last executing test programs: 1m42.073789097s ago: executing program 4 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) 1m40.393654998s ago: executing program 4 (id=1264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x79, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m40.243272166s ago: executing program 4 (id=1268): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0x7f, [0xfffffffd, 0xfffffffe], 0x8}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0xffff) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x321300, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 1m38.627820458s ago: executing program 4 (id=1273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r8, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 1m38.515317178s ago: executing program 4 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x890, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r1]) inotify_init1(0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1m35.875783825s ago: executing program 4 (id=1285): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='^', 0x1}], 0x1}}], 0x1, 0x4046040) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)}, 0x40000081) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r4, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="4a6acd82c1f5360abaa1e0b721f6f0589b1e9e11407ff7318fcdd678e0e0503ffc5f038dee013a276da24503c2c772168258295b594a021f208107ecf1e410f5a20433e7b29210249bde13b1a094e012a3c61c976832de2b4b675247d574fbaa4291d62c4ed2e88a52a12e425585d5edb3c45cc09c94477faa2f8ba28d4a92ffc7fa63375b5dc62acb5f6c1e97b3310399f4ce0edab9c8970a95f1d455d02ddd6c8f332371f04b135b1f69979b72aaa77297dcafc75d3eb1bc8ef5a4fe74e3325af3bd4abc96cac0efce7f2e96132df8d5f442f84f494a1757", 0xd9}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000003c0)="15c74744e6d10c06060eacb871ab7ea621903473696c43efbb4fedeecadae870c43ede1d568128dceb101d9fdfa60de3476ad43d669ce057a10408b1ae2fb5e1241f9b78201badb49ffe26567252b1c8375f550524ce3cdd93b4c717688e4e62ba05c15440660187930fc4217435a17e12ecdb27a61aa7e55e068175aa7486", 0x7f}], 0x3, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x19}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @loopback}}}, @ip_ttl={{0x14}}], 0x100}, 0x4000901) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4c22, 0x0, @loopback, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1m20.779384755s ago: executing program 32 (id=1285): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='^', 0x1}], 0x1}}], 0x1, 0x4046040) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)}, 0x40000081) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r4, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="4a6acd82c1f5360abaa1e0b721f6f0589b1e9e11407ff7318fcdd678e0e0503ffc5f038dee013a276da24503c2c772168258295b594a021f208107ecf1e410f5a20433e7b29210249bde13b1a094e012a3c61c976832de2b4b675247d574fbaa4291d62c4ed2e88a52a12e425585d5edb3c45cc09c94477faa2f8ba28d4a92ffc7fa63375b5dc62acb5f6c1e97b3310399f4ce0edab9c8970a95f1d455d02ddd6c8f332371f04b135b1f69979b72aaa77297dcafc75d3eb1bc8ef5a4fe74e3325af3bd4abc96cac0efce7f2e96132df8d5f442f84f494a1757", 0xd9}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000003c0)="15c74744e6d10c06060eacb871ab7ea621903473696c43efbb4fedeecadae870c43ede1d568128dceb101d9fdfa60de3476ad43d669ce057a10408b1ae2fb5e1241f9b78201badb49ffe26567252b1c8375f550524ce3cdd93b4c717688e4e62ba05c15440660187930fc4217435a17e12ecdb27a61aa7e55e068175aa7486", 0x7f}], 0x3, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x19}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @loopback}}}, @ip_ttl={{0x14}}], 0x100}, 0x4000901) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4c22, 0x0, @loopback, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 50.361174713s ago: executing program 5 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0xff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x30, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9}, @generic={0x76, 0xa, 0x3, 0x7, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x90, &(0x7f0000000500)=""/144, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0xcd20, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001600)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, r5], &(0x7f0000001640)=[{0x2, 0x2, 0x5, 0x5}, {0x3, 0x4, 0xb, 0x2}, {0x1, 0x4, 0x5, 0x3}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x2, 0x5, 0xc}, {0x3, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x10, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x3, 0x2, 0x2, 0x7}], 0x10, 0xff}, 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 39.927420615s ago: executing program 5 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0xff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x30, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9}, @generic={0x76, 0xa, 0x3, 0x7, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x90, &(0x7f0000000500)=""/144, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0xcd20, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001600)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, r5], &(0x7f0000001640)=[{0x2, 0x2, 0x5, 0x5}, {0x3, 0x4, 0xb, 0x2}, {0x1, 0x4, 0x5, 0x3}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x2, 0x5, 0xc}, {0x3, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x10, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x3, 0x2, 0x2, 0x7}], 0x10, 0xff}, 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 26.746307595s ago: executing program 5 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0xff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x30, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9}, @generic={0x76, 0xa, 0x3, 0x7, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x90, &(0x7f0000000500)=""/144, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0xcd20, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001600)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, r5], &(0x7f0000001640)=[{0x2, 0x2, 0x5, 0x5}, {0x3, 0x4, 0xb, 0x2}, {0x1, 0x4, 0x5, 0x3}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x2, 0x5, 0xc}, {0x3, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x10, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x3, 0x2, 0x2, 0x7}], 0x10, 0xff}, 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 15.775539054s ago: executing program 5 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0xff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x30, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9}, @generic={0x76, 0xa, 0x3, 0x7, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x90, &(0x7f0000000500)=""/144, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0xcd20, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001600)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, r5], &(0x7f0000001640)=[{0x2, 0x2, 0x5, 0x5}, {0x3, 0x4, 0xb, 0x2}, {0x1, 0x4, 0x5, 0x3}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x2, 0x5, 0xc}, {0x3, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x10, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x3, 0x2, 0x2, 0x7}], 0x10, 0xff}, 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 14.981268488s ago: executing program 1 (id=1543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf3}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000000000000001400008000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000020000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="00000000df000000b70800008a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500860000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000005}) 11.556301047s ago: executing program 2 (id=1549): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x108) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240), &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(r4, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.949209617s ago: executing program 1 (id=1556): fanotify_init(0x0, 0x2) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) sched_setparam(0x0, &(0x7f00000000c0)=0xf9) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYRES32=r8], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r7}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x1a4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x10, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffff], [0x0, 0x8, 0xdb2, 0x0, 0x0, 0x0, 0x401]}}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xed, 0x20, 0x4, 0x2, 0x1, 0x1ff, 0x4, 0x2}}, {0x8, 0x2, [0x60, 0x4]}}, {{0x1c, 0x1, {0x1, 0xff, 0xfff, 0x80000000, 0x1, 0x3, 0x401, 0x3}}, {0xa, 0x2, [0xfffa, 0x1a, 0x4]}}, {{0x1c, 0x1, {0x8, 0x9, 0xfffb, 0x7cfd, 0x2, 0x8507, 0x2, 0x5}}, {0xe, 0x2, [0x46c, 0x2, 0x6, 0x0, 0x9]}}, {{0x1c, 0x1, {0x6, 0x2, 0x8000, 0xdf9a, 0x1, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0xfff, 0x2, 0x8, 0x0, 0x4}}, {0xc, 0x2, [0xa, 0x1, 0x7, 0x5]}}, {{0x1c, 0x1, {0x91, 0xab, 0xf76d, 0x7f, 0x2, 0x10, 0x0, 0x4}}, {0xc, 0x2, [0xc1, 0x3, 0x9, 0x80]}}, {{0x1c, 0x1, {0x2, 0x69, 0x9, 0x9, 0x2, 0x9, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x8]}}]}]}, 0x1a4}}, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000340)={0x0, 'veth1_to_hsr\x00'}, 0x18) ioctl$SIOCAX25GETUID(r10, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 7.124628199s ago: executing program 0 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x890, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r1]) inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 6.677580435s ago: executing program 3 (id=1560): mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8904, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0, 0x0, 0x0, 0x0, 0x0, r7}]) mount$bind(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x317060, 0x0) 6.656168191s ago: executing program 1 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)={0x87, 0x0, '\x00', [@pad1]}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x18) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r10, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 6.438452783s ago: executing program 2 (id=1562): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc491, 0x10100, 0x0, 0x396, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef8e, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000140)={[0x5]}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 4.757110722s ago: executing program 1 (id=1563): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r0, 0x0, 0x0, 0x5, &(0x7f0000000180)={0x11, 0x11, 0x0, 0x1, 0xfc, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 4.649138265s ago: executing program 2 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x4000100, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x320, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x6, 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.605041102s ago: executing program 0 (id=1565): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) 4.568261558s ago: executing program 1 (id=1566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf3}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000000000000001400008000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000020000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="00000000df000000b70800008a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500860000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000005}) 4.499547696s ago: executing program 0 (id=1567): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000001400)=""/200, 0x40f00, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000003c0)=0x189, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 3.094762392s ago: executing program 2 (id=1568): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x169080, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0xe, 0x840) (async) close(0xffffffffffffffff) (async) syz_open_dev$midi(&(0x7f00000000c0), 0x4, 0x4a243) (async) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETAF(r4, 0x5408, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f00000001c0)=@s={0x5, @generic=0x9, 0x29, 0xd7}) 3.058392596s ago: executing program 0 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)={0x87, 0x0, '\x00', [@pad1]}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x18) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r10, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 2.188040679s ago: executing program 2 (id=1570): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00008000000000000116c5c17b1e56821de3fae3e8cfeca6a7d4e57bf0a277f8b232c1db70586185801910a67f0fda5214d2c9152757ee536ec582e1a89d0eb3f405bf56652161d1006cfed800d7de8020baa1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.070028095s ago: executing program 3 (id=1571): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="53769277def4353ea1e994ddb4acea7574382211ed2807eb5632e37bfc8bcb0dcafd14083d186b050f722159b109d4dd91ffff0a843c9e4f18f44cd09ca3495a562544ceb0ad29b37cf05397f1a5b20a8e6a543eb726c8f96477facf60d3f05ca3b821b5ea090000005a31ddb23c556332ba00000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040815}, 0x2040040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x4010) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000480), 0x4) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000400)=0x4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) ioprio_get$uid(0x3, 0xee01) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x159b01) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r7 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x8, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="27031c00160014000200", 0xa}, {&(0x7f0000000180)="7fce65c9e34b11007f1a03df46a4853ed1b300000000140000000000", 0x1c}], 0x2}, 0x24004088) 2.03730233s ago: executing program 0 (id=1572): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x3, 0x5004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000900000095000000000000796f00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r6, &(0x7f00000004c0)="a0a3", 0x2, 0x200080d1, 0x0, 0x0) syz_open_dev$dri(0x0, 0xaab8, 0x109100) recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) 2.037016037s ago: executing program 2 (id=1573): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0414"], 0x9) socket$qrtr(0x2a, 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x40, 0xd, 0xd4, {0xd4, 0x10, "8604f663d87f8b2e75e534b4b840294b8dc668c1ada66a3fa1f1ed483c751b50bb00e584422fa16371b2c8d7f063dc42822244dfa90446e1b87090883c755cbe7a07d8c6a82035e513240fa73045915aa9f6530fd799272723f1c4a7e9c4a643a1b9b32a6ed8f31e96eff5f2780e07939f2a4c9fbf0b5e0a6bc758f2dc5938fc0b701f59b9f90cb73084e545865e6e3bcff1c29b2cbeff1c97c99273207ef65695611c90ed7cebc175c69a3f845cc3d1db31200b1631296023dce59fbbd350d15a39d6c440076099faf2cba33b28bc660d26"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x5, 0x0, "f721e5cd", "24863ade"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x7, 0x5, 0x0, 0xb7, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x20, 0x14, 0x72, "3e442a9b75404f2eff91f1029997d6e607f73330f91875e83546e73fdc2255cdd72f832bbcb5bb40a684bf36496aa46e8425ab4660427b22815d4ef397574a3484422e32e1d209a12986e44fa74cc68e919a8985b4651257f78978f735ec6cc3c3efa9e5184ea6ce2876c913b4eecbff4ecf"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x120, 0x2}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x9, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, '%^'}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6cb8}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000780)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "51e1"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xb1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xd}, &(0x7f00000008c0)={0x40, 0x21, 0x1}}) open(0x0, 0x14507e, 0x0) 1.918976985s ago: executing program 3 (id=1574): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x0, "0d3d4a3b5b7bc69a21cfb7f5eaac46dbe89b1347050000000000000002249341"}) 1.043950658s ago: executing program 3 (id=1575): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xf0}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r9, 0x1) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x90841, 0x0) 442.310187ms ago: executing program 0 (id=1576): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x890, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r1]) inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 149.986066ms ago: executing program 3 (id=1577): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) 77.274275ms ago: executing program 1 (id=1578): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001380)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0xfffbfffd}}, 0x2da, 0x0, 0x500, 0x0, 0x54, 0xa, 0x2}, 0x9c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r5, &(0x7f0000020280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xc, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2, 0x61, 0x14, 0x24}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x6}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r7, &(0x7f0000001640)=[{&(0x7f0000000380)="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", 0x1000}], 0x1) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 0s ago: executing program 3 (id=1579): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) faccessat2(0xffffffffffffffff, 0x0, 0x7, 0x1200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x40000) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) (fail_nth: 2) kernel console output (not intermixed with test programs): 9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 397.527203][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.951354][ T30] audit: type=1326 audit(1764291811.682:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 397.975254][ T30] audit: type=1326 audit(1764291811.682:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 397.998574][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.106023][ T30] audit: type=1326 audit(1764291811.682:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 398.129314][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.136626][ T30] audit: type=1326 audit(1764291811.682:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f950498df90 code=0x7ffc0000 [ 398.159945][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.192469][ T30] audit: type=1326 audit(1764291811.682:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 398.225420][ T30] audit: type=1326 audit(1764291811.682:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 398.248708][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.287186][ T30] audit: type=1326 audit(1764291811.682:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 398.310531][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.324464][ T30] audit: type=1326 audit(1764291811.682:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 398.347906][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.322471][ T5810] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 399.498048][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.530521][ T5810] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 399.547208][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.566873][ T5810] usb 2-1: Product: syz [ 399.579565][ T5810] usb 2-1: Manufacturer: syz [ 399.584479][ T5810] usb 2-1: SerialNumber: syz [ 399.602873][ T5810] usb 2-1: config 0 descriptor?? [ 399.635154][ T5810] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 399.675454][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.716503][ T5934] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 399.892371][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 399.907399][ T5934] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 399.915756][ T5934] usb 3-1: config 0 has no interface number 0 [ 399.944458][ T5934] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 399.962596][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.978444][ T5934] usb 3-1: Product: syz [ 399.989753][ T5934] usb 3-1: Manufacturer: syz [ 399.994485][ T5934] usb 3-1: SerialNumber: syz [ 400.006496][ T5934] usb 3-1: config 0 descriptor?? [ 400.097144][ T5934] msi2500 3-1:0.246: Registered as swradio24 [ 400.105719][ T5934] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 400.279087][ T5934] usb 5-1: USB disconnect, device number 43 [ 400.635145][ T5810] usb 3-1: USB disconnect, device number 46 [ 400.691513][ T5934] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 401.422214][ T2150] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 401.609577][ T9812] FAULT_INJECTION: forcing a failure. [ 401.609577][ T9812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.624721][ T2150] usb 4-1: Using ep0 maxpacket: 32 [ 401.631473][ T2150] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.640038][ T2150] usb 4-1: config 0 has no interface number 0 [ 401.646578][ T2150] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 401.658568][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: syz.2.1067 Not tainted syzkaller #0 PREEMPT(full) [ 401.658582][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.658588][ T9812] Call Trace: [ 401.658592][ T9812] [ 401.658596][ T9812] dump_stack_lvl+0x16c/0x1f0 [ 401.658611][ T9812] should_fail_ex+0x512/0x640 [ 401.658627][ T9812] _copy_from_user+0x2e/0xd0 [ 401.658642][ T9812] io_uring_setup+0xb4/0x2170 [ 401.658658][ T9812] ? find_held_lock+0x2b/0x80 [ 401.658672][ T9812] ? __pfx_io_uring_setup+0x10/0x10 [ 401.658687][ T9812] ? avc_has_perm_noaudit+0x117/0x3b0 [ 401.658704][ T9812] ? avc_has_perm_noaudit+0x149/0x3b0 [ 401.658724][ T9812] ? ksys_write+0x1ac/0x250 [ 401.658735][ T9812] ? __pfx_ksys_write+0x10/0x10 [ 401.658748][ T9812] __x64_sys_io_uring_setup+0xc2/0x170 [ 401.658765][ T9812] do_syscall_64+0xcd/0xfa0 [ 401.658778][ T9812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.658788][ T9812] RIP: 0033:0x7f950498f749 [ 401.658797][ T9812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.658808][ T9812] RSP: 002b:00007f95057e5fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 401.658818][ T9812] RAX: ffffffffffffffda RBX: 00007f9504be5fa0 RCX: 00007f950498f749 [ 401.658825][ T9812] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 000000000000263c [ 401.658831][ T9812] RBP: 0000200000000840 R08: 0000000000000000 R09: 0000000000000000 [ 401.658841][ T9812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 401.658847][ T9812] R13: 0000000000000000 R14: 000000000000263c R15: 0000000000000000 [ 401.658861][ T9812] [ 401.692258][ T5810] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 401.692347][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.840555][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.846527][ C1] hrtimer: interrupt took 184416314 ns [ 401.852865][ T2150] usb 4-1: config 0 interface 1 has no altsetting 0 [ 401.890367][ T9814] batadv_slave_1: entered promiscuous mode [ 401.899027][ T9814] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1068'. [ 401.908913][ T9813] batadv_slave_1: left promiscuous mode [ 401.943585][ T9816] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1069'. [ 401.952589][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.959656][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 401.969413][ T2150] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 401.978583][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.986624][ T2150] usb 4-1: Product: syz [ 401.990758][ T2150] usb 4-1: Manufacturer: syz [ 401.995353][ T2150] usb 4-1: SerialNumber: syz [ 402.001316][ T2150] usb 4-1: config 0 descriptor?? [ 402.059015][ T5810] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 402.101023][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.134094][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.146229][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 402.161803][ T5810] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 402.173810][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.184515][ T5810] usb 1-1: config 0 descriptor?? [ 402.193719][ T5867] usb 2-1: USB disconnect, device number 41 [ 402.289105][ T2150] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 402.301497][ T2150] cx231xx 4-1:0.1: Not found matching IAD interface [ 402.322491][ T2150] usb 4-1: USB disconnect, device number 38 [ 402.432432][ T5934] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 402.622370][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 402.831261][ T5934] usb 3-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.844471][ T5934] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 402.862192][ T5934] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 402.887623][ T5934] usb 3-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 402.905556][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 402.930043][ T5934] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 402.950833][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.969949][ T5934] usb 3-1: Product: syz [ 402.990336][ T5934] usb 3-1: Manufacturer: syz [ 402.996617][ T5934] usb 3-1: SerialNumber: syz [ 403.011636][ T5934] usb 3-1: config 0 descriptor?? [ 403.018364][ T9818] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 403.037810][ T5934] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 403.065295][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 403.075651][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 403.272170][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 403.370588][ T5810] usbhid 1-1:0.0: can't add hid device: -71 [ 403.571782][ T5810] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 403.624673][ T5940] usb 3-1: USB disconnect, device number 47 [ 403.630257][ T5810] usb 1-1: USB disconnect, device number 49 [ 403.715934][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 403.740158][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 403.748427][ T10] usb 2-1: config 0 has no interface number 0 [ 403.760873][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 403.926873][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 403.936746][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.948090][ T10] usb 2-1: Product: syz [ 403.957823][ T10] usb 2-1: Manufacturer: syz [ 403.971562][ T10] usb 2-1: SerialNumber: syz [ 404.002545][ T10] usb 2-1: config 0 descriptor?? [ 404.017034][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 404.036921][ T10] em28xx 2-1:0.89: Video interface 89 found: bulk [ 404.162230][ T9842] Process accounting resumed [ 404.251808][ T5810] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 404.659899][ T5810] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 404.675572][ T5810] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 404.689172][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 404.782408][ T5810] usb 1-1: Product: syz [ 404.969383][ T5810] usb 1-1: Manufacturer: syz [ 404.974261][ T5810] usb 1-1: SerialNumber: syz [ 404.983594][ T5810] usb 1-1: config 0 descriptor?? [ 405.048963][ T5810] ch341 1-1:0.0: ch341-uart converter detected [ 405.060341][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 405.096663][ T9851] binder: 9850:9851 ioctl c0306201 200000000640 returned -22 [ 405.124657][ T10] em28xx 2-1:0.89: board has no eeprom [ 405.163327][ T9855] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.203239][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 405.225229][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 405.232989][ T5946] em28xx 2-1:0.89: Registering V4L2 extension [ 405.309159][ T10] usb 2-1: USB disconnect, device number 42 [ 405.428978][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 405.642020][ T5934] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 405.655156][ T5946] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 405.673745][ T5946] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 405.711584][ T5946] em28xx 2-1:0.89: No AC97 audio processor [ 405.720716][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 405.720728][ T30] audit: type=1400 audit(1764291819.932:846): avc: denied { setopt } for pid=9867 comm="syz.1.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 405.796792][ T5946] usb 2-1: Decoder not found [ 405.801635][ T5946] em28xx 2-1:0.89: failed to create media graph [ 405.828276][ T5810] usb 1-1: failed to send control message: -71 [ 405.836417][ T5810] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 405.845759][ T5946] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 405.889833][ T5810] usb 1-1: USB disconnect, device number 50 [ 405.908397][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 405.910286][ T5946] em28xx 2-1:0.89: Registering snapshot button... [ 405.982125][ T5934] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 406.006249][ T5810] ch341 1-1:0.0: device disconnected [ 406.144336][ T5946] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input20 [ 406.870543][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.885547][ T5934] usb 4-1: config 0 descriptor?? [ 406.893918][ T5934] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 406.995929][ T5946] em28xx 2-1:0.89: Remote control support is not available for this card. [ 407.027268][ T10] em28xx 2-1:0.89: Closing input extension [ 407.056803][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 407.529276][ T10] em28xx 2-1:0.89: Freeing device [ 407.571894][ T5946] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 407.731914][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 407.762782][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.582055][ T5934] gspca_sonixj: reg_w1 err -110 [ 408.628922][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.661849][ T5934] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 408.686873][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 408.809979][ T5946] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 408.843530][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.892420][ T5946] usb 1-1: config 0 descriptor?? [ 409.359824][ T5946] HID 045e:07da: Invalid code 65791 type 1 [ 409.568584][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.610317][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.616377][ T5946] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input21 [ 409.816719][ T9899] bridge4: entered allmulticast mode [ 411.393704][ T5946] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 411.451657][ T5946] usb 1-1: USB disconnect, device number 51 [ 412.322803][ T9908] delete_channel: no stack [ 412.338696][ T10] usb 4-1: USB disconnect, device number 39 [ 412.367916][ T9907] fido_id[9907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 412.750138][ T9900] Process accounting resumed [ 414.253951][ T9941] netlink: 'syz.1.1104': attribute type 4 has an invalid length. [ 414.886213][ T30] audit: type=1400 audit(1764291828.633:847): avc: denied { getopt } for pid=9942 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.905511][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.941515][ T5946] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 415.022560][ T9946] ptrace attach of "./syz-executor exec"[5812] was attempted by ""[9946] [ 415.041468][ T5940] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 415.100851][ T5946] usb 3-1: unable to get BOS descriptor or descriptor too short [ 415.320647][ T5946] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 415.471174][ T5946] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 415.504787][ T5946] usb 3-1: can't read configurations, error -71 [ 416.002223][ T5940] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 416.022777][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.046188][ T5940] usb 4-1: config 0 descriptor?? [ 416.701372][ T5810] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 416.879618][ T5810] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 416.912239][ T5946] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 416.924041][ T5810] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 417.276802][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.301679][ T5810] usb 5-1: Product: syz [ 417.305921][ T30] audit: type=1400 audit(1764291831.513:848): avc: denied { bind } for pid=9969 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.326661][ T5810] usb 5-1: Manufacturer: syz [ 417.337904][ T30] audit: type=1400 audit(1764291831.513:849): avc: denied { listen } for pid=9969 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.341371][ T5810] usb 5-1: SerialNumber: syz [ 417.366376][ T5810] usb 5-1: config 0 descriptor?? [ 417.371644][ T30] audit: type=1400 audit(1764291831.513:850): avc: denied { accept } for pid=9969 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.414992][ T5946] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 417.424274][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.437986][ T5810] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 417.447914][ T5946] usb 3-1: Product: syz [ 417.452693][ T5946] usb 3-1: Manufacturer: syz [ 417.460580][ T5946] usb 3-1: SerialNumber: syz [ 417.475162][ T5946] usb 3-1: config 0 descriptor?? [ 417.487734][ T5946] gspca_main: sq930x-2.14.0 probing 2770:930c [ 417.527304][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.998528][ T5946] gspca_sq930x: reg_r 001f failed -32 [ 418.004412][ T5940] usb 4-1: Cannot set autoneg [ 418.009342][ T5940] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 418.024892][ T5946] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 418.041918][ T5940] usb 4-1: USB disconnect, device number 40 [ 418.421598][ T5946] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 418.581467][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 418.728081][ T5946] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 418.754170][ T5946] usb 2-1: config 179 has no interface number 0 [ 418.766162][ T5946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 418.789384][ T5946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 418.800977][ T5946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 418.813024][ T5946] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 418.838293][ T5946] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 418.852003][ T5946] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 418.861449][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.872966][ T9979] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 419.162696][ T9995] FAULT_INJECTION: forcing a failure. [ 419.162696][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 419.176631][ T9995] CPU: 1 UID: 0 PID: 9995 Comm: syz.0.1123 Not tainted syzkaller #0 PREEMPT(full) [ 419.176657][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.176665][ T9995] Call Trace: [ 419.176670][ T9995] [ 419.176676][ T9995] dump_stack_lvl+0x16c/0x1f0 [ 419.176697][ T9995] should_fail_ex+0x512/0x640 [ 419.176717][ T9995] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 419.176747][ T9995] should_failslab+0xc2/0x120 [ 419.176766][ T9995] kmem_cache_alloc_node_noprof+0x78/0x770 [ 419.176792][ T9995] ? __alloc_skb+0x2b2/0x380 [ 419.176819][ T9995] ? __alloc_skb+0x2b2/0x380 [ 419.176836][ T9995] ? __pfx_netlink_insert+0x10/0x10 [ 419.176857][ T9995] __alloc_skb+0x2b2/0x380 [ 419.176876][ T9995] ? __pfx___alloc_skb+0x10/0x10 [ 419.176895][ T9995] ? netlink_autobind.isra.0+0x158/0x370 [ 419.176923][ T9995] netlink_alloc_large_skb+0x69/0x140 [ 419.176948][ T9995] netlink_sendmsg+0x698/0xdd0 [ 419.176977][ T9995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.177010][ T9995] ____sys_sendmsg+0xa98/0xc70 [ 419.177027][ T9995] ? copy_msghdr_from_user+0x10a/0x160 [ 419.177048][ T9995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.177070][ T9995] ___sys_sendmsg+0x134/0x1d0 [ 419.177085][ T9995] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.177098][ T9995] ? __lock_acquire+0x622/0x1c90 [ 419.177138][ T9995] __sys_sendmsg+0x16d/0x220 [ 419.177163][ T9995] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.177201][ T9995] do_syscall_64+0xcd/0xfa0 [ 419.177219][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.177236][ T9995] RIP: 0033:0x7f2e8858f749 [ 419.177248][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.177262][ T9995] RSP: 002b:00007f2e89473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.177272][ T9995] RAX: ffffffffffffffda RBX: 00007f2e887e5fa0 RCX: 00007f2e8858f749 [ 419.177279][ T9995] RDX: 0000000000008880 RSI: 0000200000002a80 RDI: 0000000000000003 [ 419.177285][ T9995] RBP: 00007f2e89473090 R08: 0000000000000000 R09: 0000000000000000 [ 419.177291][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.177296][ T9995] R13: 00007f2e887e6038 R14: 00007f2e887e5fa0 R15: 00007ffcf49d7948 [ 419.177319][ T9995] [ 419.779144][ T5810] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input22 [ 419.928216][ T5940] usb 5-1: USB disconnect, device number 44 [ 420.357664][ T5887] usb 3-1: USB disconnect, device number 49 [ 421.351405][ T5887] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 421.383901][T10015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.391679][T10015] IPv6: NLM_F_CREATE should be set when creating new route [ 421.398993][T10015] IPv6: NLM_F_CREATE should be set when creating new route [ 421.406224][T10015] IPv6: NLM_F_CREATE should be set when creating new route [ 421.709451][ T5940] usb 2-1: USB disconnect, device number 43 [ 421.709465][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 421.709599][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 421.859969][ T5887] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 421.873684][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.946513][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 421.957568][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 421.975859][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.007129][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.041064][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.073691][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.091185][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.114872][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.134444][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.151041][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.175651][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.192276][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.206018][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.217200][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.227215][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.236453][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.251183][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.259317][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.271170][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.286978][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.302320][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.317658][ T5887] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.331660][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.356647][ T5887] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 422.366499][ T5940] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 422.380825][ T5887] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 422.392058][ T5887] usb 3-1: Product: syz [ 422.392177][ T5810] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 422.396361][ T5887] usb 3-1: Manufacturer: syz [ 422.426962][ T5887] usb 3-1: SerialNumber: syz [ 422.473814][ T5887] usb 3-1: config 0 descriptor?? [ 422.581049][ T5940] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.783777][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.797710][ T5887] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 422.821729][ T5940] usb 2-1: Product: syz [ 422.826661][ T5940] usb 2-1: Manufacturer: syz [ 422.847030][ T5887] usb 3-1: USB disconnect, device number 50 [ 422.860035][ T5887] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 422.871251][ T5940] usb 2-1: SerialNumber: syz [ 422.884057][ T5940] usb 2-1: config 0 descriptor?? [ 422.962987][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 422.969521][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.982605][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.992525][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 423.005402][ T5810] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 423.015308][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.025892][ T5810] usb 4-1: config 0 descriptor?? [ 423.131099][ T5940] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 423.141149][ T5930] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 423.292662][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 423.305544][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.316160][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.325662][ T5930] usb 5-1: Product: syz [ 423.329932][ T5930] usb 5-1: Manufacturer: syz [ 423.335064][ T5930] usb 5-1: SerialNumber: syz [ 423.342655][ T5930] usb 5-1: config 0 descriptor?? [ 423.368451][ T5930] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 423.465450][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.517953][ T5810] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0015/input/input23 [ 423.614410][ T5810] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0015/input/input24 [ 423.712836][ T30] audit: type=1400 audit(1764291837.923:851): avc: denied { accept } for pid=10036 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 423.754448][ T5810] kye 0003:0458:5011.0015: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 424.834039][ T5940] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 424.851503][ T2150] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 425.246710][ T5940] usb 2-1: USB disconnect, device number 44 [ 425.619176][T10067] bridge8: entered allmulticast mode [ 425.915685][ T5887] usb 4-1: USB disconnect, device number 41 [ 426.537411][ T5946] usb 5-1: USB disconnect, device number 45 [ 427.130446][T10087] Failed to initialize the IGMP autojoin socket (err -2) [ 427.472198][ T5887] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 427.490762][ T5810] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 427.642563][ T5887] usb 4-1: config 0 has no interfaces? [ 427.649196][ T5887] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 427.713894][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.796064][ T5810] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 427.959307][ T5810] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 428.077242][ T5810] usb 5-1: Product: syz [ 428.100890][ T5946] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 428.114455][ T5887] usb 4-1: config 0 descriptor?? [ 428.119693][ T5810] usb 5-1: Manufacturer: syz [ 428.126265][T10107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2952733926 (11810935704 ns) > initial count (24 ns). Using initial count to start timer. [ 428.152482][ T5810] usb 5-1: SerialNumber: syz [ 428.166919][ T5810] usb 5-1: config 0 descriptor?? [ 428.185044][ T5810] ch341 5-1:0.0: ch341-uart converter detected [ 428.312970][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.328229][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.341707][ T5867] usb 4-1: USB disconnect, device number 42 [ 428.375422][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.451360][ T5810] usb 5-1: failed to receive control message: -32 [ 428.457947][ T5810] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 428.476927][ T5946] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 428.508295][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.523335][T10113] FAULT_INJECTION: forcing a failure. [ 428.523335][T10113] name failslab, interval 1, probability 0, space 0, times 0 [ 428.544041][ T5946] usb 2-1: config 0 descriptor?? [ 428.559299][T10113] CPU: 0 UID: 0 PID: 10113 Comm: syz.0.1159 Not tainted syzkaller #0 PREEMPT(full) [ 428.559325][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.559335][T10113] Call Trace: [ 428.559342][T10113] [ 428.559348][T10113] dump_stack_lvl+0x16c/0x1f0 [ 428.559372][T10113] should_fail_ex+0x512/0x640 [ 428.559393][T10113] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 428.559426][T10113] should_failslab+0xc2/0x120 [ 428.559446][T10113] kmem_cache_alloc_node_noprof+0x78/0x770 [ 428.559472][T10113] ? __alloc_skb+0x2b2/0x380 [ 428.559499][T10113] ? __alloc_skb+0x2b2/0x380 [ 428.559518][T10113] ? __pfx_netlink_insert+0x10/0x10 [ 428.559541][T10113] __alloc_skb+0x2b2/0x380 [ 428.559563][T10113] ? __pfx___alloc_skb+0x10/0x10 [ 428.559585][T10113] ? netlink_autobind.isra.0+0x158/0x370 [ 428.559617][T10113] netlink_alloc_large_skb+0x69/0x140 [ 428.559644][T10113] netlink_sendmsg+0x698/0xdd0 [ 428.559674][T10113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.559709][T10113] ____sys_sendmsg+0xa98/0xc70 [ 428.559728][T10113] ? copy_msghdr_from_user+0x10a/0x160 [ 428.559751][T10113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.559780][T10113] ___sys_sendmsg+0x134/0x1d0 [ 428.559805][T10113] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.559826][T10113] ? __lock_acquire+0x622/0x1c90 [ 428.559873][T10113] __sys_sendmsg+0x16d/0x220 [ 428.559897][T10113] ? __pfx___sys_sendmsg+0x10/0x10 [ 428.559936][T10113] do_syscall_64+0xcd/0xfa0 [ 428.559955][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.559973][T10113] RIP: 0033:0x7f2e8858f749 [ 428.559988][T10113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.560004][T10113] RSP: 002b:00007f2e89473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.560021][T10113] RAX: ffffffffffffffda RBX: 00007f2e887e5fa0 RCX: 00007f2e8858f749 [ 428.560032][T10113] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 428.560042][T10113] RBP: 00007f2e89473090 R08: 0000000000000000 R09: 0000000000000000 [ 428.560052][T10113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.560062][T10113] R13: 00007f2e887e6038 R14: 00007f2e887e5fa0 R15: 00007ffcf49d7948 [ 428.560087][T10113] [ 428.782359][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.916845][ T2150] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 430.179999][ T5810] usb 5-1: USB disconnect, device number 46 [ 430.195716][ T5810] ch341 5-1:0.0: device disconnected [ 430.231046][ T2150] usb 1-1: Using ep0 maxpacket: 8 [ 430.425919][T10144] syzkaller0: entered promiscuous mode [ 430.433328][T10144] syzkaller0: entered allmulticast mode [ 430.740810][ T2150] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 430.766583][ T30] audit: type=1400 audit(1764291844.974:852): avc: denied { map } for pid=10146 comm="syz.2.1172" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 430.791457][ T2150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.812899][ T2150] usb 1-1: config 0 has no interface number 0 [ 430.819108][ T2150] usb 1-1: config 0 interface 52 has no altsetting 0 [ 430.829009][ T2150] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 430.836012][ T5946] usbhid 2-1:0.0: can't add hid device: -71 [ 430.845479][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 430.854538][ T2150] usb 1-1: SerialNumber: syz [ 430.879645][ T5946] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 430.882894][ T2150] usb 1-1: config 0 descriptor?? [ 430.935293][ T5946] usb 2-1: USB disconnect, device number 45 [ 431.105256][ T5826] Bluetooth: hci3: Malformed HCI Event [ 431.393822][ T2150] usb 1-1: USB disconnect, device number 52 [ 431.410608][ T5946] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 432.178027][T10156] delete_channel: no stack [ 432.225680][T10165] FAULT_INJECTION: forcing a failure. [ 432.225680][T10165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.247863][T10165] CPU: 0 UID: 0 PID: 10165 Comm: syz.3.1179 Not tainted syzkaller #0 PREEMPT(full) [ 432.247886][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.247894][T10165] Call Trace: [ 432.247899][T10165] [ 432.247905][T10165] dump_stack_lvl+0x16c/0x1f0 [ 432.247927][T10165] should_fail_ex+0x512/0x640 [ 432.247952][T10165] _copy_from_iter+0x29f/0x1720 [ 432.247978][T10165] ? __alloc_skb+0x200/0x380 [ 432.248002][T10165] ? __pfx__copy_from_iter+0x10/0x10 [ 432.248023][T10165] ? netlink_autobind.isra.0+0x158/0x370 [ 432.248059][T10165] netlink_sendmsg+0x820/0xdd0 [ 432.248089][T10165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.248132][T10165] ____sys_sendmsg+0xa98/0xc70 [ 432.248151][T10165] ? copy_msghdr_from_user+0x10a/0x160 [ 432.248175][T10165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.248204][T10165] ___sys_sendmsg+0x134/0x1d0 [ 432.248234][T10165] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.248261][T10165] ? __lock_acquire+0x622/0x1c90 [ 432.248314][T10165] __sys_sendmsg+0x16d/0x220 [ 432.248338][T10165] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.248377][T10165] do_syscall_64+0xcd/0xfa0 [ 432.248398][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.248415][T10165] RIP: 0033:0x7fa89ab8f749 [ 432.248430][T10165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.248447][T10165] RSP: 002b:00007fa89b94a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.248465][T10165] RAX: ffffffffffffffda RBX: 00007fa89ade5fa0 RCX: 00007fa89ab8f749 [ 432.248477][T10165] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 432.248486][T10165] RBP: 00007fa89b94a090 R08: 0000000000000000 R09: 0000000000000000 [ 432.248496][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.248506][T10165] R13: 00007fa89ade6038 R14: 00007fa89ade5fa0 R15: 00007ffdd9025a08 [ 432.248531][T10165] [ 432.441164][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.541833][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.675384][ T5946] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.684630][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.697503][ T5946] usb 2-1: Product: syz [ 432.801659][ T5946] usb 2-1: Manufacturer: syz [ 432.814957][ T5946] usb 2-1: SerialNumber: syz [ 432.825720][ T5946] usb 2-1: config 0 descriptor?? [ 432.830868][ T5810] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 432.905803][ T5946] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 432.923647][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.958449][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.994348][ T5810] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 433.004026][ T5810] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 433.012656][ T5810] usb 1-1: Product: syz [ 433.016968][ T5810] usb 1-1: Manufacturer: syz [ 433.022764][ T5810] usb 1-1: SerialNumber: syz [ 433.031517][ T5810] usb 1-1: config 0 descriptor?? [ 433.042369][ T5810] ch341 1-1:0.0: ch341-uart converter detected [ 433.297677][ T5810] usb 1-1: failed to receive control message: -32 [ 433.304206][ T5810] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 433.417938][ T30] audit: type=1800 audit(1764291847.624:853): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1182" name="/" dev="fuse" ino=9 res=0 errno=0 [ 433.438300][ T5887] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 433.794748][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.814297][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.831835][ T30] audit: type=1400 audit(1764291848.044:854): avc: denied { read } for pid=10185 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 433.832160][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.865738][ T5887] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 433.875066][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.904416][ T5887] usb 4-1: config 0 descriptor?? [ 434.738308][ T30] audit: type=1800 audit(1764291848.944:855): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.1191" name="/newroot/230" dev="tmpfs" ino=1238 res=0 errno=0 [ 434.761240][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.863273][ T5946] usb 2-1: USB disconnect, device number 46 [ 434.932848][T10210] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 435.749433][ T5940] usb 1-1: USB disconnect, device number 53 [ 435.760486][ T5940] ch341 1-1:0.0: device disconnected [ 435.847519][ T5934] kernel read not supported for file /media6 (pid: 5934 comm: kworker/1:6) [ 435.897910][T10221] tipc: Started in network mode [ 435.926905][T10221] tipc: Node identity eead7e65e136, cluster identity 4711 [ 436.033250][T10221] tipc: Enabled bearer , priority 0 [ 436.055185][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 436.084530][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 436.167891][T10221] syzkaller0: entered promiscuous mode [ 436.175425][T10221] syzkaller0: entered allmulticast mode [ 436.181904][T10221] tipc: Resetting bearer [ 436.277833][ T5887] usb 4-1: USB disconnect, device number 43 [ 436.583805][T10209] tipc: Resetting bearer [ 436.992949][T10239] 9pnet_fd: Insufficient options for proto=fd [ 437.002433][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 437.131354][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 437.282502][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 437.410262][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 437.416433][ T30] audit: type=1400 audit(1764291851.514:856): avc: denied { write } for pid=10248 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 437.463180][T10241] ceph: No mds server is up or the cluster is laggy [ 437.471750][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 437.485239][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.495132][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.504295][ T10] usb 3-1: Product: syz [ 437.508707][ T10] usb 3-1: Manufacturer: syz [ 437.517025][ T10] usb 3-1: SerialNumber: syz [ 437.617865][ T10] usb 3-1: config 0 descriptor?? [ 437.732699][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 437.764884][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.073191][T10255] SELinux: failed to load policy [ 438.712146][ T30] audit: type=1400 audit(1764291852.514:857): avc: denied { remount } for pid=10254 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 439.773470][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.779853][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.107965][ T5934] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 440.130192][ T5940] usb 3-1: USB disconnect, device number 51 [ 440.284721][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.337845][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.540193][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 440.555353][ T5934] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 440.567111][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.590364][ T5934] usb 5-1: config 0 descriptor?? [ 441.031376][T10209] tipc: Disabling bearer [ 441.109118][T10271] delete_channel: no stack [ 441.128142][ T5946] tipc: Node number set to 261848677 [ 442.495477][T10285] tipc: Enabled bearer , priority 0 [ 442.514443][T10285] syzkaller0: entered promiscuous mode [ 442.526227][T10285] syzkaller0: entered allmulticast mode [ 442.558606][T10285] tipc: Resetting bearer [ 442.574245][T10283] tipc: Resetting bearer [ 442.612260][T10283] tipc: Disabling bearer [ 443.462385][ T5934] usbhid 5-1:0.0: can't add hid device: -71 [ 443.479632][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 443.646835][ T5934] usb 5-1: USB disconnect, device number 47 [ 444.391988][ T5826] Bluetooth: hci3: Malformed HCI Event [ 444.508057][T10311] FAULT_INJECTION: forcing a failure. [ 444.508057][T10311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.521373][T10311] CPU: 1 UID: 0 PID: 10311 Comm: syz.1.1221 Not tainted syzkaller #0 PREEMPT(full) [ 444.521398][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.521408][T10311] Call Trace: [ 444.521414][T10311] [ 444.521420][T10311] dump_stack_lvl+0x16c/0x1f0 [ 444.521442][T10311] should_fail_ex+0x512/0x640 [ 444.521474][T10311] _copy_from_user+0x2e/0xd0 [ 444.521498][T10311] do_semtimedop+0x182/0x2e0 [ 444.521518][T10311] ? __pfx_do_semtimedop+0x10/0x10 [ 444.521575][T10311] do_syscall_64+0xcd/0xfa0 [ 444.521594][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.521611][T10311] RIP: 0033:0x7f443bb8f749 [ 444.521626][T10311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.521643][T10311] RSP: 002b:00007f443ca63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 444.521660][T10311] RAX: ffffffffffffffda RBX: 00007f443bde6180 RCX: 00007f443bb8f749 [ 444.521672][T10311] RDX: 0000000000000002 RSI: 0000200000001240 RDI: 0000000000000000 [ 444.521682][T10311] RBP: 00007f443ca63090 R08: 0000000000000000 R09: 0000000000000000 [ 444.521692][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.521703][T10311] R13: 00007f443bde6218 R14: 00007f443bde6180 R15: 00007ffeb3764258 [ 444.521727][T10311] [ 445.458358][ T5946] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 445.531610][ T30] audit: type=1400 audit(1764291859.744:858): avc: denied { append } for pid=10315 comm="syz.0.1228" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 445.582735][T10314] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 445.629789][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 445.638858][ T5946] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 445.648249][ T5946] usb 4-1: config 127 has no interface number 1 [ 445.672051][ T5946] usb 4-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x41, changing to 0x1 [ 445.699228][T10306] delete_channel: no stack [ 445.720089][ T5946] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 445.749726][ T5946] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.760226][ T5946] usb 4-1: config 127 interface 171 has no altsetting 0 [ 445.767266][ T5946] usb 4-1: config 127 interface 0 has no altsetting 0 [ 445.778186][ T5946] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 445.795542][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.808927][ T5946] usb 4-1: Product: syz [ 445.824234][ T5946] usb 4-1: Manufacturer: syz [ 445.829069][ T5946] usb 4-1: SerialNumber: syz [ 448.192188][ T5946] xr_serial 4-1:127.171: xr_serial converter detected [ 448.205345][ T5946] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 448.217145][ T5946] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 448.281426][ T5946] usb 4-1: USB disconnect, device number 44 [ 448.353324][ T5946] xr_serial 4-1:127.171: device disconnected [ 448.860407][T10365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1241'. [ 449.367427][ T30] audit: type=1400 audit(1764291863.575:859): avc: denied { nlmsg_write } for pid=10370 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.402040][T10357] delete_channel: no stack [ 449.494183][T10373] sd 0:0:1:0: device reset [ 449.513381][ T30] audit: type=1400 audit(1764291863.725:860): avc: denied { setopt } for pid=10372 comm="syz.3.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 449.829859][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 449.879737][ T5946] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 450.060683][T10371] bond0: (slave team0): Releasing backup interface [ 450.081177][T10371] team0 (unregistering): Port device team_slave_0 removed [ 450.120536][T10371] team0 (unregistering): Port device team_slave_1 removed [ 450.151491][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 450.163315][ T10] usb 5-1: config 1 has no interface number 0 [ 450.174132][ T5946] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 450.188947][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.198664][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 450.210742][ T5946] usb 2-1: Product: syz [ 450.215055][ T5946] usb 2-1: Manufacturer: syz [ 450.220864][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 450.231304][ T5946] usb 2-1: SerialNumber: syz [ 450.246201][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.265139][ T5946] usb 2-1: config 0 descriptor?? [ 450.323419][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 450.332923][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.379736][ T5946] gspca_main: sq930x-2.14.0 probing 2770:930c [ 450.419821][ T10] usb 5-1: Product: syz [ 450.424267][ T10] usb 5-1: Manufacturer: syz [ 450.428955][ T10] usb 5-1: SerialNumber: syz [ 450.438543][T10380] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 450.664524][T10380] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 450.897829][ T10] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 451.176437][T10396] Process accounting resumed [ 451.223534][T10401] bridge7: entered allmulticast mode [ 451.317213][ T10] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 451.739472][ T5946] gspca_sq930x: reg_w 0105 0f00 failed -110 [ 452.582800][ T10] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 452.590923][ T10] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 452.597581][ T10] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 452.618280][ T10] usb 5-1: USB disconnect, device number 48 [ 452.626560][ T10] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 452.672352][ T10] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 452.690972][ T5946] gspca_sq930x: Sensor ov9630 not yet treated [ 452.697200][ T5946] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 452.725399][ T5946] usb 2-1: USB disconnect, device number 47 [ 452.945381][ T30] audit: type=1326 audit(1764291867.155:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.425483][ T30] audit: type=1326 audit(1764291867.155:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.448957][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.455291][ T30] audit: type=1326 audit(1764291867.165:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.478786][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.491032][ T30] audit: type=1326 audit(1764291867.165:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.514413][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.544015][ T30] audit: type=1326 audit(1764291867.165:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.569000][ T30] audit: type=1326 audit(1764291867.735:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.600681][ T30] audit: type=1326 audit(1764291867.735:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.624621][ T30] audit: type=1326 audit(1764291867.735:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.648007][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.708633][ T30] audit: type=1326 audit(1764291867.735:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.731968][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.739120][ T30] audit: type=1326 audit(1764291867.735:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 453.762669][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.669252][ T5946] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 454.715337][T10437] syz.0.1265 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 454.897367][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.918989][ T5946] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 455.130866][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.144934][ T5946] usb 3-1: Product: syz [ 455.151420][ T5946] usb 3-1: Manufacturer: syz [ 455.158121][ T5946] usb 3-1: SerialNumber: syz [ 455.179372][ T5946] usb 3-1: config 0 descriptor?? [ 455.229875][T10449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.243492][T10449] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1267'. [ 455.252710][T10449] nbd: must specify at least one socket [ 455.262285][ T5946] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 455.312720][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.701511][T10473] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1277'. [ 457.257305][T10477] Process accounting resumed [ 457.364338][T10484] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 457.374508][T10484] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 459.179000][ T5930] usb 3-1: USB disconnect, device number 52 [ 459.608129][T10499] Process accounting resumed [ 460.879106][ T5874] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 460.934565][T10515] kAFS: No cell specified [ 461.655303][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 461.709979][ T5874] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 461.729271][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.090464][ T5874] pvrusb2: Hardware description: Terratec Grabster AV400 [ 462.106535][ T5874] pvrusb2: ********** [ 462.129523][T10519] bond3 (unregistering): Released all slaves [ 462.135578][ T5874] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 462.236656][ T5874] pvrusb2: Important functionality might not be entirely working. [ 462.245352][ T5874] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 462.257514][ T5874] pvrusb2: ********** [ 462.274648][ T2338] pvrusb2: Invalid write control endpoint [ 462.294207][ T5874] usb 2-1: USB disconnect, device number 48 [ 462.860394][ T2338] pvrusb2: Invalid write control endpoint [ 462.866426][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 462.883778][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 462.892724][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 462.903119][ T2338] pvrusb2: Device being rendered inoperable [ 462.912541][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 462.920515][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 463.095332][ T2338] pvrusb2: Attached sub-driver cx25840 [ 463.167172][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 463.193237][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 463.353926][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.367402][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.376699][T10545] i2c i2c-1: Invalid block write size 155 [ 463.478735][T10547] i2c i2c-1: Invalid block write size 155 [ 463.634100][T10544] Process accounting resumed [ 463.641765][T10551] kAFS: No cell specified [ 464.095749][T10555] FAULT_INJECTION: forcing a failure. [ 464.095749][T10555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.119294][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1303'. [ 464.128746][T10555] CPU: 1 UID: 0 PID: 10555 Comm: syz.3.1302 Not tainted syzkaller #0 PREEMPT(full) [ 464.128772][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.128782][T10555] Call Trace: [ 464.128788][T10555] [ 464.128795][T10555] dump_stack_lvl+0x16c/0x1f0 [ 464.128827][T10555] should_fail_ex+0x512/0x640 [ 464.128855][T10555] _copy_from_user+0x2e/0xd0 [ 464.128879][T10555] copy_msghdr_from_user+0x98/0x160 [ 464.128904][T10555] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 464.128940][T10555] ___sys_sendmsg+0xfe/0x1d0 [ 464.128965][T10555] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.128986][T10555] ? __lock_acquire+0x622/0x1c90 [ 464.129041][T10555] __sys_sendmsg+0x16d/0x220 [ 464.129064][T10555] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.129103][T10555] do_syscall_64+0xcd/0xfa0 [ 464.129122][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.129140][T10555] RIP: 0033:0x7fa89ab8f749 [ 464.129155][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.129171][T10555] RSP: 002b:00007fa89b94a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.129188][T10555] RAX: ffffffffffffffda RBX: 00007fa89ade5fa0 RCX: 00007fa89ab8f749 [ 464.129199][T10555] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 464.129209][T10555] RBP: 00007fa89b94a090 R08: 0000000000000000 R09: 0000000000000000 [ 464.129219][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.129228][T10555] R13: 00007fa89ade6038 R14: 00007fa89ade5fa0 R15: 00007ffdd9025a08 [ 464.129253][T10555] [ 464.299572][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.639195][ T5930] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 464.662828][T10569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1309'. [ 464.676226][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 464.676252][ T30] audit: type=1400 audit(1764291878.885:892): avc: denied { read } for pid=10568 comm="syz.2.1309" path="socket:[29618]" dev="sockfs" ino=29618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 464.848699][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 465.044157][ T5930] usb 4-1: config 0 has no interfaces? [ 465.052520][ T5930] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 465.090459][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.192615][ T5930] usb 4-1: Product: syz [ 465.253055][ T5930] usb 4-1: Manufacturer: syz [ 465.306267][ T5930] usb 4-1: SerialNumber: syz [ 465.376230][T10576] bridge8: entered allmulticast mode [ 465.502385][ T5930] usb 4-1: config 0 descriptor?? [ 466.224070][ T30] audit: type=1400 audit(1764291880.426:893): avc: denied { map } for pid=10581 comm="syz.1.1312" path="socket:[29634]" dev="sockfs" ino=29634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 466.710604][ T30] audit: type=1400 audit(1764291880.426:894): avc: denied { accept } for pid=10581 comm="syz.1.1312" path="socket:[29634]" dev="sockfs" ino=29634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 467.125906][ T30] audit: type=1400 audit(1764291881.326:895): avc: denied { read } for pid=10596 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.447823][T10608] kAFS: No cell specified [ 467.888663][ T5888] usb 4-1: USB disconnect, device number 45 [ 468.418694][ T5930] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 468.629768][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 468.673642][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.710293][ T5930] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.740646][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.758465][ T5930] usb 3-1: Product: syz [ 468.762745][ T5930] usb 3-1: Manufacturer: syz [ 468.767348][ T5930] usb 3-1: SerialNumber: syz [ 468.799036][ T5930] usb 3-1: config 0 descriptor?? [ 470.050190][T10641] FAULT_INJECTION: forcing a failure. [ 470.050190][T10641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.063491][T10641] CPU: 1 UID: 0 PID: 10641 Comm: syz.3.1330 Not tainted syzkaller #0 PREEMPT(full) [ 470.063517][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.063526][T10641] Call Trace: [ 470.063532][T10641] [ 470.063538][T10641] dump_stack_lvl+0x16c/0x1f0 [ 470.063560][T10641] should_fail_ex+0x512/0x640 [ 470.063583][T10641] _copy_from_iter+0x29f/0x1720 [ 470.063604][T10641] ? __pfx_avc_has_perm+0x10/0x10 [ 470.063628][T10641] ? __pfx__copy_from_iter+0x10/0x10 [ 470.063652][T10641] ? sock_has_perm+0x259/0x2f0 [ 470.063677][T10641] ? __pfx_sock_has_perm+0x10/0x10 [ 470.063705][T10641] hci_sock_sendmsg+0x46d/0x25f0 [ 470.063739][T10641] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 470.063770][T10641] sock_write_iter+0x566/0x610 [ 470.063789][T10641] ? __pfx_sock_write_iter+0x10/0x10 [ 470.063813][T10641] ? bpf_lsm_file_permission+0x9/0x10 [ 470.063830][T10641] ? security_file_permission+0x71/0x210 [ 470.063850][T10641] ? rw_verify_area+0xcf/0x6c0 [ 470.063877][T10641] vfs_write+0x7d3/0x11d0 [ 470.063893][T10641] ? __pfx_sock_write_iter+0x10/0x10 [ 470.063909][T10641] ? __pfx_vfs_write+0x10/0x10 [ 470.063919][T10641] ? find_held_lock+0x2b/0x80 [ 470.063942][T10641] ksys_write+0x1f8/0x250 [ 470.063951][T10641] ? __pfx_ksys_write+0x10/0x10 [ 470.063967][T10641] do_syscall_64+0xcd/0xfa0 [ 470.063979][T10641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.063990][T10641] RIP: 0033:0x7fa89ab8f749 [ 470.064000][T10641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.064011][T10641] RSP: 002b:00007fa898df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 470.064022][T10641] RAX: ffffffffffffffda RBX: 00007fa89ade6090 RCX: 00007fa89ab8f749 [ 470.064029][T10641] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000006 [ 470.064035][T10641] RBP: 00007fa898df6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.064041][T10641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.064047][T10641] R13: 00007fa89ade6128 R14: 00007fa89ade6090 R15: 00007ffdd9025a08 [ 470.064062][T10641] [ 471.838604][ T5874] usb 3-1: USB disconnect, device number 54 [ 471.863674][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 473.125454][T10678] FAT-fs (nbd0): unable to read boot sector [ 473.535738][T10682] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1344'. [ 473.578944][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 473.942868][ T30] audit: type=1400 audit(1764291888.136:896): avc: denied { read } for pid=10685 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 473.988537][ T30] audit: type=1400 audit(1764291888.196:897): avc: denied { create } for pid=10685 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 474.043166][ T30] audit: type=1400 audit(1764291888.196:898): avc: denied { write } for pid=10685 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.283781][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 475.406550][T10707] Process accounting resumed [ 475.478144][ T5946] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 476.031568][ T5946] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 476.053651][ T5946] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 477.091666][ T5946] usb 3-1: Product: syz [ 477.096553][ T5946] usb 3-1: Manufacturer: syz [ 477.101574][ T5946] usb 3-1: SerialNumber: syz [ 477.125924][ T5946] usb 3-1: config 0 descriptor?? [ 477.134053][ T5946] ch341 3-1:0.0: ch341-uart converter detected [ 477.157389][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 477.166604][T10721] bridge5: entered allmulticast mode [ 477.174126][T10719] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 477.180800][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 477.201913][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 477.213146][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 477.222224][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.267572][ T30] audit: type=1400 audit(1764291891.466:899): avc: denied { mounton } for pid=10723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 477.355984][T10723] Failed to initialize the IGMP autojoin socket (err -2) [ 477.943577][ T5946] usb 3-1: failed to send control message: -71 [ 477.950414][ T5946] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 478.040210][ T5946] usb 3-1: USB disconnect, device number 55 [ 478.081042][ T5946] ch341 3-1:0.0: device disconnected [ 478.531736][ T3527] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.915370][ T3527] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.304656][ T5826] Bluetooth: hci3: command tx timeout [ 479.428604][T10723] chnl_net:caif_netlink_parms(): no params data found [ 479.514230][ T3527] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.807757][ T30] audit: type=1400 audit(1764291893.976:900): avc: denied { map } for pid=10746 comm="syz.0.1364" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.202045][ T3527] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.367759][ T5826] Bluetooth: hci3: command tx timeout [ 481.773748][T10783] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1373'. [ 482.437683][T10578] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 482.529127][T10789] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 482.538915][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.559351][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.578916][T10723] bridge_slave_0: entered allmulticast mode [ 482.586012][T10723] bridge_slave_0: entered promiscuous mode [ 482.607162][T10578] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.637272][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.658844][T10578] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.663526][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.684214][T10578] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.706576][T10578] usb 2-1: Product: syz [ 482.743145][T10578] usb 2-1: Manufacturer: syz [ 482.753928][T10723] bridge_slave_1: entered allmulticast mode [ 482.763226][T10578] usb 2-1: SerialNumber: syz [ 482.770788][T10723] bridge_slave_1: entered promiscuous mode [ 482.801594][T10578] usb 2-1: config 0 descriptor?? [ 482.889863][T10578] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 482.962644][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.017649][ T5874] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 483.447644][ T5826] Bluetooth: hci3: command tx timeout [ 483.505975][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 483.511537][ T5946] usb 2-1: USB disconnect, device number 49 [ 483.540451][ T5874] usb 1-1: config 0 has an invalid interface number: 139 but max is 0 [ 483.552589][ T5874] usb 1-1: config 0 has no interface number 0 [ 483.560847][ T5874] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=89.4c [ 483.603566][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.627874][ T5874] usb 1-1: Product: syz [ 483.650501][ T5874] usb 1-1: Manufacturer: syz [ 483.655158][ T5874] usb 1-1: SerialNumber: syz [ 483.760039][ T5874] usb 1-1: config 0 descriptor?? [ 483.848072][ T30] audit: type=1400 audit(1764291898.057:901): avc: denied { mount } for pid=10818 comm="syz.1.1381" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 483.886387][T10723] team0: Port device team_slave_0 added [ 483.924981][T10723] team0: Port device team_slave_1 added [ 483.940869][ T3527] bridge_slave_1: left allmulticast mode [ 483.990391][ T3527] bridge_slave_1: left promiscuous mode [ 483.996508][ T5874] usb 1-1: selecting invalid altsetting 1 [ 484.009287][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.016941][ T5874] catc 1-1:0.139: Can't set altsetting 1. [ 484.024063][ T5874] catc 1-1:0.139: probe with driver catc failed with error -5 [ 484.037776][ T5874] usb 1-1: USB disconnect, device number 54 [ 484.044863][ T3527] bridge_slave_0: left allmulticast mode [ 484.061694][ T3527] bridge_slave_0: left promiscuous mode [ 484.087380][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.237567][ T5946] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 484.387566][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 484.403185][ T5946] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 484.438005][ T5946] usb 3-1: config 127 has no interface number 1 [ 484.457910][ T5946] usb 3-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x41, changing to 0x1 [ 484.540874][ T5946] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 484.603382][ T5946] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 484.617491][ T30] audit: type=1400 audit(1764291898.807:902): avc: denied { getopt } for pid=10834 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 484.654739][ T5946] usb 3-1: config 127 interface 171 has no altsetting 0 [ 484.690625][ T5946] usb 3-1: config 127 interface 0 has no altsetting 0 [ 484.700132][ T5946] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 484.709359][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.730873][ T5946] usb 3-1: Product: syz [ 484.735055][ T5946] usb 3-1: Manufacturer: syz [ 484.748344][ T5946] usb 3-1: SerialNumber: syz [ 485.537478][ T5826] Bluetooth: hci3: command tx timeout [ 485.769696][T10836] delete_channel: no stack [ 485.786964][ T30] audit: type=1400 audit(1764291899.997:903): avc: denied { execute } for pid=10837 comm="syz.3.1388" dev="hugetlbfs" ino=31896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 485.911937][ T30] audit: type=1400 audit(1764291899.997:904): avc: denied { execute_no_trans } for pid=10837 comm="syz.3.1388" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=31896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 485.940601][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.339929][ T30] audit: type=1400 audit(1764291900.547:905): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 487.105969][ T5946] xr_serial 3-1:127.171: xr_serial converter detected [ 487.119796][ T5946] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 487.134677][ T5946] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 487.152323][ T5946] usb 3-1: USB disconnect, device number 56 [ 487.176303][ T30] audit: type=1400 audit(1764291901.387:906): avc: denied { write } for pid=10855 comm="syz.2.1391" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 487.201885][ T5946] xr_serial 3-1:127.171: device disconnected [ 487.556699][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.003121][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.021017][ T3527] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 489.030294][ T3527] bond0 (unregistering): (slave team0): Releasing backup interface [ 489.040195][ T3527] bond0 (unregistering): Released all slaves [ 489.204260][T10871] FAULT_INJECTION: forcing a failure. [ 489.204260][T10871] name failslab, interval 1, probability 0, space 0, times 0 [ 489.218972][T10871] CPU: 0 UID: 0 PID: 10871 Comm: syz.0.1395 Not tainted syzkaller #0 PREEMPT(full) [ 489.218996][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.219004][T10871] Call Trace: [ 489.219008][T10871] [ 489.219013][T10871] dump_stack_lvl+0x16c/0x1f0 [ 489.219028][T10871] should_fail_ex+0x512/0x640 [ 489.219041][T10871] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 489.219056][T10871] should_failslab+0xc2/0x120 [ 489.219069][T10871] kmem_cache_alloc_noprof+0x75/0x6e0 [ 489.219085][T10871] ? skb_clone+0x190/0x3f0 [ 489.219102][T10871] ? skb_clone+0x190/0x3f0 [ 489.219115][T10871] skb_clone+0x190/0x3f0 [ 489.219129][T10871] netlink_deliver_tap+0xabd/0xd30 [ 489.219148][T10871] netlink_unicast+0x64c/0x870 [ 489.219165][T10871] ? __pfx_netlink_unicast+0x10/0x10 [ 489.219186][T10871] netlink_sendmsg+0x8c8/0xdd0 [ 489.219204][T10871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.219224][T10871] ____sys_sendmsg+0xa98/0xc70 [ 489.219236][T10871] ? copy_msghdr_from_user+0x10a/0x160 [ 489.219249][T10871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.219266][T10871] ___sys_sendmsg+0x134/0x1d0 [ 489.219281][T10871] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.219293][T10871] ? __lock_acquire+0x622/0x1c90 [ 489.219321][T10871] __sys_sendmsg+0x16d/0x220 [ 489.219335][T10871] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.219358][T10871] do_syscall_64+0xcd/0xfa0 [ 489.219369][T10871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.219380][T10871] RIP: 0033:0x7f2e8858f749 [ 489.219390][T10871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.219400][T10871] RSP: 002b:00007f2e89473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.219411][T10871] RAX: ffffffffffffffda RBX: 00007f2e887e5fa0 RCX: 00007f2e8858f749 [ 489.219417][T10871] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 489.219423][T10871] RBP: 00007f2e89473090 R08: 0000000000000000 R09: 0000000000000000 [ 489.219429][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.219435][T10871] R13: 00007f2e887e6038 R14: 00007f2e887e5fa0 R15: 00007ffcf49d7948 [ 489.219449][T10871] [ 489.447547][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.459455][ T3527] bond1 (unregistering): Released all slaves [ 489.632806][T10862] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 490.258524][T10865] bridge10: entered allmulticast mode [ 490.269944][T10723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.303537][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.350208][T10723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.411018][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'. [ 490.421814][T10879] netlink: 'syz.0.1397': attribute type 7 has an invalid length. [ 490.433473][T10879] netlink: 'syz.0.1397': attribute type 8 has an invalid length. [ 490.480824][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 490.603124][T10723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.926013][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.965892][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1397'. [ 491.020146][T10723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.347459][ T5930] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 491.499276][T10723] hsr_slave_0: entered promiscuous mode [ 491.549873][ T5930] usb 1-1: device descriptor read/64, error -71 [ 491.563015][T10723] hsr_slave_1: entered promiscuous mode [ 491.656460][T10723] debugfs: 'hsr0' already exists in 'hsr' [ 491.674235][T10723] Cannot create hsr debugfs directory [ 491.736825][ T3527] hsr_slave_0: left promiscuous mode [ 491.753850][ T3527] hsr_slave_1: left promiscuous mode [ 491.760359][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.776821][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.804572][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.814892][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.827135][ T5930] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 491.846274][ T3527] veth1_macvtap: left promiscuous mode [ 491.863588][ T3527] veth0_macvtap: left promiscuous mode [ 491.879155][ T3527] veth1_vlan: left promiscuous mode [ 491.901147][ T3527] veth0_vlan: left promiscuous mode [ 492.117227][ T5930] usb 1-1: device descriptor read/64, error -71 [ 492.254851][ T5930] usb usb1-port1: attempt power cycle [ 492.923375][ T5888] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 492.959144][ T5930] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 492.988716][ T5930] usb 1-1: device descriptor read/8, error -71 [ 493.130585][ T5888] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 493.149308][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.166838][ T5888] usb 2-1: Product: syz [ 493.175289][ T5888] usb 2-1: Manufacturer: syz [ 493.190516][ T5888] usb 2-1: SerialNumber: syz [ 493.228135][ T5888] usb 2-1: config 0 descriptor?? [ 493.246677][ T5888] gspca_main: sq930x-2.14.0 probing 2770:930c [ 493.278566][ T5930] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 493.378519][ T5930] usb 1-1: device descriptor read/8, error -71 [ 493.515961][ T5930] usb usb1-port1: unable to enumerate USB device [ 494.222538][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 494.502268][ T5888] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 494.508921][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 494.560644][T10949] ceph: No mds server is up or the cluster is laggy [ 494.648056][ T5826] Bluetooth: hci4: unexpected event for opcode 0x041b [ 494.901161][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 494.908370][ T5888] gspca_sq930x: Sensor ov9630 not yet treated [ 494.946237][ T5888] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 494.976737][ T5888] usb 2-1: USB disconnect, device number 50 [ 495.024110][ T30] audit: type=1400 audit(1764291909.227:907): avc: denied { append } for pid=10962 comm="syz.1.1412" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 495.062291][ T30] audit: type=1400 audit(1764291909.227:908): avc: denied { setcheckreqprot } for pid=10962 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 495.099936][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 495.499601][ T5888] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 495.677161][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 495.698334][ T5888] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 495.743811][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 495.754866][ T5888] usb 2-1: Product: syz [ 495.763146][ T5888] usb 2-1: Manufacturer: syz [ 495.781871][ T5888] usb 2-1: SerialNumber: syz [ 495.838943][ T5888] usb 2-1: config 0 descriptor?? [ 496.805039][ T5887] usb 2-1: USB disconnect, device number 51 [ 496.834020][ T30] audit: type=1400 audit(1764291911.037:909): avc: denied { mount } for pid=10971 comm="syz.3.1415" name="/" dev="ocfs2_dlmfs" ino=31669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 497.010861][ T30] audit: type=1400 audit(1764291911.227:910): avc: denied { bind } for pid=10977 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.649791][T10978] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 497.664974][ T30] audit: type=1400 audit(1764291911.867:911): avc: denied { setopt } for pid=10977 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.717855][T10981] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 497.728536][T10978] bond1: (slave dummy0): Releasing active interface [ 497.781003][T10978] team0: Failed to send options change via netlink (err -105) [ 497.836866][T10978] team0: Port device dummy0 added [ 497.966361][T10981] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 497.982915][T10981] team0: Failed to send options change via netlink (err -105) [ 497.991224][T10981] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 498.001317][T10981] team0: Port device dummy0 removed [ 498.011914][T10981] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.297788][ T9] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 498.380556][T10723] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 498.393201][T10723] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 498.406929][T10723] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 498.417817][T10723] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 498.431111][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1424'. [ 498.464137][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.476064][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.489178][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.827131][ T5940] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 498.830464][ T9] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 498.867571][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.892350][ T9] usb 2-1: config 0 descriptor?? [ 498.997652][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 499.018339][ T5940] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 499.026605][ T5940] usb 3-1: config 0 has no interface number 0 [ 499.044707][ T5940] usb 3-1: config 0 interface 184 has no altsetting 0 [ 499.069280][ T5940] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 499.104368][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.130355][ T5940] usb 3-1: Product: syz [ 499.145714][ T5940] usb 3-1: Manufacturer: syz [ 499.152244][ T5940] usb 3-1: SerialNumber: syz [ 499.167561][ T5940] usb 3-1: config 0 descriptor?? [ 499.175289][ T5940] smsc75xx v1.0.0 [ 499.198187][ T5810] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 499.258927][T10723] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.358853][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.370082][ T5810] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 499.403156][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.289855][ T5810] usb 4-1: config 0 descriptor?? [ 500.304792][T10943] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.312010][T10943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.324758][ T5810] pwc: Askey VC010 type 2 USB webcam detected. [ 500.335343][T10943] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.342554][T10943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.509588][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 500.529004][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 500.752195][ T5810] pwc: recv_control_msg error -32 req 02 val 2b00 [ 500.760668][ T5810] pwc: recv_control_msg error -32 req 02 val 2700 [ 500.774775][ T5810] pwc: recv_control_msg error -32 req 02 val 2c00 [ 500.797093][ T5810] pwc: recv_control_msg error -32 req 04 val 1000 [ 500.815522][ T5810] pwc: recv_control_msg error -32 req 04 val 1300 [ 500.879993][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 500.896398][ T5810] pwc: recv_control_msg error -32 req 04 val 1400 [ 500.914407][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 501.560227][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 501.567809][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.578362][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 501.588073][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.616473][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 501.629602][ T5810] pwc: recv_control_msg error -32 req 02 val 2000 [ 501.632439][ T30] audit: type=1400 audit(1764291915.848:912): avc: denied { ioctl } for pid=11037 comm="syz.1.1432" path="socket:[32401]" dev="sockfs" ino=32401 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 501.662643][ T9] usb 2-1: USB disconnect, device number 52 [ 501.672307][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.680644][ T5810] pwc: recv_control_msg error -32 req 02 val 2100 [ 501.903669][ T5940] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 501.936993][ T5940] usb 3-1: USB disconnect, device number 57 [ 502.062084][ T5810] pwc: recv_control_msg error -71 req 02 val 2500 [ 502.120396][ T5810] pwc: recv_control_msg error -71 req 02 val 2400 [ 502.159488][ T5810] pwc: recv_control_msg error -71 req 02 val 2600 [ 502.195144][T10723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.226734][ T5810] pwc: recv_control_msg error -71 req 02 val 2900 [ 502.267801][ T5810] pwc: recv_control_msg error -71 req 02 val 2800 [ 502.291453][ T5810] pwc: recv_control_msg error -71 req 04 val 1100 [ 502.320580][ T5810] pwc: recv_control_msg error -71 req 04 val 1200 [ 502.368281][ T5810] pwc: Registered as video103. [ 502.395028][ T5810] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 502.473001][ T5810] usb 4-1: USB disconnect, device number 46 [ 502.884732][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 502.918819][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 503.191981][T10723] veth0_vlan: entered promiscuous mode [ 503.216296][T10723] veth1_vlan: entered promiscuous mode [ 503.367197][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 503.419049][T10723] veth0_macvtap: entered promiscuous mode [ 503.450179][T10723] veth1_macvtap: entered promiscuous mode [ 503.457527][ T5810] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 503.541311][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 503.574014][ T9] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 503.614726][ T9] usb 2-1: Product: syz [ 503.624941][ T9] usb 2-1: Manufacturer: syz [ 503.633050][ T5810] usb 4-1: config 16 has an invalid interface number: 92 but max is 0 [ 503.657169][ T9] usb 2-1: SerialNumber: syz [ 503.664569][ T5810] usb 4-1: config 16 has no interface number 0 [ 503.692998][ T5810] usb 4-1: New USB device found, idVendor=04cb, idProduct=012d, bcdDevice=bd.dd [ 503.703923][ T9] usb 2-1: config 0 descriptor?? [ 503.720688][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 503.750740][T10723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.777620][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.783086][T10723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.840648][ T5810] gspca_main: finepix-2.14.0 probing 04cb:012d [ 503.848089][T10723] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 503.892675][T10723] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 503.939820][T10723] wireguard: wg0: Could not create IPv4 socket [ 503.961830][T10723] wireguard: wg1: Could not create IPv4 socket [ 503.981404][T10723] wireguard: wg2: Could not create IPv4 socket [ 504.135297][ T5887] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 504.180739][T11061] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1438'. [ 504.194548][ T5810] usb 4-1: USB disconnect, device number 47 [ 504.301354][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 504.327321][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.472592][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.495111][T11080] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 504.554244][ T9] usb 2-1: failed to send control message: -71 [ 504.571957][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 504.616926][ T9] usb 2-1: USB disconnect, device number 53 [ 504.639318][ T9] ch341 2-1:0.0: device disconnected [ 504.662872][ T5887] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 504.672227][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.838067][ T5887] usb 3-1: config 0 descriptor?? [ 505.876356][ T5946] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 505.904834][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.915971][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.925046][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.935489][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.943230][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.981638][T11106] Failed to initialize the IGMP autojoin socket (err -2) [ 506.046317][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 506.090638][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.122803][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 506.145026][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 506.617019][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 506.660537][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 506.669856][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 506.690187][ T5887] usb 3-1: USB disconnect, device number 58 [ 506.702056][ T5946] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 506.749878][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.997830][ T5946] hub 2-1:1.0: bad descriptor, ignoring hub [ 507.028586][ T5946] hub 2-1:1.0: probe with driver hub failed with error -5 [ 507.265030][ T5946] cdc_wdm 2-1:1.0: skipping garbage [ 507.375328][ T5946] cdc_wdm 2-1:1.0: skipping garbage [ 507.429453][ T5817] Bluetooth: hci2: unexpected event for opcode 0x200c [ 507.443705][T11137] openvswitch: netlink: Geneve opt len 26 is not a multiple of 4. [ 507.453420][T11137] use of bytesused == 0 is deprecated and will be removed in the future, [ 507.460787][ T5946] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 507.476637][T11137] use the actual size instead. [ 507.504998][ T5946] cdc_wdm 2-1:1.0: Unknown control protocol [ 507.812100][ T9] usb 2-1: USB disconnect, device number 54 [ 508.006866][ T5817] Bluetooth: hci3: command tx timeout [ 508.153345][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1457'. [ 508.193567][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 508.266408][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 508.274411][ T5946] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 508.457053][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 508.492587][ T5946] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 508.506800][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.536802][ T5946] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 508.545180][ T5946] usb 4-1: Product: syz [ 508.550194][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.571201][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 508.582604][ T5946] usb 4-1: Manufacturer: syz [ 508.588215][ T5810] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 508.598671][ T5946] usb 4-1: SerialNumber: syz [ 508.616162][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 508.629028][ T5946] usb 4-1: config 0 descriptor?? [ 508.648290][ T5946] ch341 4-1:0.0: ch341-uart converter detected [ 508.666238][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 508.675375][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.735851][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 508.748123][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 508.758689][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 508.769679][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.786231][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 508.803240][ T5810] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 508.816770][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 508.830776][T11106] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 508.840517][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.850931][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 508.861632][T11106] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 508.869658][ T5810] usb 3-1: Product: syz [ 508.874475][ T5810] usb 3-1: Manufacturer: syz [ 508.880682][ T5810] usb 3-1: SerialNumber: syz [ 508.902835][ T5810] usb 3-1: config 0 descriptor?? [ 508.907627][T11106] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 508.960761][T11106] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 508.969781][ T5810] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 509.061994][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.088046][ T5888] usb 2-1: USB disconnect, device number 55 [ 509.103462][T11177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1459'. [ 509.132922][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 509.425963][T11190] Unknown status report in ack skb [ 509.459933][ T5817] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 509.460264][ T5946] usb 4-1: failed to send control message: -71 [ 509.492178][ T5946] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 509.541938][ T5946] usb 4-1: USB disconnect, device number 48 [ 509.570339][ T5946] ch341 4-1:0.0: device disconnected [ 510.095741][ T5817] Bluetooth: hci3: command tx timeout [ 510.315270][T11106] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 510.383634][T11106] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 510.424999][T11106] wireguard: wg0: Could not create IPv4 socket [ 510.442491][T11106] wireguard: wg1: Could not create IPv4 socket [ 510.545406][T11106] wireguard: wg2: Could not create IPv4 socket [ 510.676106][ T10] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 511.340216][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 511.411040][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.445908][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.682638][ T10] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 511.700192][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.824827][ T10] usb 2-1: config 0 descriptor?? [ 512.033143][ T5946] usb 3-1: USB disconnect, device number 59 [ 512.210234][ T5817] Bluetooth: hci3: command tx timeout [ 513.231842][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 513.238354][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 513.317846][ T10] usb 2-1: USB disconnect, device number 56 [ 513.526492][ T5817] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 513.536623][ T5817] Bluetooth: hci2: Injecting HCI hardware error event [ 513.545025][ T5817] Bluetooth: hci2: hardware error 0x00 [ 513.648920][ T30] audit: type=1326 audit(1764291927.868:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 513.672329][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.683990][ T30] audit: type=1326 audit(1764291927.868:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 513.707510][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.714245][ T30] audit: type=1326 audit(1764291927.868:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 513.737726][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.803584][ T30] audit: type=1326 audit(1764291927.868:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 513.889877][ T30] audit: type=1326 audit(1764291927.868:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 514.235966][ T30] audit: type=1326 audit(1764291927.868:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 514.259380][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.266647][ T30] audit: type=1326 audit(1764291927.868:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 514.290215][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.822162][ T30] audit: type=1326 audit(1764291927.868:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 515.047361][ T30] audit: type=1326 audit(1764291927.888:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 515.105872][ T30] audit: type=1326 audit(1764291927.888:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443bb8f749 code=0x7ffc0000 [ 515.216000][ T5888] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 515.605902][ T5817] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 515.722052][ T5888] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 515.749559][ T5888] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 515.912721][ T5888] usb 1-1: Product: syz [ 515.932271][ T5888] usb 1-1: Manufacturer: syz [ 515.952538][ T5888] usb 1-1: SerialNumber: syz [ 515.996812][ T5888] usb 1-1: config 0 descriptor?? [ 516.009084][ T5888] ch341 1-1:0.0: ch341-uart converter detected [ 516.366096][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 516.384718][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 516.398887][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 516.535952][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 516.544368][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 516.559836][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.603029][T11297] Failed to initialize the IGMP autojoin socket (err -2) [ 516.634243][ T10] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 516.650990][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.663213][ T10] usb 4-1: config 0 has no interface number 0 [ 516.693307][ T10] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 516.727994][ T10] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.758649][ T10] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 516.776517][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.794945][ T10] usb 4-1: Product: syz [ 516.805421][ T10] usb 4-1: Manufacturer: syz [ 516.812207][ T5888] usb 1-1: failed to send control message: -71 [ 516.823081][ T5888] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 516.823242][ T10] usb 4-1: SerialNumber: syz [ 516.858502][ T5888] usb 1-1: USB disconnect, device number 59 [ 516.861319][ T10] usb 4-1: config 0 descriptor?? [ 516.865455][ T5888] ch341 1-1:0.0: device disconnected [ 516.870177][ T5946] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 517.071341][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 517.090572][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.126593][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 517.162977][ T5946] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 517.192480][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.216759][ T5946] usb 3-1: config 0 descriptor?? [ 518.645661][ T5826] Bluetooth: hci3: command tx timeout [ 519.218318][T10578] usb 4-1: USB disconnect, device number 49 [ 519.446664][ T5946] usbhid 3-1:0.0: can't add hid device: -71 [ 519.452680][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 519.476321][ T5946] usb 3-1: USB disconnect, device number 60 [ 519.530223][T11332] Failed to initialize the IGMP autojoin socket (err -2) [ 519.712024][T11297] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 520.178730][T11297] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 520.387581][T11339] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 520.728821][ T5826] Bluetooth: hci3: command tx timeout [ 521.131069][T11297] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 521.372862][T11297] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 522.664011][T11368] bridge11: entered allmulticast mode [ 522.777605][T11369] comedi comedi0: Cannot bond this driver to itself! [ 522.805534][ T5826] Bluetooth: hci3: command tx timeout [ 523.625700][ T5887] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 524.130016][ T5887] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 524.375383][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 524.667173][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.685448][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.737382][ T5887] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 524.749111][ T5887] usb 1-1: Product: syz [ 524.753273][ T5887] usb 1-1: Manufacturer: syz [ 524.757960][ T5887] usb 1-1: SerialNumber: syz [ 524.764339][ T5887] usb 1-1: config 0 descriptor?? [ 524.835945][ T5887] ch341 1-1:0.0: ch341-uart converter detected [ 524.861994][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 524.885421][ T5826] Bluetooth: hci3: command tx timeout [ 525.155935][ T10] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 525.165004][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.382700][ T10] usb 4-1: config 0 descriptor?? [ 525.866214][ T5887] usb 1-1: failed to send control message: -71 [ 525.873804][ T5887] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 526.085026][ T5887] usb 1-1: USB disconnect, device number 60 [ 526.131276][ T5887] ch341 1-1:0.0: device disconnected [ 526.475323][T11297] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 526.919522][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 526.919537][ T30] audit: type=1400 audit(1764291941.129:939): avc: denied { getopt } for pid=11422 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 526.992851][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 527.010276][T11297] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 527.018117][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 527.065832][T11437] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 527.072404][T11437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 527.109158][T11297] wireguard: wg0: Could not create IPv4 socket [ 527.121467][ T10] usb 4-1: USB disconnect, device number 50 [ 527.125791][T11297] wireguard: wg1: Could not create IPv4 socket [ 527.133840][T11437] vhci_hcd vhci_hcd.0: Device attached [ 527.143043][T11297] wireguard: wg2: Could not create IPv4 socket [ 527.157136][T11439] vhci_hcd: connection closed [ 527.217887][T11320] vhci_hcd: stop threads [ 527.252242][T11320] vhci_hcd: release socket [ 527.257092][T11320] vhci_hcd: disconnect device [ 527.257923][T11445] netlink: 'syz.0.1504': attribute type 4 has an invalid length. [ 527.319256][ T5887] vhci_hcd: vhci_device speed not set [ 530.552609][T11479] FAT-fs (nbd0): unable to read boot sector [ 530.807313][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 531.027268][T11484] FAT-fs (nbd3): unable to read boot sector [ 531.277346][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1511'. [ 531.286420][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1511'. [ 531.295703][ T30] audit: type=1400 audit(1764291945.419:940): avc: denied { getopt } for pid=11475 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.756181][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.770323][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.781413][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.790889][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.798713][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.135077][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 532.231822][T11492] Failed to initialize the IGMP autojoin socket (err -2) [ 532.364473][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 532.396449][ T10] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 532.529760][ T10] usb 4-1: Product: syz [ 532.534048][ T10] usb 4-1: Manufacturer: syz [ 532.541605][ T10] usb 4-1: SerialNumber: syz [ 532.557094][ T10] usb 4-1: config 0 descriptor?? [ 532.576178][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 533.546007][ T10] usb 4-1: failed to send control message: -71 [ 533.552345][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 533.613193][ T10] usb 4-1: USB disconnect, device number 51 [ 533.633073][ T5888] kernel write not supported for file [eventfd] (pid: 5888 comm: kworker/1:4) [ 533.643763][ T10] ch341 4-1:0.0: device disconnected [ 533.768432][ T30] audit: type=1400 audit(1764291947.989:941): avc: denied { audit_write } for pid=11532 comm="syz.0.1521" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 533.796953][T11533] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 533.814902][T11533] audit: out of memory in audit_log_start [ 534.170242][T11492] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 534.199174][T11492] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 534.241161][T11492] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 534.335681][ T5817] Bluetooth: hci3: command tx timeout [ 534.353684][T11492] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 534.567340][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 534.736408][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 534.755643][ T10] usb 4-1: config 0 has an invalid interface number: 80 but max is 0 [ 534.774023][ T10] usb 4-1: config 0 has no interface number 0 [ 534.846085][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=15.4f [ 534.862708][T11566] netlink: 'syz.2.1525': attribute type 11 has an invalid length. [ 534.871928][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 534.888272][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.928506][ T10] usb 4-1: Product: syz [ 534.934193][ T10] usb 4-1: Manufacturer: syz [ 534.950091][ T10] usb 4-1: SerialNumber: syz [ 534.959952][ T10] usb 4-1: config 0 descriptor?? [ 534.976447][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 535.020129][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 535.042949][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 535.160425][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 535.197517][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 535.228117][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 535.251150][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 535.266536][ T10] usb 4-1: media controller created [ 535.352658][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.484191][ T10] ttusb2: set interface to alts=3 failed [ 535.886572][ T10] DVB: Unable to find symbol tda10086_attach() [ 535.898461][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 535.918814][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 535.936810][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 535.986314][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 536.004204][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 536.053758][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 536.406163][ T5817] Bluetooth: hci3: command tx timeout [ 536.531227][T11492] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 536.573858][T11492] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 536.606654][T11492] wireguard: wg0: Could not create IPv4 socket [ 536.618064][T11492] wireguard: wg1: Could not create IPv4 socket [ 536.627434][T11492] wireguard: wg2: Could not create IPv4 socket [ 536.854768][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 537.014707][ T10] usb 3-1: device descriptor read/64, error -71 [ 537.164723][ T5888] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 537.199011][ T5946] usb 4-1: USB disconnect, device number 52 [ 537.266866][ T5946] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 537.276430][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 537.328326][ T5888] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 537.345241][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.361328][ T5888] usb 2-1: Product: syz [ 537.369266][ T5888] usb 2-1: Manufacturer: syz [ 537.373913][ T5888] usb 2-1: SerialNumber: syz [ 537.419278][ T5888] usb 2-1: config 0 descriptor?? [ 537.420286][ T10] usb 3-1: device descriptor read/64, error -71 [ 537.473103][ T5888] gspca_main: sq930x-2.14.0 probing 2770:930c [ 537.576626][ T10] usb usb3-port1: attempt power cycle [ 537.638028][ T5888] gspca_sq930x: reg_r 001f failed -32 [ 537.673648][ T5888] sq930x 2-1:0.0: probe with driver sq930x failed with error -32 [ 537.917885][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 537.945106][ T10] usb 3-1: device descriptor read/8, error -71 [ 538.194525][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 538.234978][ T10] usb 3-1: device descriptor read/8, error -71 [ 538.374612][ T10] usb usb3-port1: unable to enumerate USB device [ 538.498791][T11647] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 540.016899][ T5930] usb 2-1: USB disconnect, device number 57 [ 540.449264][T11698] bridge11: entered allmulticast mode [ 541.719379][T11705] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 542.894795][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.912333][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 543.098343][ T30] audit: type=1400 audit(1764291957.320:942): avc: denied { validate_trans } for pid=11708 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 543.136371][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 543.259349][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 543.267276][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 543.338776][T11724] Failed to initialize the IGMP autojoin socket (err -2) [ 543.376244][T11729] netlink: 'syz.3.1547': attribute type 8 has an invalid length. [ 543.388286][T11737] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 545.739253][ T5826] Bluetooth: hci3: command tx timeout [ 547.767443][ T5826] Bluetooth: hci3: command tx timeout [ 549.843950][ T5826] Bluetooth: hci3: command tx timeout [ 550.249296][T11724] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 550.288084][T11724] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 550.396758][T11724] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 550.448591][T11724] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 550.888577][T11810] overlayfs: missing 'lowerdir' [ 551.143615][T11813] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 551.411776][T11813] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 551.422859][T11813] overlayfs: failed to look up (tracing) for ino (-66) [ 551.481775][ T30] audit: type=1400 audit(1764291965.110:943): avc: denied { mounton } for pid=11803 comm="syz.0.1567" path="/342/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 551.519411][T11815] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 551.885519][ T30] audit: type=1326 audit(1764291965.260:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 551.953096][ T5817] Bluetooth: hci3: command tx timeout [ 551.967370][ T30] audit: type=1326 audit(1764291965.260:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 552.053397][ T30] audit: type=1326 audit(1764291965.260:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 552.177229][ T30] audit: type=1326 audit(1764291965.260:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 552.211189][ T30] audit: type=1326 audit(1764291965.260:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 552.684455][ T30] audit: type=1326 audit(1764291965.260:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 552.717881][ T30] audit: type=1326 audit(1764291965.260:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 552.743495][ T30] audit: type=1326 audit(1764291965.260:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950498f749 code=0x7ffc0000 [ 552.846285][ T30] audit: type=1326 audit(1764291965.260:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.2.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9504991667 code=0x7ffc0000 [ 553.869468][ T5946] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 554.027711][ T5946] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 554.047747][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.081323][ T5946] usb 3-1: Product: syz [ 554.178799][ T5946] usb 3-1: Manufacturer: syz [ 554.270806][ T5946] usb 3-1: SerialNumber: syz [ 554.285506][ T5946] usb 3-1: config 0 descriptor?? [ 554.509203][ T5946] gspca_main: sq930x-2.14.0 probing 2770:930c [ 554.629168][T11724] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 554.694327][T11724] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 554.746504][T11724] wireguard: wg0: Could not create IPv4 socket [ 554.764767][T11724] wireguard: wg1: Could not create IPv4 socket [ 554.782400][T11724] wireguard: wg2: Could not create IPv4 socket [ 555.165481][T11871] FAULT_INJECTION: forcing a failure. [ 555.165481][T11871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.166980][T11871] [ 555.166987][T11871] ====================================================== [ 555.166991][T11871] WARNING: possible circular locking dependency detected [ 555.166995][T11871] syzkaller #0 Not tainted [ 555.167000][T11871] ------------------------------------------------------ [ 555.167003][T11871] syz.3.1579/11871 is trying to acquire lock: [ 555.167009][T11871] ffffffff8e2d19a0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 555.167039][T11871] [ 555.167039][T11871] but task is already holding lock: [ 555.167042][T11871] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 555.167066][T11871] [ 555.167066][T11871] which lock already depends on the new lock. [ 555.167066][T11871] [ 555.167069][T11871] [ 555.167069][T11871] the existing dependency chain (in reverse order) is: [ 555.167073][T11871] [ 555.167073][T11871] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 555.167085][T11871] _raw_spin_lock_nested+0x31/0x40 [ 555.167101][T11871] raw_spin_rq_lock_nested+0x29/0x130 [ 555.167120][T11871] task_rq_lock+0xcf/0x490 [ 555.167131][T11871] cgroup_move_task+0x81/0x2a0 [ 555.167144][T11871] css_set_move_task+0x288/0x5f0 [ 555.167154][T11871] cgroup_post_fork+0x201/0x9d0 [ 555.167167][T11871] copy_process+0x602d/0x76a0 [ 555.167180][T11871] kernel_clone+0xfc/0x930 [ 555.167191][T11871] user_mode_thread+0xc8/0x110 [ 555.167203][T11871] rest_init+0x23/0x2b0 [ 555.167214][T11871] start_kernel+0x3f6/0x4e0 [ 555.167229][T11871] x86_64_start_reservations+0x18/0x30 [ 555.167243][T11871] x86_64_start_kernel+0x130/0x190 [ 555.167256][T11871] common_startup_64+0x13e/0x148 [ 555.167266][T11871] [ 555.167266][T11871] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 555.167278][T11871] _raw_spin_lock_irqsave+0x3a/0x60 [ 555.167292][T11871] try_to_wake_up+0xb7/0x1870 [ 555.167303][T11871] __wake_up_common+0x135/0x1f0 [ 555.167318][T11871] __wake_up+0x31/0x60 [ 555.167330][T11871] tty_port_default_wakeup+0x47/0x60 [ 555.167346][T11871] serial8250_tx_chars+0x68e/0x860 [ 555.167355][T11871] serial8250_handle_irq+0x761/0xcb0 [ 555.167364][T11871] serial8250_default_handle_irq+0x9e/0x270 [ 555.167374][T11871] serial8250_interrupt+0xf8/0x1d0 [ 555.167384][T11871] __handle_irq_event_percpu+0x236/0x920 [ 555.167396][T11871] handle_irq_event+0xab/0x1e0 [ 555.167407][T11871] handle_edge_irq+0x3ca/0x9e0 [ 555.167418][T11871] __common_interrupt+0xd0/0x2f0 [ 555.167431][T11871] common_interrupt+0xba/0xe0 [ 555.167442][T11871] asm_common_interrupt+0x26/0x40 [ 555.167452][T11871] pv_native_safe_halt+0xf/0x20 [ 555.167466][T11871] default_idle+0x13/0x20 [ 555.167476][T11871] default_idle_call+0x6c/0xb0 [ 555.167487][T11871] do_idle+0x38d/0x500 [ 555.167498][T11871] cpu_startup_entry+0x4f/0x60 [ 555.167509][T11871] start_secondary+0x21d/0x2b0 [ 555.167523][T11871] common_startup_64+0x13e/0x148 [ 555.167532][T11871] [ 555.167532][T11871] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 555.167544][T11871] _raw_spin_lock_irqsave+0x3a/0x60 [ 555.167558][T11871] __wake_up+0x1c/0x60 [ 555.167570][T11871] tty_port_default_wakeup+0x47/0x60 [ 555.167584][T11871] serial8250_tx_chars+0x68e/0x860 [ 555.167592][T11871] serial8250_handle_irq+0x761/0xcb0 [ 555.167601][T11871] serial8250_default_handle_irq+0x9e/0x270 [ 555.167611][T11871] serial8250_interrupt+0xf8/0x1d0 [ 555.167621][T11871] __handle_irq_event_percpu+0x236/0x920 [ 555.167632][T11871] handle_irq_event+0xab/0x1e0 [ 555.167643][T11871] handle_edge_irq+0x3ca/0x9e0 [ 555.167653][T11871] __common_interrupt+0xd0/0x2f0 [ 555.167665][T11871] common_interrupt+0xba/0xe0 [ 555.167676][T11871] asm_common_interrupt+0x26/0x40 [ 555.167685][T11871] pv_native_safe_halt+0xf/0x20 [ 555.167699][T11871] default_idle+0x13/0x20 [ 555.167708][T11871] default_idle_call+0x6c/0xb0 [ 555.167719][T11871] do_idle+0x38d/0x500 [ 555.167729][T11871] cpu_startup_entry+0x4f/0x60 [ 555.167740][T11871] start_secondary+0x21d/0x2b0 [ 555.167753][T11871] common_startup_64+0x13e/0x148 [ 555.167762][T11871] [ 555.167762][T11871] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 555.167774][T11871] _raw_spin_lock_irqsave+0x3a/0x60 [ 555.167788][T11871] serial8250_console_write+0x181/0x1890 [ 555.167798][T11871] console_flush_all+0x801/0xc60 [ 555.167809][T11871] console_unlock+0xd8/0x210 [ 555.167819][T11871] vprintk_emit+0x3d7/0x680 [ 555.167831][T11871] _printk+0xc7/0x100 [ 555.167839][T11871] register_console+0xc2d/0x11b0 [ 555.167850][T11871] univ8250_console_init+0x5f/0x90 [ 555.167867][T11871] console_init+0x152/0x680 [ 555.167881][T11871] start_kernel+0x29f/0x4e0 [ 555.167893][T11871] x86_64_start_reservations+0x18/0x30 [ 555.167920][T11871] x86_64_start_kernel+0x130/0x190 [ 555.167933][T11871] common_startup_64+0x13e/0x148 [ 555.167955][T11871] [ 555.167955][T11871] -> #0 (console_owner){-.-.}-{0:0}: [ 555.167967][T11871] __lock_acquire+0x126f/0x1c90 [ 555.167975][T11871] lock_acquire+0x179/0x350 [ 555.167983][T11871] console_lock_spinning_enable+0x72/0x80 [ 555.167994][T11871] console_flush_all+0x7aa/0xc60 [ 555.168005][T11871] console_unlock+0xd8/0x210 [ 555.168015][T11871] vprintk_emit+0x3d7/0x680 [ 555.168026][T11871] _printk+0xc7/0x100 [ 555.168034][T11871] should_fail_ex+0x4e7/0x640 [ 555.168046][T11871] strncpy_from_user+0x3b/0x2e0 [ 555.168055][T11871] strncpy_from_user_nofault+0x7f/0x180 [ 555.168072][T11871] bpf_probe_read_user_str+0x26/0x70 [ 555.168082][T11871] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 555.168089][T11871] bpf_trace_run4+0x252/0x5b0 [ 555.168101][T11871] __bpf_trace_sched_switch+0x145/0x190 [ 555.168116][T11871] __traceiter_sched_switch+0x6f/0xc0 [ 555.168127][T11871] __schedule+0x183b/0x5de0 [ 555.168140][T11871] preempt_schedule_irq+0x51/0x90 [ 555.168154][T11871] irqentry_exit+0x36/0x90 [ 555.168162][T11871] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 555.168172][T11871] irqentry_exit_to_user_mode+0x15a/0x310 [ 555.168181][T11871] asm_sysvec_call_function_single+0x1a/0x20 [ 555.168191][T11871] [ 555.168191][T11871] other info that might help us debug this: [ 555.168191][T11871] [ 555.168193][T11871] Chain exists of: [ 555.168193][T11871] console_owner --> &p->pi_lock --> &rq->__lock [ 555.168193][T11871] [ 555.168207][T11871] Possible unsafe locking scenario: [ 555.168207][T11871] [ 555.168209][T11871] CPU0 CPU1 [ 555.168212][T11871] ---- ---- [ 555.168214][T11871] lock(&rq->__lock); [ 555.168220][T11871] lock(&p->pi_lock); [ 555.168226][T11871] lock(&rq->__lock); [ 555.168232][T11871] lock(console_owner); [ 555.168238][T11871] [ 555.168238][T11871] *** DEADLOCK *** [ 555.168238][T11871] [ 555.168241][T11871] 4 locks held by syz.3.1579/11871: [ 555.168246][T11871] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 555.168270][T11871] #1: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 555.168299][T11871] #2: ffffffff8e3b1de0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 555.168319][T11871] #3: ffffffff8e3b1e50 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 555.168343][T11871] [ 555.168343][T11871] stack backtrace: [ 555.168348][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.3.1579 Not tainted syzkaller #0 PREEMPT(full) [ 555.168360][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.168366][T11871] Call Trace: [ 555.168369][T11871] [ 555.168373][T11871] dump_stack_lvl+0x116/0x1f0 [ 555.168383][T11871] print_circular_bug+0x275/0x350 [ 555.168399][T11871] check_noncircular+0x14c/0x170 [ 555.168415][T11871] __lock_acquire+0x126f/0x1c90 [ 555.168426][T11871] lock_acquire+0x179/0x350 [ 555.168435][T11871] ? console_lock_spinning_enable+0x61/0x80 [ 555.168447][T11871] ? console_lock_spinning_enable+0x4a/0x80 [ 555.168460][T11871] console_lock_spinning_enable+0x72/0x80 [ 555.168472][T11871] ? console_lock_spinning_enable+0x61/0x80 [ 555.168483][T11871] console_flush_all+0x7aa/0xc60 [ 555.168496][T11871] ? __pfx_console_flush_all+0x10/0x10 [ 555.168510][T11871] ? is_printk_cpu_sync_owner+0x32/0x40 [ 555.168525][T11871] console_unlock+0xd8/0x210 [ 555.168536][T11871] ? __pfx_console_unlock+0x10/0x10 [ 555.168548][T11871] ? do_raw_spin_unlock+0x160/0x230 [ 555.168560][T11871] ? _printk+0xc7/0x100 [ 555.168568][T11871] ? __down_trylock_console_sem+0xb0/0x140 [ 555.168579][T11871] vprintk_emit+0x3d7/0x680 [ 555.168591][T11871] ? __pfx_vprintk_emit+0x10/0x10 [ 555.168604][T11871] ? kvm_sched_clock_read+0x11/0x20 [ 555.168619][T11871] ? sched_clock+0x38/0x60 [ 555.168634][T11871] _printk+0xc7/0x100 [ 555.168642][T11871] ? __pfx__printk+0x10/0x10 [ 555.168651][T11871] ? __pick_eevdf+0x127/0x670 [ 555.168670][T11871] ? __pfx____ratelimit+0x10/0x10 [ 555.168684][T11871] ? __lock_acquire+0x622/0x1c90 [ 555.168694][T11871] should_fail_ex+0x4e7/0x640 [ 555.168706][T11871] strncpy_from_user+0x3b/0x2e0 [ 555.168716][T11871] ? lock_acquire+0x179/0x350 [ 555.168725][T11871] strncpy_from_user_nofault+0x7f/0x180 [ 555.168741][T11871] bpf_probe_read_user_str+0x26/0x70 [ 555.168751][T11871] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 555.168759][T11871] bpf_trace_run4+0x252/0x5b0 [ 555.168771][T11871] ? __pfx_bpf_trace_run4+0x10/0x10 [ 555.168784][T11871] ? __lock_acquire+0xb8a/0x1c90 [ 555.168798][T11871] __bpf_trace_sched_switch+0x145/0x190 [ 555.168810][T11871] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 555.168822][T11871] ? psi_group_change+0x491/0xbe0 [ 555.168839][T11871] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 555.168854][T11871] __traceiter_sched_switch+0x6f/0xc0 [ 555.168866][T11871] __schedule+0x183b/0x5de0 [ 555.168880][T11871] ? __resched_curr+0x2af/0x3b0 [ 555.168894][T11871] ? __pfx___schedule+0x10/0x10 [ 555.168909][T11871] ? do_raw_spin_unlock+0x172/0x230 [ 555.168920][T11871] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 555.168942][T11871] preempt_schedule_irq+0x51/0x90 [ 555.168958][T11871] irqentry_exit+0x36/0x90 [ 555.168966][T11871] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 555.168976][T11871] RIP: 0010:irqentry_exit_to_user_mode+0x15a/0x310 [ 555.168988][T11871] Code: 85 2e 01 00 00 e8 d6 0f 00 00 65 48 8b 05 c6 d4 40 08 48 8b 18 f7 c3 37 03 00 00 0f 84 f3 fe ff ff e8 7a 0e 64 f6 fb f6 c3 30 <75> b9 f6 c7 01 74 be 4c 89 e7 e8 17 42 92 f6 f6 c3 06 74 b6 4c 89 [ 555.168998][T11871] RSP: 0000:ffffc9000423ff28 EFLAGS: 00000202 [ 555.169005][T11871] RAX: 0000000000000151 RBX: 0000000000000010 RCX: ffffffff81c4e8df [ 555.169012][T11871] RDX: 0000000000000000 RSI: ffffffff8da2c165 RDI: ffffffff8bf073c0 [ 555.169018][T11871] RBP: ffff8880529e0000 R08: 0000000000000001 R09: 0000000000000001 [ 555.169024][T11871] R10: ffffffff908214d7 R11: 0000000000000001 R12: ffffc9000423ff48 [ 555.169030][T11871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.169037][T11871] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 555.169056][T11871] ? irqentry_exit_to_user_mode+0x156/0x310 [ 555.169067][T11871] asm_sysvec_call_function_single+0x1a/0x20 [ 555.169077][T11871] RIP: 0033:0x7fa89ab8f749 [ 555.169089][T11871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.169098][T11871] RSP: 002b:00007fa898df6038 EFLAGS: 00000246 [ 555.169110][T11871] RAX: 0000000000000032 RBX: 00007fa89ade6090 RCX: 00007fa89ab8f749 [ 555.169116][T11871] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000006 [ 555.169122][T11871] RBP: 00007fa898df6090 R08: 0000200000000000 R09: 0000000000000000 [ 555.169128][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.169133][T11871] R13: 00007fa89ade6128 R14: 00007fa89ade6090 R15: 00007ffdd9025a08 [ 555.169143][T11871] [ 556.337730][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.3.1579 Not tainted syzkaller #0 PREEMPT(full) [ 556.337745][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.337751][T11871] Call Trace: [ 556.337758][T11871] [ 556.337763][T11871] dump_stack_lvl+0x116/0x1f0 [ 556.337779][T11871] should_fail_ex+0x512/0x640 [ 556.337793][T11871] strncpy_from_user+0x3b/0x2e0 [ 556.337804][T11871] ? lock_acquire+0x179/0x350 [ 556.337815][T11871] strncpy_from_user_nofault+0x7f/0x180 [ 556.337832][T11871] bpf_probe_read_user_str+0x26/0x70 [ 556.337843][T11871] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 556.337852][T11871] bpf_trace_run4+0x252/0x5b0 [ 556.337865][T11871] ? __pfx_bpf_trace_run4+0x10/0x10 [ 556.337878][T11871] ? __lock_acquire+0xb8a/0x1c90 [ 556.337889][T11871] __bpf_trace_sched_switch+0x145/0x190 [ 556.337902][T11871] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 556.337914][T11871] ? psi_group_change+0x491/0xbe0 [ 556.337932][T11871] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 556.337947][T11871] __traceiter_sched_switch+0x6f/0xc0 [ 556.337960][T11871] __schedule+0x183b/0x5de0 [ 556.337975][T11871] ? __resched_curr+0x2af/0x3b0 [ 556.337990][T11871] ? __pfx___schedule+0x10/0x10 [ 556.338004][T11871] ? do_raw_spin_unlock+0x172/0x230 [ 556.338016][T11871] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 556.338034][T11871] preempt_schedule_irq+0x51/0x90 [ 556.338049][T11871] irqentry_exit+0x36/0x90 [ 556.338058][T11871] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 556.338070][T11871] RIP: 0010:irqentry_exit_to_user_mode+0x15a/0x310 [ 556.338082][T11871] Code: 85 2e 01 00 00 e8 d6 0f 00 00 65 48 8b 05 c6 d4 40 08 48 8b 18 f7 c3 37 03 00 00 0f 84 f3 fe ff ff e8 7a 0e 64 f6 fb f6 c3 30 <75> b9 f6 c7 01 74 be 4c 89 e7 e8 17 42 92 f6 f6 c3 06 74 b6 4c 89 [ 556.338092][T11871] RSP: 0000:ffffc9000423ff28 EFLAGS: 00000202 [ 556.338101][T11871] RAX: 0000000000000151 RBX: 0000000000000010 RCX: ffffffff81c4e8df [ 556.338112][T11871] RDX: 0000000000000000 RSI: ffffffff8da2c165 RDI: ffffffff8bf073c0 [ 556.338118][T11871] RBP: ffff8880529e0000 R08: 0000000000000001 R09: 0000000000000001 [ 556.338124][T11871] R10: ffffffff908214d7 R11: 0000000000000001 R12: ffffc9000423ff48 [ 556.338130][T11871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.338137][T11871] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 556.338153][T11871] ? irqentry_exit_to_user_mode+0x156/0x310 [ 556.338163][T11871] asm_sysvec_call_function_single+0x1a/0x20 [ 556.338174][T11871] RIP: 0033:0x7fa89ab8f749 [ 556.338182][T11871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.338192][T11871] RSP: 002b:00007fa898df6038 EFLAGS: 00000246 [ 556.338199][T11871] RAX: 0000000000000032 RBX: 00007fa89ade6090 RCX: 00007fa89ab8f749 [ 556.338205][T11871] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000006 [ 556.338211][T11871] RBP: 00007fa898df6090 R08: 0000200000000000 R09: 0000000000000000 [ 556.338216][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.338222][T11871] R13: 00007fa89ade6128 R14: 00007fa89ade6090 R15: 00007ffdd9025a08 [ 556.338232][T11871] [ 557.000143][ T5946] gspca_sq930x: ucbus_write failed -110 [ 557.164360][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 557.164377][ T30] audit: type=1400 audit(1764291971.001:976): avc: granted { setsecparam } for pid=11866 comm="syz.1.1578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 557.273484][ T5946] gspca_sq930x: Sensor ov9630 not yet treated [ 557.279680][ T5946] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 557.300549][ T5940] usb 3-1: USB disconnect, device number 65 [ 557.443589][ T5930] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 557.593618][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 557.601447][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.612611][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.622617][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.635458][ T5930] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 557.644655][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.653318][ T5930] usb 2-1: config 0 descriptor?? [ 559.082698][ T5930] usbhid 2-1:0.0: can't add hid device: -71 [ 559.088940][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 559.098642][ T5930] usb 2-1: USB disconnect, device number 58 [ 562.645864][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.652479][ T1298] ieee802154 phy1 wpan1: encryption failed: -22