: failed to queue suspend event [ 904.119248][ T46] usb usb7-port1: unable to enumerate USB device [ 904.290306][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4500'. [ 904.325419][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4500'. [ 904.470647][T20792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.533392][T20792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.635074][T10913] usb 1-1: device descriptor read/64, error -110 [ 904.877124][T10913] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 904.982146][T20802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.995792][T20802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.024836][T10913] usb 1-1: device descriptor read/64, error -32 [ 905.274868][T10913] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 905.318564][T10913] usb 1-1: device descriptor read/8, error -32 [ 905.586474][T10913] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 905.638418][T10913] usb 1-1: device descriptor read/8, error -32 [ 905.736309][T14397] Bluetooth: hci5: unexpected event for opcode 0x2012 [ 905.777555][T10913] raw-gadget.1 gadget.0: failed to queue suspend event [ 905.843172][T10920] usb 1-1: USB disconnect, device number 36 [ 906.052006][T10920] raw-gadget.1 gadget.0: failed to queue reset event [ 906.159812][T10920] raw-gadget.1 gadget.0: failed to queue resume event [ 906.221514][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 906.230028][T10920] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 906.243866][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 906.252915][T10920] raw-gadget.1 gadget.0: failed to queue reset event [ 906.305160][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 906.344862][T10920] raw-gadget.1 gadget.0: failed to queue resume event [ 906.366950][T20163] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 906.387419][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 906.404531][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 906.415174][T10920] usb 1-1: device descriptor read/64, error -32 [ 906.509056][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 906.546751][T10920] raw-gadget.1 gadget.0: failed to queue suspend event [ 906.574343][T10920] raw-gadget.1 gadget.0: failed to queue reset event [ 906.595043][T20163] usb 7-1: device descriptor read/64, error -32 [ 906.686798][T10920] raw-gadget.1 gadget.0: failed to queue resume event [ 906.726296][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 906.752306][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 906.775529][T10920] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 906.777390][T20826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.801038][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 906.824241][T10920] raw-gadget.1 gadget.0: failed to queue reset event [ 906.836104][T20826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.855442][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 906.927171][T10920] raw-gadget.1 gadget.0: failed to queue resume event [ 906.943490][T20163] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 906.958838][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 906.976716][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 907.015769][T10920] usb 1-1: device descriptor read/64, error -32 [ 907.067863][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 907.145388][T10920] raw-gadget.1 gadget.0: failed to queue suspend event [ 907.152663][T20163] usb 7-1: device descriptor read/64, error -32 [ 907.165725][T10920] usb usb1-port1: attempt power cycle [ 907.185868][T10920] raw-gadget.1 gadget.0: failed to queue disconnect event [ 907.201249][T10920] raw-gadget.1 gadget.0: failed to queue reset event [ 907.274881][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 907.282697][T20163] usb usb7-port1: attempt power cycle [ 907.298976][T10920] raw-gadget.1 gadget.0: failed to queue resume event [ 907.320442][T20163] raw-gadget.0 gadget.6: failed to queue disconnect event [ 907.335775][T10920] raw-gadget.1 gadget.0: failed to queue reset event [ 907.354360][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 907.446203][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 907.460617][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 907.585475][T10920] raw-gadget.1 gadget.0: failed to queue resume event [ 907.666771][T10920] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 907.700250][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 907.735627][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 907.742818][T10920] usb 1-1: device descriptor read/8, error -32 [ 907.758216][T20836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.771283][T20836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.786806][T20163] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 907.817949][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 907.838840][T20163] usb 7-1: device descriptor read/8, error -32 [ 907.855849][T10920] raw-gadget.1 gadget.0: failed to queue suspend event [ 907.859779][T20841] tipc: New replicast peer: 0.0.0.0 [ 907.896165][T10920] raw-gadget.1 gadget.0: failed to queue reset event [ 907.939393][T20844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.965420][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 907.974190][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 907.974822][T20841] tipc: Enabled bearer , priority 10 [ 907.989201][T10920] raw-gadget.1 gadget.0: failed to queue resume event [ 908.018219][T20844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.057122][T10920] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 908.065831][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 908.106142][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 908.113467][T10920] usb 1-1: device descriptor read/8, error -32 [ 908.145689][T20163] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 908.186617][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 908.206001][T20163] usb 7-1: device descriptor read/8, error -32 [ 908.237885][T10920] raw-gadget.1 gadget.0: failed to queue suspend event [ 908.257059][T10920] usb usb1-port1: unable to enumerate USB device [ 908.260881][T20852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.307641][T20852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.325360][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 908.338381][T20163] usb usb7-port1: unable to enumerate USB device [ 908.657476][T20860] trusted_key: syz.2.4526 sent an empty control message without MSG_MORE. [ 908.697566][T20862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.949772][T20868] syz.3.4530: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 908.998732][T20868] CPU: 0 UID: 0 PID: 20868 Comm: syz.3.4530 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.998766][T20868] Tainted: [L]=SOFTLOCKUP [ 908.998774][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 908.998787][T20868] Call Trace: [ 908.998797][T20868] [ 908.998806][T20868] dump_stack_lvl+0xe8/0x150 [ 908.998842][T20868] warn_alloc+0x249/0x340 [ 908.998874][T20868] ? __pfx_warn_alloc+0x10/0x10 [ 908.998919][T20868] __vmalloc_node_range_noprof+0x132/0x1750 [ 908.998945][T20868] ? __mutex_trylock_common+0x158/0x260 [ 908.998972][T20868] ? __pfx___mutex_trylock_common+0x10/0x10 [ 908.999012][T20868] ? trace_contention_end+0x3d/0x140 [ 908.999036][T20868] ? __mutex_lock+0x319/0x1550 [ 908.999071][T20868] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 908.999094][T20868] ? tomoyo_path_number_perm+0x219/0x630 [ 908.999122][T20868] ? dvb_demux_do_ioctl+0x320/0x540 [ 908.999147][T20868] ? __pfx___mutex_lock+0x10/0x10 [ 908.999168][T20868] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 908.999193][T20868] vmalloc_noprof+0xb2/0xe0 [ 908.999215][T20868] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 908.999241][T20868] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 908.999270][T20868] dvb_demux_do_ioctl+0x45d/0x540 [ 908.999296][T20868] dvb_usercopy+0x199/0x2e0 [ 908.999318][T20868] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 908.999340][T20868] ? __pfx_dvb_usercopy+0x10/0x10 [ 908.999372][T20868] ? __fget_files+0x3a0/0x420 [ 908.999391][T20868] ? __fget_files+0x2a/0x420 [ 908.999414][T20868] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 908.999437][T20868] dvb_demux_ioctl+0x29/0x40 [ 908.999459][T20868] __se_sys_ioctl+0xfc/0x170 [ 908.999482][T20868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.999504][T20868] do_syscall_64+0x15f/0xf80 [ 908.999532][T20868] ? trace_irq_disable+0x3b/0x140 [ 908.999557][T20868] ? clear_bhb_loop+0x40/0x90 [ 908.999583][T20868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.999610][T20868] RIP: 0033:0x7f9cd519c819 [ 908.999629][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.999648][T20868] RSP: 002b:00007f9cd5fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.999670][T20868] RAX: ffffffffffffffda RBX: 00007f9cd5415fa0 RCX: 00007f9cd519c819 [ 908.999685][T20868] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 908.999699][T20868] RBP: 00007f9cd5232c91 R08: 0000000000000000 R09: 0000000000000000 [ 908.999712][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.999725][T20868] R13: 00007f9cd5416038 R14: 00007f9cd5415fa0 R15: 00007f9cd553fa48 [ 908.999758][T20868] [ 909.270694][T20868] Mem-Info: [ 909.273850][T20868] active_anon:9392 inactive_anon:0 isolated_anon:0 [ 909.273850][T20868] active_file:21724 inactive_file:4485 isolated_file:0 [ 909.273850][T20868] unevictable:768 dirty:318 writeback:0 [ 909.273850][T20868] slab_reclaimable:7676 slab_unreclaimable:150850 [ 909.273850][T20868] mapped:56675 shmem:1365 pagetables:2322 [ 909.273850][T20868] sec_pagetables:0 bounce:0 [ 909.273850][T20868] kernel_misc_reclaimable:0 [ 909.273850][T20868] free:1224457 free_pcp:34325 free_cma:0 [ 909.284751][T10926] tipc: Node number set to 3950828958 [ 909.319804][T20868] Node 0 active_anon:37568kB inactive_anon:0kB active_file:86832kB inactive_file:17808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:226700kB dirty:1268kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15232kB pagetables:9152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 909.360155][T20868] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 909.393414][T20868] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.423675][T20868] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 909.430712][T20868] Node 0 DMA32 free:954904kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37568kB inactive_anon:0kB active_file:86832kB inactive_file:17808kB unevictable:1536kB writepending:1268kB zspages:0kB present:3129332kB managed:2551016kB mlocked:0kB bounce:0kB free_pcp:138936kB local_pcp:30316kB free_cma:0kB [ 909.464227][T20868] lowmem_reserve[]: 0 0 0 0 0 [ 909.469049][T20868] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:592kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.498422][T20868] lowmem_reserve[]: 0 0 0 0 0 [ 909.503551][T20868] Node 1 Normal free:3926284kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.535683][T20868] lowmem_reserve[]: 0 0 0 0 0 [ 909.540428][T20868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 909.554026][T20868] Node 0 DMA32: 3482*4kB (UME) 4886*8kB (UME) 3918*16kB (UME) 492*32kB (UME) 703*64kB (UME) 440*128kB (UME) 447*256kB (UME) 143*512kB (UME) 116*1024kB (UE) 23*2048kB (UE) 90*4096kB (M) = 954936kB [ 909.573661][T20868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 909.585434][T20868] Node 1 Normal: 9*4kB (UM) 13*8kB (UM) 14*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 1*512kB (M) 3*1024kB (UM) 4*2048kB (UM) 955*4096kB (UM) = 3926284kB [ 909.649347][T20871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.677498][ T46] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 909.688236][T20868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.732072][T20871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.749260][T20868] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 909.804953][T14397] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 909.813795][T20868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.813820][T20868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.813837][T20868] 27566 total pagecache pages [ 909.813847][T20868] 0 pages in swap cache [ 909.813855][T20868] Free swap = 124996kB [ 909.813864][T20868] Total swap = 124996kB [ 909.813875][T20868] 2097051 pages RAM [ 909.813883][T20868] 0 pages HighMem/MovableOnly [ 909.813892][T20868] 427534 pages reserved [ 909.813900][T20868] 0 pages cma reserved [ 909.874230][T14397] Bluetooth: hci5: Injecting HCI hardware error event [ 909.890869][ T5852] Bluetooth: hci5: hardware error 0x00 [ 909.910796][T20879] loop9: detected capacity change from 0 to 7 [ 909.920332][T20879] Dev loop9: unable to read RDB block 7 [ 909.926706][T20879] loop9: unable to read partition table [ 909.934464][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 909.950892][ T46] usb 3-1: config 9 has an invalid interface number: 242 but max is 0 [ 909.974294][T20879] loop9: partition table beyond EOD, truncated [ 909.992283][ T46] usb 3-1: config 9 has no interface number 0 [ 910.021165][T20879] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 910.035255][ T46] usb 3-1: config 9 interface 242 has no altsetting 0 [ 910.043596][T20871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4530'. [ 910.082591][ T46] usb 3-1: New USB device found, idVendor=0af0, idProduct=7041, bcdDevice=d0.f9 [ 910.100126][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.136743][ T46] usb 3-1: Product: syz [ 910.148669][ T46] usb 3-1: Manufacturer: syz [ 910.163540][ T46] usb 3-1: SerialNumber: syz [ 910.291639][T20881] Dev loop9: unable to read RDB block 7 [ 910.301096][T20881] loop9: unable to read partition table [ 910.342692][T20881] loop9: partition table beyond EOD, truncated [ 910.382249][T20881] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 910.467541][ T46] usb 3-1: USB disconnect, device number 78 [ 910.804170][T20885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4533'. [ 911.417986][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 911.505423][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 911.594785][T20163] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 911.627243][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 911.647365][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 911.687822][T20902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.712751][T20902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.755327][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 911.835053][T20163] usb 7-1: device descriptor read/64, error -32 [ 911.887982][T10913] IPVS: starting estimator thread 0... [ 911.956441][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 911.958003][ T5852] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 911.979672][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 911.996574][T20908] IPVS: using max 31 ests per chain, 74400 per kthread [ 912.100484][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 912.206704][T20163] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 912.224142][T20904] netlink: zone id is out of range [ 912.263005][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 912.266957][T20911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.285074][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 912.360541][T20911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.376170][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 912.450056][T20163] usb 7-1: device descriptor read/64, error -32 [ 912.575757][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 912.623475][T20163] usb usb7-port1: attempt power cycle [ 912.644449][T20163] raw-gadget.0 gadget.6: failed to queue disconnect event [ 912.677446][T20916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.689971][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 912.719308][T20916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.786813][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 912.816858][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 912.846263][T20916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.899689][T20916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.095652][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 913.105515][T20919] tipc: Enabling of bearer rejected, already enabled [ 913.150023][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.186085][T20163] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 913.200962][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.231266][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 913.241343][T20163] usb 7-1: device descriptor read/8, error -32 [ 913.244877][T20904] netlink: zone id is out of range [ 913.363082][T20904] netlink: set zone limit has 4 unknown bytes [ 913.365841][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 913.422070][T20163] raw-gadget.0 gadget.6: failed to queue reset event [ 913.515736][T20163] raw-gadget.0 gadget.6: failed to queue resume event [ 913.595857][T20163] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 913.635104][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 913.642395][T20163] usb 7-1: device descriptor read/8, error -32 [ 913.754951][T20163] raw-gadget.0 gadget.6: failed to queue suspend event [ 913.783658][T20163] usb usb7-port1: unable to enumerate USB device [ 913.810632][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4547'. [ 913.829552][T20931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.866015][T20931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.823556][T10926] IPVS: starting estimator thread 0... [ 914.895367][T20946] syzkaller0: entered promiscuous mode [ 914.904148][T20946] syzkaller0: entered allmulticast mode [ 914.944847][T10920] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 914.944871][T20952] IPVS: using max 33 ests per chain, 79200 per kthread [ 915.118541][T10920] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 915.138223][T10920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.173591][T10920] usb 3-1: config 0 has no interface number 0 [ 915.196170][T10920] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 915.232220][T10920] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.274373][T10920] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 915.289199][T10920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.305357][T10920] usb 3-1: Product: syz [ 915.314115][T10920] usb 3-1: Manufacturer: syz [ 915.323430][T10920] usb 3-1: SerialNumber: syz [ 915.340646][T10920] usb 3-1: config 0 descriptor?? [ 915.957152][T20955] FAULT_INJECTION: forcing a failure. [ 915.957152][T20955] name failslab, interval 1, probability 0, space 0, times 0 [ 915.970170][T20955] CPU: 0 UID: 0 PID: 20955 Comm: syz.6.4556 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.970202][T20955] Tainted: [L]=SOFTLOCKUP [ 915.970210][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 915.970221][T20955] Call Trace: [ 915.970237][T20955] [ 915.970245][T20955] dump_stack_lvl+0xe8/0x150 [ 915.970279][T20955] should_fail_ex+0x412/0x560 [ 915.970312][T20955] should_failslab+0xa8/0x100 [ 915.970339][T20955] __kmalloc_noprof+0xe8/0x760 [ 915.970362][T20955] ? tomoyo_encode+0x28b/0x550 [ 915.970386][T20955] tomoyo_encode+0x28b/0x550 [ 915.970410][T20955] tomoyo_realpath_from_path+0x58d/0x5d0 [ 915.970439][T20955] ? tomoyo_path_number_perm+0x219/0x630 [ 915.970464][T20955] tomoyo_path_number_perm+0x246/0x630 [ 915.970492][T20955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 915.970515][T20955] ? __lock_acquire+0x6b5/0x2cf0 [ 915.970557][T20955] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 915.970596][T20955] ? __fget_files+0x2a/0x420 [ 915.970619][T20955] ? __fget_files+0x2a/0x420 [ 915.970636][T20955] ? __fget_files+0x3a0/0x420 [ 915.970654][T20955] ? __fget_files+0x2a/0x420 [ 915.970677][T20955] security_file_ioctl+0xc3/0x2a0 [ 915.970703][T20955] __se_sys_ioctl+0x47/0x170 [ 915.970726][T20955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.970748][T20955] do_syscall_64+0x15f/0xf80 [ 915.970774][T20955] ? trace_irq_disable+0x3b/0x140 [ 915.970797][T20955] ? clear_bhb_loop+0x40/0x90 [ 915.970820][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.970837][T20955] RIP: 0033:0x7f64fa99c819 [ 915.970855][T20955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.970870][T20955] RSP: 002b:00007f64fb826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.970890][T20955] RAX: ffffffffffffffda RBX: 00007f64fac15fa0 RCX: 00007f64fa99c819 [ 915.970905][T20955] RDX: 00002000000000c0 RSI: 0000000080045515 RDI: 0000000000000003 [ 915.970917][T20955] RBP: 00007f64fb826090 R08: 0000000000000000 R09: 0000000000000000 [ 915.970927][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.970935][T20955] R13: 00007f64fac16038 R14: 00007f64fac15fa0 R15: 00007f64fad3fa48 [ 915.970963][T20955] [ 915.971377][T20955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 916.226021][T10920] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.117/input/input144 [ 916.246802][T20955] usb usb8: usbfs: process 20955 (syz.6.4556) did not claim interface 0 before use [ 916.373688][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 916.373705][ T29] audit: type=1800 audit(1776660935.471:1586): pid=20957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4557" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 916.815297][T10926] raw-gadget.0 gadget.6: failed to queue reset event [ 916.885145][T10926] raw-gadget.0 gadget.6: failed to queue resume event [ 916.964904][T10926] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 916.975556][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 916.983214][T10926] raw-gadget.0 gadget.6: failed to queue reset event [ 917.055307][T10926] raw-gadget.0 gadget.6: failed to queue resume event [ 917.135656][T10926] usb 7-1: device descriptor read/64, error -32 [ 917.244845][T10926] raw-gadget.0 gadget.6: failed to queue suspend event [ 917.268983][T10926] raw-gadget.0 gadget.6: failed to queue reset event [ 917.375132][T10926] raw-gadget.0 gadget.6: failed to queue resume event [ 917.422965][T20968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4560'. [ 917.465126][T10926] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 917.484381][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 917.494125][T10926] raw-gadget.0 gadget.6: failed to queue reset event [ 917.586198][T10926] raw-gadget.0 gadget.6: failed to queue resume event [ 917.654884][T10926] usb 7-1: device descriptor read/64, error -32 [ 917.764998][T10926] raw-gadget.0 gadget.6: failed to queue suspend event [ 917.792120][T10926] usb usb7-port1: attempt power cycle [ 917.815403][T10926] raw-gadget.0 gadget.6: failed to queue disconnect event [ 917.836160][T10926] raw-gadget.0 gadget.6: failed to queue reset event [ 917.926895][T10926] raw-gadget.0 gadget.6: failed to queue resume event [ 917.956431][T10926] raw-gadget.0 gadget.6: failed to queue reset event [ 918.196735][T10926] raw-gadget.0 gadget.6: failed to queue resume event [ 918.304953][T10926] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 918.386650][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 918.393918][T10926] usb 7-1: device descriptor read/8, error -32 [ 918.521440][T10926] raw-gadget.0 gadget.6: failed to queue suspend event [ 918.545117][T10926] raw-gadget.0 gadget.6: failed to queue reset event [ 918.636870][T10926] raw-gadget.0 gadget.6: failed to queue resume event [ 918.725132][T10926] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 918.778221][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 918.785527][T10926] usb 7-1: device descriptor read/8, error -32 [ 918.920045][T10926] raw-gadget.0 gadget.6: failed to queue suspend event [ 918.945089][T10926] usb usb7-port1: unable to enumerate USB device [ 921.137330][T10926] usb 3-1: USB disconnect, device number 79 [ 921.533360][ T46] IPVS: starting estimator thread 0... [ 921.636433][T20991] tipc: Started in network mode [ 921.645246][T20987] IPVS: using max 28 ests per chain, 67200 per kthread [ 921.657376][T20991] tipc: Node identity ac14142f, cluster identity 4711 [ 921.691390][T20991] tipc: New replicast peer: 0.0.0.0 [ 921.708450][T20992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.728813][T20991] tipc: Enabled bearer , priority 10 [ 921.748442][T20992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.541574][T21008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.577703][T21008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.642751][T20993] netlink: 'syz.0.4565': attribute type 10 has an invalid length. [ 922.741380][T21009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4570'. [ 922.844951][T10914] tipc: Node number set to 2886997039 [ 924.522047][T21018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4574'. [ 924.761513][T21025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.819563][T21025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.822364][T21026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.842748][T21028] usb usb8: usbfs: process 21028 (syz.6.4577) did not claim interface 0 before use [ 924.878684][T21028] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 924.902031][T21028] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 924.924190][T21026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.102233][T21028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.135218][T21028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.217639][T21052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.255238][T21052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.402165][T21054] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4583'. [ 928.049993][T21071] tipc: Enabling of bearer rejected, already enabled [ 928.098234][T21071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.158120][T21071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.262281][T21073] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4588'. [ 930.267483][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4594'. [ 930.673274][T21098] netlink: 'syz.6.4597': attribute type 1 has an invalid length. [ 930.741855][T21098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.775153][T21102] bond1: (slave geneve2): making interface the new active one [ 930.787631][T21102] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 930.847942][ T5852] Bluetooth: hci4: Malformed Event: 0x13 [ 931.197227][T21110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.276870][T21110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.377672][T21115] loop4: detected capacity change from 0 to 7 [ 931.390543][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.398456][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.526851][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 931.616442][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.625785][ C0] buffer_io_error: 1 callbacks suppressed [ 931.625801][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 931.653638][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.663070][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 931.675595][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.684812][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 931.702416][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.711657][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 931.723942][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 931.733157][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 932.844400][T21141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.273386][T21148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.298746][T21148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.848450][ T29] audit: type=1326 audit(1776660952.951:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 933.952651][ T29] audit: type=1326 audit(1776660952.981:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 934.026530][ T29] audit: type=1326 audit(1776660952.981:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 934.119350][ T29] audit: type=1326 audit(1776660952.981:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 934.194288][ T29] audit: type=1326 audit(1776660952.981:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 934.274918][ T29] audit: type=1326 audit(1776660952.981:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c819 code=0x7ffc0000 [ 934.369368][ T29] audit: type=1326 audit(1776660953.031:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd515d04e code=0x7ffc0000 [ 934.464032][ T29] audit: type=1326 audit(1776660953.041:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd515d04e code=0x7ffc0000 [ 934.568663][ T29] audit: type=1326 audit(1776660953.041:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd515d04e code=0x7ffc0000 [ 934.614425][T21169] loop5: detected capacity change from 0 to 7 [ 934.654766][ T29] audit: type=1326 audit(1776660953.051:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.3.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd515d04e code=0x7ffc0000 [ 935.179945][T21169] Dev loop5: unable to read RDB block 7 [ 935.195355][T21169] loop5: unable to read partition table [ 935.211128][T21169] loop5: partition table beyond EOD, truncated [ 935.273655][T21169] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 935.297759][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 935.307675][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 935.885105][T20163] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 936.079138][T20163] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.137353][T20163] usb 3-1: config 1 interface 0 has no altsetting 0 [ 936.180880][T20163] usb 3-1: string descriptor 0 read error: -22 [ 936.197467][T20163] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 936.236346][T20163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.745347][T20163] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 936.788235][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4635'. [ 936.818366][T20163] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0033/input/input147 [ 937.096386][T20163] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 937.182934][T20163] usb 3-1: USB disconnect, device number 80 [ 937.332398][T21210] fido_id[21210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 937.890822][T21226] program syz.6.4645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 938.044982][T10926] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 938.135692][T21231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 938.233610][T10926] usb 3-1: Using ep0 maxpacket: 32 [ 938.256203][T10926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 938.290135][T10926] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 938.323555][T10926] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 938.357081][T10926] usb 3-1: Product: syz [ 938.376360][T10926] usb 3-1: Manufacturer: syz [ 938.397650][T10926] usb 3-1: SerialNumber: syz [ 938.437988][T10926] usb 3-1: config 0 descriptor?? [ 938.461603][T21220] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 939.129590][T21254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.154547][T21254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.216534][T21265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.256556][T21265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.831012][T20163] usb 3-1: USB disconnect, device number 81 [ 941.443032][T21282] vivid-007: disconnect [ 941.471798][T21279] vivid-007: reconnect [ 941.904146][T21289] batman_adv: batadv0: Adding interface: dummy0 [ 941.945112][T21289] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.999034][T21289] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 942.096329][T21290] macvtap1: mtu less than device minimum [ 942.437549][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4670'. [ 943.374858][T10920] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 943.565787][T10920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.590215][T10920] usb 3-1: config 0 has no interface number 0 [ 943.614029][T10920] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 943.651186][T10920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.676348][T10920] usb 3-1: Product: syz [ 943.686499][T10920] usb 3-1: Manufacturer: syz [ 943.700613][T10920] usb 3-1: SerialNumber: syz [ 943.727615][T10920] usb 3-1: config 0 descriptor?? [ 943.999975][T10920] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 944.037095][T10920] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 944.087594][T10920] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 944.116522][T10920] usb 3-1: media controller created [ 944.207576][T10920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 944.324999][T10920] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 944.432561][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 944.432579][ T29] audit: type=1326 audit(1776660963.531:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 944.530338][T10920] usb 3-1: USB disconnect, device number 82 [ 944.560457][ T29] audit: type=1326 audit(1776660963.591:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 944.682923][ T29] audit: type=1326 audit(1776660963.591:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 944.767548][ T29] audit: type=1326 audit(1776660963.591:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 944.839762][T21329] program syz.3.4683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 944.880846][ T29] audit: type=1326 audit(1776660963.591:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 945.008791][T21333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.025179][ T29] audit: type=1326 audit(1776660963.601:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 945.063486][T21333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.096746][ T29] audit: type=1326 audit(1776660963.601:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 945.181324][ T29] audit: type=1326 audit(1776660963.601:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 945.245326][ T29] audit: type=1326 audit(1776660963.601:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 945.306472][ T29] audit: type=1326 audit(1776660963.601:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21314 comm="syz.0.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f9afef9c819 code=0x7ffc0000 [ 946.275685][T21351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.314732][T21351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.828269][T21354] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.940236][T21354] batman_adv: batadv0: Interface activated: dummy0 [ 946.999973][T21354] batadv0: mtu less than device minimum [ 947.055332][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.069308][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.081286][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.093076][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.104965][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.116891][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.128670][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.140461][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.152369][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.164169][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.176060][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.187803][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.199660][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.211511][T21354] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 947.996404][T21378] syz_tun: entered allmulticast mode [ 948.040515][T21377] syz_tun: left allmulticast mode [ 948.484774][T20163] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 948.670806][T20163] usb 3-1: Using ep0 maxpacket: 32 [ 948.692739][T20163] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 948.722756][T20163] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 948.760371][T20163] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 948.800189][T20163] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 948.844543][T20163] usb 3-1: config 0 interface 0 has no altsetting 0 [ 948.860357][T20163] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 948.876944][T20163] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 948.905957][T20163] usb 3-1: Product: syz [ 948.911466][T20163] usb 3-1: Manufacturer: syz [ 948.925519][T20163] usb 3-1: SerialNumber: syz [ 948.949691][T20163] usb 3-1: config 0 descriptor?? [ 948.970957][T20163] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 949.016024][T20163] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 949.266555][T20163] usb 3-1: USB disconnect, device number 83 [ 949.272553][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 949.286390][T21381] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 949.327654][T20163] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 950.456776][T21408] netlink: 'syz.1.4716': attribute type 4 has an invalid length. [ 950.467739][T21409] syz_tun: entered allmulticast mode [ 950.517825][T21407] syz_tun: left allmulticast mode [ 961.890507][ C1] sched: DL replenish lagged too much [ 993.016943][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.032931][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1076.454658][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1076.461639][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20470/1:b..l [ 1076.470097][ C1] rcu: (detected by 1, t=10503 jiffies, g=170813, q=290985 ncpus=2) [ 1076.478173][ C1] task:syz-executor state:R running task stack:22248 pid:20470 tgid:20470 ppid:20467 task_flags:0x400140 flags:0x00080000 [ 1076.492896][ C1] Call Trace: [ 1076.496187][ C1] [ 1076.499104][ C1] __schedule+0x17b4/0x5680 [ 1076.503593][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1076.508695][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 1076.514000][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1076.519122][ C1] ? __x64_sys_newfstatat+0x151/0x200 [ 1076.524593][ C1] ? do_syscall_64+0x15f/0xf80 [ 1076.529374][ C1] ? __pfx___schedule+0x10/0x10 [ 1076.534218][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1076.539177][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1076.544563][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1076.549587][ C1] irqentry_exit+0x14f/0x730 [ 1076.554195][ C1] ? trace_irq_disable+0x3b/0x140 [ 1076.559228][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1076.565195][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1076.571278][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 54 b1 63 0c 48 89 de 5b e9 63 ea 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 38 61 7a 11 65 8b 15 59 61 7a [ 1076.590893][ C1] RSP: 0018:ffffc9000dd37600 EFLAGS: 00000246 [ 1076.596968][ C1] RAX: ffffffff823c8733 RBX: 0000000000000008 RCX: ffff888031155c40 [ 1076.604927][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1076.612907][ C1] RBP: dffffc0000000000 R08: ffff88801b4c6e7f R09: 1ffff11003698dcf [ 1076.620902][ C1] R10: dffffc0000000000 R11: ffffed1003698dd0 R12: 0000000000000008 [ 1076.628963][ C1] R13: 00000000000127c1 R14: dffffc0000000000 R15: ffff88801b4c6e80 [ 1076.636953][ C1] ? __page_table_check_zero+0x1a3/0x3e0 [ 1076.642623][ C1] __page_table_check_zero+0x302/0x3e0 [ 1076.648090][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 1076.653636][ C1] __free_frozen_pages+0xbd7/0xd30 [ 1076.658744][ C1] __slab_free+0x274/0x2c0 [ 1076.663193][ C1] qlist_free_all+0x99/0x100 [ 1076.667787][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1076.673239][ C1] __kasan_kmalloc+0x22/0xb0 [ 1076.677824][ C1] __kmalloc_noprof+0x35c/0x760 [ 1076.682690][ C1] ? tomoyo_encode+0x28b/0x550 [ 1076.687454][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 1076.692477][ C1] tomoyo_encode+0x28b/0x550 [ 1076.697080][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1076.702735][ C1] tomoyo_path_perm+0x283/0x560 [ 1076.707578][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1076.712613][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1076.718015][ C1] security_inode_getattr+0x12b/0x310 [ 1076.723387][ C1] vfs_getattr+0x23/0x70 [ 1076.727649][ C1] vfs_statx_path+0x2b/0x230 [ 1076.732255][ C1] ? vfs_statx+0x107/0x200 [ 1076.736709][ C1] vfs_statx+0x12e/0x200 [ 1076.741005][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1076.746220][ C1] ? strncpy_from_user+0x150/0x2b0 [ 1076.751325][ C1] ? do_getname+0x151/0x250 [ 1076.755834][ C1] vfs_fstatat+0x11b/0x170 [ 1076.760280][ C1] __x64_sys_newfstatat+0x151/0x200 [ 1076.765500][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1076.771236][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 1076.776641][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.782720][ C1] do_syscall_64+0x15f/0xf80 [ 1076.787311][ C1] ? trace_irq_disable+0x3b/0x140 [ 1076.792351][ C1] ? clear_bhb_loop+0x40/0x90 [ 1076.797036][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.802913][ C1] RIP: 0033:0x7f52c799ae5a [ 1076.807316][ C1] RSP: 002b:00007f52c7d3ecb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 1076.815737][ C1] RAX: ffffffffffffffda RBX: 00007f52c7a32048 RCX: 00007f52c799ae5a [ 1076.823703][ C1] RDX: 00007f52c7d3ece0 RSI: 00007f52c7d3ed70 RDI: 00000000ffffff9c [ 1076.831672][ C1] RBP: 00007f52c7d3ed70 R08: 00007f52c7d3fd70 R09: 00000000ffffffff [ 1076.839756][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007f52c7d3fe00 [ 1076.847729][ C1] R13: 00007f52c7a32048 R14: 00000000000e850e R15: 00007f52c7d3fe40 [ 1076.855744][ C1] [ 1076.858752][ C1] rcu: rcu_preempt kthread starved for 6873 jiffies! g170813 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1076.869936][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1076.879934][ C1] rcu: RCU grace-period kthread stack dump: [ 1076.885816][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1076.899317][ C1] Call Trace: [ 1076.902584][ C1] [ 1076.905508][ C1] __schedule+0x17b4/0x5680 [ 1076.910030][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1076.914995][ C1] ? __pfx___schedule+0x10/0x10 [ 1076.919856][ C1] ? schedule+0x90/0x360 [ 1076.924095][ C1] schedule+0x164/0x360 [ 1076.928264][ C1] schedule_timeout+0x158/0x2c0 [ 1076.933143][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1076.938536][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1076.943816][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1076.949618][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1076.955274][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1076.960124][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1076.966268][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1076.971572][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1076.976787][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1076.981370][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1076.986561][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1076.992389][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1076.997335][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1077.002353][ C1] kthread+0x388/0x470 [ 1077.006457][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1077.011674][ C1] ? __pfx_kthread+0x10/0x10 [ 1077.016258][ C1] ret_from_fork+0x514/0xb70 [ 1077.020868][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1077.025987][ C1] ? __switch_to+0xc79/0x1410 [ 1077.030751][ C1] ? __pfx_kthread+0x10/0x10 [ 1077.035354][ C1] ret_from_fork_asm+0x1a/0x30 [ 1077.040130][ C1] [ 1077.043130][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1077.049452][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1077.054665][ C0] NMI backtrace for cpu 0 [ 1077.054684][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.054726][ C0] Tainted: [L]=SOFTLOCKUP [ 1077.054738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1077.054758][ C0] RIP: 0010:__lock_acquire+0xa9d/0x2cf0 [ 1077.054802][ C0] Code: 0b 03 85 c0 74 1c 83 3d e4 bc 91 0e 00 75 13 48 8d 3d b7 e1 94 0e 48 c7 c6 e3 12 0f 8e 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 <0f> 84 5a 1b 00 00 48 09 dd 41 8b 45 20 89 c1 81 e1 00 80 04 00 81 [ 1077.054817][ C0] RSP: 0018:ffffc90000006898 EFLAGS: 00000082 [ 1077.054833][ C0] RAX: ffffffff93e94af0 RBX: 000000008a9222e9 RCX: 00000000001c2cbd [ 1077.054846][ C0] RDX: 000000002d2c0ffc RSI: 0000000048091cc7 RDI: ffffffff8e692ec0 [ 1077.054858][ C0] RBP: 35a08aec00000000 R08: ffffffff81b2934a R09: ffff8880b8628298 [ 1077.054871][ C0] R10: dffffc0000000000 R11: fffffbfff2066a7f R12: ffffffff8e693ac8 [ 1077.054889][ C0] R13: ffffffff8e693ac8 R14: ffffffff8e692ec0 R15: 0000000000000003 [ 1077.054902][ C0] FS: 0000000000000000(0000) GS:ffff88812521e000(0000) knlGS:0000000000000000 [ 1077.054916][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1077.054929][ C0] CR2: 0000555590fefa28 CR3: 000000007798c000 CR4: 00000000003526f0 [ 1077.054944][ C0] Call Trace: [ 1077.054950][ C0] [ 1077.054961][ C0] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 1077.054987][ C0] ? hrtimer_forward+0x17e/0x2b0 [ 1077.055006][ C0] ? __hrtimer_run_queues+0x46a/0xa20 [ 1077.055024][ C0] lock_acquire+0x106/0x350 [ 1077.055048][ C0] ? __hrtimer_run_queues+0x46a/0xa20 [ 1077.055069][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1077.055095][ C0] _raw_spin_lock_irq+0x3d/0x50 [ 1077.055118][ C0] ? __hrtimer_run_queues+0x46a/0xa20 [ 1077.055136][ C0] __hrtimer_run_queues+0x46a/0xa20 [ 1077.055160][ C0] hrtimer_interrupt+0x44b/0x950 [ 1077.055188][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1077.055208][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1077.055232][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1077.055251][ C0] RIP: 0010:memset_orig+0x25/0xb0 [ 1077.055268][ C0] Code: 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 <74> 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 48 [ 1077.055282][ C0] RSP: 0018:ffffc90000006d78 EFLAGS: 00000246 [ 1077.055296][ C0] RAX: 0000000000000000 RBX: ffffc90000006f60 RCX: 0000000000000000 [ 1077.055307][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000006dc0 [ 1077.055319][ C0] RBP: ffffc90000006e70 R08: ffffc90000006dcf R09: 0000000000000000 [ 1077.055331][ C0] R10: ffffc90000006dc0 R11: fffff52000000dba R12: ffff88807e28cd80 [ 1077.055344][ C0] R13: 1ffff92000000db4 R14: ffffc90000007100 R15: dffffc0000000000 [ 1077.055364][ C0] __fib_lookup+0xaa/0x210 [ 1077.055389][ C0] ? rcu_is_watching+0x15/0xb0 [ 1077.055406][ C0] ? __pfx___fib_lookup+0x10/0x10 [ 1077.055430][ C0] ? fib_table_lookup+0x11ba/0x16e0 [ 1077.055449][ C0] ? fib_lookup+0x49/0x440 [ 1077.055467][ C0] ? ip_route_output_key_hash_rcu+0x30c/0x25d0 [ 1077.055491][ C0] ip_route_output_key_hash_rcu+0x32e/0x25d0 [ 1077.055516][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1077.055537][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1077.055559][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 1077.055582][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1077.055606][ C0] ? lock_acquire+0x106/0x350 [ 1077.055632][ C0] ip_route_output_flow+0x2a/0x150 [ 1077.055654][ C0] ip_route_me_harder+0x742/0xf90 [ 1077.055679][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1077.055705][ C0] ? __cookie_v4_init_sequence+0x25d/0x500 [ 1077.055734][ C0] synproxy_send_tcp+0x34c/0x670 [ 1077.055758][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 1077.055786][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1077.055808][ C0] ? nft_fib_init+0x2d8/0x380 [ 1077.055827][ C0] ? synproxy_pernet+0x45/0x270 [ 1077.055852][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1077.055877][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1077.055906][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1077.055932][ C0] nft_synproxy_do_eval+0x305/0x580 [ 1077.055954][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 1077.055977][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1077.055999][ C0] ? nft_trace_init+0x283/0x4c0 [ 1077.056024][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1077.056048][ C0] nft_do_chain+0x467/0x19f0 [ 1077.056077][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1077.056109][ C0] ? nf_nat_inet_fn+0x95b/0xbf0 [ 1077.056129][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1077.056154][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1077.056179][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1077.056200][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1077.056224][ C0] nf_hook_slow+0xc5/0x220 [ 1077.056246][ C0] NF_HOOK+0x21f/0x3c0 [ 1077.056263][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1077.056280][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1077.056295][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1077.056310][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1077.056328][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1077.056348][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1077.056366][ C0] NF_HOOK+0x336/0x3c0 [ 1077.056382][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1077.056399][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1077.056414][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1077.056431][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1077.056449][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1077.056465][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1077.056481][ C0] ? process_backlog+0x3eb/0x1950 [ 1077.056499][ C0] process_backlog+0xaa3/0x1950 [ 1077.056523][ C0] __napi_poll+0xae/0x340 [ 1077.056538][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1077.056556][ C0] net_rx_action+0x627/0xf70 [ 1077.056573][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1077.056599][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1077.056627][ C0] handle_softirqs+0x22a/0x840 [ 1077.056652][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1077.056677][ C0] __irq_exit_rcu+0xca/0x220 [ 1077.056701][ C0] irq_exit_rcu+0x9/0x30 [ 1077.056722][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1077.056746][ C0] [ 1077.056752][ C0] [ 1077.056758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1077.056775][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1077.056799][ C0] Code: 2b 72 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 21 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1077.056813][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 1077.056826][ C0] RAX: 0000000002364129 RBX: ffffffff819a9e9a RCX: 0000000080000001 [ 1077.056838][ C0] RDX: 0000000000000001 RSI: ffffffff8dfd403e RDI: ffffffff8c289460 [ 1077.056850][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 1077.056863][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 1077.056875][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 1077.056894][ C0] ? do_idle+0x36a/0x5f0 [ 1077.056913][ C0] default_idle+0x9/0x20 [ 1077.056929][ C0] default_idle_call+0x72/0xb0 [ 1077.056946][ C0] do_idle+0x36a/0x5f0 [ 1077.056963][ C0] ? __pfx_do_idle+0x10/0x10 [ 1077.056981][ C0] cpu_startup_entry+0x43/0x60 [ 1077.056997][ C0] rest_init+0x2de/0x300 [ 1077.057016][ C0] start_kernel+0x38a/0x3e0 [ 1077.057040][ C0] x86_64_start_reservations+0x24/0x30 [ 1077.057059][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1077.057077][ C0] common_startup_64+0x13e/0x147 [ 1077.057102][ C0]