last executing test programs: 10.266637412s ago: executing program 2 (id=2017): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000002180)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20480) r3 = socket$inet_udp(0x2, 0x2, 0x0) rseq(0x0, 0x0, 0x1, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100), 0x2) close_range(r4, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) fallocate(r5, 0x10, 0x4, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x400010c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 8.095163807s ago: executing program 2 (id=2027): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x38, r2, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1860000, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a0109021200010000000009040001"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x38, r2, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1860000, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a0109021200010000000009040001"], 0x0) (async) 7.126893757s ago: executing program 3 (id=2037): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x0, @private2, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000011c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0xb7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000400)="f64c8fd3e81287", 0x7}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x76d}, 0x8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7", @ANYRES64=r0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00221600000007452cfe3f0b4550182187e2112ef57584b39e3ce0799b201fb7056d75d679e9e081a2bdeb85876778d3f49187abd7aa3e3263594c8564e3f13898cc5687a86c59ae2b74a9ce982d8a7ea9cb2c1641d521e1bb2083cf77c1a3fbea9130afe150c0fb5fc50101437b2c42d96da0b55fbca75f0320b4280c8a91227ea2d2"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x7, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 7.091586163s ago: executing program 2 (id=2038): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4903) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) r2 = syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) madvise(&(0x7f0000d09000/0x3000)=nil, 0x3000, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) mmap$snddsp(&(0x7f0000187000/0x2000)=nil, 0x2000, 0x1000001, 0x12, 0xffffffffffffffff, 0x1000) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000fef000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x100800) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x3, &(0x7f0000000100), 0xffffd95}, 0xb3a}], 0x1, 0x42, 0x0) r5 = gettid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x40000000}, 0x1c) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) mprotect(&(0x7f0000e4e000/0x3000)=nil, 0x3000, 0x1000009) rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0xb, 0x4}) r9 = getpid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001a40)=[{&(0x7f00000013c0)=""/210, 0xd2}], 0x1, 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) 6.166446237s ago: executing program 2 (id=2041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) socket$kcm(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket(0x8000000010, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200080, 0x1a0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.239326888s ago: executing program 3 (id=2054): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000000)="b6b06897370bc199d3414a8edc54435e590b47c41260cd1c9f9c51146e4ed3a5a189d7e31d1e3f447a475603028e6136", 0x30, 0xfffffffffffffffe) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000040900010073797a30000000002c000000030a01030000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c0002800800024000000004080001400000000208000300000000f00900010073797a30"], 0xd4}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8927, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_int(r7, 0x29, 0x1b, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) sendmmsg(r6, 0x0, 0x0, 0x811) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x3, 0x4, 0x52424752, 0x6, 0x7, 0x3ff, 0x4, 0x1, 0x1, 0x6, 0x2, 0x3}}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYBLOB="05000020000000000000061100000c0099000000000007000000080005000c00000078374e6cb0af95e106e3ee8869845f164d00000000505e8c291c05add27d00d2ac0230033b6a48eb3dc7d20b0342f2186016fa244349790ef8ef2f335121ae72a286b6c6141ceb9a1a104463fd04a59f772487679578522b5aec44ba530c4393cae04b52188eeec4d1ebe691fad5"], 0x28}}, 0x4000010) 4.191201858s ago: executing program 1 (id=2055): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000080), &(0x7f00000003c0), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000100), &(0x7f0000000140), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) write(r3, &(0x7f0000000180)="0101", 0x2) close(r3) execveat$binfmt(r0, r1, &(0x7f0000000340)={[], 0x5c}, &(0x7f0000000440)={[&(0x7f0000000380)=',^[&\x88]Zb\x1d\\\xcf\x18&+(\x00']}, 0x0) 4.093806531s ago: executing program 1 (id=2056): add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000200)={0xa0, 0x0, r4, {{0x0, 0x3, 0xff, 0x0, 0x9, 0x8, {0x3, 0x8, 0x2313, 0x9, 0xe2, 0x8, 0x8, 0x1, 0x0, 0xc000, 0x7, r5, r6, 0x0, 0x200}}, {0x0, 0x10}}}, 0xa0) dup2(r7, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) (fail_nth: 1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) syz_emit_ethernet(0x56, &(0x7f0000001b40)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffff798cc124326f4e0f6c44e9c32010000000000000000000000000001fe8000ad0000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffd9078000001fe49f989adb18d07000000"], 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 3.627131178s ago: executing program 1 (id=2058): syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x2c) r4 = syz_io_uring_setup(0x2ef7, &(0x7f0000000080)={0x0, 0x3, 0x40, 0x0, 0x21d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x2, 0x680d, 0x3e8cb7a44b4f4e77, @mcast1, @mcast2, 0x1, 0x7, 0x6, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x167c, 0x10001, 0x7a08, 0x10024, r7, 0xf8, '\x00', r8, r2, 0x2, 0x0, 0x0, 0xe, @void, @value, @value=r3}, 0x50) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x4, 0xffffffff}, 0x18}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @empty}, {{0x0, 0x4e22, r0, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0xfffe}}}}}}, 0x0) 3.433274089s ago: executing program 2 (id=2061): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x4, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400000000, 0xb, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x7, 0x0, 0x0, 0x2000, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14"], 0xfebe) r4 = fanotify_init(0x200, 0x0) r5 = dup(r3) fanotify_mark(r4, 0x201, 0x48001003, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) io_uring_enter(r5, 0x5e87, 0xd70c, 0x46, &(0x7f0000000040)={[0x81]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000f3ffffff00002fee3827b7361854000005000000000000000000000003f007000c000000852000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000001000000085200000020000008510000003000000183a0000040000000000000000000000d0678000ffffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1e, r5, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x1, 0x1, 0xe}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000880)=[r5, r2, r1, r1], 0x0, 0x10, 0x40000, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.370906972s ago: executing program 1 (id=2062): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000190001002dbd7000fcdbdf250a001400000001040004000008001e00060000000c00090007000b06", @ANYRES32=0x0, @ANYBLOB="fa99e6226e103fcceea0ffffff7f00000000dee5ee383b6a41676754141b67a743bb051b6fbf7f7ec4bc6be9efa97dfc10ed4f71980cf430580eb5450aabef500757c0f4781ad43014e5fcf0f6"], 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x44000) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x7ff, 0x412203) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000200)) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f00000004c0)={0x3, @output={0x0, 0x0, {0xfffffff0, 0xfe}, 0x0, 0x11a}}) r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x4, 0x8, 0x0, 0x1, 0x1000}}) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740081000000000000000109050b362f"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) syz_open_procfs$pagemap(0x0, &(0x7f0000000400)) 2.262216395s ago: executing program 4 (id=2069): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000778450ca2676bb79d065ca5f09f3a10ab81dfc4aecc267e2923f6b32ddfa552e549c33d2cf4a176ea0ca6d8a984f2988ffc60269f7dbcdef81233083bf10ac0083dbcf0d12d78c0d64e406aebe849d6a3f56e92d1001ec922b6e4b5377c8bb9f6b2d089f8cc656db5b6b80719165a37f20021cbb46cc49bb1a50cb45ed241609fd6811010000000000000072ee57bd9a44b47e0ed73103c1a4986ae1efef32da51ab453870d9aab2d170791cd2911d36a251cd7e1fd032f5154e56ed517656c8e19430"], 0x50) (async) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81000f00080603048906060b000aaaaa1ec92bf5bd524d78c8479764481cb7bac45d91b82a"], &(0x7f0000000340)={0x0, 0x1, [0xa28, 0x62b, 0x9cb, 0xfbd]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000380), 0x19, 0x2000) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000840)=@multiplanar_overlay={0xfef, 0x9, 0x4, 0xe000, 0x5, {0x0, 0xea60}, {0x4, 0x0, 0x0, 0x6, 0x4, 0xff, "166add0f"}, 0x80, 0x3, {0x0}, 0xfffff800}) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x0, 0x1, 0x3, 0x4}, {0x4, 0x6, 0x4, 0x2}, {0x1, 0xf0, 0x6, 0x8}, {0x3, 0x5, 0x0, 0x80000000}, {0x1ff, 0x5d, 0x5, 0x57}, {0x7fff, 0x3, 0x1, 0x401}]}) socket$inet(0x2, 0x6, 0xffff44ed) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7, 0x0, 0x0, 0x0, 0x77b, 0x9, 0x7]}}]}]}]}, 0x44}}, 0x0) 2.015213251s ago: executing program 4 (id=2071): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000002700)={@multicast1=0xe0000300, @rand_addr=0x64010100}, 0x8) 1.817582941s ago: executing program 4 (id=2073): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0, 0x52}) 1.623192034s ago: executing program 3 (id=2074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.568684624s ago: executing program 4 (id=2076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x95, 0x100000000, 0x0, 0x20, 0x0, 0xfffffffffffffffc, 0x2004cc, 0x8000002, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x4000000000000004, 0x767], 0xeeef0000, 0x200301}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.443077584s ago: executing program 3 (id=2078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r5, r7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4961b6f8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008}, 0x4008095) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$IMDELTIMER(r9, 0x80044941, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r13, 0xc048aec8, &(0x7f0000000300)={0x500, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x21}}) fanotify_mark(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.359550579s ago: executing program 0 (id=2079): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd4}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.308194754s ago: executing program 4 (id=2080): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4096, 0x1000}], 0x1}, 0x8000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.083315737s ago: executing program 0 (id=2081): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000002000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c00ca) 1.043441426s ago: executing program 0 (id=2082): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000b80)="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", 0x987}, {0x0}], 0x2}}], 0x3, 0x8008801) 951.490656ms ago: executing program 0 (id=2083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={0x0, 0x8d, &(0x7f00000001c0)=[{&(0x7f0000000040)="55c4670c", 0x4}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 514.862474ms ago: executing program 0 (id=2084): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) read$FUSE(r4, &(0x7f0000004680)={0x2020}, 0xfffffe44) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24289fefe100010000000000000080000a000000000000000000000000000000070000007e2d84f0"], 0x24}}, 0x4000004) 435.838271ms ago: executing program 3 (id=2085): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x102001) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) futex(&(0x7f0000000000), 0x87, 0xfffffffc, 0x0, 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x102001) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) futex(&(0x7f0000000000), 0x87, 0xfffffffc, 0x0, 0x0, 0x0) (async) close(r0) (async) 255.149277ms ago: executing program 1 (id=2086): r0 = socket$alg(0x26, 0x5, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="55c4670c", 0x4}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 221.176042ms ago: executing program 0 (id=2087): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x3f, 0x800}, 0x4000) 166.947915ms ago: executing program 4 (id=2088): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3e7, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0xdf, 0x24, 0x78, 0xef, 0xc45, 0x6253, 0x5951, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d5, 0x3, 0xfd, 0x3e, 0x40, 0x0, [{{0x9, 0x4, 0x28, 0x1, 0x1, 0xb1, 0x52, 0x29, 0x1, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "f3e18cfebb"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x718e, 0xfff9, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0x2e}, [@obex={0x5, 0x24, 0x15, 0x27c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x200, 0xfa, 0x1, 0x1, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xc, 0x1000}]}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x2, 0x5, 0xf, [@generic={0xc3, 0xd, "4f6a9fe2ae215a12fb8d584a0d16166628decf30ad0cafe9ac66118154724ba4e7df7d6263d943e5ef3e72662ccda7f5377adb8080c82f02d55af85afcd686b1c469bf432de77b0fc0c4a2c4c92cac9d34ca9ee896b00d69d302748387c401c4fba1bbeef1162919ab7a4523ead0baaf78ec95fe26ba17896a5e67fcd2d3d68fa419abbdbb7f63a7553640e62bfb9edc41245e0a16802ef398049d6543a7fe616957511218a6e49e27ebf1b8f3342d61d497599a0c12f65e800f131de392370ada"}]}}]}}, {{0x9, 0x4, 0x7e, 0x6, 0x5, 0xff, 0x5d, 0x81, 0x17, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0x0, "588f6de918c68c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9d, 0x3, 0x7f, 0x2, '1OF('}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x3, 0x3, "", "b5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x7, 0xfb, "276ef20341"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x5, 0x0, "d806"}]}], [{{0x9, 0x5, 0x6, 0x3, 0x20, 0xd3, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x7, 0x67, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xda, 0x1}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0xb, 0x0, 0xd3, [@generic={0xd0, 0x3c, "2f5d9d91a64161954bd08924b6f911d81bbd828092cc0dca4fbd997fa4da059d221634b243393f41762f1db939a702771f5a2961a15e1c98c0ca5f3ebfda278500c5fd19fcc82823718858ef1cb18c953d1fe81e867653e6f75f5d8c7a0446db1a44bc51387201df3ba03413cb34392d7796e088d1714a436142c08252b8299eb8f67a9737e7ba688788b5a2e4c3cf0048534f2fc274788040f764daf9dd84a388285ff614829ec04a67beb3cf1fafd738d5051d3cc0559df0e757a0e755c34f720e4c4893c1ca94dd3c4967a498"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0xff, 0x6, 0x4, [@generic={0x7d, 0xd, "c4a012946867266d38b3753db1f6f51cef303689b1fa9240f882a6f129d177b13f7d7bce1478b42439d6bc8f7135f8d5526d1ce919300ce7feb39b7f974c5d2c90004d78d01be953b5e67bf127d72b422a7ae704c7d762cdd7a7eed9369d2fbed96b2f6943f02106fb5f98cd7a44008eea1385fae140aa77635597"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x2, 0xf}]}}]}}, {{0x9, 0x4, 0x94, 0xc, 0x1, 0x3, 0x5f, 0xa, 0x53, [@generic={0xc7, 0x23, "c88f8bfdb583bac537f877749325293d629bb35f041c4e769c23cb244337a68e8153746f02da42709c33404061d7aba4706e7278a6cbbc05a6550608a86e46073c70c9294d2d75591ea8e9d7fdd3f051ab3a49789473784787e5204aaae74e51b0abfe3f6ab07e5396ed6a69135ecf8cd09a04641e70943e7ee5950fb666b62cd3c914244a278275f12c2e0a338f2a37b936bb8d97b4e8065a4eb04662ed0155210b07716c73bccc8d5c6a1171cad93cf28f1f1592df525fbd116aa65108ab8f6810e2f971"}], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0x10, 0x9, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0xff, 0x80, 0x10, 0x9}, 0x108, &(0x7f0000000c00)={0x5, 0xf, 0x108, 0x1, [@generic={0x103, 0x10, 0x1, "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"}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3001}}, {0xb9, &(0x7f0000000100)=@string={0xb9, 0x3, "f6cd65c839923fc3739ab5976f6cacf93e8daa04f68a8439f75d7f414ea3b1f99a3deb6e0c0ad73825e97ffd75c84baf87c7d728b12a2d53bf8215938e1bac6290beafb5e4e5eb120e15099ded317c9e669dafdfe20af11816732ea6fcc0d3f1ec3ab1b1f23b1934d8e90ef76ce1a41c25f592c059f2a9739392d3a0b40a7d338cfa4d3a7ba579325d2126787a801b247cca2490e309553089492cee6477e577733139a8b704477fd00bf6538ea538fbf4639117e5eec8"}}, {0x8f, &(0x7f00000001c0)=@string={0x8f, 0x3, "e147c3998262cf916a454af354d0d521f71ffaf7d91c04c33ca6a698584ac18fd37cec62df4e1bce5f0d21f871ebb203fd7f0269157e1adf30661f0c0b9bf5e9639679a75e990fef4e5f6026432c967f0ab5abb72e846b26837022693c9763ec60d2b9e5416db6d531e916d52f2045ae30ed4ce31ba91991825c7673eb97f4764f987a2c6a201b05550d473ae4"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41d}}, {0x6c, &(0x7f0000000400)=@string={0x6c, 0x3, "ef1fa1384cc3d3a9be13534ea4092d9250530517c950b104323f64a9063e0d5c4d8affb12500878bf736fc775450d1c399fb7c3f223cb09704ef84154e32d914e37353a659717a28bfe1a81882b49af758f1fd626e45d27c2e82f9664a09928298406bc17b785edd50e9"}}, {0xa8, &(0x7f0000000600)=@string={0xa8, 0x3, "3b5e9f1b626d61e5c72e63620132633c2397a0535f655b9bf3c15129c7cc35205327ef7e36b44c10f69bf27a0d09223a77c824036e8be01a35755b9be759a5a21cc922c1e5f3e18538dfe5fd8908541d55ab7bb08b5b26ee04d944002c891955a73548018e08442563acebb29930a12c0418c9e1a49d713c2a00f0ba8a3d4c704d063bbd308a1c7c7e50488054c8255f73a8058b5d88bb90763ef935c3efdb6d3221d662b956"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0a}}]}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r1, 0xf, 0xffffffffffffffd2, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x400454a4, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x400454a4, &(0x7f0000000080)) syz_usb_control_io$printer(r0, 0x0, 0x0) 166.701943ms ago: executing program 3 (id=2089): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x1}, 0x18, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(r0, 0x0) (fail_nth: 5) 50.386634ms ago: executing program 2 (id=2090): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x102, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=2091): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e26, @local}, 0x10) (fail_nth: 4) kernel console output (not intermixed with test programs): ][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 379.393177][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.411624][ T9] usb 5-1: Product: syz [ 379.429229][ T9] usb 5-1: Manufacturer: syz [ 379.439181][ T9] usb 5-1: SerialNumber: syz [ 379.447900][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1349'. [ 379.490719][T10087] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 379.569174][T10097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.625469][T10097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.762135][ T919] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 379.810608][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.831620][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.902526][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 71 proto 1 vid 0x0525 pid 0xA4A8 [ 379.928402][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'. [ 379.928438][ T919] usb 1-1: device descriptor read/64, error -71 [ 379.959365][T10103] team0: entered promiscuous mode [ 379.969424][T10103] team_slave_0: entered promiscuous mode [ 379.982483][T10103] team_slave_1: entered promiscuous mode [ 379.995606][T10103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.023489][ T9] usb 5-1: USB disconnect, device number 56 [ 380.039634][T10103] team0: left promiscuous mode [ 380.044665][T10103] team_slave_0: left promiscuous mode [ 380.050658][T10103] team_slave_1: left promiscuous mode [ 380.074703][ T9] usblp0: removed [ 380.302126][ T919] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 380.444757][ T919] usb 1-1: device descriptor read/64, error -71 [ 380.592522][ T919] usb usb1-port1: attempt power cycle [ 380.885912][T10113] vlan0: entered promiscuous mode [ 380.891943][T10113] bond0: (slave vlan0): Opening slave failed [ 380.952306][ T919] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 380.984077][ T919] usb 1-1: device descriptor read/8, error -71 [ 381.313709][ T919] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 381.373606][ T919] usb 1-1: device descriptor read/8, error -71 [ 381.512417][ T919] usb usb1-port1: unable to enumerate USB device [ 382.042307][ T24] usb 4-1: string descriptor 0 read error: -71 [ 382.063790][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 382.079377][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 382.091178][ T24] usb 4-1: USB disconnect, device number 67 [ 382.299945][T10124] tipc: Started in network mode [ 382.315449][T10124] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 382.330452][T10124] tipc: Enabled bearer , priority 10 [ 382.791838][T10133] xt_nfacct: accounting object `syz1' does not exists [ 383.443855][ T919] tipc: Node number set to 15444650 [ 383.450342][ T7038] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 383.756178][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.784054][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.809479][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.818909][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.879459][T10139] mmap: syz.0.1369 (10139): VmData 37683200 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 384.112345][ T7038] usb 1-1: unable to get BOS descriptor or descriptor too short [ 384.121638][ T7038] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 384.150105][ T7038] usb 1-1: can't read configurations, error -71 [ 384.242293][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 384.294120][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 384.344273][T10162] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 384.444081][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 384.458662][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 384.468340][ T24] usb 5-1: config 0 has no interface number 0 [ 384.479592][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.497412][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 384.533687][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.554339][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.582541][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 384.591823][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.684838][ T24] usb 5-1: config 0 descriptor?? [ 384.696462][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 384.900547][ T9] usb 5-1: USB disconnect, device number 57 [ 384.906701][ T919] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 384.917167][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 385.140145][ T919] usb 4-1: config 0 has no interfaces? [ 385.156346][ T919] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 385.166574][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.179736][ T919] usb 4-1: Product: syz [ 385.184551][ T919] usb 4-1: Manufacturer: syz [ 385.189494][ T919] usb 4-1: SerialNumber: syz [ 385.202081][ T7038] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 385.218695][ T919] usb 4-1: config 0 descriptor?? [ 385.262242][ T24] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 385.352258][ T7038] usb 1-1: Using ep0 maxpacket: 8 [ 385.359238][ T7038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 385.390784][ T7038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.401146][ T7038] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.416907][ T7038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 385.435857][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 385.445279][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.449882][ T7038] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 385.502373][ T7038] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 385.525028][ T7038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.536039][ T7038] usb 1-1: config 0 descriptor?? [ 385.536068][ T24] usb 3-1: config 0 descriptor?? [ 385.546293][T10179] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 385.610044][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 385.732435][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 386.462141][ T24] gspca_sonixj: reg_r err -110 [ 386.462238][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 387.642500][ T5848] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 387.933401][T10203] netlink: 'syz.2.1383': attribute type 12 has an invalid length. [ 387.964376][ T24] usb 1-1: USB disconnect, device number 58 [ 388.762554][ T7038] usb 4-1: USB disconnect, device number 68 [ 389.246344][ T7038] usb 3-1: USB disconnect, device number 58 [ 389.288808][T10217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 389.375293][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.427047][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.531004][T10224] ip6gretap0: entered promiscuous mode [ 389.547574][T10224] vlan0: entered promiscuous mode [ 389.632078][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 390.108550][T10237] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 390.326920][T10244] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1398'. [ 390.934894][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 391.522327][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 391.636658][T10263] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1403'. [ 391.808448][ T24] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 391.836642][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.854384][ T5893] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 391.893120][ T24] usb 1-1: config 0 descriptor?? [ 391.936709][ T24] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 391.993041][ T24] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 392.055400][ T5893] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 392.101020][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.370402][ T5893] usb 3-1: config 0 descriptor?? [ 392.384606][ T5893] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 393.643998][T10262] netlink: 'syz.2.1402': attribute type 12 has an invalid length. [ 393.922355][ T5893] gspca_sonixj: reg_w1 err -110 [ 393.942249][ T5893] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 394.323024][T10290] vlan0: entered promiscuous mode [ 394.381462][ C0] hrtimer: interrupt took 372131 ns [ 394.393266][T10290] bond0: (slave vlan0): Opening slave failed [ 394.818143][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.874098][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.917422][ T919] usb 1-1: USB disconnect, device number 59 [ 395.059661][ T24] usb 3-1: USB disconnect, device number 59 [ 395.070377][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 395.332515][T10301] netlink: 'syz.0.1415': attribute type 28 has an invalid length. [ 397.598384][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'. [ 397.752734][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1425'. [ 397.923615][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 398.102062][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 398.109122][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.145760][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.211330][ T24] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 398.217099][T10340] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.330744][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 398.366099][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 398.404627][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.435007][ T24] usb 3-1: config 0 descriptor?? [ 398.849608][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 398.856128][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 399.231275][ T24] usb 3-1: USB disconnect, device number 60 [ 399.382646][T10340] vlan0: entered promiscuous mode [ 402.674574][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.704350][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.713624][T10379] sctp: [Deprecated]: syz.0.1439 (pid 10379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.713624][T10379] Use struct sctp_sack_info instead [ 402.782311][ T919] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 403.044344][ T919] usb 3-1: Using ep0 maxpacket: 16 [ 403.111060][ T919] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.152082][ T919] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.179342][ T919] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 403.221426][ T919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 403.240085][ T919] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 403.267989][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.293023][ T919] usb 3-1: config 0 descriptor?? [ 403.782325][ T919] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0016/input/input37 [ 403.878362][ T919] kye 0003:0458:5010.0016: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 404.083545][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.134473][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.218315][ T919] usb 3-1: USB disconnect, device number 61 [ 404.664078][T10401] KVM: debugfs: duplicate directory 10401-7 [ 405.112825][ T919] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 405.273316][ T919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.293618][ T919] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 405.335101][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.367027][ T919] usb 5-1: config 0 descriptor?? [ 405.381299][ T919] pwc: Askey VC010 type 2 USB webcam detected. [ 405.782206][ T919] pwc: recv_control_msg error -32 req 02 val 2b00 [ 405.799819][ T919] pwc: recv_control_msg error -32 req 02 val 2700 [ 406.014325][ T919] pwc: recv_control_msg error -71 req 04 val 1000 [ 406.044583][ T919] pwc: recv_control_msg error -71 req 04 val 1300 [ 406.052547][ T919] pwc: recv_control_msg error -71 req 04 val 1400 [ 406.063286][ T919] pwc: recv_control_msg error -71 req 02 val 2000 [ 406.075351][ T919] pwc: recv_control_msg error -71 req 02 val 2100 [ 406.082145][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 406.092961][ T919] pwc: recv_control_msg error -71 req 04 val 1500 [ 406.099921][ T919] pwc: recv_control_msg error -71 req 02 val 2500 [ 406.106958][ T919] pwc: recv_control_msg error -71 req 02 val 2400 [ 406.113976][ T919] pwc: recv_control_msg error -71 req 02 val 2600 [ 406.122390][ T919] pwc: recv_control_msg error -71 req 02 val 2900 [ 406.204857][ T919] pwc: recv_control_msg error -71 req 02 val 2800 [ 406.212753][ T919] pwc: recv_control_msg error -71 req 04 val 1100 [ 406.222610][ T919] pwc: recv_control_msg error -71 req 04 val 1200 [ 406.242260][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 406.250705][ T919] pwc: Registered as video103. [ 406.256610][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.258646][ T919] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 406.271583][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.299308][ T24] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 406.308817][ T919] usb 5-1: USB disconnect, device number 58 [ 406.318755][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 406.352298][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 406.361692][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.443614][ T24] usb 3-1: config 0 descriptor?? [ 406.885708][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 406.892996][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 406.959830][ T24] usb 3-1: USB disconnect, device number 62 [ 407.023854][ T30] audit: type=1326 audit(1743599799.363:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.0.1456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd78b18d169 code=0x0 [ 407.412222][ T50] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 407.602961][ T50] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.627313][ T50] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.657346][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.680430][ T50] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 407.725021][ T50] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 407.749207][ T50] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.767823][ T50] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.787051][ T50] usb 1-1: Product: syz [ 407.824281][ T50] usb 1-1: Manufacturer: syz [ 407.913216][ T50] cdc_wdm 1-1:1.0: skipping garbage [ 407.924499][ T50] cdc_wdm 1-1:1.0: skipping garbage [ 407.955336][ T50] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 408.063527][ T50] cdc_wdm 1-1:1.0: Unknown control protocol [ 410.698779][T10473] xt_nfacct: accounting object `syz1' does not exists [ 410.946256][ T7038] usb 1-1: USB disconnect, device number 60 [ 411.190645][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 411.312333][ T50] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 411.502258][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 411.511745][ T50] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.636728][ T50] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.686025][ T50] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 411.759935][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.771244][ T50] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 411.781796][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.796280][ T50] usb 5-1: config 0 descriptor?? [ 411.872150][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 412.114929][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'. [ 412.124327][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'. [ 412.275719][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 412.281785][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 412.298706][ T50] usb 5-1: USB disconnect, device number 59 [ 412.339713][ T24] usb 4-1: config 0 has no interfaces? [ 412.358925][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 412.378651][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.392185][ T24] usb 4-1: Product: syz [ 412.400827][ T24] usb 4-1: Manufacturer: syz [ 412.412765][ T24] usb 4-1: SerialNumber: syz [ 412.429733][ T24] usb 4-1: config 0 descriptor?? [ 412.661124][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.672134][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.042318][ T7038] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 414.192314][ T7038] usb 3-1: Using ep0 maxpacket: 16 [ 414.216016][ T7038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.229309][ T7038] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 414.333152][ T7038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.577549][ T7038] usb 3-1: config 0 descriptor?? [ 414.974660][ T919] usb 4-1: USB disconnect, device number 70 [ 415.026849][T10523] qrtr: Invalid version 48 [ 415.044094][ T7038] holtek_mouse 0003:04D9:A081.0017: item fetching failed at offset 3/5 [ 415.135815][ T7038] holtek_mouse 0003:04D9:A081.0017: hid parse failed: -22 [ 415.156314][ T7038] holtek_mouse 0003:04D9:A081.0017: probe with driver holtek_mouse failed with error -22 [ 415.240891][ T5893] usb 3-1: USB disconnect, device number 63 [ 415.376433][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 415.442408][ T50] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 415.584720][ T24] usb 1-1: config 0 has no interfaces? [ 415.613535][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.634717][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.644803][ T50] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 415.672279][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.686367][ T24] usb 1-1: Product: syz [ 415.713391][ T50] usb 4-1: config 0 descriptor?? [ 415.719797][ T24] usb 1-1: Manufacturer: syz [ 415.730877][ T24] usb 1-1: SerialNumber: syz [ 415.739356][ T50] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 415.783839][ T24] usb 1-1: config 0 descriptor?? [ 416.043276][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.053085][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.010787][T10533] netlink: 'syz.3.1487': attribute type 12 has an invalid length. [ 417.302884][ T50] gspca_sonixj: reg_w1 err -110 [ 417.322543][ T50] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 417.403918][ T919] usb 4-1: USB disconnect, device number 71 [ 418.192108][ T50] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 418.543536][ T50] usb 5-1: config 0 has no interfaces? [ 418.605472][ T50] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 418.622730][T10567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1497'. [ 418.727219][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.795803][ T50] usb 5-1: Product: syz [ 418.814121][ T50] usb 5-1: Manufacturer: syz [ 418.828429][ T50] usb 5-1: SerialNumber: syz [ 418.845104][ T50] usb 5-1: config 0 descriptor?? [ 419.101670][ T919] usb 1-1: USB disconnect, device number 61 [ 419.334058][T10558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.662401][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 419.844428][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.865463][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.896440][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 419.917868][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.935556][ T24] usb 1-1: config 0 has no interfaces? [ 419.955143][T10582] netlink: 'syz.1.1503': attribute type 12 has an invalid length. [ 419.970108][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 419.990251][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.020612][ T24] usb 1-1: Product: syz [ 420.045763][ T24] usb 1-1: Manufacturer: syz [ 420.084031][ T24] usb 1-1: SerialNumber: syz [ 420.100362][ T24] usb 1-1: config 0 descriptor?? [ 420.322222][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.331210][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.978353][ T50] usb 5-1: USB disconnect, device number 60 [ 421.047423][T10592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1506'. [ 421.112170][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 421.159341][T10596] program syz.4.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.215083][T10596] program syz.4.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.304410][ T919] usb 1-1: USB disconnect, device number 62 [ 422.581049][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.603258][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.644560][T10625] netlink: 'syz.1.1517': attribute type 12 has an invalid length. [ 423.822313][ T50] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 423.994197][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.063778][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.101440][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.116342][ T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.126753][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.139653][ T50] usb 5-1: config 0 descriptor?? [ 424.231287][ T30] audit: type=1326 audit(1743599816.573:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10645 comm="syz.1.1525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f980058d169 code=0x0 [ 424.559740][ T50] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 424.567575][ T50] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 424.576436][ T50] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 424.585278][ T50] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 424.594219][ T50] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 424.605154][ T50] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 424.615099][ T50] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 424.632654][ T50] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 424.823780][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1523'. [ 424.846543][T10639] dummy0: entered promiscuous mode [ 424.861020][T10639] dummy0: left promiscuous mode [ 424.953613][ T919] usb 5-1: USB disconnect, device number 61 [ 425.401816][T10674] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 425.409960][T10674] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 425.422993][T10674] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 425.607123][T10681] FAULT_INJECTION: forcing a failure. [ 425.607123][T10681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.627757][T10681] CPU: 0 UID: 0 PID: 10681 Comm: syz.4.1538 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 425.627788][T10681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.627801][T10681] Call Trace: [ 425.627810][T10681] [ 425.627819][T10681] dump_stack_lvl+0x241/0x360 [ 425.627857][T10681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.627886][T10681] ? __pfx__printk+0x10/0x10 [ 425.627928][T10681] should_fail_ex+0x424/0x570 [ 425.627966][T10681] _copy_from_user+0x2d/0xb0 [ 425.627995][T10681] move_addr_to_kernel+0x7f/0x170 [ 425.628023][T10681] __sys_connect+0xb8/0x2d0 [ 425.628052][T10681] ? __fget_files+0x2a/0x420 [ 425.628071][T10681] ? __pfx___sys_connect+0x10/0x10 [ 425.628125][T10681] __x64_sys_connect+0x7a/0x90 [ 425.628154][T10681] do_syscall_64+0xf3/0x230 [ 425.628177][T10681] ? clear_bhb_loop+0x45/0xa0 [ 425.628202][T10681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.628222][T10681] RIP: 0033:0x7f447178d169 [ 425.628240][T10681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.628258][T10681] RSP: 002b:00007f447268e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 425.628281][T10681] RAX: ffffffffffffffda RBX: 00007f44719a5fa0 RCX: 00007f447178d169 [ 425.628297][T10681] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 425.628311][T10681] RBP: 00007f447268e090 R08: 0000000000000000 R09: 0000000000000000 [ 425.628324][T10681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.628336][T10681] R13: 0000000000000000 R14: 00007f44719a5fa0 R15: 00007f4471acfa28 [ 425.628366][T10681] [ 426.112076][ T5894] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 426.283236][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 426.305099][ T5894] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 426.321197][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.337080][ T5894] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 426.349257][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.357479][ T50] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 426.372194][ T5894] usb 3-1: Product: syz [ 426.376786][ T5894] usb 3-1: Manufacturer: syz [ 426.381718][ T5894] usb 3-1: SerialNumber: syz [ 426.395696][ T5894] usb 3-1: config 0 descriptor?? [ 426.413604][ T5894] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 426.540653][ T50] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 426.573039][ T50] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 426.592163][ T50] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 56, changing to 7 [ 426.732262][ T50] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8512, setting to 1024 [ 426.734960][T10695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1542'. [ 426.744869][ T50] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 426.782339][ T50] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 426.801729][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.125656][ T50] ath6kl: Failed to submit usb control message: -71 [ 427.133897][ T50] ath6kl: unable to send the bmi data to the device: -71 [ 427.148644][ T50] ath6kl: Unable to send get target info: -71 [ 427.172493][ T50] ath6kl: Failed to init ath6kl core: -71 [ 427.204247][ T50] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 427.394323][ T5894] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 427.422776][ T50] usb 4-1: USB disconnect, device number 72 [ 427.433745][ T5894] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 427.478380][ T5894] usb 3-1: USB disconnect, device number 64 [ 428.575489][ T7038] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 428.744920][ T7038] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 428.796737][ T7038] usb 3-1: config 0 interface 0 has no altsetting 0 [ 428.836663][ T7038] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 428.877061][ T7038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.908670][ T7038] usb 3-1: config 0 descriptor?? [ 429.148357][T10714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 429.205515][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.214420][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.338827][T10722] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 429.385839][T10722] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.487460][T10723] vlan2: entered promiscuous mode [ 429.500506][T10723] bridge0: entered promiscuous mode [ 431.382260][ T50] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 431.475249][ T7038] usb 3-1: string descriptor 0 read error: -71 [ 431.514442][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 431.533702][ T7038] usbhid 3-1:0.0: can't add hid device: -71 [ 431.563686][ T50] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 431.594235][ T7038] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 431.631484][ T50] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 431.641086][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.649455][ T50] usb 1-1: Product: syz [ 431.654613][ T50] usb 1-1: Manufacturer: syz [ 431.662266][ T50] usb 1-1: SerialNumber: syz [ 431.672619][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 431.679653][ T24] usb 5-1: too many configurations: 232, using maximum allowed: 8 [ 431.694168][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 431.701874][ T24] usb 5-1: can't read configurations, error -61 [ 431.709323][ T50] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 431.722949][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 431.762740][ T50] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 431.812304][ T7038] usb 3-1: USB disconnect, device number 65 [ 431.852762][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 431.949667][T10740] random: crng reseeded on system resumption [ 432.185847][ T50] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 432.410121][T10744] sctp: [Deprecated]: syz.2.1556 (pid 10744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.410121][T10744] Use struct sctp_sack_info instead [ 432.478229][ T50] dvb_usb_umt_010 1-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 432.592964][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 432.599007][ T24] usb 5-1: too many configurations: 232, using maximum allowed: 8 [ 432.611210][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 432.630451][ T24] usb 5-1: can't read configurations, error -61 [ 432.771878][ T30] audit: type=1326 audit(1743599825.093:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.2.1557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbda878d169 code=0x0 [ 432.805319][ T24] usb usb5-port1: attempt power cycle [ 433.162588][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 433.210604][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 433.219462][ T24] usb 5-1: too many configurations: 232, using maximum allowed: 8 [ 433.241872][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 433.252435][ T24] usb 5-1: can't read configurations, error -61 [ 433.412250][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 433.457420][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 433.467775][ T24] usb 5-1: too many configurations: 232, using maximum allowed: 8 [ 433.526212][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 433.547060][ T24] usb 5-1: can't read configurations, error -61 [ 433.574283][ T24] usb usb5-port1: unable to enumerate USB device [ 433.613271][T10757] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 433.619841][T10757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.637265][T10757] vhci_hcd vhci_hcd.0: Device attached [ 433.690019][T10757] FAULT_INJECTION: forcing a failure. [ 433.690019][T10757] name failslab, interval 1, probability 0, space 0, times 0 [ 433.745293][T10757] CPU: 0 UID: 0 PID: 10757 Comm: syz.3.1561 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 433.745315][T10757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.745325][T10757] Call Trace: [ 433.745331][T10757] [ 433.745338][T10757] dump_stack_lvl+0x241/0x360 [ 433.745366][T10757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.745389][T10757] ? __pfx__printk+0x10/0x10 [ 433.745413][T10757] ? __pfx___might_resched+0x10/0x10 [ 433.745437][T10757] should_fail_ex+0x424/0x570 [ 433.745465][T10757] should_failslab+0xac/0x100 [ 433.745487][T10757] __kmalloc_noprof+0xdf/0x4d0 [ 433.745508][T10757] ? __kmalloc_cache_noprof+0x236/0x370 [ 433.745528][T10757] ? alloc_pipe_info+0x1ff/0x4d0 [ 433.745551][T10757] alloc_pipe_info+0x1ff/0x4d0 [ 433.745574][T10757] splice_direct_to_actor+0xac3/0xc90 [ 433.745597][T10757] ? aa_file_perm+0x3f1/0xf60 [ 433.745627][T10757] ? __pfx_aa_file_perm+0x10/0x10 [ 433.745648][T10757] ? __pfx_direct_splice_actor+0x10/0x10 [ 433.745670][T10757] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 433.745699][T10757] do_splice_direct+0x281/0x3d0 [ 433.745724][T10757] ? __pfx_do_splice_direct+0x10/0x10 [ 433.745745][T10757] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 433.745770][T10757] ? bpf_lsm_file_permission+0x9/0x10 [ 433.745788][T10757] ? rw_verify_area+0x246/0x630 [ 433.745807][T10757] do_sendfile+0x582/0x8c0 [ 433.745836][T10757] ? __pfx_do_sendfile+0x10/0x10 [ 433.745860][T10757] ? __fget_files+0x2a/0x420 [ 433.745880][T10757] __se_sys_sendfile64+0x17e/0x1e0 [ 433.745903][T10757] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 433.745930][T10757] ? do_syscall_64+0xb6/0x230 [ 433.745950][T10757] do_syscall_64+0xf3/0x230 [ 433.745965][T10757] ? clear_bhb_loop+0x45/0xa0 [ 433.745983][T10757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.745998][T10757] RIP: 0033:0x7f310b18d169 [ 433.746011][T10757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.746024][T10757] RSP: 002b:00007f310c06c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 433.746050][T10757] RAX: ffffffffffffffda RBX: 00007f310b3a5fa0 RCX: 00007f310b18d169 [ 433.746061][T10757] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 433.746070][T10757] RBP: 00007f310c06c090 R08: 0000000000000000 R09: 0000000000000000 [ 433.746080][T10757] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 433.746089][T10757] R13: 0000000000000000 R14: 00007f310b3a5fa0 R15: 00007f310b4cfa28 [ 433.746111][T10757] [ 433.746425][T10758] vhci_hcd: connection closed [ 434.002397][ T7038] vhci_hcd: vhci_device speed not set [ 434.005266][ T53] vhci_hcd: stop threads [ 434.018754][ T53] vhci_hcd: release socket [ 434.024724][ T53] vhci_hcd: disconnect device [ 434.062104][ T7038] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 434.069755][ T7038] usb 39-1: enqueue for inactive port 0 [ 434.132081][ T919] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 434.142443][ T7038] vhci_hcd: vhci_device speed not set [ 434.287049][ T919] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.306444][ T919] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 434.348023][ T919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 434.373596][ T919] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 434.400836][ T919] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 434.429878][ T919] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 434.468610][ T919] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.490143][ T919] usb 3-1: Product: syz [ 434.496860][ T919] usb 3-1: Manufacturer: syz [ 434.516958][ T919] cdc_wdm 3-1:1.0: skipping garbage [ 434.525865][ T919] cdc_wdm 3-1:1.0: skipping garbage [ 434.544109][ T919] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 434.559828][ T919] cdc_wdm 3-1:1.0: Unknown control protocol [ 434.732927][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.739715][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.746020][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.752640][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.758980][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.765586][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.771957][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.778594][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.785053][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.791663][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.799535][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.806187][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.822129][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.828776][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.835136][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.841769][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.848132][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.854752][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.861039][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 434.867643][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 434.895576][ T5893] usb 3-1: USB disconnect, device number 66 [ 434.901553][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 435.170210][ T5893] usb 1-1: USB disconnect, device number 63 [ 435.561334][T10784] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1569'. [ 435.758759][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1571'. [ 435.772251][T10788] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 435.975209][T10790] FAULT_INJECTION: forcing a failure. [ 435.975209][T10790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.025298][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.0.1572 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 436.025323][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.025332][T10790] Call Trace: [ 436.025339][T10790] [ 436.025345][T10790] dump_stack_lvl+0x241/0x360 [ 436.025375][T10790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.025397][T10790] ? __pfx__printk+0x10/0x10 [ 436.025427][T10790] should_fail_ex+0x424/0x570 [ 436.025456][T10790] _copy_from_user+0x2d/0xb0 [ 436.025478][T10790] move_addr_to_kernel+0x7f/0x170 [ 436.025499][T10790] __sys_connect+0xb8/0x2d0 [ 436.025531][T10790] ? __fget_files+0x2a/0x420 [ 436.025545][T10790] ? __pfx___sys_connect+0x10/0x10 [ 436.025586][T10790] __x64_sys_connect+0x7a/0x90 [ 436.025608][T10790] do_syscall_64+0xf3/0x230 [ 436.025624][T10790] ? clear_bhb_loop+0x45/0xa0 [ 436.025642][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.025657][T10790] RIP: 0033:0x7fd78b18d169 [ 436.025671][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.025684][T10790] RSP: 002b:00007fd788ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 436.025701][T10790] RAX: ffffffffffffffda RBX: 00007fd78b3a5fa0 RCX: 00007fd78b18d169 [ 436.025712][T10790] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 436.025722][T10790] RBP: 00007fd788ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.025731][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.025740][T10790] R13: 0000000000000000 R14: 00007fd78b3a5fa0 R15: 00007fd78b4cfa28 [ 436.025762][T10790] [ 436.198352][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.842189][ T7038] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 436.992428][ T7038] usb 5-1: device descriptor read/64, error -71 [ 437.232305][ T7038] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 437.382259][ T7038] usb 5-1: device descriptor read/64, error -71 [ 437.532645][ T7038] usb usb5-port1: attempt power cycle [ 437.664764][T10831] loop8: detected capacity change from 0 to 1 [ 437.682694][T10831] buffer_io_error: 3 callbacks suppressed [ 437.682714][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.707068][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.725643][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.745043][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.795157][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.818340][T10837] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.849762][T10831] ldm_validate_partition_table(): Disk read failed. [ 437.875432][T10839] netlink: 'syz.0.1588': attribute type 10 has an invalid length. [ 437.884772][T10839] veth1_vlan: entered allmulticast mode [ 437.902237][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.910829][ T7038] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 437.953503][ T7038] usb 5-1: device descriptor read/8, error -71 [ 437.985503][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 437.992588][T10839] team0: Device veth1_vlan failed to register rx_handler [ 438.019373][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 438.185928][T10831] Buffer I/O error on dev loop8, logical block 0, async page read [ 438.195098][ T7038] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 438.215940][T10831] Dev loop8: unable to read RDB block 0 [ 438.227801][T10831] loop8: unable to read partition table [ 438.234239][ T7038] usb 5-1: device descriptor read/8, error -71 [ 438.245950][T10831] loop8: partition table beyond EOD, truncated [ 438.255145][T10831] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 438.342750][ T7038] usb usb5-port1: unable to enumerate USB device [ 438.354699][T10840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.700079][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'. [ 438.974397][T10856] tipc: Trying to set illegal importance in message [ 439.636604][T10876] netlink: 'syz.4.1601': attribute type 32 has an invalid length. [ 439.652789][T10876] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1601'. [ 439.689839][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 439.709453][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'. [ 439.943320][ T30] audit: type=1326 audit(1743599832.293:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.3.1603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f310b18d169 code=0x0 [ 441.172162][ T919] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 441.458011][ T919] usb 3-1: config 0 has no interfaces? [ 441.508967][ T919] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 441.520950][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.561314][ T919] usb 3-1: Product: syz [ 442.084430][T10912] FAULT_INJECTION: forcing a failure. [ 442.084430][T10912] name failslab, interval 1, probability 0, space 0, times 0 [ 442.097527][T10912] CPU: 1 UID: 0 PID: 10912 Comm: syz.4.1614 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 442.097549][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 442.097559][T10912] Call Trace: [ 442.097566][T10912] [ 442.097573][T10912] dump_stack_lvl+0x241/0x360 [ 442.097602][T10912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.097624][T10912] ? __pfx__printk+0x10/0x10 [ 442.097655][T10912] should_fail_ex+0x424/0x570 [ 442.097684][T10912] should_failslab+0xac/0x100 [ 442.097706][T10912] __kmalloc_cache_noprof+0x73/0x370 [ 442.097728][T10912] ? reuseport_alloc+0x11d/0x430 [ 442.097752][T10912] reuseport_alloc+0x11d/0x430 [ 442.097774][T10912] udp_lib_get_port+0xeb6/0x1b40 [ 442.097812][T10912] ? __pfx_udp_lib_get_port+0x10/0x10 [ 442.097839][T10912] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 442.097854][T10912] ? inet_dgram_connect+0x182/0x420 [ 442.097880][T10912] ? udp_v4_get_port+0xb1/0x220 [ 442.097906][T10912] inet_dgram_connect+0x259/0x420 [ 442.097933][T10912] __sys_connect+0x28c/0x2d0 [ 442.097954][T10912] ? __fget_files+0x2a/0x420 [ 442.097967][T10912] ? __pfx___sys_connect+0x10/0x10 [ 442.098006][T10912] __x64_sys_connect+0x7a/0x90 [ 442.098028][T10912] do_syscall_64+0xf3/0x230 [ 442.098044][T10912] ? clear_bhb_loop+0x45/0xa0 [ 442.098062][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.098077][T10912] RIP: 0033:0x7f447178d169 [ 442.098090][T10912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.098103][T10912] RSP: 002b:00007f447268e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 442.098118][T10912] RAX: ffffffffffffffda RBX: 00007f44719a5fa0 RCX: 00007f447178d169 [ 442.098130][T10912] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 442.098139][T10912] RBP: 00007f447268e090 R08: 0000000000000000 R09: 0000000000000000 [ 442.098149][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.098157][T10912] R13: 0000000000000000 R14: 00007f44719a5fa0 R15: 00007f4471acfa28 [ 442.098180][T10912] [ 443.112539][ T919] usb 3-1: Manufacturer: syz [ 443.137425][ T919] usb 3-1: SerialNumber: syz [ 443.155228][ T919] usb 3-1: config 0 descriptor?? [ 444.130317][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 444.194863][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 444.401125][T10931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 445.009327][ T919] usb 3-1: USB disconnect, device number 67 [ 445.252541][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.258860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.462238][ T919] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 445.874459][ T919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 445.910169][ T919] usb 3-1: config 1 interface 0 altsetting 71 bulk endpoint 0x1 has invalid maxpacket 32 [ 445.939911][ T919] usb 3-1: config 1 interface 0 has no altsetting 0 [ 445.970014][ T919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 445.994375][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.018203][ T919] usb 3-1: Product: syz [ 446.028790][ T919] usb 3-1: Manufacturer: syz [ 446.041235][ T919] usb 3-1: SerialNumber: syz [ 446.075282][T10945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.527793][ T919] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 71 proto 1 vid 0x0525 pid 0xA4A8 [ 446.551124][T10964] vlan2: entered promiscuous mode [ 446.582137][T10964] hsr0: entered promiscuous mode [ 446.701482][ T919] usb 3-1: USB disconnect, device number 68 [ 446.783236][ T50] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 446.898328][ T919] usblp0: removed [ 447.017294][ T50] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 447.132170][ T7038] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 447.171065][ T50] usb 4-1: config 0 interface 0 has no altsetting 0 [ 447.191429][ T50] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 447.241744][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.323094][ T50] usb 4-1: config 0 descriptor?? [ 447.466893][ T7038] usb 1-1: unable to get BOS descriptor or descriptor too short [ 447.536575][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1631'. [ 447.566147][ T7038] usb 1-1: not running at top speed; connect to a high speed hub [ 447.609122][ T7038] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 447.667568][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.678244][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.721615][ T7038] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 447.825463][ T7038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.878747][ T7038] usb 1-1: Product: syz [ 447.948605][ T7038] usb 1-1: Manufacturer: syz [ 447.985490][ T7038] usb 1-1: SerialNumber: syz [ 448.389530][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 450.556672][ T7038] usb 1-1: USB disconnect, device number 64 [ 450.910233][ T50] usb 4-1: string descriptor 0 read error: -71 [ 450.968200][T11005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 451.003174][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 451.020804][ T50] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 451.044083][T11005] vlan2: entered promiscuous mode [ 451.074838][ T50] usb 4-1: USB disconnect, device number 73 [ 451.115294][T11007] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 451.504339][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.547878][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.678041][T11030] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 452.694625][T11030] team0: Port device hsr_slave_0 added [ 453.100713][T11038] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1654'. [ 453.722106][ T5893] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 453.892035][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 453.899307][ T5893] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 453.907789][ T5893] usb 1-1: config 0 has no interface number 0 [ 453.914024][ T5893] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 453.924266][ T5893] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.935952][ T5893] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 453.949095][ T5893] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 453.958530][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.967373][ T5893] usb 1-1: Product: syz [ 453.971787][ T5893] usb 1-1: Manufacturer: syz [ 453.976575][ T5893] usb 1-1: SerialNumber: syz [ 453.986147][ T5893] usb 1-1: config 0 descriptor?? [ 453.991939][T11051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.082111][ T50] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 454.235144][ T50] usb 3-1: device descriptor read/64, error -71 [ 454.482563][ T50] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 454.672642][ T50] usb 3-1: device descriptor read/64, error -71 [ 454.792801][ T50] usb usb3-port1: attempt power cycle [ 455.203510][ T50] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 455.276267][ T50] usb 3-1: device descriptor read/8, error -71 [ 455.532084][ T50] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 455.602956][ T50] usb 3-1: device descriptor read/8, error -71 [ 455.735883][ T50] usb usb3-port1: unable to enumerate USB device [ 456.320743][T11098] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1675'. [ 456.415483][ T5893] usb 1-1: USB disconnect, device number 65 [ 456.443714][T11095] program syz.1.1673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.816874][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1679'. [ 459.172071][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 459.176525][T11115] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 459.516904][T11135] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1686'. [ 460.014685][T11115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 460.020962][T11115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 460.282299][ T5832] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 460.290363][T11140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1688'. [ 460.692096][ T919] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 460.759464][T11155] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 460.780039][T11155] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 460.860363][T11155] vlan3: entered promiscuous mode [ 460.872674][T11155] ip6gretap0: entered promiscuous mode [ 460.873592][ T919] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 460.896932][ T919] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 460.914093][ T919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 460.946351][ T919] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 460.978402][ T919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.989807][ T919] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 461.013380][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.021441][ T919] usb 4-1: Product: syz [ 461.044644][ T919] usb 4-1: Manufacturer: syz [ 461.049605][ T919] usb 4-1: SerialNumber: syz [ 461.075104][ T5832] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 461.084624][ T919] usb 4-1: config 0 descriptor?? [ 461.090567][T11143] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 461.121180][T11163] xt_nfacct: accounting object `syz1' does not exists [ 461.242201][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 461.252156][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 461.263283][ T5832] usb 3-1: config 4 has an invalid interface number: 89 but max is 3 [ 461.271592][ T5832] usb 3-1: config 4 has an invalid interface number: 10 but max is 3 [ 461.286797][ T5832] usb 3-1: config 4 has an invalid interface number: 177 but max is 3 [ 461.296474][ T5832] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 461.306489][ T5832] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 461.339050][ T5832] usb 3-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 461.361403][ T5832] usb 3-1: config 4 has no interface number 0 [ 461.482731][ T5832] usb 3-1: config 4 has no interface number 1 [ 461.489094][ T5832] usb 3-1: config 4 has no interface number 2 [ 461.650683][ T5832] usb 3-1: config 4 interface 10 altsetting 3 bulk endpoint 0x8 has invalid maxpacket 1023 [ 461.661209][ T5832] usb 3-1: config 4 interface 177 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 461.674931][ T5832] usb 3-1: config 4 interface 89 has no altsetting 0 [ 461.681745][ T5832] usb 3-1: config 4 interface 10 has no altsetting 0 [ 461.828734][ T5832] usb 3-1: config 4 interface 177 has no altsetting 0 [ 461.881103][ T919] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 462.018877][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 462.047529][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 462.090573][ T5832] usb 3-1: New USB device found, idVendor=1608, idProduct=0205, bcdDevice=98.dc [ 462.112732][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.120822][ T5832] usb 3-1: Product: Ц [ 462.131251][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 462.192346][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 462.201431][ T5832] usb 3-1: Manufacturer: à¿” [ 462.213579][ T5832] usb 3-1: SerialNumber: syz [ 462.223890][ T919] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 462.250121][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 462.258698][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 462.292946][ T919] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 462.339705][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 462.380841][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 462.415562][ T919] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 462.446632][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 462.463649][ T919] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 462.487021][ T919] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 462.585507][ T30] audit: type=1326 audit(1743599854.933:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11178 comm="syz.0.1704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd78b18d169 code=0x0 [ 462.613078][ T919] usb 4-1: USB disconnect, device number 74 [ 462.646301][ T919] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 462.693422][ T919] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 462.711478][ T919] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 462.734181][ T919] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 462.762894][ T919] keyspan 4-1:0.0: device disconnected [ 462.933064][T11189] loop8: detected capacity change from 0 to 1 [ 462.939685][T11189] buffer_io_error: 3 callbacks suppressed [ 462.939702][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 462.953927][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 462.971211][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 462.980230][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 462.998463][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 463.013615][T11191] Buffer I/O error on dev loop8, logical block 0, async page read [ 463.021790][T11189] ldm_validate_partition_table(): Disk read failed. [ 463.034593][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 463.045087][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 463.053541][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 463.061859][T11189] Buffer I/O error on dev loop8, logical block 0, async page read [ 463.070103][T11189] Dev loop8: unable to read RDB block 0 [ 463.076524][T11189] loop8: unable to read partition table [ 463.102653][T11189] loop8: partition table beyond EOD, truncated [ 463.116930][T11189] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 463.516424][ T5832] io_ti 3-1:4.89: required endpoints missing [ 463.540866][ T5832] io_ti 3-1:4.10: required endpoints missing [ 463.562118][ T919] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 463.584880][ T5832] io_ti 3-1:4.177: required endpoints missing [ 463.601012][ T5832] usb 3-1: USB disconnect, device number 74 [ 463.722383][ T5893] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 463.852722][ T919] usb 5-1: Using ep0 maxpacket: 32 [ 463.871655][ T919] usb 5-1: config 0 has an invalid interface number: 145 but max is 1 [ 463.883040][ T919] usb 5-1: config 0 has an invalid interface number: 43 but max is 1 [ 463.957276][ T919] usb 5-1: config 0 has no interface number 0 [ 463.988313][T11205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1711'. [ 463.989493][ T919] usb 5-1: config 0 has no interface number 1 [ 464.009846][T11205] gretap0: entered promiscuous mode [ 464.022963][T11205] gretap0: left promiscuous mode [ 464.031070][ T919] usb 5-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 464.058610][ T5893] usb 4-1: config 0 has no interfaces? [ 464.075462][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 464.077143][ T919] usb 5-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 464.095844][ T5832] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 464.129014][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.188239][ T919] usb 5-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 464.200328][ T5893] usb 4-1: Product: syz [ 464.242183][ T919] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 464.249278][ T5893] usb 4-1: Manufacturer: syz [ 464.271632][ T5893] usb 4-1: SerialNumber: syz [ 464.286326][ T919] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 464.313798][ T5893] usb 4-1: config 0 descriptor?? [ 464.315191][ T919] usb 5-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 464.434479][ T5832] usb 3-1: config 0 has no interfaces? [ 464.442689][ T5832] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 464.452295][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.460335][ T5832] usb 3-1: Product: syz [ 464.470350][ T919] usb 5-1: config 0 interface 145 has no altsetting 0 [ 464.478427][ T5832] usb 3-1: Manufacturer: syz [ 464.483431][ T5832] usb 3-1: SerialNumber: syz [ 464.488259][ T919] usb 5-1: config 0 interface 43 has no altsetting 0 [ 464.500724][ T5832] usb 3-1: config 0 descriptor?? [ 464.512741][ T919] usb 5-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 464.523501][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.531546][ T919] usb 5-1: Product: syz [ 464.536884][ T919] usb 5-1: Manufacturer: syz [ 464.542476][ T919] usb 5-1: SerialNumber: syz [ 464.568715][ T919] usb 5-1: config 0 descriptor?? [ 464.646347][T11197] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.1708'. [ 464.730495][T11201] netlink: 'syz.2.1710': attribute type 5 has an invalid length. [ 464.740343][ T5893] usb 3-1: USB disconnect, device number 75 [ 464.785357][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.798611][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.836191][ T919] keyspan_pda 5-1:0.145: required endpoints missing [ 464.878985][ T919] keyspan_pda 5-1:0.43: Keyspan PDA converter detected [ 464.901612][ T919] usb 5-1: Keyspan PDA converter now attached to ttyUSB0 [ 464.920187][ T919] usb 5-1: USB disconnect, device number 70 [ 464.939640][ T919] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 464.949892][ T919] keyspan_pda 5-1:0.43: device disconnected [ 465.698467][T11231] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 465.711500][T11231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 465.750596][T11233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1720'. [ 465.908066][T11231] bridge0: entered promiscuous mode [ 465.954657][T11231] vlan0: entered promiscuous mode [ 465.995704][T11239] loop2: detected capacity change from 0 to 7 [ 466.007351][T11239] Dev loop2: unable to read RDB block 7 [ 466.013666][T11239] loop2: unable to read partition table [ 466.019725][T11239] loop2: partition table beyond EOD, truncated [ 466.027135][T11239] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.297075][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 466.351569][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 466.383446][T11248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.446855][ T5893] usb 4-1: USB disconnect, device number 75 [ 466.524173][T11258] FAULT_INJECTION: forcing a failure. [ 466.524173][T11258] name failslab, interval 1, probability 0, space 0, times 0 [ 466.540004][T11258] CPU: 0 UID: 0 PID: 11258 Comm: syz.0.1730 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 466.540028][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 466.540038][T11258] Call Trace: [ 466.540044][T11258] [ 466.540050][T11258] dump_stack_lvl+0x241/0x360 [ 466.540079][T11258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.540101][T11258] ? __pfx__printk+0x10/0x10 [ 466.540125][T11258] ? __pfx___might_resched+0x10/0x10 [ 466.540147][T11258] should_fail_ex+0x424/0x570 [ 466.540175][T11258] should_failslab+0xac/0x100 [ 466.540198][T11258] __kmalloc_cache_noprof+0x73/0x370 [ 466.540219][T11258] ? nft_delrule+0x57/0xb90 [ 466.540245][T11258] nft_delrule+0x57/0xb90 [ 466.540277][T11258] nf_tables_delchain+0xd01/0x1150 [ 466.540319][T11258] ? __pfx_nf_tables_delchain+0x10/0x10 [ 466.540361][T11258] ? __nla_parse+0x40/0x60 [ 466.540391][T11258] nfnetlink_rcv+0x12eb/0x28f0 [ 466.540444][T11258] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 466.540526][T11258] ? skb_clone+0x240/0x390 [ 466.540561][T11258] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.540588][T11258] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.540608][T11258] netlink_unicast+0x7f8/0x9a0 [ 466.540631][T11258] ? __pfx_netlink_unicast+0x10/0x10 [ 466.540649][T11258] ? skb_put+0x114/0x1f0 [ 466.540674][T11258] netlink_sendmsg+0x8c3/0xcd0 [ 466.540703][T11258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.540731][T11258] ? aa_sock_msg_perm+0x91/0x160 [ 466.540756][T11258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.540774][T11258] __sock_sendmsg+0x221/0x270 [ 466.540794][T11258] ____sys_sendmsg+0x523/0x860 [ 466.540815][T11258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.540827][T11258] ? __fget_files+0x2a/0x420 [ 466.540843][T11258] ? __fget_files+0x2a/0x420 [ 466.540863][T11258] __sys_sendmsg+0x271/0x360 [ 466.540881][T11258] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.540935][T11258] ? do_syscall_64+0xb6/0x230 [ 466.540953][T11258] do_syscall_64+0xf3/0x230 [ 466.540968][T11258] ? clear_bhb_loop+0x45/0xa0 [ 466.540988][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.541002][T11258] RIP: 0033:0x7fd78b18d169 [ 466.541016][T11258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.541028][T11258] RSP: 002b:00007fd788ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.541044][T11258] RAX: ffffffffffffffda RBX: 00007fd78b3a5fa0 RCX: 00007fd78b18d169 [ 466.541055][T11258] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 466.541065][T11258] RBP: 00007fd788ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.541074][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.541082][T11258] R13: 0000000000000000 R14: 00007fd78b3a5fa0 R15: 00007fd78b4cfa28 [ 466.541105][T11258] [ 466.968318][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 467.032055][ T919] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 467.185412][ T919] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 467.202046][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.213452][ T919] usb 3-1: config 0 descriptor?? [ 467.452689][ T5893] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 467.545654][T11277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 467.573398][T11277] vlan2: entered promiscuous mode [ 467.614443][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.626794][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.641025][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.649669][ T5893] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 467.662578][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.674831][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.688737][ T5893] usb 1-1: config 0 descriptor?? [ 467.708475][ T919] chicony 0003:04F2:1236.0019: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.2-1/input0 [ 467.901877][ T919] usb 3-1: USB disconnect, device number 76 [ 467.942426][T11287] fuse: Bad value for 'group_id' [ 467.947642][T11287] fuse: Bad value for 'group_id' [ 467.966488][T11287] fuse: Bad value for 'group_id' [ 467.980134][T11287] fuse: Bad value for 'group_id' [ 468.083343][T11294] pim6reg: tun_chr_ioctl cmd 1074025692 [ 468.093166][T11294] pim6reg: tun_chr_ioctl cmd 35108 [ 468.112683][ T5893] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.001A/input/input39 [ 468.204210][ T5893] uclogic 0003:28BD:0909.001A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 468.970420][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 469.572133][ T5893] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 469.628118][T11335] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 469.634706][T11335] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 469.678726][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 469.685674][T11335] vhci_hcd vhci_hcd.0: Device attached [ 469.717433][T11338] vhci_hcd: connection closed [ 469.718983][ T69] vhci_hcd: stop threads [ 469.729563][ T69] vhci_hcd: release socket [ 469.738742][ T69] vhci_hcd: disconnect device [ 469.902010][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 469.919258][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.933954][ T5893] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 469.952258][ T5893] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.965856][ T5893] usb 3-1: config 1 interface 0 has no altsetting 0 [ 469.976154][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 469.992059][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.012748][ T5893] usb 3-1: Product: syz [ 470.017052][ T5893] usb 3-1: Manufacturer: syz [ 470.022977][ T5893] usb 3-1: SerialNumber: syz [ 470.038321][T11334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.165420][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 470.232053][ T30] audit: type=1326 audit(1743599862.573:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058d169 code=0x7ffc0000 [ 470.263156][ T919] usb 1-1: USB disconnect, device number 66 [ 470.277304][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.288607][ T30] audit: type=1326 audit(1743599862.573:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058d169 code=0x7ffc0000 [ 470.322264][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.343328][ T30] audit: type=1326 audit(1743599862.573:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f980058d169 code=0x7ffc0000 [ 470.368604][ T30] audit: type=1326 audit(1743599862.573:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058d169 code=0x7ffc0000 [ 470.378993][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input40 [ 470.426658][ T30] audit: type=1326 audit(1743599862.573:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980058d169 code=0x7ffc0000 [ 470.441349][T11362] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1770'. [ 470.461368][ T30] audit: type=1326 audit(1743599862.573:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f980058d169 code=0x7ffc0000 [ 471.230046][T11358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.238948][T11358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.246944][T11358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 471.259443][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.285712][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.314737][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.355774][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.590157][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.647319][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.659519][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'. [ 471.765437][ T5196] bcm5974 3-1:1.0: could not read from device [ 471.776024][T11385] vlan3: entered promiscuous mode [ 471.781114][T11385] bridge0: entered promiscuous mode [ 472.287198][ T5890] bcm5974 3-1:1.0: could not read from device [ 472.287644][ T919] usb 3-1: USB disconnect, device number 77 [ 472.303630][ T5196] bcm5974 3-1:1.0: could not read from device [ 472.314969][ T5196] bcm5974 3-1:1.0: could not read from device [ 472.523402][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 472.604178][T11413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.632910][T11413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.993012][ T5832] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 473.157155][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 473.165252][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 473.190878][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 473.207661][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 473.229105][ T5832] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 473.240692][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.249274][ T9] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 473.263292][ T5832] usb 1-1: Product: syz [ 473.267901][ T5832] usb 1-1: Manufacturer: syz [ 473.277519][ T5832] usb 1-1: SerialNumber: syz [ 473.286607][ T5832] usb 1-1: config 0 descriptor?? [ 473.322273][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 473.322283][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 473.414103][ T9] usb 3-1: config 0 has no interfaces? [ 473.423088][ T9] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 473.442033][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.450315][ T9] usb 3-1: Product: syz [ 473.460510][ T9] usb 3-1: Manufacturer: syz [ 473.468744][ T9] usb 3-1: SerialNumber: syz [ 473.493423][ T9] usb 3-1: config 0 descriptor?? [ 473.708480][T11440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.847032][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.860610][T11450] loop2: detected capacity change from 0 to 7 [ 473.867855][T11450] Dev loop2: unable to read RDB block 7 [ 473.878914][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.879417][T11450] loop2: unable to read partition table [ 473.893213][T11450] loop2: partition table beyond EOD, truncated [ 473.899438][T11450] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.916361][ T9] usb 3-1: USB disconnect, device number 78 [ 474.755404][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 474.937218][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 474.957865][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.016920][ T9] usb 3-1: Product: syz [ 475.057938][ T9] usb 3-1: Manufacturer: syz [ 475.172204][ T9] usb 3-1: SerialNumber: syz [ 475.192459][ T9] usb 3-1: config 0 descriptor?? [ 475.268560][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.336270][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.346793][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.366543][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.446566][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 475.660596][ T9] usb 3-1: USB disconnect, device number 79 [ 475.872232][ T5893] usb 1-1: USB disconnect, device number 67 [ 478.032369][ T5893] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 478.099246][T11528] syzkaller0: entered promiscuous mode [ 478.107642][T11528] syzkaller0: entered allmulticast mode [ 478.192259][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 478.203936][ T5893] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.243321][ T5893] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.262031][ T5893] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 478.282640][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.304922][ T5893] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 478.353223][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.392313][ T5893] usb 3-1: config 0 descriptor?? [ 478.850830][ T5893] hid (null): invalid report_size 24931 [ 478.883695][ T5893] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.001B/input/input43 [ 478.983885][ T5893] kye 0003:0458:5010.001B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 479.187442][ T5893] usb 3-1: USB disconnect, device number 80 [ 480.077786][ T30] audit: type=1326 audit(1743599872.423:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.2.1841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbda878d169 code=0x0 [ 481.644174][T11576] vlan2: entered promiscuous mode [ 481.682061][T11576] ip6gretap0: entered promiscuous mode [ 482.215043][T11596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1850'. [ 482.342096][ T5893] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 482.502161][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 482.514692][ T5893] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.553403][ T5893] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.573182][ T5893] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 482.586974][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 482.587102][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 482.594115][ T5893] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 482.622773][T11607] loop2: detected capacity change from 0 to 7 [ 482.634850][T11607] Dev loop2: unable to read RDB block 7 [ 482.641391][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.651917][T11607] loop2: unable to read partition table [ 482.654443][ T5893] usb 1-1: config 0 descriptor?? [ 482.668759][T11607] loop2: partition table beyond EOD, truncated [ 482.678058][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 482.692240][ T50] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 482.692923][T11607] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.707455][T11605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 482.859955][ T50] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.882405][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 482.902425][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 482.919104][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.934111][T11617] bond5 (unregistering): Released all slaves [ 482.953387][ T50] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.970222][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.983024][ T50] usb 4-1: config 0 descriptor?? [ 483.069450][T11621] usb usb8: usbfs: process 11621 (syz.4.1860) did not claim interface 0 before use [ 483.113489][ T5893] hid (null): invalid report_size 24931 [ 483.132952][ T5893] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.001C/input/input44 [ 483.225215][ T5893] kye 0003:0458:5010.001C: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 483.376275][ T5893] usb 1-1: USB disconnect, device number 68 [ 483.404775][ T50] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 483.500851][ T50] plantronics 0003:047F:FFFF.001D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 483.731810][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'. [ 483.920886][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.935345][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.142199][ T5893] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 484.216235][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1869'. [ 484.228023][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1869'. [ 484.312225][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 484.321620][ T5893] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 484.333349][ T5893] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 484.346726][ T5893] usb 3-1: config 6 has no interface number 0 [ 484.355292][ T5893] usb 3-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.371205][ T5893] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.391196][ T5893] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 484.410795][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.429034][ T5893] usb 3-1: Product: syz [ 484.433883][ T5893] usb 3-1: Manufacturer: syz [ 484.438599][ T5893] usb 3-1: SerialNumber: syz [ 484.472693][ T5893] hso 3-1:6.2: Failed to find INT IN ep [ 484.611213][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1872'. [ 484.670471][T11653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.679761][T11653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.689881][T11653] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1872'. [ 484.756003][T11633] vlan0: entered promiscuous mode [ 484.880381][ T5893] usb 3-1: USB disconnect, device number 81 [ 485.591023][ T919] usb 4-1: USB disconnect, device number 76 [ 485.632180][ T5832] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 485.802292][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 485.809858][ T5832] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 485.818303][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 485.828515][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.839219][ T5832] usb 5-1: config 0 has no interface number 0 [ 485.845500][ T5832] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.860547][ T5832] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 485.870824][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 485.885804][ T5832] usb 5-1: Product: syz [ 485.890138][ T5832] usb 5-1: SerialNumber: syz [ 485.900618][ T5832] usb 5-1: config 0 descriptor?? [ 485.918966][ T5832] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 485.972657][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 485.980347][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.992428][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.003095][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 486.016519][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 486.023808][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 486.033776][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.058493][ T9] usb 1-1: config 0 descriptor?? [ 486.119455][ T50] usb 5-1: USB disconnect, device number 71 [ 486.518657][ T9] hid (null): invalid report_size 24931 [ 486.550623][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.001E/input/input48 [ 486.661091][ T9] kye 0003:0458:5010.001E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 486.977410][ T9] usb 1-1: USB disconnect, device number 69 [ 487.652611][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 487.832378][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.841894][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.862653][ T9] usb 5-1: config 0 descriptor?? [ 487.880939][ T9] cp210x 5-1:0.0: cp210x converter detected [ 488.139661][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.220150][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.429385][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 488.452852][ T9] cp210x 5-1:0.0: querying part number failed [ 488.482606][ T919] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 488.520078][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 488.646320][ T919] usb 1-1: unable to get BOS descriptor or descriptor too short [ 488.655657][ T919] usb 1-1: not running at top speed; connect to a high speed hub [ 488.666007][ T919] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 488.675377][ T919] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 488.694209][ T919] usb 1-1: config 4 has no interface number 0 [ 488.703913][ T919] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 488.718061][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.727594][ T919] usb 1-1: Product: syz [ 488.732493][ T919] usb 1-1: Manufacturer: syz [ 488.737408][ T919] usb 1-1: SerialNumber: syz [ 489.043515][ T919] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 489.062878][ T919] usb 1-1: No streaming interface found for terminal 6. [ 489.106316][ T919] usb 1-1: USB disconnect, device number 70 [ 489.872165][ T919] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 490.042288][ T919] usb 4-1: Using ep0 maxpacket: 16 [ 490.061508][ T919] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.084739][ T919] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.117540][ T919] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 490.219338][ T919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.227208][ T919] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 490.237315][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.316795][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1903'. [ 490.327854][ T919] usb 4-1: config 0 descriptor?? [ 490.403882][ T5832] usb 5-1: USB disconnect, device number 72 [ 490.413025][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 490.421253][ T5832] cp210x 5-1:0.0: device disconnected [ 491.029366][ T919] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.001F/input/input49 [ 491.228702][ T919] kye 0003:0458:5010.001F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 491.324036][ T919] usb 4-1: USB disconnect, device number 77 [ 491.517607][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 491.947783][T11778] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1912'. [ 492.474137][ T50] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 492.654280][ T50] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 492.671586][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.684441][ T50] usb 4-1: config 0 descriptor?? [ 492.700652][ T50] cp210x 4-1:0.0: cp210x converter detected [ 492.742091][ T5893] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 492.896865][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.907428][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 492.919830][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.934829][ T5893] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.962030][ T5893] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.985128][ T5893] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 493.019001][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 493.039235][ T5893] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 493.053642][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.067590][ T5893] usb 3-1: config 0 descriptor?? [ 493.294719][T11820] FAULT_INJECTION: forcing a failure. [ 493.294719][T11820] name failslab, interval 1, probability 0, space 0, times 0 [ 493.308454][T11820] CPU: 0 UID: 0 PID: 11820 Comm: syz.1.1927 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 493.308486][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.308500][T11820] Call Trace: [ 493.308509][T11820] [ 493.308519][T11820] dump_stack_lvl+0x241/0x360 [ 493.308560][T11820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.308590][T11820] ? __pfx__printk+0x10/0x10 [ 493.308624][T11820] ? __pfx___might_resched+0x10/0x10 [ 493.308655][T11820] should_fail_ex+0x424/0x570 [ 493.308694][T11820] should_failslab+0xac/0x100 [ 493.308725][T11820] kmem_cache_alloc_noprof+0x78/0x390 [ 493.308753][T11820] ? getname_flags+0xb6/0x530 [ 493.308788][T11820] getname_flags+0xb6/0x530 [ 493.308825][T11820] __x64_sys_execveat+0xad/0xe0 [ 493.308853][T11820] do_syscall_64+0xf3/0x230 [ 493.308875][T11820] ? clear_bhb_loop+0x45/0xa0 [ 493.308909][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.308930][T11820] RIP: 0033:0x7f980058d169 [ 493.308950][T11820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.308968][T11820] RSP: 002b:00007f980148d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 493.308992][T11820] RAX: ffffffffffffffda RBX: 00007f98007a5fa0 RCX: 00007f980058d169 [ 493.309008][T11820] RDX: 0000200000000340 RSI: 0000200000000040 RDI: 0000000000000003 [ 493.309021][T11820] RBP: 00007f980148d090 R08: 0000000000000000 R09: 0000000000000000 [ 493.309034][T11820] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 493.309047][T11820] R13: 0000000000000000 R14: 00007f98007a5fa0 R15: 00007f98008cfa28 [ 493.309077][T11820] [ 493.487126][ T5832] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 493.546090][ T5893] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0020/input/input50 [ 493.573973][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 493.622088][ T5832] usb 1-1: device descriptor read/64, error -71 [ 493.660488][ T5893] kye 0003:0458:5010.0020: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 493.728537][ T5893] usb 3-1: USB disconnect, device number 82 [ 493.786760][T11831] netlink: 'syz.1.1931': attribute type 21 has an invalid length. [ 493.816210][T11831] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1931'. [ 493.849077][T11831] netlink: 'syz.1.1931': attribute type 5 has an invalid length. [ 493.857614][T11831] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1931'. [ 493.863275][ T5832] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 494.002604][ T5832] usb 1-1: device descriptor read/64, error -71 [ 494.113253][ T5832] usb usb1-port1: attempt power cycle [ 494.462943][ T5832] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 494.482937][ T5832] usb 1-1: device descriptor read/8, error -71 [ 494.522228][ T919] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 494.682217][ T919] usb 3-1: Using ep0 maxpacket: 16 [ 494.690440][ T919] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 494.699780][ T919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.710069][ T919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.721609][ T919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.731005][ T5832] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 494.738659][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.746861][ T919] usb 3-1: Product: syz [ 494.751300][ T919] usb 3-1: Manufacturer: syz [ 494.756025][ T919] usb 3-1: SerialNumber: syz [ 494.767798][ T5832] usb 1-1: device descriptor read/8, error -71 [ 494.892798][ T5832] usb usb1-port1: unable to enumerate USB device [ 494.999616][T11855] netlink: 'syz.1.1941': attribute type 32 has an invalid length. [ 495.008153][T11855] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1941'. [ 495.020073][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 495.049406][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1941'. [ 495.182975][ T919] usb 3-1: 0:2 : does not exist [ 495.246046][ T919] usb 3-1: USB disconnect, device number 83 [ 495.279256][ T50] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 495.322573][ T50] cp210x 4-1:0.0: querying part number failed [ 495.359862][ T50] usb 4-1: cp210x converter now attached to ttyUSB0 [ 495.379874][ T50] usb 4-1: USB disconnect, device number 78 [ 495.399610][ T50] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 495.413435][ T50] cp210x 4-1:0.0: device disconnected [ 495.473858][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.491362][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.503408][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.555763][T11873] xt_nfacct: accounting object `syz1' does not exists [ 495.727093][ T50] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 495.749804][T11878] FAULT_INJECTION: forcing a failure. [ 495.749804][T11878] name failslab, interval 1, probability 0, space 0, times 0 [ 495.772326][T11878] CPU: 1 UID: 0 PID: 11878 Comm: syz.2.1951 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 495.772359][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 495.772373][T11878] Call Trace: [ 495.772383][T11878] [ 495.772392][T11878] dump_stack_lvl+0x241/0x360 [ 495.772430][T11878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.772461][T11878] ? __pfx__printk+0x10/0x10 [ 495.772496][T11878] ? __pfx___might_resched+0x10/0x10 [ 495.772527][T11878] should_fail_ex+0x424/0x570 [ 495.772566][T11878] should_failslab+0xac/0x100 [ 495.772598][T11878] kmem_cache_alloc_noprof+0x78/0x390 [ 495.772628][T11878] ? prepare_creds+0x31/0x6f0 [ 495.772662][T11878] prepare_creds+0x31/0x6f0 [ 495.772701][T11878] ? get_ruleset_from_fd+0x87/0x220 [ 495.772736][T11878] __se_sys_landlock_restrict_self+0x199/0x7d0 [ 495.772776][T11878] ? do_syscall_64+0xb6/0x230 [ 495.772801][T11878] do_syscall_64+0xf3/0x230 [ 495.772826][T11878] ? clear_bhb_loop+0x45/0xa0 [ 495.772850][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.772872][T11878] RIP: 0033:0x7fbda878d169 [ 495.772891][T11878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.772910][T11878] RSP: 002b:00007fbda95df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 495.772933][T11878] RAX: ffffffffffffffda RBX: 00007fbda89a5fa0 RCX: 00007fbda878d169 [ 495.772949][T11878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 495.772960][T11878] RBP: 00007fbda95df090 R08: 0000000000000000 R09: 0000000000000000 [ 495.772971][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.772982][T11878] R13: 0000000000000000 R14: 00007fbda89a5fa0 R15: 00007fbda8acfa28 [ 495.773008][T11878] [ 496.034733][ T50] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 496.056508][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.093173][ T50] usb 4-1: config 0 descriptor?? [ 496.104029][ T50] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 496.108993][T11880] fuse: Bad value for 'fd' [ 496.443523][T11893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 496.590334][T11893] vlan3: entered promiscuous mode [ 497.112091][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.148650][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.656887][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.755621][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.822694][T11920] FAULT_INJECTION: forcing a failure. [ 497.822694][T11920] name failslab, interval 1, probability 0, space 0, times 0 [ 497.886263][T11919] fuse: Bad value for 'fd' [ 497.922337][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.0.1965 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 497.922369][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.922382][T11920] Call Trace: [ 497.922395][T11920] [ 497.922405][T11920] dump_stack_lvl+0x241/0x360 [ 497.922444][T11920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.922475][T11920] ? __pfx__printk+0x10/0x10 [ 497.922500][T11920] ? fib_table_lookup+0x1325/0x1880 [ 497.922543][T11920] should_fail_ex+0x424/0x570 [ 497.922584][T11920] should_failslab+0xac/0x100 [ 497.922616][T11920] kmem_cache_alloc_noprof+0x78/0x390 [ 497.922652][T11920] ? dst_alloc+0x12b/0x190 [ 497.922679][T11920] dst_alloc+0x12b/0x190 [ 497.922706][T11920] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 497.922756][T11920] ip_route_output_key_hash+0x195/0x2b0 [ 497.922787][T11920] ? ip_route_output_key_hash+0xe1/0x2b0 [ 497.922819][T11920] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 497.922859][T11920] ? __pfx_call_rcu+0x10/0x10 [ 497.922889][T11920] ? percpu_counter_add_batch+0xff/0x1f0 [ 497.922925][T11920] ip_route_output_flow+0x29/0x140 [ 497.922958][T11920] __ip4_datagram_connect+0x95b/0x1260 [ 497.923011][T11920] udp_connect+0x33/0x200 [ 497.923042][T11920] __sys_connect+0x28c/0x2d0 [ 497.923073][T11920] ? __fget_files+0x2a/0x420 [ 497.923092][T11920] ? __pfx___sys_connect+0x10/0x10 [ 497.923148][T11920] __x64_sys_connect+0x7a/0x90 [ 497.923180][T11920] do_syscall_64+0xf3/0x230 [ 497.923203][T11920] ? clear_bhb_loop+0x45/0xa0 [ 497.923229][T11920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.923251][T11920] RIP: 0033:0x7fd78b18d169 [ 497.923271][T11920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.923291][T11920] RSP: 002b:00007fd788ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 497.923314][T11920] RAX: ffffffffffffffda RBX: 00007fd78b3a5fa0 RCX: 00007fd78b18d169 [ 497.923330][T11920] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 497.923344][T11920] RBP: 00007fd788ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 497.923358][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.923371][T11920] R13: 0000000000000000 R14: 00007fd78b3a5fa0 R15: 00007fd78b4cfa28 [ 497.923404][T11920] [ 498.223742][T11923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 498.240938][T11923] gretap0: entered promiscuous mode [ 498.249180][T11923] gretap0: left promiscuous mode [ 499.048634][ T50] usb 4-1: USB disconnect, device number 79 [ 499.149264][T11934] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1972'. [ 500.192253][ T919] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 500.268513][T11961] fuse: Bad value for 'fd' [ 500.663438][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 500.708626][T11967] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 501.030965][T11975] netlink: 'syz.4.1986': attribute type 1 has an invalid length. [ 501.233586][ T919] usb 1-1: device descriptor read/64, error -71 [ 501.306903][ T5832] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 501.482423][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 501.489685][ T5832] usb 4-1: config 0 has an invalid interface number: 228 but max is 0 [ 501.498142][ T5832] usb 4-1: config 0 has no interface number 0 [ 501.507007][ T5832] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=ee.a2 [ 501.516228][ T919] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 501.524459][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.535468][ T5832] usb 4-1: Product: syz [ 501.540767][ T5832] usb 4-1: Manufacturer: syz [ 501.545753][ T5832] usb 4-1: SerialNumber: syz [ 501.556473][ T5832] usb 4-1: config 0 descriptor?? [ 501.688193][ T919] usb 1-1: config 0 has no interfaces? [ 501.696571][ T919] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 501.712746][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.721485][ T919] usb 1-1: Product: syz [ 501.726416][ T919] usb 1-1: Manufacturer: syz [ 501.731196][ T919] usb 1-1: SerialNumber: syz [ 501.742636][ T919] usb 1-1: config 0 descriptor?? [ 501.787224][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.799464][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.849067][ T5832] mct_u232 4-1:0.228: MCT U232 converter detected [ 501.887552][T11976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.904209][ T5832] mct_u232 ttyUSB0: expected endpoint missing [ 501.968273][ T5832] usb 4-1: USB disconnect, device number 80 [ 501.983568][T11971] netlink: 'syz.0.1983': attribute type 5 has an invalid length. [ 501.999223][ T5832] mct_u232 4-1:0.228: device disconnected [ 502.041842][ T919] usb 1-1: USB disconnect, device number 76 [ 506.686423][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.692901][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.673544][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1989'. [ 561.942040][ T50] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 561.952291][ T919] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 562.052071][ T5832] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 562.162110][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 562.169054][ T50] usb 4-1: config 0 has no interfaces? [ 562.174818][ T50] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 562.184047][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.200986][ T50] usb 4-1: config 0 descriptor?? [ 562.232603][ T919] usb 1-1: Invalid ep0 maxpacket: 64 [ 562.483523][ T9] usb 4-1: USB disconnect, device number 81 [ 562.522663][ T919] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 562.693498][ T919] usb 1-1: Invalid ep0 maxpacket: 64 [ 562.700095][ T919] usb usb1-port1: attempt power cycle [ 563.042118][ T919] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 563.072955][ T919] usb 1-1: Invalid ep0 maxpacket: 64 [ 563.203696][ T919] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 563.257429][ T919] usb 1-1: Invalid ep0 maxpacket: 64 [ 563.270263][ T919] usb usb1-port1: unable to enumerate USB device [ 564.190997][T12055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.215178][T12055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.458349][T12040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.857654][ T30] audit: type=1800 audit(1743599957.163:1649): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2006" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=38908 res=0 errno=0 [ 565.622570][T12064] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 565.978661][T12071] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 566.006853][T12071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2011'. [ 566.054839][T12071] team0: entered allmulticast mode [ 566.081981][T12071] team_slave_0: entered allmulticast mode [ 566.087997][T12071] team_slave_1: entered allmulticast mode [ 566.117459][T12071] bond0: (slave team0): Releasing backup interface [ 566.192234][T12071] bridge0: port 3(team0) entered blocking state [ 566.237015][T12071] bridge0: port 3(team0) entered disabled state [ 566.687044][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2016'. [ 566.784622][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2016'. [ 567.322045][ T50] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 567.484528][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 567.498968][ T50] usb 1-1: config index 0 descriptor too short (expected 31780, got 36) [ 567.524903][ T50] usb 1-1: config 27 has too many interfaces: 185, using maximum allowed: 32 [ 567.762139][ T50] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 567.868047][ T50] usb 1-1: config 27 has 1 interface, different from the descriptor's value: 185 [ 567.908504][ T50] usb 1-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=86.ae [ 567.919558][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.929293][ T50] usb 1-1: Product: syz [ 567.936200][ T50] usb 1-1: Manufacturer: syz [ 567.941091][ T50] usb 1-1: SerialNumber: syz [ 568.116955][T12110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.130793][T12110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.150204][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2023'. [ 568.161414][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.168037][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.198631][ T50] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 568.231164][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.240273][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.252963][ T50] gspca_sn9c20x: Write register 1000 failed -71 [ 568.260842][ T50] gspca_sn9c20x: Device initialization failed [ 568.318711][ T50] gspca_sn9c20x 1-1:27.0: probe with driver gspca_sn9c20x failed with error -71 [ 568.351151][ T50] usb 1-1: USB disconnect, device number 81 [ 568.937164][T12116] bond2 (unregistering): Released all slaves [ 569.232068][ T50] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 569.392042][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 569.419863][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.429748][ T50] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 569.440120][ T50] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 569.518569][ T50] usb 3-1: Product: syz [ 569.531487][ T50] usb 3-1: Manufacturer: syz [ 569.576720][ T50] usb 3-1: SerialNumber: syz [ 569.604668][ T50] usb 3-1: config 0 descriptor?? [ 569.996017][T12144] loop8: detected capacity change from 0 to 1 [ 570.007126][T12144] buffer_io_error: 3 callbacks suppressed [ 570.007147][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.026034][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.035187][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.037502][ T50] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 570.048719][T12145] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.071648][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.099359][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.113309][T12144] ldm_validate_partition_table(): Disk read failed. [ 570.262345][ T50] usb 3-1: USB disconnect, device number 85 [ 570.281787][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.309829][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.382120][ T5893] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 570.431029][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.502318][T12144] Buffer I/O error on dev loop8, logical block 0, async page read [ 570.522135][T12152] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2039'. [ 570.556967][T12144] Dev loop8: unable to read RDB block 0 [ 570.573608][T12144] loop8: unable to read partition table [ 570.582842][T12144] loop8: partition table beyond EOD, truncated [ 570.595664][T12144] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 570.678024][T12004] udevd[12004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.711615][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.722571][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.737643][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.747176][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.761719][ T5893] usb 4-1: config 0 descriptor?? [ 571.202057][ T50] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 571.362307][ T5893] plantronics 0003:047F:FFFF.0021: report_id 4113437154 is invalid [ 571.370249][ T5893] plantronics 0003:047F:FFFF.0021: item 0 4 1 8 parsing failed [ 571.465878][ T50] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 571.499762][ T5893] plantronics 0003:047F:FFFF.0021: parse failed [ 571.531990][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.556524][ T5893] plantronics 0003:047F:FFFF.0021: probe with driver plantronics failed with error -22 [ 571.579952][ T50] usb 3-1: config 0 descriptor?? [ 571.594825][ T50] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 571.932190][ T5832] usb 4-1: USB disconnect, device number 82 [ 571.999336][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 572.016418][T12179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.032374][T12179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.225794][ T30] audit: type=1326 audit(1743599964.573:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f447178d169 code=0x0 [ 572.327316][T12192] fuse: Unknown parameter 'fd' [ 572.460560][T12192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 572.502235][ T50] gspca_sonixj: reg_w1 err -110 [ 572.507336][ T50] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 572.662337][ T5893] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 572.707805][ T5832] usb 3-1: USB disconnect, device number 86 [ 573.007728][T12207] FAULT_INJECTION: forcing a failure. [ 573.007728][T12207] name failslab, interval 1, probability 0, space 0, times 0 [ 573.025765][T12207] CPU: 0 UID: 0 PID: 12207 Comm: syz.1.2056 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 573.025800][T12207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.025813][T12207] Call Trace: [ 573.025822][T12207] [ 573.025831][T12207] dump_stack_lvl+0x241/0x360 [ 573.025871][T12207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.025902][T12207] ? __pfx__printk+0x10/0x10 [ 573.025938][T12207] ? __pfx___might_resched+0x10/0x10 [ 573.025971][T12207] should_fail_ex+0x424/0x570 [ 573.026011][T12207] should_failslab+0xac/0x100 [ 573.026043][T12207] __kmalloc_noprof+0xdf/0x4d0 [ 573.026073][T12207] ? iter_file_splice_write+0x2f5/0x1530 [ 573.026105][T12207] iter_file_splice_write+0x2f5/0x1530 [ 573.026135][T12207] ? aa_file_perm+0x3f1/0xf60 [ 573.026175][T12207] ? __pfx_aa_file_perm+0x10/0x10 [ 573.026210][T12207] ? register_lock_class+0x54/0x330 [ 573.026237][T12207] ? __pfx_iter_file_splice_write+0x10/0x10 [ 573.026280][T12207] ? rcu_read_lock_any_held+0xbb/0x160 [ 573.026308][T12207] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 573.026350][T12207] ? __pfx_fuse_splice_write+0x10/0x10 [ 573.026382][T12207] do_splice+0xda7/0x1920 [ 573.026415][T12207] ? __lock_acquire+0xad5/0xd80 [ 573.026460][T12207] ? pipe_clear_nowait+0x1ad/0x250 [ 573.026506][T12207] ? __pfx_do_splice+0x10/0x10 [ 573.026533][T12207] ? __fget_files+0x2a/0x420 [ 573.026564][T12207] __se_sys_splice+0x2dc/0x450 [ 573.026601][T12207] ? __pfx___se_sys_splice+0x10/0x10 [ 573.026640][T12207] ? __x64_sys_splice+0x21/0xf0 [ 573.026673][T12207] do_syscall_64+0xf3/0x230 [ 573.026697][T12207] ? clear_bhb_loop+0x45/0xa0 [ 573.026722][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.026744][T12207] RIP: 0033:0x7f980058d169 [ 573.026765][T12207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.026784][T12207] RSP: 002b:00007f980148d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 573.026807][T12207] RAX: ffffffffffffffda RBX: 00007f98007a5fa0 RCX: 00007f980058d169 [ 573.026823][T12207] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 573.026835][T12207] RBP: 00007f980148d090 R08: 000000000004ffe2 R09: 0000000000000000 [ 573.026849][T12207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.026863][T12207] R13: 0000000000000000 R14: 00007f98007a5fa0 R15: 00007f98008cfa28 [ 573.026896][T12207] [ 573.609692][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 573.717192][T12223] »»»»»»: renamed from lo [ 573.834160][T12227] FAULT_INJECTION: forcing a failure. [ 573.834160][T12227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.876710][T12227] CPU: 1 UID: 0 PID: 12227 Comm: syz.4.2063 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 573.876734][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.876749][T12227] Call Trace: [ 573.876756][T12227] [ 573.876764][T12227] dump_stack_lvl+0x241/0x360 [ 573.876793][T12227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.876815][T12227] ? __pfx__printk+0x10/0x10 [ 573.876844][T12227] should_fail_ex+0x424/0x570 [ 573.876873][T12227] _copy_to_user+0x31/0xb0 [ 573.876897][T12227] simple_read_from_buffer+0xc4/0x170 [ 573.876923][T12227] proc_fail_nth_read+0x1ef/0x260 [ 573.876942][T12227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.876960][T12227] ? rw_verify_area+0x246/0x630 [ 573.876976][T12227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.876993][T12227] vfs_read+0x21f/0xb90 [ 573.877014][T12227] ? __pfx___mutex_lock+0x10/0x10 [ 573.877031][T12227] ? __pfx_vfs_read+0x10/0x10 [ 573.877050][T12227] ? __fget_files+0x2a/0x420 [ 573.877065][T12227] ? __fget_files+0x39d/0x420 [ 573.877078][T12227] ? __fget_files+0x2a/0x420 [ 573.877098][T12227] ksys_read+0x19d/0x2d0 [ 573.877117][T12227] ? __pfx_ksys_read+0x10/0x10 [ 573.877139][T12227] ? do_syscall_64+0xb6/0x230 [ 573.877157][T12227] do_syscall_64+0xf3/0x230 [ 573.877173][T12227] ? clear_bhb_loop+0x45/0xa0 [ 573.877191][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.877206][T12227] RIP: 0033:0x7f447178bb7c [ 573.877220][T12227] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 573.877233][T12227] RSP: 002b:00007f447268e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.877249][T12227] RAX: ffffffffffffffda RBX: 00007f44719a5fa0 RCX: 00007f447178bb7c [ 573.877261][T12227] RDX: 000000000000000f RSI: 00007f447268e0a0 RDI: 0000000000000005 [ 573.877271][T12227] RBP: 00007f447268e090 R08: 0000000000000000 R09: 0000000000000000 [ 573.877281][T12227] R10: 0000200000002700 R11: 0000000000000246 R12: 0000000000000001 [ 573.877291][T12227] R13: 0000000000000000 R14: 00007f44719a5fa0 R15: 00007f4471acfa28 [ 573.877314][T12227] [ 573.905061][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.153536][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.278159][T12233] xt_nfacct: accounting object `syz1' does not exists [ 574.461960][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 574.492933][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 574.521125][T12236] netlink: 'syz.4.2067': attribute type 20 has an invalid length. [ 576.040234][T12266] netlink: 'syz.3.2078': attribute type 27 has an invalid length. [ 576.846667][T12293] FAULT_INJECTION: forcing a failure. [ 576.846667][T12293] name failslab, interval 1, probability 0, space 0, times 0 [ 576.870149][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.3.2089 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 576.870181][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.870195][T12293] Call Trace: [ 576.870203][T12293] [ 576.870212][T12293] dump_stack_lvl+0x241/0x360 [ 576.870250][T12293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.870280][T12293] ? __pfx__printk+0x10/0x10 [ 576.870314][T12293] ? __pfx___might_resched+0x10/0x10 [ 576.870345][T12293] should_fail_ex+0x424/0x570 [ 576.870393][T12293] should_failslab+0xac/0x100 [ 576.870442][T12293] __kmalloc_cache_noprof+0x73/0x370 [ 576.870482][T12293] ? landlock_init_hierarchy_log+0xa0/0x640 [ 576.870518][T12293] landlock_init_hierarchy_log+0xa0/0x640 [ 576.870548][T12293] ? __kmalloc_cache_noprof+0x236/0x370 [ 576.870591][T12293] landlock_merge_ruleset+0x66e/0x900 [ 576.870622][T12293] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 576.870665][T12293] do_syscall_64+0xf3/0x230 [ 576.870688][T12293] ? clear_bhb_loop+0x45/0xa0 [ 576.870714][T12293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.870734][T12293] RIP: 0033:0x7f310b18d169 [ 576.870752][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.870771][T12293] RSP: 002b:00007f310c06c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 576.870793][T12293] RAX: ffffffffffffffda RBX: 00007f310b3a5fa0 RCX: 00007f310b18d169 [ 576.870808][T12293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 576.870820][T12293] RBP: 00007f310c06c090 R08: 0000000000000000 R09: 0000000000000000 [ 576.870833][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.870846][T12293] R13: 0000000000000000 R14: 00007f310b3a5fa0 R15: 00007f310b4cfa28 [ 576.870877][T12293] [ 576.871496][T12293] ------------[ cut here ]------------ [ 577.063738][T12293] WARNING: CPU: 1 PID: 12293 at security/landlock/domain.h:133 free_ruleset+0x1f3/0x250 [ 577.073602][T12293] Modules linked in: [ 577.074936][T12295] FAULT_INJECTION: forcing a failure. [ 577.074936][T12295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.077526][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.3.2089 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 577.102531][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 577.112699][T12293] RIP: 0010:free_ruleset+0x1f3/0x250 [ 577.118049][T12293] Code: 89 ff e8 10 54 6c fd 49 8b 1f 4c 89 ff e8 f5 b1 60 fd 48 85 db 74 36 e8 8b 2f 02 fd 49 89 df e9 34 ff ff ff e8 7e 2f 02 fd 90 <0f> 0b 90 eb c2 e8 73 2f 02 fd eb 1c bf 01 00 00 00 89 ee e8 a5 33 [ 577.129660][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.1.2091 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 577.129695][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 577.129711][T12295] Call Trace: [ 577.129721][T12295] [ 577.129731][T12295] dump_stack_lvl+0x241/0x360 [ 577.129774][T12295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.129808][T12295] ? __pfx__printk+0x10/0x10 [ 577.129851][T12295] should_fail_ex+0x424/0x570 [ 577.129893][T12295] _copy_to_user+0x31/0xb0 [ 577.129928][T12295] simple_read_from_buffer+0xc4/0x170 [ 577.129966][T12295] proc_fail_nth_read+0x1ef/0x260 [ 577.129995][T12295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.130022][T12295] ? rw_verify_area+0x246/0x630 [ 577.130047][T12295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.130073][T12295] vfs_read+0x21f/0xb90 [ 577.130104][T12295] ? __pfx___mutex_lock+0x10/0x10 [ 577.130130][T12295] ? __pfx_vfs_read+0x10/0x10 [ 577.130160][T12295] ? __fget_files+0x2a/0x420 [ 577.130183][T12295] ? __fget_files+0x39d/0x420 [ 577.130211][T12295] ? __fget_files+0x2a/0x420 [ 577.130244][T12295] ksys_read+0x19d/0x2d0 [ 577.130272][T12295] ? __pfx_ksys_read+0x10/0x10 [ 577.130305][T12295] ? do_syscall_64+0xb6/0x230 [ 577.130333][T12295] do_syscall_64+0xf3/0x230 [ 577.130357][T12295] ? clear_bhb_loop+0x45/0xa0 [ 577.130388][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.130410][T12295] RIP: 0033:0x7f980058bb7c [ 577.130430][T12295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 577.130449][T12295] RSP: 002b:00007f980148d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.130475][T12295] RAX: ffffffffffffffda RBX: 00007f98007a5fa0 RCX: 00007f980058bb7c [ 577.130492][T12295] RDX: 000000000000000f RSI: 00007f980148d0a0 RDI: 0000000000000005 [ 577.130506][T12295] RBP: 00007f980148d090 R08: 0000000000000000 R09: 0000000000000000 [ 577.130520][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.130533][T12295] R13: 0000000000000000 R14: 00007f98007a5fa0 R15: 00007f98008cfa28 [ 577.130568][T12295] [ 577.349728][T12293] RSP: 0018:ffffc90002ec7dd8 EFLAGS: 00010293 [ 577.355904][T12293] RAX: ffffffff84c12722 RBX: 0000000000000000 RCX: ffff888012fb0000 [ 577.363977][T12293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.372117][T12293] RBP: 1ffff110062889c4 R08: ffffffff84c232bf R09: 1ffff110062889c1 [ 577.380139][T12293] R10: dffffc0000000000 R11: ffffed10062889c2 R12: ffff888031444e20 [ 577.388331][T12293] R13: dffffc0000000000 R14: ffff888034e71900 R15: ffff888031444e00 [ 577.396415][T12293] FS: 00007f310c06c6c0(0000) GS:ffff888125099000(0000) knlGS:0000000000000000 [ 577.405617][T12293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.412302][T12293] CR2: 0000000000000000 CR3: 000000005f55e000 CR4: 00000000003526f0 [ 577.420324][T12293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.428422][T12293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 577.436598][T12293] Call Trace: [ 577.440034][T12293] [ 577.443081][T12293] landlock_merge_ruleset+0x6d8/0x900 [ 577.448599][T12293] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 577.454901][T12293] do_syscall_64+0xf3/0x230 [ 577.459446][T12293] ? clear_bhb_loop+0x45/0xa0 [ 577.464192][T12293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.470121][T12293] RIP: 0033:0x7f310b18d169 [ 577.474632][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.494396][T12293] RSP: 002b:00007f310c06c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 577.502930][T12293] RAX: ffffffffffffffda RBX: 00007f310b3a5fa0 RCX: 00007f310b18d169 [ 577.510936][T12293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 577.519047][T12293] RBP: 00007f310c06c090 R08: 0000000000000000 R09: 0000000000000000 [ 577.527135][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.535208][T12293] R13: 0000000000000000 R14: 00007f310b3a5fa0 R15: 00007f310b4cfa28 [ 577.543399][T12293] [ 577.546479][T12293] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 577.553804][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.3.2089 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 577.565847][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 577.575954][T12293] Call Trace: [ 577.579278][T12293] [ 577.582264][T12293] dump_stack_lvl+0x241/0x360 [ 577.586981][T12293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.592209][T12293] ? __pfx__printk+0x10/0x10 [ 577.596842][T12293] ? vscnprintf+0x5d/0x90 [ 577.601195][T12293] panic+0x349/0x880 [ 577.605112][T12293] ? __warn+0x174/0x4d0 [ 577.609320][T12293] ? __pfx_panic+0x10/0x10 [ 577.613786][T12293] __warn+0x344/0x4d0 [ 577.617808][T12293] ? free_ruleset+0x1f3/0x250 [ 577.622524][T12293] report_bug+0x2b3/0x500 [ 577.626906][T12293] ? free_ruleset+0x1f3/0x250 [ 577.631621][T12293] ? free_ruleset+0x1f3/0x250 [ 577.636320][T12293] ? free_ruleset+0x1f5/0x250 [ 577.641035][T12293] handle_bug+0x89/0x170 [ 577.645295][T12293] exc_invalid_op+0x1a/0x50 [ 577.649815][T12293] asm_exc_invalid_op+0x1a/0x20 [ 577.654682][T12293] RIP: 0010:free_ruleset+0x1f3/0x250 [ 577.659994][T12293] Code: 89 ff e8 10 54 6c fd 49 8b 1f 4c 89 ff e8 f5 b1 60 fd 48 85 db 74 36 e8 8b 2f 02 fd 49 89 df e9 34 ff ff ff e8 7e 2f 02 fd 90 <0f> 0b 90 eb c2 e8 73 2f 02 fd eb 1c bf 01 00 00 00 89 ee e8 a5 33 [ 577.679651][T12293] RSP: 0018:ffffc90002ec7dd8 EFLAGS: 00010293 [ 577.685735][T12293] RAX: ffffffff84c12722 RBX: 0000000000000000 RCX: ffff888012fb0000 [ 577.693716][T12293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.702043][T12293] RBP: 1ffff110062889c4 R08: ffffffff84c232bf R09: 1ffff110062889c1 [ 577.710023][T12293] R10: dffffc0000000000 R11: ffffed10062889c2 R12: ffff888031444e20 [ 577.718005][T12293] R13: dffffc0000000000 R14: ffff888034e71900 R15: ffff888031444e00 [ 577.726024][T12293] ? landlock_log_drop_domain+0x4f/0x1b0 [ 577.731676][T12293] ? free_ruleset+0x1f2/0x250 [ 577.736380][T12293] ? free_ruleset+0x1f2/0x250 [ 577.741081][T12293] landlock_merge_ruleset+0x6d8/0x900 [ 577.746471][T12293] __se_sys_landlock_restrict_self+0x2ce/0x7d0 [ 577.752656][T12293] do_syscall_64+0xf3/0x230 [ 577.757176][T12293] ? clear_bhb_loop+0x45/0xa0 [ 577.761865][T12293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.767775][T12293] RIP: 0033:0x7f310b18d169 [ 577.772202][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.792272][T12293] RSP: 002b:00007f310c06c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 577.800743][T12293] RAX: ffffffffffffffda RBX: 00007f310b3a5fa0 RCX: 00007f310b18d169 [ 577.808730][T12293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 577.816713][T12293] RBP: 00007f310c06c090 R08: 0000000000000000 R09: 0000000000000000 [ 577.824696][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.832676][T12293] R13: 0000000000000000 R14: 00007f310b3a5fa0 R15: 00007f310b4cfa28 [ 577.840673][T12293] [ 577.843998][T12293] Kernel Offset: disabled [ 577.848330][T12293] Rebooting in 86400 seconds..