last executing test programs: 2m4.875314683s ago: executing program 1 (id=1373): pipe2$9p(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0xaea2, &(0x7f0000000040)={[{0x6, 0x9, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0xfff, 0xf3f, 0x1, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x29f1, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x0, 0xf4, 0x55, 0x8e, 0xffffffffffffffb5}]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)="b9", 0x1, 0x4011000, &(0x7f0000000080)={0xa, 0x300, 0x0, @private2}, 0x1c) listen(r3, 0x100101) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) accept4(r3, 0x0, 0x0, 0x0) 2m3.112663442s ago: executing program 1 (id=1378): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x3}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x3b) getpid() bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpid() 2m1.162452184s ago: executing program 1 (id=1385): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07000000400081000000020000002000018014000400000000ff1f0000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1m58.894426741s ago: executing program 1 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x1, 0x100) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x228, 0x2a8, 0x2a8, 0x228, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010101, 0xffffff00, 0xffffff00, 'wlan0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x59, 0x1, 0x3e}, 0x0, 0x110, 0x170, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x59000000, 0x2, 0xffffffff, 0x10000, 0x18, 0x1bcc90ff4aa6520d}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x3, 0x4e21, 0x8, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x2, 0x4, 0x4, 0x5, 0x59000000], 0x4, 0x7}, {0x2, [0x0, 0x0, 0x0, 0x1, 0x4], 0x1, 0x2}}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x0, 0x5, 'pptp\x00', {0x14000000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) 1m57.535063361s ago: executing program 1 (id=1392): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000201400078005001400200000000800084000000000050001000600000011000300686173683a6e65742c6e657400000000050005000a"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m57.413253998s ago: executing program 3 (id=1393): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=@tcp6=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}, 0x1, 0x300}, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) 1m55.832281364s ago: executing program 3 (id=1395): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 1m55.6689914s ago: executing program 1 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x88, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m51.083710397s ago: executing program 3 (id=1407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1, 0x1}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x840, 0xffffffff, 0xfffffff8, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1m49.841792581s ago: executing program 3 (id=1408): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x474080, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000280)=@v={0x93, 0xe, 0x90, 0xe, @generic=0xc, 0x0, 0x8}) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2e, &(0x7f0000000cc0)="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", 0x118) (async) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0400040000000001"], 0x8) (async) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000011000), 0x802, 0x0) mount_setattr(r3, &(0x7f0000011040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9900, &(0x7f00000020c0)={0xc, 0x0, 0xf1e6e8c0ebdb474f, {r6}}, 0x20) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m49.138741843s ago: executing program 3 (id=1411): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000140)='./file0/file0\x00', 0x271) r2 = socket(0x10, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x100, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x37161000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r8, &(0x7f00000021c0), 0x5b, 0x2, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x31) 1m46.919956696s ago: executing program 3 (id=1416): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0xfffffa03) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x8002, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="0f01df0faeee0f72f400f20f017746660f3881590a66b825018ee80faeed66baf80cb8688f0783ef66bafc0ced66b81a008ed80fc71e", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = accept4(r1, 0x0, 0x0, 0x0) recvmsg(r10, &(0x7f0000000140)={&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000080)}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x318) 1m40.506367327s ago: executing program 32 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x88, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m31.096701423s ago: executing program 33 (id=1416): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0xfffffa03) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x8002, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="0f01df0faeee0f72f400f20f017746660f3881590a66b825018ee80faeed66baf80cb8688f0783ef66bafc0ced66b81a008ed80fc71e", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = accept4(r1, 0x0, 0x0, 0x0) recvmsg(r10, &(0x7f0000000140)={&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000080)}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x318) 26.879615103s ago: executing program 4 (id=1649): r0 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e6400000023140002800500010005ffff0005001b"], 0x44}}, 0x0) 26.506816328s ago: executing program 4 (id=1651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00040004000a00630018000000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000080000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 26.367811387s ago: executing program 4 (id=1652): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = msgget(0x2, 0x3a8) syz_open_dev$video4linux(0x0, 0x80000001, 0x0) r3 = syz_io_uring_setup(0x875, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x0, 0xe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x80800, 0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000070000000000000000000500180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000009b0000001801000020646c25000000000c0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_enter(r3, 0x2df0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) msgctl$IPC_RMID(r2, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x1}) ioctl$FITHAW(r0, 0xc0045878) 25.678091922s ago: executing program 4 (id=1655): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002140)=ANY=[@ANYBLOB="1201000000000040780422c2000000000001090224000600000000090400000103000000092100000001220b00090581030000000000c34f4dbd8fd3e4846c4237af96204e352afe349b093e9b2b80f02b6ffa58390a58d384605353ca49b2004ee6cea3164e878a978ae27b5366bd60b99db73ddb19bfd131671cbff81e2e2cf73c07b6d104194ac19c291dd547e3c4b7f7ee0e3cd57846de738c57a9e9fb5b4415df3cc1cd8397328fbb4463fbb580824f5e52cf746ee23b2761e79ef5748a8763155ab4239cdab7447dfab72578259ad6c924b6f16e935e3d1c1eccd1543cdfe7d3202f581bfbf6db8154a94db410ff0f41fe2889c32358a43c0c2371a7b5935af9557b31842b9ab923"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r5, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x13bb) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xfffffffffffffd4a, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b0000000bdbc79ef42bb687d79128"], 0x0}, 0x0) 22.49676648s ago: executing program 0 (id=1663): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000030000000000aaff020000000000000000000000000001330022eb"], 0x10da) 21.838180391s ago: executing program 0 (id=1666): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020385f100000000000000000000000f0800010001000000"], 0x1c}}, 0x0) setrlimit(0x3, &(0x7f0000000240)={0x80000000, 0x6}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstat(r0, &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x801004, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@uname={'uname', 0x3d, 'NETMAP\x00'}}, {@access_user}, {@noextend}, {@debug={'debug', 0x3d, 0x8}}, {@access_client}]}}) syz_open_dev$MSR(&(0x7f0000000280), 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x1a, "813f4cd749f70f83455f113523b020b2555b0d12bbe978f6a0f0"}, &(0x7f0000000100)=0x22) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r4, 0x383, 0x9}, 0xc) r5 = socket(0x1e, 0x1, 0x0) connect$phonet_pipe(r5, &(0x7f0000000000)={0x1e, 0x4, 0x7, 0x7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000002c0)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020385f100000000000000000000000f0800010001000000"], 0x1c}}, 0x0) (async) setrlimit(0x3, &(0x7f0000000240)={0x80000000, 0x6}) (async) pipe2$9p(&(0x7f00000003c0), 0x0) (async) fstat(r0, &(0x7f0000000400)) (async) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x801004, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@uname={'uname', 0x3d, 'NETMAP\x00'}}, {@access_user}, {@noextend}, {@debug={'debug', 0x3d, 0x8}}, {@access_client}]}}) (async) syz_open_dev$MSR(&(0x7f0000000280), 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x1a, "813f4cd749f70f83455f113523b020b2555b0d12bbe978f6a0f0"}, &(0x7f0000000100)=0x22) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r4, 0x383, 0x9}, 0xc) (async) socket(0x1e, 0x1, 0x0) (async) connect$phonet_pipe(r5, &(0x7f0000000000)={0x1e, 0x4, 0x7, 0x7}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000002c0)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) (async) 21.812148135s ago: executing program 2 (id=1667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3801000010000100feffffff000080ffffffffffffff00000000ffffe0000002ac1414aa0000000000000000000000000001071c000000000a00004d32000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c000000ac14143f00000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c2500000000000003000000000000000600000000000000fcffffffffffffffffffffffffffffff000000000000000021000000000000000000000000000000ffffffff000000000000000080000000ff340000020001000000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0) 21.281512674s ago: executing program 4 (id=1668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x36, 0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x1000000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 21.170099272s ago: executing program 2 (id=1669): r0 = io_uring_setup(0x5f3e, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x3}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0x9, 0x3, "f61b6e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) close_range(r0, 0xffffffffffffffff, 0xffffffa1) 21.147455515s ago: executing program 4 (id=1670): socket(0x2a, 0x3, 0xffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0xfce5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x4, 0xa, {0x0}, {0xee00}, 0xfff, 0x1}) sched_setscheduler(r1, 0x0, &(0x7f0000000180)=0x404) gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000080)=""/135) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 20.958202816s ago: executing program 0 (id=1671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000f40)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0x33, 0x2, 0xffffffff, 0x2, 0x3e, 0x101, 0x3b, 0x38, 0xcd, 0x1d9, 0x9, 0x20, 0x3, 0x101, 0x0, 0x1fe}, [{0x5, 0x0, 0x7fff, 0xfd, 0x6, 0x8, 0x7, 0xfe1}, {0x5, 0x8, 0x8000, 0x2279, 0x4, 0x7fffffff, 0x9, 0x6}, {0x6474e551, 0xf91, 0x9, 0xeca, 0x4, 0xe, 0x2, 0x5d}], "52a272a7c0fe3c93ffed1b8407b0c4d5b92327810d58a5c525c4f456a2d7acfa09f24491b04e91f59eaa3369b4fac1132c39ddae2b1f994e647c7216ebb37408743a7e7fcc98ff0b542dd50acb8fff977fba61c51b04d3aa38cb74386e695657ab44487f8ebed48d1148c43f630070318f3536c1d28ad1f893ce46852a59c87e8d2a9addabb9bbd6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x920) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$radio(&(0x7f00000001c0), 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d047008476100000001090a120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000001c0)={0x40, 0x15, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0}) 17.994353112s ago: executing program 2 (id=1672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000400d28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000000000000000000004900", 0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffff3e, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000008010100000000000000000e00ffff0900210073797a300000000006000240888e0000ede9ee7eba994c2cb764151f3cb7b30ffedee3a37149a925200cea554103df0f96557a71b2bd50e4db54be25f13eab5de1fe2ca342ea1f73f3d89fbb9342513a8d0af92f3b9433c5763f0088faaf541d695a3f69c64acfd380dea812055a28d73b4f00"/150], 0x28}}, 0x40000c0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x420, 0xffffffff, 0xffffffff, 0x420, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x2f8, 0x328, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1, 0x2d, 0x10, 0x1, 'syz0\x00', 0x4}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x550) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 17.833067445s ago: executing program 2 (id=1673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17.811037278s ago: executing program 0 (id=1674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x23, 0x5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x22020600) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x224) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='smb3\x00', 0x0, &(0x7f00000003c0)='nolazytimw') close(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c00000040000900fffffffffddbdf250100000004001f0064000180664d", @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17.730508374s ago: executing program 2 (id=1675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x23, 0x5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x22020600) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x224) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='smb3\x00', 0x0, &(0x7f00000003c0)='nolazytimw') close(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c00000040000900fffffffffddbdf250100000004001f0064000180664d", @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.901876258s ago: executing program 0 (id=1676): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e3000"/28, @ANYRES32=r1], 0x3c}}, 0x0) 15.881425747s ago: executing program 2 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x2000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000008}, 0x4004800) 15.825120148s ago: executing program 0 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x10000000}, 0x0) 5.336347491s ago: executing program 34 (id=1670): socket(0x2a, 0x3, 0xffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0xfce5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x4, 0xa, {0x0}, {0xee00}, 0xfff, 0x1}) sched_setscheduler(r1, 0x0, &(0x7f0000000180)=0x404) gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000080)=""/135) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 330.223488ms ago: executing program 35 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x10000000}, 0x0) 0s ago: executing program 36 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x2000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000008}, 0x4004800) kernel console output (not intermixed with test programs): 2.969868][ T5936] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 352.982149][ T49] usb 3-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 353.060439][ T49] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 353.064697][ T5936] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 353.081663][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.144375][ T49] usb 3-1: Product: syz [ 353.182138][ T49] usb 3-1: Manufacturer: syz [ 353.219967][ T49] usb 3-1: SerialNumber: syz [ 353.299216][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.346297][ T49] usb 3-1: config 0 descriptor?? [ 353.350359][ T5936] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.418582][ T5936] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.422577][ T49] usb 3-1: can't set config #0, error -71 [ 353.444406][ T5936] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.616621][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.636171][ T5936] usb 2-1: can't set config #16, error -71 [ 353.650428][ T5936] usb 2-1: USB disconnect, device number 20 [ 354.305366][ T49] usb 3-1: USB disconnect, device number 19 [ 356.120250][ T8887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.819'. [ 361.482679][ T882] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 362.308751][ T8949] FAULT_INJECTION: forcing a failure. [ 362.308751][ T8949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.362309][ T8949] CPU: 1 UID: 0 PID: 8949 Comm: syz.1.838 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 362.362342][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.362357][ T8949] Call Trace: [ 362.362366][ T8949] [ 362.362375][ T8949] dump_stack_lvl+0x241/0x360 [ 362.362413][ T8949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.362443][ T8949] ? __pfx__printk+0x10/0x10 [ 362.362483][ T8949] should_fail_ex+0x424/0x570 [ 362.362512][ T8949] _copy_to_user+0x31/0xb0 [ 362.362546][ T8949] simple_read_from_buffer+0xc4/0x170 [ 362.362574][ T8949] proc_fail_nth_read+0x1ef/0x260 [ 362.362614][ T8949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.362645][ T8949] ? rw_verify_area+0x246/0x630 [ 362.362673][ T8949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.362702][ T8949] vfs_read+0x21f/0xb90 [ 362.362740][ T8949] ? __pfx_vfs_read+0x10/0x10 [ 362.362772][ T8949] ? do_sock_setsockopt+0x3ea/0x710 [ 362.362805][ T8949] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 362.362833][ T8949] ksys_read+0x19d/0x2d0 [ 362.362863][ T8949] ? __pfx_ksys_read+0x10/0x10 [ 362.362897][ T8949] ? do_syscall_64+0xb6/0x230 [ 362.362926][ T8949] do_syscall_64+0xf3/0x230 [ 362.362951][ T8949] ? clear_bhb_loop+0x45/0xa0 [ 362.362974][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.362995][ T8949] RIP: 0033:0x7f1f8418bb7c [ 362.363014][ T8949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 362.363032][ T8949] RSP: 002b:00007f1f84f71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.363054][ T8949] RAX: ffffffffffffffda RBX: 00007f1f843a5fa0 RCX: 00007f1f8418bb7c [ 362.363071][ T8949] RDX: 000000000000000f RSI: 00007f1f84f710a0 RDI: 0000000000000004 [ 362.363084][ T8949] RBP: 00007f1f84f71090 R08: 0000000000000000 R09: 0000000000000000 [ 362.363097][ T8949] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 362.363111][ T8949] R13: 0000000000000000 R14: 00007f1f843a5fa0 R15: 00007ffd551a6518 [ 362.363145][ T8949] [ 363.365635][ T882] usb 4-1: device not accepting address 21, error -71 [ 364.247176][ T8970] autofs: Unknown parameter '' [ 364.459888][ T8977] FAULT_INJECTION: forcing a failure. [ 364.459888][ T8977] name failslab, interval 1, probability 0, space 0, times 0 [ 364.514738][ T8977] CPU: 0 UID: 0 PID: 8977 Comm: syz.2.847 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 364.514770][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.514783][ T8977] Call Trace: [ 364.514791][ T8977] [ 364.514800][ T8977] dump_stack_lvl+0x241/0x360 [ 364.514836][ T8977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.514864][ T8977] ? __pfx__printk+0x10/0x10 [ 364.514896][ T8977] ? __pfx___might_resched+0x10/0x10 [ 364.514926][ T8977] should_fail_ex+0x424/0x570 [ 364.514953][ T8977] should_failslab+0xac/0x100 [ 364.514976][ T8977] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 364.514998][ T8977] ? kasan_save_track+0x3f/0x80 [ 364.515024][ T8977] ? v9fs_session_init+0xb2/0x1b80 [ 364.515051][ T8977] ? v9fs_mount+0xb4/0xaa0 [ 364.515072][ T8977] kstrdup+0x42/0x100 [ 364.515104][ T8977] v9fs_session_init+0xb2/0x1b80 [ 364.515158][ T8977] ? __pfx_v9fs_session_init+0x10/0x10 [ 364.515197][ T8977] ? __kasan_kmalloc+0x9d/0xb0 [ 364.515227][ T8977] ? __kmalloc_cache_noprof+0x236/0x370 [ 364.515247][ T8977] ? v9fs_mount+0xb4/0xaa0 [ 364.515269][ T8977] v9fs_mount+0xd4/0xaa0 [ 364.515295][ T8977] ? __pfx_v9fs_mount+0x10/0x10 [ 364.515316][ T8977] ? rcu_is_watching+0x15/0xb0 [ 364.515342][ T8977] ? cap_capable+0x139/0x450 [ 364.515372][ T8977] legacy_get_tree+0xee/0x190 [ 364.515396][ T8977] ? __pfx_v9fs_mount+0x10/0x10 [ 364.515424][ T8977] vfs_get_tree+0x90/0x2b0 [ 364.515457][ T8977] do_new_mount+0x2cf/0xb70 [ 364.515486][ T8977] ? __pfx_do_new_mount+0x10/0x10 [ 364.515520][ T8977] __se_sys_mount+0x38c/0x400 [ 364.515549][ T8977] ? __pfx___se_sys_mount+0x10/0x10 [ 364.515579][ T8977] ? __x64_sys_mount+0x20/0xc0 [ 364.515604][ T8977] do_syscall_64+0xf3/0x230 [ 364.515628][ T8977] ? clear_bhb_loop+0x45/0xa0 [ 364.515653][ T8977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.515673][ T8977] RIP: 0033:0x7f639558d169 [ 364.515691][ T8977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.515708][ T8977] RSP: 002b:00007f63964c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.515730][ T8977] RAX: ffffffffffffffda RBX: 00007f63957a5fa0 RCX: 00007f639558d169 [ 364.515745][ T8977] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 364.515759][ T8977] RBP: 00007f63964c9090 R08: 00002000000000c0 R09: 0000000000000000 [ 364.515772][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.515784][ T8977] R13: 0000000000000000 R14: 00007f63957a5fa0 R15: 00007ffcf6361488 [ 364.515816][ T8977] [ 365.506324][ T49] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 366.747455][ T8996] overlayfs: failed to resolve './mnt/file0': -20 [ 366.836112][ T8998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.851'. [ 366.850302][ T8998] netlink: 5 bytes leftover after parsing attributes in process `syz.0.851'. [ 366.859341][ T8998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.851'. [ 366.869967][ T8998] netlink: 5 bytes leftover after parsing attributes in process `syz.0.851'. [ 366.878972][ T8998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.851'. [ 366.934767][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 366.953944][ T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 367.009723][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 367.092252][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 367.174806][ T49] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.451614][ T49] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 367.735579][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.123243][ T49] usb 2-1: can't set config #16, error -71 [ 368.174649][ T49] usb 2-1: USB disconnect, device number 21 [ 372.390817][ T9043] netlink: 144 bytes leftover after parsing attributes in process `syz.3.863'. [ 373.902140][ T49] IPVS: starting estimator thread 0... [ 374.005486][ T9057] IPVS: using max 24 ests per chain, 57600 per kthread [ 374.261264][ T9065] vlan3: entered promiscuous mode [ 374.269181][ T9065] bond0: entered promiscuous mode [ 374.366462][ T9065] bond_slave_0: entered promiscuous mode [ 374.379768][ T9065] bond_slave_1: entered promiscuous mode [ 375.384737][ T5910] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 375.458488][ T9078] netlink: 136 bytes leftover after parsing attributes in process `syz.4.873'. [ 375.495452][ T9081] netlink: 'syz.0.874': attribute type 9 has an invalid length. [ 375.503283][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 375.503973][ T9078] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 375.554639][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 375.571644][ T9081] hsr0: entered promiscuous mode [ 375.578320][ T9081] macvlan2: entered promiscuous mode [ 375.583928][ T9081] macvlan2: entered allmulticast mode [ 375.589552][ T9081] hsr0: entered allmulticast mode [ 375.594702][ T9081] hsr_slave_0: entered allmulticast mode [ 375.600374][ T9081] hsr_slave_1: entered allmulticast mode [ 375.610995][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 375.654629][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 375.674656][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.714723][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.749565][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.771358][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.783125][ T5910] usb 2-1: GET_CAPABILITIES returned 0 [ 376.793436][ T5910] usbtmc 2-1:16.0: can't read capabilities [ 377.407100][ T9096] input: syz1 as /devices/virtual/input/input12 [ 377.580092][ T5881] usb 2-1: USB disconnect, device number 22 [ 380.044650][ T882] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 380.326786][ T882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 380.404659][ T882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 380.426444][ T882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 380.474659][ T882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 380.512721][ T882] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 380.535696][ T882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.555710][ T882] usb 1-1: Product: syz [ 380.559940][ T882] usb 1-1: Manufacturer: syz [ 380.596656][ T882] usb 1-1: SerialNumber: syz [ 380.616050][ T882] usb 1-1: config 0 descriptor?? [ 380.647773][ T882] usb 1-1: NFC: Unable to get FW version [ 380.668272][ T882] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 382.984769][ T9144] ucma_write: process 550 (syz.4.891) changed security contexts after opening file descriptor, this is not allowed. [ 383.577075][ T882] usb 1-1: USB disconnect, device number 34 [ 383.914335][ T9153] netlink: 96 bytes leftover after parsing attributes in process `syz.0.896'. [ 383.955130][ T49] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 384.011219][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.017722][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.154727][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 384.207527][ T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 384.421859][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 384.490817][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.524676][ T49] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.628298][ T9161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.708184][ T49] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.737391][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.768081][ T9161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.795970][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 384.840234][ T9161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.863514][ T9164] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 384.932050][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.075909][ T49] usb 2-1: GET_CAPABILITIES returned 0 [ 385.105766][ T49] usbtmc 2-1:16.0: can't read capabilities [ 385.175759][ T9162] bridge_slave_1 (unregistering): left allmulticast mode [ 385.202081][ T9162] bridge_slave_1 (unregistering): left promiscuous mode [ 385.228184][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.288295][ T882] usb 2-1: USB disconnect, device number 23 [ 385.338845][ T9161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.377224][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.399726][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.406951][ T9164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.419464][ T9164] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 385.546181][ T9161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.566697][ T9161] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.584787][ T9161] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.602660][ T9161] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.838851][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.851924][ T9185] bond0: (slave rose0): Enslaving as an active interface with an up link [ 387.381343][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 387.429722][ T9192] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 387.480592][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.220082][ T9230] fuse: Unknown parameter 'rOotmode' [ 389.345260][ T49] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 389.619151][ T49] usb 5-1: device descriptor read/64, error -71 [ 390.013354][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 390.036412][ T9238] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 390.044718][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 390.064996][ T49] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 390.709818][ T9247] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 390.735086][ T9247] batman_adv: batadv0: Adding interface: gretap2 [ 390.741685][ T9247] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.767394][ T9247] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 390.848306][ T24] usb 3-1: device descriptor read/64, error -71 [ 390.848898][ T49] usb 5-1: device descriptor read/64, error -71 [ 390.963475][ T49] usb usb5-port1: attempt power cycle [ 391.354698][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 391.429652][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 391.577453][ T9257] netlink: 763 bytes leftover after parsing attributes in process `syz.0.925'. [ 391.594869][ T24] usb 3-1: device descriptor read/64, error -71 [ 391.720603][ T24] usb usb3-port1: attempt power cycle [ 391.735660][ T9258] 9pnet_fd: Insufficient options for proto=fd [ 391.744941][ T49] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 391.808268][ T49] usb 5-1: device descriptor read/8, error -71 [ 391.826153][ T5910] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 391.985253][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 392.008671][ T5910] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 392.020211][ T5910] usb 1-1: config 0 has no interface number 0 [ 392.026791][ T5910] usb 1-1: config 0 interface 119 has no altsetting 0 [ 392.071634][ T5910] usb 1-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 392.081355][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.090061][ T5910] usb 1-1: Product: syz [ 392.094857][ T5910] usb 1-1: Manufacturer: syz [ 392.094880][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 392.099602][ T5910] usb 1-1: SerialNumber: syz [ 392.142528][ T5910] usb 1-1: config 0 descriptor?? [ 392.142746][ T24] usb 3-1: device descriptor read/8, error -71 [ 392.178561][ T5910] usb-storage 1-1:0.119: USB Mass Storage device detected [ 392.186491][ T5878] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 392.300092][ T5910] usb-storage 1-1:0.119: Quirks match for vid 04b8 pid 0602: 1 [ 392.395657][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 392.435587][ T5910] usb 1-1: USB disconnect, device number 35 [ 392.457143][ T5878] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 392.492481][ T5878] usb 4-1: config 0 has no interface number 0 [ 392.512392][ T5878] usb 4-1: New USB device found, idVendor=fc1d, idProduct=c100, bcdDevice=ce.6f [ 392.535794][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.543918][ T5878] usb 4-1: Product: syz [ 392.555323][ T5878] usb 4-1: Manufacturer: syz [ 392.560071][ T5878] usb 4-1: SerialNumber: syz [ 392.577794][ T5878] usb 4-1: config 0 descriptor?? [ 392.628880][ T9270] tipc: Enabling not permitted [ 392.634525][ T9270] tipc: Enabling of bearer rejected, failed to enable media [ 392.824960][ T9265] netlink: 100 bytes leftover after parsing attributes in process `syz.3.927'. [ 392.854666][ T9265] netlink: 'syz.3.927': attribute type 5 has an invalid length. [ 393.272761][ T9283] netlink: 'syz.1.934': attribute type 10 has an invalid length. [ 394.110587][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 394.433402][ T9283] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 395.520445][ T49] usb 4-1: USB disconnect, device number 23 [ 397.081786][ T9301] FAULT_INJECTION: forcing a failure. [ 397.081786][ T9301] name failslab, interval 1, probability 0, space 0, times 0 [ 397.094711][ T9301] CPU: 1 UID: 0 PID: 9301 Comm: syz.4.938 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 397.094740][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 397.094754][ T9301] Call Trace: [ 397.094762][ T9301] [ 397.094771][ T9301] dump_stack_lvl+0x241/0x360 [ 397.094808][ T9301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.094838][ T9301] ? __pfx__printk+0x10/0x10 [ 397.094872][ T9301] ? __pfx___might_resched+0x10/0x10 [ 397.094902][ T9301] should_fail_ex+0x424/0x570 [ 397.094930][ T9301] should_failslab+0xac/0x100 [ 397.094954][ T9301] __kmalloc_noprof+0xdf/0x4d0 [ 397.094975][ T9301] ? tomoyo_encode+0x26f/0x540 [ 397.095002][ T9301] tomoyo_encode+0x26f/0x540 [ 397.095037][ T9301] tomoyo_realpath_from_path+0x59e/0x5e0 [ 397.095073][ T9301] tomoyo_path_number_perm+0x245/0x790 [ 397.095108][ T9301] ? tomoyo_path_number_perm+0x215/0x790 [ 397.095141][ T9301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 397.095179][ T9301] ? ksys_write+0x24e/0x2d0 [ 397.095218][ T9301] ? __lock_acquire+0xad5/0xd80 [ 397.095261][ T9301] ? __fget_files+0x2a/0x420 [ 397.095285][ T9301] ? __fget_files+0x2a/0x420 [ 397.095312][ T9301] ? __fget_files+0x2a/0x420 [ 397.095343][ T9301] security_file_ioctl+0xc6/0x2a0 [ 397.095376][ T9301] __se_sys_ioctl+0x46/0x160 [ 397.095409][ T9301] do_syscall_64+0xf3/0x230 [ 397.095435][ T9301] ? clear_bhb_loop+0x45/0xa0 [ 397.095462][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.095482][ T9301] RIP: 0033:0x7f4730f8d169 [ 397.095501][ T9301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.095521][ T9301] RSP: 002b:00007f4731db0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.095543][ T9301] RAX: ffffffffffffffda RBX: 00007f47311a6160 RCX: 00007f4730f8d169 [ 397.095560][ T9301] RDX: 0000200000000140 RSI: 00000000c10c5541 RDI: 0000000000000005 [ 397.095574][ T9301] RBP: 00007f4731db0090 R08: 0000000000000000 R09: 0000000000000000 [ 397.095587][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.095600][ T9301] R13: 0000000000000000 R14: 00007f47311a6160 R15: 00007fff3a830f58 [ 397.095634][ T9301] [ 397.095657][ T9301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 398.686362][ T9310] fuse: Bad value for 'group_id' [ 398.691373][ T9310] fuse: Bad value for 'group_id' [ 399.696369][ T49] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 400.474714][ T49] usb 3-1: config 128 has an invalid interface number: 239 but max is 0 [ 400.483142][ T49] usb 3-1: config 128 has no interface number 0 [ 400.550654][ T9350] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 400.604691][ T9350] netlink: 600 bytes leftover after parsing attributes in process `syz.4.945'. [ 400.819867][ T49] usb 3-1: config 128 interface 239 has no altsetting 0 [ 400.909630][ T49] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=ac.44 [ 401.003387][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.589495][ T49] usb 3-1: string descriptor 0 read error: -71 [ 402.096374][ T49] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 402.115106][ T49] gspca_sn9c20x: Write register 1000 failed -71 [ 402.139710][ T49] gspca_sn9c20x: Device initialization failed [ 402.178054][ T49] gspca_sn9c20x 3-1:128.239: probe with driver gspca_sn9c20x failed with error -71 [ 402.222841][ T49] usb 3-1: USB disconnect, device number 24 [ 402.816476][ T9388] kvm: kvm [9380]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 404.809187][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 404.918895][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 405.537392][ T9444] program syz.4.963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.784746][ T5881] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 405.984731][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 405.999045][ T5881] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 406.008589][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.028718][ T5881] usb 1-1: Product: syz [ 406.032947][ T5881] usb 1-1: Manufacturer: syz [ 406.250942][ T5881] usb 1-1: SerialNumber: syz [ 406.259105][ T5881] usb 1-1: config 0 descriptor?? [ 406.420067][ T9456] kvm: kvm [9452]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 406.925269][ T5881] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 407.263367][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 407.325958][ T9463] vlan3: entered allmulticast mode [ 407.331398][ T9463] batadv0: entered allmulticast mode [ 408.226934][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 408.273832][ T5881] gspca_sunplus: reg_w_riv err -71 [ 408.305733][ T5881] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 408.414782][ T5881] usb 1-1: USB disconnect, device number 36 [ 408.484658][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 408.543855][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.907442][ T9491] bridge_slave_1 (unregistering): left allmulticast mode [ 408.925132][ T9491] bridge_slave_1 (unregistering): left promiscuous mode [ 408.933063][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.174296][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 409.500168][ T9514] dccp_close: ABORT with 15584 bytes unread [ 409.651527][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 409.668665][ T9521] netlink: 144 bytes leftover after parsing attributes in process `syz.1.977'. [ 409.838229][ T9531] Bluetooth: MGMT ver 1.23 [ 411.406902][ T9539] kvm: kvm [9524]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 411.515772][ T5830] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 411.845130][ T5881] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 412.085063][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 412.091151][ T5881] usb 2-1: no configurations [ 412.104611][ T5881] usb 2-1: can't read configurations, error -22 [ 412.244767][ T5881] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 412.268129][ T9550] usb usb6: usbfs: process 9550 (syz.2.986) did not claim interface 0 before use [ 412.539937][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.988'. [ 412.563949][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.988'. [ 412.634768][ T9554] netlink: 56 bytes leftover after parsing attributes in process `syz.4.988'. [ 412.709280][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 412.722286][ T5881] usb 2-1: no configurations [ 412.727552][ T5881] usb 2-1: can't read configurations, error -22 [ 412.734410][ T5881] usb usb2-port1: attempt power cycle [ 413.994678][ T5880] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 414.196702][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 414.230710][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.251982][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.308511][ T9597] macvlan3: entered promiscuous mode [ 414.327713][ T5880] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 414.381077][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.450268][ T5880] usb 5-1: config 0 descriptor?? [ 414.566331][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 414.895661][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 415.395221][ T5880] logitech 0003:046D:C20A.0005: hidraw0: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.4-1/input0 [ 415.409954][ T5880] logitech 0003:046D:C20A.0005: no inputs found [ 415.542184][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 415.551384][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 415.758905][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 415.767968][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 415.900669][ T9622] kvm: kvm [9614]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 415.951814][ T5830] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 416.752025][ T9629] xt_bpf: check failed: parse error [ 416.753130][ T882] usb 5-1: USB disconnect, device number 24 [ 416.778319][ T9633] delete_channel: no stack [ 416.995981][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 417.005190][ T49] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 417.043047][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.181835][ T49] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 417.194777][ T5880] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 417.218868][ T49] usb 2-1: config 0 has no interface number 0 [ 417.241005][ T49] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 417.273727][ T49] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 417.295107][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.312601][ T49] usb 2-1: Product: syz [ 417.317977][ T49] usb 2-1: Manufacturer: syz [ 417.322743][ T49] usb 2-1: SerialNumber: syz [ 417.336037][ T49] usb 2-1: config 0 descriptor?? [ 417.343892][ T9631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.363395][ T49] kvaser_usb 2-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 417.371620][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 417.383323][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.403338][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.413986][ T5880] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 417.423327][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.429480][ T9643] bridge_slave_1 (unregistering): left allmulticast mode [ 417.436222][ T5880] usb 3-1: config 0 descriptor?? [ 417.444104][ T9643] bridge_slave_1 (unregistering): left promiscuous mode [ 417.452853][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.684804][ T882] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 417.835051][ T5881] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 417.890563][ T882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.005001][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 418.007221][ T882] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 418.032968][ T9653] tipc: Started in network mode [ 418.038265][ T9653] tipc: Node identity ffffffff, cluster identity 4711 [ 418.042697][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.052351][ T882] usb 5-1: config 1 has no interface number 1 [ 418.066812][ T882] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 418.246007][ T9653] tipc: Node number set to 4294967295 [ 418.249618][ T5881] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 418.263780][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.272179][ T5881] usb 1-1: Product: syz [ 418.277907][ T5881] usb 1-1: Manufacturer: syz [ 418.282825][ T5881] usb 1-1: SerialNumber: syz [ 418.934509][ T882] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 419.087015][ T882] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.180100][ T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.219946][ T882] usb 5-1: Product: syz [ 419.221734][ T5881] usb 1-1: config 0 descriptor?? [ 419.234744][ T882] usb 5-1: Manufacturer: syz [ 419.239249][ T5881] gs_usb 1-1:0.0: Required endpoints not found [ 419.253896][ T882] usb 5-1: SerialNumber: syz [ 419.529783][ T5910] usb 1-1: USB disconnect, device number 37 [ 419.540089][ T9647] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 419.837473][ T882] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 420.832705][ T882] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 420.971438][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 420.974896][ T5910] usb 2-1: USB disconnect, device number 27 [ 421.000547][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 421.054725][ T5880] usb 3-1: USB disconnect, device number 25 [ 421.107305][ T882] usb 5-1: USB disconnect, device number 25 [ 421.211809][ T9675] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 421.220803][ T9675] netlink: 'syz.0.1014': attribute type 2 has an invalid length. [ 421.802741][ T5936] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 422.172878][ T5936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 422.205164][ T5936] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 422.243379][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.289536][ T5936] usb 1-1: config 0 descriptor?? [ 422.317681][ T9668] futex_wake_op: syz.3.1011 tries to shift op by -1; fix this program [ 422.437432][ T24] IPVS: starting estimator thread 0... [ 422.542036][ T9687] IPVS: using max 29 ests per chain, 69600 per kthread [ 423.356748][ T5936] video4linux radio48: keene_cmd_set failed (-110) [ 423.620935][ T9700] ubi31: attaching mtd0 [ 423.654821][ T9700] ubi31: scanning is finished [ 423.659716][ T9700] ubi31: empty MTD device detected [ 423.889827][ T5936] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 423.991597][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.095050][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.337554][ T9714] netlink: 'syz.2.1024': attribute type 11 has an invalid length. [ 424.345853][ T9714] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1024'. [ 424.408991][ T9700] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 424.624974][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 424.634148][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 424.649695][ T9700] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 424.838791][ T9700] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 425.056308][ T9700] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 425.064070][ T9700] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 425.104381][ T9700] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 425.109783][ T9717] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 425.144341][ T9700] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3419906843 [ 425.536291][ T9700] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 425.556316][ T9715] ubi31: background thread "ubi_bgt31d" started, PID 9715 [ 425.586550][ T5880] usb 1-1: USB disconnect, device number 38 [ 425.609401][ T9725] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 426.003489][ T9725] bridge5: entered promiscuous mode [ 426.186308][ T9725] bridge5: entered allmulticast mode [ 426.313756][ T9734] block nbd4: Unsupported socket: shutdown callout must be supported. [ 426.635875][ T5910] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 426.904055][ T9741] FAULT_INJECTION: forcing a failure. [ 426.904055][ T9741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.929277][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.4.1032 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 426.929317][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 426.929331][ T9741] Call Trace: [ 426.929340][ T9741] [ 426.929349][ T9741] dump_stack_lvl+0x241/0x360 [ 426.929388][ T9741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.929418][ T9741] ? __pfx__printk+0x10/0x10 [ 426.929459][ T9741] should_fail_ex+0x424/0x570 [ 426.929489][ T9741] _copy_to_user+0x31/0xb0 [ 426.929522][ T9741] simple_read_from_buffer+0xc4/0x170 [ 426.929550][ T9741] proc_fail_nth_read+0x1ef/0x260 [ 426.929582][ T9741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.929613][ T9741] ? rw_verify_area+0x246/0x630 [ 426.929640][ T9741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.929669][ T9741] vfs_read+0x21f/0xb90 [ 426.929705][ T9741] ? __pfx___mutex_lock+0x10/0x10 [ 426.929733][ T9741] ? __pfx_vfs_read+0x10/0x10 [ 426.929765][ T9741] ? __fget_files+0x2a/0x420 [ 426.929792][ T9741] ? __fget_files+0x39d/0x420 [ 426.929814][ T9741] ? __fget_files+0x2a/0x420 [ 426.929849][ T9741] ksys_read+0x19d/0x2d0 [ 426.929882][ T9741] ? __pfx_ksys_read+0x10/0x10 [ 426.929918][ T9741] ? do_syscall_64+0xb6/0x230 [ 426.929947][ T9741] do_syscall_64+0xf3/0x230 [ 426.929973][ T9741] ? clear_bhb_loop+0x45/0xa0 [ 426.929999][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.930020][ T9741] RIP: 0033:0x7f4730f8bb7c [ 426.930039][ T9741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 426.930059][ T9741] RSP: 002b:00007f4731df2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.930082][ T9741] RAX: ffffffffffffffda RBX: 00007f47311a5fa0 RCX: 00007f4730f8bb7c [ 426.930098][ T9741] RDX: 000000000000000f RSI: 00007f4731df20a0 RDI: 0000000000000004 [ 426.930111][ T9741] RBP: 00007f4731df2090 R08: 0000000000000000 R09: 0000000000000000 [ 426.930124][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.930137][ T9741] R13: 0000000000000000 R14: 00007f47311a5fa0 R15: 00007fff3a830f58 [ 426.930172][ T9741] [ 427.016824][ T5910] usb 1-1: config 8 has an invalid interface number: 235 but max is 0 [ 427.352864][ T5910] usb 1-1: config 8 has no interface number 0 [ 427.504435][ T5910] usb 1-1: config 8 interface 235 has no altsetting 0 [ 427.511391][ T5910] usb 1-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 427.520629][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.233917][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'. [ 428.280027][ T5910] usb 1-1: string descriptor 0 read error: -71 [ 428.670088][ T5910] keyspan 1-1:8.235: Keyspan - (without firmware) converter detected [ 428.681741][ T5910] usb 1-1: USB disconnect, device number 39 [ 428.689948][ T5910] keyspan 1-1:8.235: device disconnected [ 429.808846][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 429.828674][ T9765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1039'. [ 430.235079][ T5880] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 431.150963][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.376553][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 431.404808][ T5880] usb 3-1: can't read configurations, error -61 [ 431.595006][ T5880] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 432.141629][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 432.222429][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 432.333144][ T5880] usb 3-1: can't read configurations, error -61 [ 433.324991][ T5880] usb usb3-port1: attempt power cycle [ 435.520185][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1055'. [ 436.301920][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.329464][ T5880] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 436.525060][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 436.533099][ T5880] usb 2-1: no configurations [ 436.551643][ T5880] usb 2-1: can't read configurations, error -22 [ 436.735413][ T5880] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 436.934781][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 437.008816][ T5880] usb 2-1: no configurations [ 437.060043][ T5880] usb 2-1: can't read configurations, error -22 [ 437.079043][ T5880] usb usb2-port1: attempt power cycle [ 437.079084][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 437.194951][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 437.194973][ T30] audit: type=1326 audit(1744102329.094:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.259273][ T30] audit: type=1326 audit(1744102329.094:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.308875][ T30] audit: type=1326 audit(1744102329.094:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.353857][ T30] audit: type=1326 audit(1744102329.094:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.383879][ T30] audit: type=1326 audit(1744102329.094:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.414766][ T30] audit: type=1326 audit(1744102329.094:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.437858][ T30] audit: type=1326 audit(1744102329.094:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.468471][ T30] audit: type=1326 audit(1744102329.094:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.491141][ T30] audit: type=1326 audit(1744102329.094:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 437.650692][ T30] audit: type=1326 audit(1744102329.094:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9834 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 438.078807][ T49] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 438.086569][ T5880] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 438.221216][ T5880] usb 2-1: device descriptor read/8, error -71 [ 438.227768][ T49] usb 1-1: device descriptor read/64, error -71 [ 438.664653][ T49] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 438.871459][ T49] usb 1-1: device descriptor read/64, error -71 [ 439.508376][ T49] usb usb1-port1: attempt power cycle [ 439.854361][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 439.974879][ T49] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 440.801104][ T49] usb 1-1: device descriptor read/8, error -71 [ 441.401184][ T9889] kvm: kvm [9883]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 442.713759][ T9899] smb3: Unknown parameter 'nolazytimw' [ 442.934326][ T9900] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 443.460267][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 443.506242][ T9910] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 443.964513][ T9916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.451354][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.460503][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.060594][ T9943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 446.867345][ T9961] kernel read not supported for file /  (pid: 9961 comm: syz.1.1098) [ 446.878403][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 446.878424][ T30] audit: type=1800 audit(1744102338.794:159): pid=9961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1098" name=200120 dev="mqueue" ino=23253 res=0 errno=0 [ 448.202889][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 448.911386][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1102'. [ 448.926695][ T9969] bridge0: port 3(vlan2) entered blocking state [ 448.933088][ T9969] bridge0: port 3(vlan2) entered disabled state [ 448.939576][ T9969] vlan2: entered allmulticast mode [ 448.944733][ T9969] bridge0: entered allmulticast mode [ 448.955545][ T9969] vlan2: left allmulticast mode [ 448.960443][ T9969] bridge0: left allmulticast mode [ 449.373139][ T9986] ALSA: mixer_oss: invalid OSS volume '' [ 450.260428][ T9988] ip6tnl0: mtu less than device minimum [ 450.390833][ T9992] netem: incorrect gi model size [ 450.413967][ T9992] netem: change failed [ 450.818409][ T882] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 451.166184][ T882] usb 1-1: Using ep0 maxpacket: 8 [ 451.260848][T10008] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1109'. [ 451.275657][ T5880] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 451.283629][ T882] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 451.307507][ T882] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 451.327526][T10008] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1109'. [ 451.355385][ T882] usb 1-1: config 179 has no interface number 0 [ 451.369939][ T882] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 451.414203][ T882] usb 1-1: config 179 interface 65 has no altsetting 0 [ 451.443911][ T882] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 451.464756][T10008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1109'. [ 451.489375][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 451.490117][ T882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.519374][ T5880] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 451.564146][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 451.606909][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.623364][ T5880] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.752998][T10015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1114'. [ 451.795043][T10002] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 451.826916][ T5880] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.836754][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.151605][ T5880] usb 3-1: GET_CAPABILITIES returned 0 [ 452.225789][ T5880] usbtmc 3-1:16.0: can't read capabilities [ 452.552132][ T5936] usb 3-1: USB disconnect, device number 29 [ 452.789178][ T882] usb 1-1: USB disconnect, device number 44 [ 453.074127][ T5830] Bluetooth: hci3: unexpected event for opcode 0x0401 [ 456.066310][T10032] gtp0: entered promiscuous mode [ 459.452347][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 459.865447][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 460.275018][ T882] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 460.464162][ T882] usb 5-1: Using ep0 maxpacket: 8 [ 460.532593][ T882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 460.588219][ T882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 460.625033][ T882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.675082][ T49] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 460.717338][ T30] audit: type=1326 audit(1744102352.624:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10063 comm="syz.1.1129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8418d169 code=0x0 [ 460.738334][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.332915][ T882] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.346061][ T882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.355231][ T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.368883][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.432997][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.453529][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.537435][ T49] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 461.564985][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.591649][ T49] usb 3-1: config 0 descriptor?? [ 461.702255][ T882] usb 5-1: GET_CAPABILITIES returned 0 [ 461.731614][ T882] usbtmc 5-1:16.0: can't read capabilities [ 461.805335][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.814435][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.832819][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.869519][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.949169][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 461.983050][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.049614][T10082] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 462.049966][ T882] usb 5-1: USB disconnect, device number 26 [ 462.059263][ T49] usb 3-1: USB disconnect, device number 30 [ 463.013673][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 464.073536][T10109] af_packet: tpacket_rcv: packet too big, clamped from 700 to 4294967272. macoff=96 [ 464.466429][ T882] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 464.639014][ T882] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 464.656314][ T882] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 464.667964][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 464.675851][ T882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 464.685489][ T882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 464.697249][ T882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 464.808725][ T882] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.040365][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 465.791893][ T882] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.800537][ T882] usb 1-1: Product: syz [ 465.805220][ T882] usb 1-1: Manufacturer: syz [ 465.810501][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 465.843889][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 466.288015][ T882] cdc_wdm 1-1:1.0: skipping garbage [ 466.301077][ T882] cdc_wdm 1-1:1.0: skipping garbage [ 466.306604][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.318674][ T882] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 466.324868][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.338123][ T882] cdc_wdm 1-1:1.0: Unknown control protocol [ 466.596047][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 466.605253][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.260734][T10148] smb3: Unknown parameter 'nolazytimw' [ 467.366648][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 467.545676][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 467.551260][ T10] usbtmc 5-1:16.0: can't read capabilities [ 467.580005][ T5910] usb 1-1: USB disconnect, device number 45 [ 468.554154][ T10] usb 5-1: USB disconnect, device number 27 [ 469.431511][T10186] FAULT_INJECTION: forcing a failure. [ 469.431511][T10186] name failslab, interval 1, probability 0, space 0, times 0 [ 469.603522][T10186] CPU: 1 UID: 0 PID: 10186 Comm: syz.4.1163 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 469.603556][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.603570][T10186] Call Trace: [ 469.603578][T10186] [ 469.603587][T10186] dump_stack_lvl+0x241/0x360 [ 469.603626][T10186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.603655][T10186] ? __pfx__printk+0x10/0x10 [ 469.603688][T10186] ? __pfx___might_resched+0x10/0x10 [ 469.603720][T10186] should_fail_ex+0x424/0x570 [ 469.603748][T10186] should_failslab+0xac/0x100 [ 469.603773][T10186] __kmalloc_cache_noprof+0x73/0x370 [ 469.603795][T10186] ? p9_client_create+0xdf/0x11f0 [ 469.603831][T10186] p9_client_create+0xdf/0x11f0 [ 469.603876][T10186] ? __pfx_p9_client_create+0x10/0x10 [ 469.603929][T10186] ? rcu_is_watching+0x15/0xb0 [ 469.603961][T10186] ? __raw_spin_lock_init+0x45/0x100 [ 469.604020][T10186] v9fs_session_init+0x1e6/0x1b80 [ 469.604079][T10186] ? __pfx_v9fs_session_init+0x10/0x10 [ 469.604121][T10186] ? __kasan_kmalloc+0x9d/0xb0 [ 469.604159][T10186] ? __kmalloc_cache_noprof+0x236/0x370 [ 469.604180][T10186] ? v9fs_mount+0xb4/0xaa0 [ 469.604204][T10186] v9fs_mount+0xd4/0xaa0 [ 469.604229][T10186] ? __pfx_v9fs_mount+0x10/0x10 [ 469.604252][T10186] ? rcu_is_watching+0x15/0xb0 [ 469.604277][T10186] ? cap_capable+0x139/0x450 [ 469.604309][T10186] legacy_get_tree+0xee/0x190 [ 469.604333][T10186] ? __pfx_v9fs_mount+0x10/0x10 [ 469.604356][T10186] vfs_get_tree+0x90/0x2b0 [ 469.604391][T10186] do_new_mount+0x2cf/0xb70 [ 469.604422][T10186] ? __pfx_do_new_mount+0x10/0x10 [ 469.604456][T10186] __se_sys_mount+0x38c/0x400 [ 469.604487][T10186] ? __pfx___se_sys_mount+0x10/0x10 [ 469.604517][T10186] ? __x64_sys_mount+0x20/0xc0 [ 469.604541][T10186] do_syscall_64+0xf3/0x230 [ 469.604565][T10186] ? clear_bhb_loop+0x45/0xa0 [ 469.604589][T10186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.604610][T10186] RIP: 0033:0x7f4730f8d169 [ 469.604628][T10186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.604646][T10186] RSP: 002b:00007f4731df2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 469.604669][T10186] RAX: ffffffffffffffda RBX: 00007f47311a5fa0 RCX: 00007f4730f8d169 [ 469.604684][T10186] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 469.604698][T10186] RBP: 00007f4731df2090 R08: 00002000000000c0 R09: 0000000000000000 [ 469.604712][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.604725][T10186] R13: 0000000000000000 R14: 00007f47311a5fa0 R15: 00007fff3a830f58 [ 469.604759][T10186] [ 470.541986][T10205] netlink: 'syz.0.1168': attribute type 13 has an invalid length. [ 470.575666][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1168'. [ 470.620736][T10203] lo speed is unknown, defaulting to 1000 [ 471.299681][T10211] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 472.359811][T10220] smb3: Unknown parameter 'nolazytimw' [ 472.655098][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 473.105696][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 473.123495][T10237] affs: No valid root block on device nullb0 [ 473.624595][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 473.662162][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 473.719325][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 473.791816][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.837702][T10242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1179'. [ 473.854790][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.899989][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.928286][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.114800][ T49] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 474.265667][ T5910] usb 4-1: GET_CAPABILITIES returned 0 [ 474.396126][ T5910] usbtmc 4-1:16.0: can't read capabilities [ 474.502539][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 474.590369][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 474.632755][ T5910] usb 4-1: USB disconnect, device number 24 [ 474.638088][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 2304, setting to 64 [ 474.663822][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 474.793983][ T49] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 474.806789][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.864581][ T49] usb 5-1: Product: syz [ 475.162720][ T49] usb 5-1: Manufacturer: syz [ 475.356028][ T49] usb 5-1: SerialNumber: syz [ 475.378636][ T49] usb 5-1: config 0 descriptor?? [ 475.401984][T10242] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 475.469115][ T49] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 475.665618][T10264] vlan0: entered promiscuous mode [ 475.709948][ T5910] usb 5-1: USB disconnect, device number 28 [ 475.962074][T10264] team0: Port device vlan0 added [ 478.524674][ T49] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 478.684822][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 478.746713][ T49] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 479.179584][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 479.260781][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.305573][ T49] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.342754][ T49] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.369370][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.401744][ T49] usb 4-1: GET_CAPABILITIES returned 0 [ 480.420250][ T49] usbtmc 4-1:16.0: can't read capabilities [ 480.558754][ T49] usb 4-1: USB disconnect, device number 25 [ 481.137091][T10317] delete_channel: no stack [ 481.144728][ T5936] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 481.297124][ T5936] usb 5-1: device descriptor read/64, error -71 [ 481.534890][ T5936] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 481.877188][T10335] kvm: kvm [10330]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 482.455532][ T5936] usb 5-1: device descriptor read/64, error -71 [ 482.665901][ T5936] usb usb5-port1: attempt power cycle [ 483.265943][ T5936] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 483.358823][ T5936] usb 5-1: device descriptor read/8, error -71 [ 484.577701][T10370] vlan0: entered promiscuous mode [ 484.979291][ T5910] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 485.293808][T10380] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1222'. [ 485.325785][T10380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.358953][ T5910] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 485.370944][ T5910] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 485.404916][T10383] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1223'. [ 485.426128][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 485.469408][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 485.520745][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 485.548569][ T5910] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.577117][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.587643][ T5910] usb 4-1: Product: syz [ 485.591944][ T5910] usb 4-1: Manufacturer: syz [ 485.617469][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 485.622992][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 485.680435][ T5910] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 485.696842][ T5910] cdc_wdm 4-1:1.0: Unknown control protocol [ 485.716914][T10388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 486.073655][ T5880] lo speed is unknown, defaulting to 1000 [ 486.906807][T10399] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1228'. [ 488.113364][ T5910] usb 4-1: USB disconnect, device number 26 [ 488.182766][ T5881] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 488.222040][T10410] vlan0: entered promiscuous mode [ 488.371337][T10415] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 488.814857][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 488.831519][ T5881] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 488.938599][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.165557][ T5881] usb 3-1: config 0 descriptor?? [ 489.397938][ T5881] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 490.336810][ T5881] gspca_vc032x: reg_w err -110 [ 490.354752][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.375181][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.395336][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.563352][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.384556][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.425184][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.450029][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.464563][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.680000][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.706283][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.390067][T10443] smb3: Unknown parameter 'nolazytimw' [ 492.410417][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.426899][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.458872][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.497776][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.528745][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 492.548150][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 493.126604][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 493.134664][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 493.140104][ T5881] gspca_vc032x: Unknown sensor... [ 493.152320][ T5881] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 493.549657][ T5881] usb 3-1: USB disconnect, device number 31 [ 494.194860][ T5830] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 494.518622][T10468] kvm: kvm [10464]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 495.268351][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1247'. [ 497.029081][T10477] smb3: Unknown parameter 'nolazytimw' [ 498.597010][T10486] smb3: Unknown parameter 'nolazytimw' [ 498.702924][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1242'. [ 498.716798][T10470] lo speed is unknown, defaulting to 1000 [ 500.239433][T10507] FAULT_INJECTION: forcing a failure. [ 500.239433][T10507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.258025][T10507] CPU: 0 UID: 0 PID: 10507 Comm: syz.1.1256 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 500.258058][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 500.258072][T10507] Call Trace: [ 500.258079][T10507] [ 500.258088][T10507] dump_stack_lvl+0x241/0x360 [ 500.258125][T10507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.258154][T10507] ? __pfx__printk+0x10/0x10 [ 500.258195][T10507] should_fail_ex+0x424/0x570 [ 500.258224][T10507] _copy_from_iter+0x211/0x1c70 [ 500.258261][T10507] ? __build_skb_around+0x247/0x3d0 [ 500.258301][T10507] ? __alloc_skb+0x298/0x480 [ 500.258332][T10507] ? __pfx__copy_from_iter+0x10/0x10 [ 500.258365][T10507] ? __pfx___alloc_skb+0x10/0x10 [ 500.258400][T10507] ? skb_put+0x114/0x1f0 [ 500.258435][T10507] netlink_sendmsg+0x73c/0xcd0 [ 500.258481][T10507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.258526][T10507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.258553][T10507] __sock_sendmsg+0x221/0x270 [ 500.258584][T10507] ____sys_sendmsg+0x523/0x860 [ 500.258617][T10507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.258637][T10507] ? __fget_files+0x2a/0x420 [ 500.258665][T10507] ? __fget_files+0x2a/0x420 [ 500.258701][T10507] __sys_sendmsg+0x271/0x360 [ 500.258729][T10507] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.258813][T10507] ? do_syscall_64+0xb6/0x230 [ 500.258842][T10507] do_syscall_64+0xf3/0x230 [ 500.258868][T10507] ? clear_bhb_loop+0x45/0xa0 [ 500.258893][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.258913][T10507] RIP: 0033:0x7f1f8418d169 [ 500.258933][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.258951][T10507] RSP: 002b:00007f1f84f71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.258974][T10507] RAX: ffffffffffffffda RBX: 00007f1f843a5fa0 RCX: 00007f1f8418d169 [ 500.258990][T10507] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 500.259003][T10507] RBP: 00007f1f84f71090 R08: 0000000000000000 R09: 0000000000000000 [ 500.259016][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.259028][T10507] R13: 0000000000000000 R14: 00007f1f843a5fa0 R15: 00007ffd551a6518 [ 500.259062][T10507] [ 503.509260][T10545] smb3: Unknown parameter 'nolazytimw' [ 504.379453][T10549] netlink: 'syz.2.1265': attribute type 9 has an invalid length. [ 504.507429][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 504.883757][T10549] macvlan3: entered promiscuous mode [ 505.415496][T10549] macvlan3: entered allmulticast mode [ 505.568239][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 505.600528][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 505.654643][T10556] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 505.762129][T10556] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1267'. [ 506.889255][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.147236][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.919842][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 507.981242][T10604] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 509.298628][T10622] xt_CT: No such helper "pptp" [ 509.654035][T10637] FAULT_INJECTION: forcing a failure. [ 509.654035][T10637] name failslab, interval 1, probability 0, space 0, times 0 [ 509.669696][T10638] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1280'. [ 509.681542][T10638] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1280'. [ 509.693262][T10637] CPU: 1 UID: 0 PID: 10637 Comm: syz.0.1281 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 509.693294][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 509.693308][T10637] Call Trace: [ 509.693317][T10637] [ 509.693326][T10637] dump_stack_lvl+0x241/0x360 [ 509.693364][T10637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.693395][T10637] ? __pfx__printk+0x10/0x10 [ 509.693428][T10637] ? __pfx___might_resched+0x10/0x10 [ 509.693465][T10637] should_fail_ex+0x424/0x570 [ 509.693494][T10637] should_failslab+0xac/0x100 [ 509.693517][T10637] __kmalloc_cache_noprof+0x73/0x370 [ 509.693539][T10637] ? alloc_fs_context+0x63/0x800 [ 509.693569][T10637] alloc_fs_context+0x63/0x800 [ 509.693594][T10637] ? do_raw_read_unlock+0x3c/0x80 [ 509.693623][T10637] ? _raw_read_unlock+0x28/0x50 [ 509.693644][T10637] ? get_fs_type+0x3fd/0x480 [ 509.693675][T10637] do_new_mount+0x160/0xb70 [ 509.693705][T10637] ? __pfx_do_new_mount+0x10/0x10 [ 509.693741][T10637] __se_sys_mount+0x38c/0x400 [ 509.693772][T10637] ? __pfx___se_sys_mount+0x10/0x10 [ 509.693804][T10637] ? __x64_sys_mount+0x20/0xc0 [ 509.693831][T10637] do_syscall_64+0xf3/0x230 [ 509.693856][T10637] ? clear_bhb_loop+0x45/0xa0 [ 509.693882][T10637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.693903][T10637] RIP: 0033:0x7f05e258d169 [ 509.693922][T10637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.693940][T10637] RSP: 002b:00007f05e343c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 509.693963][T10637] RAX: ffffffffffffffda RBX: 00007f05e27a5fa0 RCX: 00007f05e258d169 [ 509.693979][T10637] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 509.693993][T10637] RBP: 00007f05e343c090 R08: 0000200000000400 R09: 0000000000000000 [ 509.694007][T10637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.694020][T10637] R13: 0000000000000000 R14: 00007f05e27a5fa0 R15: 00007fff6d21a028 [ 509.694054][T10637] [ 509.958549][T10638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1280'. [ 510.314547][T10641] smb3: Unknown parameter 'nolazytimw' [ 511.064723][ T5880] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 511.238797][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 511.247933][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 511.266509][ T5880] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 511.279201][T10657] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 511.282618][ T5880] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.303146][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.310479][T10657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.648959][T10659] smb3: Unknown parameter 'nolazytimw' [ 511.986073][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.995966][ T5880] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.006989][ T5880] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.020109][ T5880] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.029247][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.099161][T10657] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 512.263714][ T5880] usb 1-1: GET_CAPABILITIES returned 0 [ 512.273716][ T5880] usbtmc 1-1:16.0: can't read capabilities [ 512.855770][T10672] kvm: kvm [10663]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 512.872405][ T5830] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 514.672297][T10681] kvm: kvm [10662]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 514.683283][ T5830] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 514.765259][ T5880] usb 1-1: USB disconnect, device number 46 [ 516.379588][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 516.430014][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 516.534865][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 518.093879][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 521.223598][T10758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 522.961187][ T30] audit: type=1326 audit(1744102414.324:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10754 comm="syz.3.1315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faabfd8d169 code=0x0 [ 523.424757][ T5910] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 523.716505][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 523.873343][ T5910] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 524.097343][ T5910] usb 1-1: config 0 has no interface number 0 [ 524.106898][ T5910] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 524.116115][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.124136][ T5910] usb 1-1: Product: syz [ 524.128400][ T5910] usb 1-1: Manufacturer: syz [ 524.133110][ T5910] usb 1-1: SerialNumber: syz [ 524.181338][ T5910] usb 1-1: config 0 descriptor?? [ 524.223930][ T5910] smsc95xx v2.0.0 [ 524.887891][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 525.314588][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 525.504796][T10779] lo speed is unknown, defaulting to 1000 [ 525.819381][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 525.830605][ T5910] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 525.900721][ T5910] usb 1-1: USB disconnect, device number 47 [ 527.568513][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 527.752282][T10783] lo speed is unknown, defaulting to 1000 [ 529.350690][T10817] delete_channel: no stack [ 531.904635][ T5936] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 533.133535][ T5936] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 533.214544][ T5936] usb 2-1: config 0 has no interface number 0 [ 533.253916][ T5936] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 533.521977][ T5936] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 533.554673][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.562858][ T5936] usb 2-1: Product: syz [ 533.585322][ T5936] usb 2-1: Manufacturer: syz [ 533.594571][ T5936] usb 2-1: SerialNumber: syz [ 533.639742][ T5936] usb 2-1: config 0 descriptor?? [ 533.662865][T10837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 534.114712][T10855] lo speed is unknown, defaulting to 1000 [ 534.130464][ T5936] kvaser_usb 2-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 534.319440][ T5936] usb 2-1: USB disconnect, device number 32 [ 534.459970][T10858] delete_channel: no stack [ 535.158350][T10875] input: syz1 as /devices/virtual/input/input14 [ 536.052805][T10882] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 536.054016][T10880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.076541][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 536.723875][ T30] audit: type=1326 audit(1744102428.634:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.3.1353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faabfd8d169 code=0x0 [ 536.932637][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 537.289132][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 537.301825][ T24] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.326379][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 537.344428][ T24] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 537.354230][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=18 [ 537.384911][ T24] usb 2-1: SerialNumber: syz [ 537.407134][ T24] usb 2-1: config 0 descriptor?? [ 537.469514][T10899] FAULT_INJECTION: forcing a failure. [ 537.469514][T10899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.502218][T10899] CPU: 1 UID: 0 PID: 10899 Comm: syz.2.1357 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 537.502256][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 537.502269][T10899] Call Trace: [ 537.502279][T10899] [ 537.502288][T10899] dump_stack_lvl+0x241/0x360 [ 537.502327][T10899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.502356][T10899] ? __pfx__printk+0x10/0x10 [ 537.502398][T10899] should_fail_ex+0x424/0x570 [ 537.502427][T10899] _copy_from_user+0x2d/0xb0 [ 537.502458][T10899] ____sys_sendmsg+0x324/0x860 [ 537.502492][T10899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.502513][T10899] ? __fget_files+0x2a/0x420 [ 537.502541][T10899] ? __fget_files+0x2a/0x420 [ 537.502575][T10899] __sys_sendmsg+0x271/0x360 [ 537.502610][T10899] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.502693][T10899] ? do_syscall_64+0xb6/0x230 [ 537.502721][T10899] do_syscall_64+0xf3/0x230 [ 537.502748][T10899] ? clear_bhb_loop+0x45/0xa0 [ 537.502774][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.502794][T10899] RIP: 0033:0x7f639558d169 [ 537.502814][T10899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.502833][T10899] RSP: 002b:00007f63964c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.502856][T10899] RAX: ffffffffffffffda RBX: 00007f63957a5fa0 RCX: 00007f639558d169 [ 537.502872][T10899] RDX: 0000000000000004 RSI: 0000200000000600 RDI: 0000000000000003 [ 537.502886][T10899] RBP: 00007f63964c9090 R08: 0000000000000000 R09: 0000000000000000 [ 537.502899][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.502911][T10899] R13: 0000000000000000 R14: 00007f63957a5fa0 R15: 00007ffcf6361488 [ 537.502945][T10899] [ 537.805099][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 537.811212][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 537.821065][ T24] usb 2-1: USB disconnect, device number 33 [ 538.104667][ T882] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 538.267832][ T882] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.284406][ T882] usb 3-1: config 0 has no interface number 0 [ 538.309866][ T882] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.340397][ T882] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.378340][ T882] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 538.422132][ T882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.687103][ T882] usb 3-1: config 0 descriptor?? [ 539.105108][T10924] netlink: 'syz.1.1364': attribute type 7 has an invalid length. [ 539.115766][T10924] netlink: 'syz.1.1364': attribute type 5 has an invalid length. [ 539.124326][T10924] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1364'. [ 539.281126][T10926] netlink: 'syz.1.1365': attribute type 23 has an invalid length. [ 539.291657][ T882] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 539.306936][ T882] hid_prodikeys: hid-prodikeys: failed to find output report [ 539.306936][ T882] [ 539.823980][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.842612][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.921603][ T24] usb 3-1: USB disconnect, device number 32 [ 540.186640][T10939] FAULT_INJECTION: forcing a failure. [ 540.186640][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 540.220906][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.3.1367 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 540.220940][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 540.220953][T10939] Call Trace: [ 540.220961][T10939] [ 540.220972][T10939] dump_stack_lvl+0x241/0x360 [ 540.221001][T10939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.221022][T10939] ? __pfx__printk+0x10/0x10 [ 540.221045][T10939] ? __pfx___might_resched+0x10/0x10 [ 540.221067][T10939] should_fail_ex+0x424/0x570 [ 540.221087][T10939] should_failslab+0xac/0x100 [ 540.221104][T10939] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 540.221120][T10939] ? __d_alloc+0x31/0x740 [ 540.221143][T10939] __d_alloc+0x31/0x740 [ 540.221167][T10939] d_alloc_pseudo+0x1f/0xb0 [ 540.221187][T10939] alloc_file_pseudo+0x143/0x320 [ 540.221210][T10939] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 540.221229][T10939] ? security_inode_alloc+0xd2/0x310 [ 540.221254][T10939] sock_alloc_file+0xb7/0x2e0 [ 540.221277][T10939] do_accept+0x374/0x700 [ 540.221303][T10939] ? __pfx_do_accept+0x10/0x10 [ 540.221342][T10939] __sys_accept4+0x121/0x1d0 [ 540.221366][T10939] ? __pfx___sys_accept4+0x10/0x10 [ 540.221396][T10939] __x64_sys_accept4+0x9a/0xb0 [ 540.221419][T10939] do_syscall_64+0xf3/0x230 [ 540.221438][T10939] ? clear_bhb_loop+0x45/0xa0 [ 540.221456][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.221470][T10939] RIP: 0033:0x7faabfd8d169 [ 540.221483][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.221496][T10939] RSP: 002b:00007faac0be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 540.221512][T10939] RAX: ffffffffffffffda RBX: 00007faabffa6080 RCX: 00007faabfd8d169 [ 540.221523][T10939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 540.221532][T10939] RBP: 00007faac0be7090 R08: 0000000000000000 R09: 0000000000000000 [ 540.221541][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.221550][T10939] R13: 0000000000000000 R14: 00007faabffa6080 R15: 00007ffdd59a79f8 [ 540.221573][T10939] [ 540.222308][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 540.329490][T10940] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 540.457904][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.465248][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.497929][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.505135][T10940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.512575][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.519738][T10940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.048247][T10940] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 541.129379][T10946] tipc: Failed to obtain node identity [ 541.141618][T10946] tipc: Enabling of bearer rejected, failed to enable media [ 541.595041][T10951] smb3: Unknown parameter 'nolazytimw' [ 542.911997][T10957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.018293][T10957] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 543.070635][T10957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 543.077854][T10957] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 543.117248][T10957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 543.146292][T10957] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 543.186805][T10957] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 543.210867][T10957] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 543.271334][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 543.524919][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 544.955019][ T5881] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 545.406364][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 545.458811][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.474728][ T5881] usb 5-1: config 0 has no interfaces? [ 545.480395][ T5881] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 545.489657][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.517948][ T5881] usb 5-1: config 0 descriptor?? [ 545.788879][T10982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.481729][ T882] usb 5-1: USB disconnect, device number 33 [ 547.511297][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'. [ 548.295259][T11013] xt_hashlimit: size too large, truncated to 1048576 [ 548.327957][T11013] SET target dimension over the limit! [ 548.431525][T11014] smb3: Unknown parameter 'nolazytimw' [ 550.764740][ T882] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 551.538213][T11051] smb3: Unknown parameter 'nolazytimw' [ 551.906700][ T882] usb 4-1: Using ep0 maxpacket: 8 [ 551.914449][ T882] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 551.928341][ T882] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.320671][ T882] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.330528][ T882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.364049][ T882] usbtmc 4-1:16.0: bulk endpoints not found [ 553.268255][T11073] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 555.115360][ T882] usb 4-1: USB disconnect, device number 27 [ 559.090203][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'. [ 559.186776][T11122] netlink: 'syz.2.1414': attribute type 10 has an invalid length. [ 559.372033][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.196367][T11122] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.203577][T11122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.291815][T11122] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 560.474070][T11122] syz.2.1414 (11122) used greatest stack depth: 18232 bytes left [ 562.957709][T11138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.139883][T11138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.987775][T11154] program syz.0.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.082880][T11154] overlay: Unknown parameter 'dont_hash' [ 564.554201][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 564.575534][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.623535][T11178] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 564.643494][T11173] bridge_slave_1 (unregistering): left allmulticast mode [ 564.652478][T11173] bridge_slave_1 (unregistering): left promiscuous mode [ 564.657036][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 564.659909][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.696657][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.708720][T11170] netlink: 'syz.0.1429': attribute type 10 has an invalid length. [ 565.335246][T11188] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 566.284983][ T30] audit: type=1107 audit(1744102457.944:163): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 566.844282][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.149928][T11203] FAULT_INJECTION: forcing a failure. [ 567.149928][T11203] name failslab, interval 1, probability 0, space 0, times 0 [ 567.205651][T11203] CPU: 1 UID: 0 PID: 11203 Comm: syz.2.1437 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 567.205685][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 567.205699][T11203] Call Trace: [ 567.205707][T11203] [ 567.205716][T11203] dump_stack_lvl+0x241/0x360 [ 567.205754][T11203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.205782][T11203] ? __pfx__printk+0x10/0x10 [ 567.205806][T11203] ? __mutex_unlock_slowpath+0x229/0x800 [ 567.205835][T11203] ? __pfx___might_resched+0x10/0x10 [ 567.205862][T11203] should_fail_ex+0x424/0x570 [ 567.205898][T11203] should_failslab+0xac/0x100 [ 567.205923][T11203] __kmalloc_noprof+0xdf/0x4d0 [ 567.205943][T11203] ? __list_lru_init+0xab/0x5d0 [ 567.205980][T11203] __list_lru_init+0xab/0x5d0 [ 567.206019][T11203] alloc_super+0x839/0x9d0 [ 567.206055][T11203] sget_fc+0x34c/0xa50 [ 567.206086][T11203] ? __pfx_set_anon_super_fc+0x10/0x10 [ 567.206115][T11203] ? __pfx_shmem_fill_super+0x10/0x10 [ 567.206144][T11203] get_tree_nodev+0x2a/0x140 [ 567.206176][T11203] vfs_get_tree+0x90/0x2b0 [ 567.206211][T11203] do_new_mount+0x2cf/0xb70 [ 567.206242][T11203] ? __pfx_do_new_mount+0x10/0x10 [ 567.206277][T11203] __se_sys_mount+0x38c/0x400 [ 567.206308][T11203] ? __pfx___se_sys_mount+0x10/0x10 [ 567.206341][T11203] ? __x64_sys_mount+0x20/0xc0 [ 567.206367][T11203] do_syscall_64+0xf3/0x230 [ 567.206392][T11203] ? clear_bhb_loop+0x45/0xa0 [ 567.206418][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.206440][T11203] RIP: 0033:0x7f639558d169 [ 567.206459][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.206477][T11203] RSP: 002b:00007f63964c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 567.206500][T11203] RAX: ffffffffffffffda RBX: 00007f63957a5fa0 RCX: 00007f639558d169 [ 567.206516][T11203] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 567.206530][T11203] RBP: 00007f63964c9090 R08: 00002000000000c0 R09: 0000000000000000 [ 567.206544][T11203] R10: 0000000001000040 R11: 0000000000000246 R12: 0000000000000002 [ 567.206557][T11203] R13: 0000000000000001 R14: 00007f63957a5fa0 R15: 00007ffcf6361488 [ 567.206592][T11203] [ 567.209122][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'. [ 567.465981][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1439'. [ 567.475077][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 567.687021][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 567.707710][T11218] netlink: 'syz.4.1441': attribute type 10 has an invalid length. [ 568.861238][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.884596][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.977260][T11250] @: renamed from veth1_to_batadv (while UP) [ 572.376732][T11256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1452'. [ 572.676838][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 572.687769][T11263] netlink: 'syz.4.1453': attribute type 10 has an invalid length. [ 574.147727][T11274] netfs: Couldn't get user pages (rc=-14) [ 574.355336][ T5910] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 574.514643][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 574.524862][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 574.538679][ T5910] usb 3-1: config 2 has an invalid interface number: 112 but max is 0 [ 574.550166][ T5910] usb 3-1: config 2 has no interface number 0 [ 574.558893][ T5910] usb 3-1: config 2 interface 112 has no altsetting 0 [ 574.570486][ T5910] usb 3-1: New USB device found, idVendor=0557, idProduct=2011, bcdDevice=7c.1c [ 574.588423][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.596690][ T5910] usb 3-1: Product: syz [ 575.074670][ T5910] usb 3-1: Manufacturer: syz [ 575.094615][ T5910] usb 3-1: SerialNumber: syz [ 575.326496][ T5910] mos7840 3-1:2.112: required endpoints missing [ 575.350518][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 575.386702][T11292] netlink: 'syz.4.1464': attribute type 10 has an invalid length. [ 575.434951][ T5910] usb 3-1: USB disconnect, device number 33 [ 575.819201][T11299] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 577.051484][ T30] audit: type=1326 audit(1744102468.804:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11303 comm="syz.4.1468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4730f8d169 code=0x0 [ 577.618707][ T5910] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 578.313225][T11324] Invalid logical block size (-905969665) [ 578.466493][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 578.510054][T11329] netlink: 'syz.2.1474': attribute type 10 has an invalid length. [ 578.519497][T11329] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.714059][ T5910] usb 1-1: device descriptor read/64, error -71 [ 578.954800][ T5910] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 579.427244][ T49] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 579.652813][ T5910] usb 1-1: device descriptor read/64, error -71 [ 579.674865][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 579.695805][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.711866][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.721788][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 579.742431][ T49] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 579.752011][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.780150][ T49] usb 3-1: config 0 descriptor?? [ 579.814849][ T5910] usb usb1-port1: attempt power cycle [ 580.594682][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 580.600851][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 580.611625][ T49] usb 3-1: USB disconnect, device number 34 [ 581.312413][ T30] audit: type=1326 audit(1744102473.214:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11347 comm="syz.0.1480" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05e258d169 code=0x0 [ 582.031409][T11354] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128) [ 586.104594][ T5910] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 586.304619][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.324743][ T5910] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 586.374643][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.794899][ T5910] usb 3-1: config 0 descriptor?? [ 586.802776][ T5910] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 587.114615][ T5821] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 587.207824][ T5878] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 587.268715][ T5821] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 587.277962][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.289049][ T5821] usb 1-1: config 0 descriptor?? [ 587.370150][ T5878] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 587.379438][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.387587][ T5878] usb 5-1: Product: syz [ 587.391832][ T5878] usb 5-1: Manufacturer: syz [ 587.396553][ T5878] usb 5-1: SerialNumber: syz [ 587.403916][ T5878] usb 5-1: config 0 descriptor?? [ 587.502467][ T30] audit: type=1326 audit(1744102479.414:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.1498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x0 [ 587.634729][T11128] usb 5-1: USB disconnect, device number 34 [ 587.689660][T11416] netlink: 'syz.0.1498': attribute type 4 has an invalid length. [ 588.215099][ T5910] pwc: send_video_command error -71 [ 588.220719][ T5910] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 588.228697][ T5910] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 588.240960][ T5910] usb 3-1: USB disconnect, device number 35 [ 588.418924][T11418] tipc: New replicast peer: 255.255.255.255 [ 588.425942][T11418] tipc: Enabled bearer , priority 10 [ 588.911669][T11428] FAULT_INJECTION: forcing a failure. [ 588.911669][T11428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.925204][T11428] CPU: 1 UID: 0 PID: 11428 Comm: syz.4.1504 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 588.925232][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 588.925246][T11428] Call Trace: [ 588.925255][T11428] [ 588.925264][T11428] dump_stack_lvl+0x241/0x360 [ 588.925304][T11428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.925333][T11428] ? __pfx__printk+0x10/0x10 [ 588.925376][T11428] should_fail_ex+0x424/0x570 [ 588.925404][T11428] _copy_from_iter+0x211/0x1c70 [ 588.925440][T11428] ? __build_skb_around+0x247/0x3d0 [ 588.925476][T11428] ? __alloc_skb+0x298/0x480 [ 588.925508][T11428] ? __pfx__copy_from_iter+0x10/0x10 [ 588.925538][T11428] ? __pfx___alloc_skb+0x10/0x10 [ 588.925574][T11428] ? skb_put+0x114/0x1f0 [ 588.925599][T11428] netlink_sendmsg+0x73c/0xcd0 [ 588.925645][T11428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.925689][T11428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.925718][T11428] __sock_sendmsg+0x221/0x270 [ 588.925750][T11428] ____sys_sendmsg+0x523/0x860 [ 588.925783][T11428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.925803][T11428] ? __fget_files+0x2a/0x420 [ 588.925833][T11428] ? __fget_files+0x2a/0x420 [ 588.925868][T11428] __sys_sendmsg+0x271/0x360 [ 588.925897][T11428] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.925981][T11428] ? do_syscall_64+0xb6/0x230 [ 588.926011][T11428] do_syscall_64+0xf3/0x230 [ 588.926038][T11428] ? clear_bhb_loop+0x45/0xa0 [ 588.926063][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.926085][T11428] RIP: 0033:0x7f4730f8d169 [ 588.926105][T11428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.926123][T11428] RSP: 002b:00007f4731df2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.926156][T11428] RAX: ffffffffffffffda RBX: 00007f47311a5fa0 RCX: 00007f4730f8d169 [ 588.926171][T11428] RDX: 0000000000008080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 588.926185][T11428] RBP: 00007f4731df2090 R08: 0000000000000000 R09: 0000000000000000 [ 588.926199][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.926212][T11428] R13: 0000000000000000 R14: 00007f47311a5fa0 R15: 00007fff3a830f58 [ 588.926246][T11428] [ 589.831938][T11437] x_tables: duplicate entry at hook 2 [ 590.671937][ T5821] usb 1-1: Cannot read MAC address [ 590.688225][ T5821] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 590.713036][ T5821] usb 1-1: USB disconnect, device number 51 [ 590.735476][T11439] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 591.884078][T11453] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 591.896487][T11453] netlink: 'syz.4.1513': attribute type 10 has an invalid length. [ 591.904956][T11453] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 593.451978][T11470] smb3: Unknown parameter 'nolazytimw' [ 594.945690][ T30] audit: type=1326 audit(1744102486.504:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11474 comm="syz.2.1518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f639558d169 code=0x0 [ 595.419560][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1521'. [ 595.723291][ T30] audit: type=1326 audit(1744102487.634:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11489 comm="syz.2.1522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639558d169 code=0x0 [ 597.156743][ T49] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 597.497726][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 598.292886][T11512] smb3: Unknown parameter 'nolazytimw' [ 598.308900][ T49] usb 5-1: config 1 interface 0 has no altsetting 0 [ 598.318676][ T49] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.40 [ 598.330062][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.339055][ T49] usb 5-1: Product: syz [ 598.343946][ T49] usb 5-1: Manufacturer: syz [ 598.348985][ T49] usb 5-1: SerialNumber: syz [ 598.590472][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 598.750068][T11497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.782172][T11497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.836014][ T49] usbhid 5-1:1.0: can't add hid device: -71 [ 598.842098][ T49] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 598.873856][ T49] usb 5-1: USB disconnect, device number 35 [ 600.497917][ T5878] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 600.929117][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 600.938521][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 601.543175][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.552622][ T5878] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.662916][ T5878] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.824583][ T5878] usb 1-1: config 1 interface 0 has no altsetting 0 [ 601.845654][ T5878] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 601.867766][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.150786][ T5878] usb 1-1: Product: syz [ 602.155085][ T5878] usb 1-1: Manufacturer: syz [ 602.159745][ T5878] usb 1-1: SerialNumber: syz [ 602.226421][ T5878] usb 1-1: can't set config #1, error -71 [ 602.234058][ T5878] usb 1-1: USB disconnect, device number 52 [ 602.716415][T11551] smb3: Unknown parameter 'nolazytimw' [ 604.342100][T11568] smb3: Unknown parameter 'nolazytimw' [ 606.367360][T11595] smb3: Unknown parameter 'nolazytimw' [ 607.582349][T11603] tipc: Started in network mode [ 607.587457][T11603] tipc: Node identity 4, cluster identity 4711 [ 607.593651][T11603] tipc: Node number set to 4 [ 607.948296][T11614] netlink: 'syz.4.1559': attribute type 9 has an invalid length. [ 607.967256][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 607.989091][T11614] macvlan3: entered promiscuous mode [ 608.000327][T11614] macvlan3: entered allmulticast mode [ 608.068923][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 608.090987][T11620] netlink: 'syz.2.1560': attribute type 10 has an invalid length. [ 609.309696][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.322514][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.369693][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 609.445068][ T49] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 609.560859][T11645] xt_hashlimit: size too large, truncated to 1048576 [ 609.997495][T11645] xt_CT: No such helper "pptp" [ 610.095049][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 610.106799][ T49] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 610.124558][ T49] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 610.135314][ T49] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 610.146298][ T49] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.159411][ T49] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.170200][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.191792][ T49] usbtmc 5-1:16.0: bulk endpoints not found [ 611.519730][T11653] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 613.099669][ T5910] usb 5-1: USB disconnect, device number 36 [ 614.871086][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1575'. [ 615.082269][T11681] x_tables: unsorted entry at hook 2 [ 615.098246][T11681] x_tables: unsorted entry at hook 2 [ 615.113261][T11681] x_tables: unsorted entry at hook 2 [ 615.128009][T11681] x_tables: unsorted entry at hook 2 [ 615.151798][T11681] x_tables: unsorted entry at hook 2 [ 615.514972][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 615.664726][T11693] netlink: 'syz.0.1577': attribute type 10 has an invalid length. [ 616.196301][T11699] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1580'. [ 616.212232][ T30] audit: type=1326 audit(1744102508.124:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.235085][T11699] syz.0.1580 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 616.268458][ T30] audit: type=1326 audit(1744102508.154:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.321003][ T30] audit: type=1326 audit(1744102508.174:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.364427][ T30] audit: type=1326 audit(1744102508.174:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.386680][ T30] audit: type=1326 audit(1744102508.174:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.408860][ T30] audit: type=1326 audit(1744102508.174:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.431996][ T30] audit: type=1326 audit(1744102508.174:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.472104][ T30] audit: type=1326 audit(1744102508.174:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.740865][ T30] audit: type=1326 audit(1744102508.174:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 616.782609][T11703] FAULT_INJECTION: forcing a failure. [ 616.782609][T11703] name failslab, interval 1, probability 0, space 0, times 0 [ 616.901962][T11703] CPU: 1 UID: 0 PID: 11703 Comm: syz.0.1581 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 616.902000][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 616.902013][T11703] Call Trace: [ 616.902022][T11703] [ 616.902031][T11703] dump_stack_lvl+0x241/0x360 [ 616.902071][T11703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.902101][T11703] ? __pfx__printk+0x10/0x10 [ 616.902135][T11703] ? __pfx___might_resched+0x10/0x10 [ 616.902164][T11703] should_fail_ex+0x424/0x570 [ 616.902193][T11703] should_failslab+0xac/0x100 [ 616.902217][T11703] __kmalloc_cache_noprof+0x73/0x370 [ 616.902239][T11703] ? shrinker_alloc+0x57/0xab0 [ 616.902269][T11703] ? pcpu_alloc_noprof+0xfa9/0x1740 [ 616.902319][T11703] shrinker_alloc+0x57/0xab0 [ 616.902358][T11703] ? __raw_spin_lock_init+0x45/0x100 [ 616.902395][T11703] alloc_super+0x6c0/0x9d0 [ 616.902431][T11703] sget_fc+0x34c/0xa50 [ 616.902461][T11703] ? __pfx_set_anon_super_fc+0x10/0x10 [ 616.902490][T11703] ? __pfx_ovl_fill_super+0x10/0x10 [ 616.902512][T11703] get_tree_nodev+0x2a/0x140 [ 616.902545][T11703] vfs_get_tree+0x90/0x2b0 [ 616.902580][T11703] do_new_mount+0x2cf/0xb70 [ 616.902611][T11703] ? __pfx_do_new_mount+0x10/0x10 [ 616.902635][T11703] ? __se_sys_mount+0x36d/0x400 [ 616.902668][T11703] __se_sys_mount+0x38c/0x400 [ 616.902699][T11703] ? __pfx___se_sys_mount+0x10/0x10 [ 616.902731][T11703] ? __x64_sys_mount+0x20/0xc0 [ 616.902758][T11703] do_syscall_64+0xf3/0x230 [ 616.902784][T11703] ? clear_bhb_loop+0x45/0xa0 [ 616.902810][T11703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.902831][T11703] RIP: 0033:0x7f05e258d169 [ 616.902849][T11703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.902868][T11703] RSP: 002b:00007f05e343c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.902891][T11703] RAX: ffffffffffffffda RBX: 00007f05e27a5fa0 RCX: 00007f05e258d169 [ 616.902908][T11703] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 616.902922][T11703] RBP: 00007f05e343c090 R08: 0000200000000740 R09: 0000000000000000 [ 616.902937][T11703] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 616.902950][T11703] R13: 0000000000000000 R14: 00007f05e27a5fa0 R15: 00007fff6d21a028 [ 616.902984][T11703] [ 617.149749][ T30] audit: type=1326 audit(1744102508.174:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11698 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 617.258908][T11707] loop2: detected capacity change from 0 to 7 [ 617.268642][T11707] Dev loop2: unable to read RDB block 7 [ 617.274268][T11707] loop2: AHDI p1 p2 [ 617.278810][T11707] loop2: partition table partially beyond EOD, truncated [ 617.286896][T11707] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 617.324771][T11128] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 617.564654][T11128] usb 5-1: Using ep0 maxpacket: 8 [ 617.575208][T11128] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 617.590958][T11128] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 617.613377][T11128] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 617.624029][T11128] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 617.635434][T11128] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.649009][T11128] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 617.662102][T11128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.778430][T11128] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 617.813425][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 618.064554][ T5878] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 618.214690][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 618.221646][ T5878] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.232145][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.249448][ T5878] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.258727][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.267056][ T5878] usb 1-1: Product: syz [ 618.271261][ T5878] usb 1-1: Manufacturer: syz [ 618.276003][ T5878] usb 1-1: SerialNumber: syz [ 618.487814][ T5878] usb 1-1: 0:2 : does not exist [ 618.501068][ T5878] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 618.527999][ T5878] usb 1-1: USB disconnect, device number 53 [ 618.675458][ T5910] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 618.807364][ T5910] usb 3-1: device descriptor read/64, error -71 [ 619.198981][ T5910] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 619.828066][ T5910] usb 3-1: device descriptor read/64, error -71 [ 619.872291][ T5878] usb 5-1: USB disconnect, device number 37 [ 619.935754][ T5910] usb usb3-port1: attempt power cycle [ 620.594607][ T5910] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 620.616206][ T5910] usb 3-1: device descriptor read/8, error -71 [ 620.914611][ T5910] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 621.112459][ T5910] usb 3-1: device descriptor read/8, error -71 [ 621.356560][ T5910] usb usb3-port1: unable to enumerate USB device [ 621.588001][T11745] vlan0: entered promiscuous mode [ 623.814733][ T5821] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 623.974602][ T5821] usb 1-1: Using ep0 maxpacket: 8 [ 624.486479][ T5821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 624.499380][ T5821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 624.509779][ T5821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 624.520168][ T5821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 624.554042][ T5821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.605401][ T5821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 624.614711][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.658408][ T5821] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 625.905719][T11774] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 625.918913][T11774] netlink: 'syz.4.1607': attribute type 10 has an invalid length. [ 625.927827][T11774] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 626.796395][ T5821] usb 1-1: USB disconnect, device number 54 [ 627.130692][T11787] smb3: Unknown parameter 'nolazytimw' [ 627.878932][T11800] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1614'. [ 628.599886][T11801] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 628.611846][T11801] xt_bpf: check failed: parse error [ 629.406010][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1617'. [ 629.426421][T11814] netlink: 'syz.4.1617': attribute type 10 has an invalid length. [ 629.772881][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.808236][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.456351][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 631.456371][ T30] audit: type=1326 audit(1744102523.374:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11839 comm="syz.2.1624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f639558d169 code=0x0 [ 632.962125][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 632.988175][T11860] netlink: 'syz.4.1629': attribute type 10 has an invalid length. [ 635.162034][T11882] ip6tnl2: entered promiscuous mode [ 635.167903][T11882] ip6tnl2: entered allmulticast mode [ 635.174985][T11882] team0: Device ip6tnl2 is of different type [ 635.654904][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 635.885139][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 636.041169][ T24] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 636.226394][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.247971][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.264831][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.272902][ T24] usb 5-1: Product: syz [ 636.289686][ T24] usb 5-1: Manufacturer: syz [ 636.294350][ T24] usb 5-1: SerialNumber: syz [ 636.444589][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 636.456326][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 636.527500][ T24] usb 5-1: invalid UAC_HEADER (v1) [ 636.908128][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 636.917644][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 636.954067][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 636.971702][ T24] usb 5-1: USB disconnect, device number 38 [ 637.022071][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 637.032880][T11902] netlink: 'syz.0.1638': attribute type 10 has an invalid length. [ 637.041965][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 637.066545][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 637.245760][T11911] xt_bpf: check failed: parse error [ 637.648935][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1644'. [ 638.277578][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1646'. [ 638.509434][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 638.670705][T11936] netlink: 'syz.2.1647': attribute type 10 has an invalid length. [ 639.561425][T11970] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128) [ 640.916768][ T5878] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 641.024914][T11989] kvm: kvm [11983]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x1000004 [ 642.056497][ T5878] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 642.079216][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.090913][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.100829][ T5878] usb 5-1: New USB device found, idVendor=0478, idProduct=c222, bcdDevice= 0.00 [ 642.342559][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.359164][ T5878] usb 5-1: config 0 descriptor?? [ 643.318114][ T30] audit: type=1326 audit(1744102535.234:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.463206][ T30] audit: type=1326 audit(1744102535.234:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.485984][ T30] audit: type=1326 audit(1744102535.254:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.489802][ T5878] usbhid 5-1:0.0: can't add hid device: -71 [ 643.507662][ T30] audit: type=1326 audit(1744102535.254:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.507719][ T30] audit: type=1326 audit(1744102535.254:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.507764][ T30] audit: type=1326 audit(1744102535.264:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.507816][ T30] audit: type=1326 audit(1744102535.264:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.507859][ T30] audit: type=1326 audit(1744102535.264:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.507904][ T30] audit: type=1326 audit(1744102535.264:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.507949][ T30] audit: type=1326 audit(1744102535.264:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e258d169 code=0x7ffc0000 [ 643.545891][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 643.680855][T12008] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 643.693689][T12008] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 643.743726][ T5878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 643.758325][ T5878] usb 5-1: USB disconnect, device number 39 [ 644.465935][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 645.530477][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 645.975046][ T6839] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 646.270613][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.289042][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.299826][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.309379][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 646.320759][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 646.336502][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.346040][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.354050][ T10] usb 3-1: Product: syz [ 646.358087][ T6839] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 646.358588][ T10] usb 3-1: Manufacturer: syz [ 646.369861][ T6839] usb 1-1: can't read configurations, error -61 [ 646.376702][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 646.376725][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 646.378727][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 646.394274][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 646.514701][ T6839] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 646.668597][ T6839] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 646.676843][ T6839] usb 1-1: can't read configurations, error -61 [ 646.686671][ T6839] usb usb1-port1: attempt power cycle [ 647.045233][ T6839] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 647.068357][ T6839] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 647.076559][ T6839] usb 1-1: can't read configurations, error -61 [ 647.214847][ T6839] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 647.237225][ T6839] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 647.245452][ T6839] usb 1-1: can't read configurations, error -61 [ 647.252125][ T6839] usb usb1-port1: unable to enumerate USB device [ 648.247347][ T5878] usb 3-1: USB disconnect, device number 40 [ 648.315484][T12044] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1672'. [ 649.603800][T12054] smb3: Unknown parameter 'nolazytimw' [ 649.636615][T12051] smb3: Unknown parameter 'nolazytimw' [ 650.439551][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 691.209739][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.216238][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.894939][ T31] INFO: task kworker/1:3:5880 blocked for more than 143 seconds. [ 698.902709][ T31] Not tainted 6.15.0-rc1-syzkaller #0 [ 698.908729][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.917555][ T31] task:kworker/1:3 state:D stack:19792 pid:5880 tgid:5880 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 698.930108][ T31] Workqueue: events rfkill_sync_work [ 698.937255][ T31] Call Trace: [ 698.940585][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 698.943540][ T31] __schedule+0x1b33/0x51f0 [ 698.948192][ T31] ? do_raw_spin_lock+0xb0/0x370 [ 698.953188][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 698.958986][ T31] ? schedule+0x163/0x360 [ 698.963368][ T31] ? __pfx___schedule+0x10/0x10 [ 698.968380][ T31] ? schedule+0x90/0x360 [ 698.972667][ T31] ? schedule+0x90/0x360 [ 698.977003][ T31] schedule+0x163/0x360 [ 698.981204][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 698.986478][ T31] schedule_preempt_disabled+0x13/0x30 [ 698.994208][ T31] __mutex_lock+0x805/0x10c0 [ 699.014882][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 699.019759][ T31] ? nfc_rfkill_set_block+0x50/0x310 [ 699.061030][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.067082][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 699.073093][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 699.082630][ T31] ? __lock_acquire+0xad5/0xd80 [ 699.087610][ T31] nfc_rfkill_set_block+0x50/0x310 [ 699.092784][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 699.098690][ T31] rfkill_set_block+0x1f1/0x440 [ 699.103575][ T31] rfkill_sync_work+0x12c/0x220 [ 699.108704][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 699.114476][ T31] process_scheduled_works+0xac3/0x18e0 [ 699.120066][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.126164][ T31] ? assign_work+0x367/0x3d0 [ 699.130773][ T31] worker_thread+0x870/0xd50 [ 699.135861][ T31] ? __kthread_parkme+0x1a8/0x200 [ 699.140974][ T31] ? __pfx_worker_thread+0x10/0x10 [ 699.146138][ T31] kthread+0x7b7/0x940 [ 699.150256][ T31] ? __pfx_worker_thread+0x10/0x10 [ 699.155489][ T31] ? __pfx_kthread+0x10/0x10 [ 699.160144][ T31] ? __pfx_kthread+0x10/0x10 [ 699.165116][ T31] ? __pfx_kthread+0x10/0x10 [ 699.169745][ T31] ? __pfx_kthread+0x10/0x10 [ 699.174376][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.179666][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 699.184978][ T31] ? __pfx_kthread+0x10/0x10 [ 699.189612][ T31] ret_from_fork+0x4b/0x80 [ 699.194059][ T31] ? __pfx_kthread+0x10/0x10 [ 699.198933][ T31] ret_from_fork_asm+0x1a/0x30 [ 699.203749][ T31] [ 699.207604][ T31] INFO: task kworker/1:4:5881 blocked for more than 143 seconds. [ 699.215771][ T31] Not tainted 6.15.0-rc1-syzkaller #0 [ 699.221792][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.230713][ T31] task:kworker/1:4 state:D stack:21400 pid:5881 tgid:5881 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 699.242766][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 699.249511][ T31] Call Trace: [ 699.252798][ T31] [ 699.256078][ T31] __schedule+0x1b33/0x51f0 [ 699.260634][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 699.265930][ T31] ? schedule+0x163/0x360 [ 699.270273][ T31] ? __pfx___schedule+0x10/0x10 [ 699.275235][ T31] ? schedule+0x90/0x360 [ 699.279501][ T31] ? schedule+0x90/0x360 [ 699.283764][ T31] schedule+0x163/0x360 [ 699.288290][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 699.293070][ T31] schedule_preempt_disabled+0x13/0x30 [ 699.298585][ T31] __mutex_lock+0x805/0x10c0 [ 699.303229][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 699.308079][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 699.314358][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.319663][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 699.324959][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 699.330701][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 699.336848][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 699.342641][ T31] process_scheduled_works+0xac3/0x18e0 [ 699.348454][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.354486][ T31] ? assign_work+0x367/0x3d0 [ 699.359101][ T31] worker_thread+0x870/0xd50 [ 699.363730][ T31] ? __kthread_parkme+0x1a8/0x200 [ 699.369033][ T31] ? __pfx_worker_thread+0x10/0x10 [ 699.374151][ T31] kthread+0x7b7/0x940 [ 699.378588][ T31] ? __pfx_worker_thread+0x10/0x10 [ 699.383734][ T31] ? __pfx_kthread+0x10/0x10 [ 699.388434][ T31] ? __pfx_kthread+0x10/0x10 [ 699.393073][ T31] ? __pfx_kthread+0x10/0x10 [ 699.397752][ T31] ? __pfx_kthread+0x10/0x10 [ 699.402416][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.407895][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 699.413113][ T31] ? __pfx_kthread+0x10/0x10 [ 699.417773][ T31] ret_from_fork+0x4b/0x80 [ 699.422217][ T31] ? __pfx_kthread+0x10/0x10 [ 699.426881][ T31] ret_from_fork_asm+0x1a/0x30 [ 699.431729][ T31] [ 699.435139][ T31] INFO: task syz.1.1397:11045 blocked for more than 143 seconds. [ 699.442873][ T31] Not tainted 6.15.0-rc1-syzkaller #0 [ 699.448884][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.457622][ T31] task:syz.1.1397 state:D stack:23624 pid:11045 tgid:11045 ppid:5832 task_flags:0x400040 flags:0x00004004 [ 699.469815][ T31] Call Trace: [ 699.473093][ T31] [ 699.476112][ T31] __schedule+0x1b33/0x51f0 [ 699.480655][ T31] ? schedule+0x163/0x360 [ 699.485039][ T31] ? __pfx___schedule+0x10/0x10 [ 699.489922][ T31] ? register_lock_class+0x54/0x330 [ 699.495617][ T31] ? schedule+0x90/0x360 [ 699.499891][ T31] ? schedule+0x90/0x360 [ 699.504159][ T31] schedule+0x163/0x360 [ 699.508353][ T31] schedule_timeout+0xb1/0x2b0 [ 699.513145][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 699.518702][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.523931][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 699.529918][ T31] ? wait_for_completion+0x2d4/0x600 [ 699.535293][ T31] wait_for_completion+0x32f/0x600 [ 699.540461][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 699.546213][ T31] ? __flush_work+0xee/0xc60 [ 699.550848][ T31] __flush_work+0xa48/0xc60 [ 699.555705][ T31] ? __flush_work+0xee/0xc60 [ 699.560784][ T31] ? __pfx___flush_work+0x10/0x10 [ 699.566164][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 699.571609][ T31] ? __pfx___cancel_work+0x10/0x10 [ 699.576884][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.582005][ T31] ? nfc_genl_device_removed+0x266/0x380 [ 699.587949][ T31] __cancel_work_sync+0xbc/0x110 [ 699.592909][ T31] rfkill_unregister+0x96/0x230 [ 699.597798][ T31] nfc_unregister_device+0x96/0x2a0 [ 699.603009][ T31] virtual_ncidev_close+0x56/0x90 [ 699.608970][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 699.615079][ T31] __fput+0x3e9/0x9f0 [ 699.619211][ T31] task_work_run+0x251/0x310 [ 699.623896][ T31] ? _raw_spin_unlock+0x28/0x50 [ 699.628805][ T31] ? __pfx_task_work_run+0x10/0x10 [ 699.633943][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 699.639763][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 699.645732][ T31] do_syscall_64+0x100/0x230 [ 699.650434][ T31] ? clear_bhb_loop+0x45/0xa0 [ 699.655186][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.661100][ T31] RIP: 0033:0x7f1f8418d169 [ 699.665567][ T31] RSP: 002b:00007ffd551a6678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 699.674021][ T31] RAX: 0000000000000000 RBX: 00007f1f843a7ba0 RCX: 00007f1f8418d169 [ 699.682279][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 699.690615][ T31] RBP: 00007f1f843a7ba0 R08: 000000000000022c R09: 0000001e551a696f [ 699.698758][ T31] R10: 00007f1f843a7ac0 R11: 0000000000000246 R12: 0000000000086d64 [ 699.707103][ T31] R13: 00007f1f843a6160 R14: ffffffffffffffff R15: 00007ffd551a6790 [ 699.715176][ T31] [ 699.718243][ T31] [ 699.718243][ T31] Showing all locks held in the system: [ 699.728464][ T31] 1 lock held by khungtaskd/31: [ 699.733319][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 699.743472][ T31] 2 locks held by getty/5583: [ 699.748228][ T31] #0: ffff8880314ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 699.758060][ T31] #1: ffffc900036e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 699.768484][ T31] 4 locks held by kworker/1:3/5880: [ 699.773704][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 699.784769][ T31] #1: ffffc90004457c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 699.797544][ T31] #2: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 699.807671][ T31] #3: ffff88805d8f7100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 699.817459][ T31] 3 locks held by kworker/1:4/5881: [ 699.822680][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 699.834005][ T31] #1: ffffc90004467c60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 699.847619][ T31] #2: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 699.859267][ T31] 1 lock held by syz.3.262/6810: [ 699.864204][ T31] #0: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd0/0x230 [ 699.874396][ T31] 1 lock held by syz.1.1397/11045: [ 699.879612][ T31] #0: ffff88805d8f7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 699.889711][ T31] 2 locks held by syz-executor/11211: [ 699.895150][ T31] #0: ffff88802e15d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 699.905279][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 699.915596][ T31] 2 locks held by syz-executor/11300: [ 699.921008][ T31] #0: ffff88805a880918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 699.931121][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 699.941101][ T31] 2 locks held by syz-executor/11807: [ 699.946741][ T31] #0: ffff88802a081918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 699.956829][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 699.966875][ T31] 2 locks held by syz-executor/11889: [ 699.972274][ T31] #0: ffff888030635918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 699.982597][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 699.992586][ T31] 3 locks held by syz.4.1670/12035: [ 699.997825][ T31] #0: ffffffff9014f550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 700.006372][ T31] #1: ffffffff9014f408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 700.015446][ T31] #2: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 700.025490][ T31] 2 locks held by syz.2.1677/12060: [ 700.030701][ T31] #0: ffffffff9014f550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 700.039139][ T31] #1: ffffffff9014f408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 700.048158][ T31] 2 locks held by syz.0.1678/12062: [ 700.053353][ T31] #0: ffffffff9014f550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 700.061607][ T31] #1: ffffffff9014f408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 700.070887][ T31] 2 locks held by syz-executor/12066: [ 700.076321][ T31] #0: ffff88803098a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 700.086484][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 700.096788][ T31] 2 locks held by syz-executor/12069: [ 700.102276][ T31] #0: ffff888029480118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 700.112499][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 700.122542][ T31] 2 locks held by syz-executor/12070: [ 700.128165][ T31] #0: ffff888029484118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 700.138232][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 700.148271][ T31] 2 locks held by syz-executor/12072: [ 700.153689][ T31] #0: ffff88807f949118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 700.164006][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 700.174267][ T31] 2 locks held by syz-executor/12074: [ 700.179731][ T31] #0: ffff8880790d7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 700.190054][ T31] #1: ffffffff903c60c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 700.200090][ T31] [ 700.202436][ T31] ============================================= [ 700.202436][ T31] [ 700.210936][ T31] NMI backtrace for cpu 1 [ 700.210960][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 700.210982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 700.210994][ T31] Call Trace: [ 700.211002][ T31] [ 700.211010][ T31] dump_stack_lvl+0x241/0x360 [ 700.211046][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.211074][ T31] ? __pfx__printk+0x10/0x10 [ 700.211113][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 700.211153][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 700.211180][ T31] ? irqentry_exit+0x63/0x90 [ 700.211201][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 700.211238][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 700.211260][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 700.211297][ T31] watchdog+0x1058/0x10a0 [ 700.211319][ T31] ? watchdog+0x1ea/0x10a0 [ 700.211344][ T31] ? __pfx_watchdog+0x10/0x10 [ 700.211364][ T31] kthread+0x7b7/0x940 [ 700.211394][ T31] ? __pfx_watchdog+0x10/0x10 [ 700.211415][ T31] ? __pfx_kthread+0x10/0x10 [ 700.211439][ T31] ? __pfx_kthread+0x10/0x10 [ 700.211464][ T31] ? __pfx_kthread+0x10/0x10 [ 700.211491][ T31] ? __pfx_kthread+0x10/0x10 [ 700.211517][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 700.211536][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 700.211558][ T31] ? __pfx_kthread+0x10/0x10 [ 700.211587][ T31] ret_from_fork+0x4b/0x80 [ 700.211605][ T31] ? __pfx_kthread+0x10/0x10 [ 700.211633][ T31] ret_from_fork_asm+0x1a/0x30 [ 700.211678][ T31] [ 700.211686][ T31] Sending NMI from CPU 1 to CPUs 0: [ 700.368990][ C0] NMI backtrace for cpu 0 [ 700.369009][ C0] CPU: 0 UID: 0 PID: 6420 Comm: kworker/u8:10 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 700.369029][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 700.369042][ C0] Workqueue: bat_events batadv_nc_worker [ 700.369072][ C0] RIP: 0010:check_preemption_disabled+0x6a/0x120 [ 700.369097][ C0] Code: 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c7 49 89 f6 49 89 ff 65 4c 8b 2c 25 08 70 65 93 41 f6 45 2f 04 [ 700.369112][ C0] RSP: 0018:ffffc90003e3f9f8 EFLAGS: 00000046 [ 700.369126][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 700.369137][ C0] RDX: 0000000000000000 RSI: ffffffff8e7546d9 RDI: ffffffff8ca0e1e0 [ 700.369149][ C0] RBP: ffffffff93657020 R08: 0000000000000000 R09: 0000000000000000 [ 700.369160][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff93657020 [ 700.369171][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 700.369182][ C0] FS: 0000000000000000(0000) GS:ffff888124fc9000(0000) knlGS:0000000000000000 [ 700.369196][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.369207][ C0] CR2: 00005583f9cfa708 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 700.369222][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 700.369233][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 700.369243][ C0] Call Trace: [ 700.369251][ C0] [ 700.369260][ C0] lock_acquire+0xdb/0x2f0 [ 700.369279][ C0] ? batadv_nc_worker+0xcb/0x610 [ 700.369298][ C0] batadv_nc_worker+0xec/0x610 [ 700.369313][ C0] ? batadv_nc_worker+0xcb/0x610 [ 700.369328][ C0] ? batadv_nc_worker+0xcb/0x610 [ 700.369346][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 700.369363][ C0] process_scheduled_works+0xac3/0x18e0 [ 700.369397][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 700.369420][ C0] ? assign_work+0x367/0x3d0 [ 700.369445][ C0] worker_thread+0x870/0xd50 [ 700.369479][ C0] ? __kthread_parkme+0x1a8/0x200 [ 700.369501][ C0] ? __pfx_worker_thread+0x10/0x10 [ 700.369519][ C0] kthread+0x7b7/0x940 [ 700.369542][ C0] ? __pfx_worker_thread+0x10/0x10 [ 700.369561][ C0] ? __pfx_kthread+0x10/0x10 [ 700.369581][ C0] ? __pfx_kthread+0x10/0x10 [ 700.369602][ C0] ? __pfx_kthread+0x10/0x10 [ 700.369623][ C0] ? __pfx_kthread+0x10/0x10 [ 700.369644][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 700.369660][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 700.369684][ C0] ? __pfx_kthread+0x10/0x10 [ 700.369707][ C0] ret_from_fork+0x4b/0x80 [ 700.369724][ C0] ? __pfx_kthread+0x10/0x10 [ 700.369745][ C0] ret_from_fork_asm+0x1a/0x30 [ 700.369780][ C0] [ 700.370448][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 700.645257][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 700.655331][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 700.665394][ T31] Call Trace: [ 700.668707][ T31] [ 700.671642][ T31] dump_stack_lvl+0x241/0x360 [ 700.676367][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.681593][ T31] ? __pfx__printk+0x10/0x10 [ 700.686198][ T31] ? vscnprintf+0x5d/0x90 [ 700.690541][ T31] panic+0x349/0x880 [ 700.694453][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 700.699861][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 700.706029][ T31] ? __pfx_panic+0x10/0x10 [ 700.710450][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 700.715835][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 700.721215][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 700.727408][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 700.733605][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 700.739791][ T31] watchdog+0x1097/0x10a0 [ 700.744133][ T31] ? watchdog+0x1ea/0x10a0 [ 700.748572][ T31] ? __pfx_watchdog+0x10/0x10 [ 700.753256][ T31] kthread+0x7b7/0x940 [ 700.757340][ T31] ? __pfx_watchdog+0x10/0x10 [ 700.762023][ T31] ? __pfx_kthread+0x10/0x10 [ 700.766622][ T31] ? __pfx_kthread+0x10/0x10 [ 700.771219][ T31] ? __pfx_kthread+0x10/0x10 [ 700.775822][ T31] ? __pfx_kthread+0x10/0x10 [ 700.780421][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 700.785632][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 700.790860][ T31] ? __pfx_kthread+0x10/0x10 [ 700.795463][ T31] ret_from_fork+0x4b/0x80 [ 700.799885][ T31] ? __pfx_kthread+0x10/0x10 [ 700.804658][ T31] ret_from_fork_asm+0x1a/0x30 [ 700.809447][ T31] [ 700.812812][ T31] Kernel Offset: disabled [ 700.817142][ T31] Rebooting in 86400 seconds..