last executing test programs: 10.654413979s ago: executing program 0 (id=931): socket$inet6(0xa, 0x3, 0x6) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000300)="b0", 0x1, r0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r4, r9, &(0x7f00000000c0)=0x5c, 0x7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b50a000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90) keyctl$unlink(0x9, r2, r0) 8.876095362s ago: executing program 0 (id=934): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x50500, 0x20) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000300)={0xc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x120, 0x0, 0x0, 0x2100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.497626955s ago: executing program 4 (id=939): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) map_shadow_stack(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8], [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5227c21c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x665, 0x0, 0x0, 0xdab1, 0xffffffff]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = epoll_create1(0x80000) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r2, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000b80)="2e70485ca21a6c3104692bcf7490b3811029026f10861b199698b221081d9af6532671b957267d23e6276955a3a4ecdb6bce6a38c2980cf6e732081898c1106054ed8122de753c1ee72a4fdfa1d1feedc3097ac3b60c48dce0eb76c791154c3185daa2bf05ba5b59ad62f881a623ae74f0305173e5073d998dd9b7a245c84fe6e43af8520c961e83a4b41e57e6dc1d05ce1a5637e00ee2529dade26e17438c6f74ffe2c5e3eaff9981962c427d426511bc8fcaffd9c818195311bf55ae1d31ae8acc6c9b6782d92a4f4a469ee2ababf8d688f2bc6e5a2df36d0cd44ab3f6d18f6a79f5e5c75f1ab352e38899e40fa98f8ee755d99ca09c8022", 0xf9}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='\x00', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f0000000a40)="a1e11be535f0a80c262d3a6a9363a65f456c5153b890edeaa12117f7e2890c4ec08e200d110300f11ad39f2508ad6fc9b5b3dc0a0cdc4cbf96e2b0d0b4d0873b6ea216b1e2d3504bb22719d74cf95c3acd2cd803d2db78648fe19d5fbc278734d90e9ca383e8aac11dc88fcbb830f2d6034e5cf2bd13bd990b0271f3c9ef8d5aec3fdd2b1d204b45c0b138f351b3386b26", 0x91}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="73d8309e3307bf4eab5c279df541da6b92081ef2c98a402aeebdb8c4195cf698a6", 0x21}, {&(0x7f0000000240)="c48fa79dd9d0cc4a50a3fe11ab8c24616d80ebb661897240afaba522ef09a7d8307d891f1e15dfabffb92f97c274742a2bb67947b97d8d5fcee34724f2cbbb6afba70e3b3d6c7d8fcd5d3ff3156b", 0x4e}], 0x2}}], 0x4, 0x4048841) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r3 = getpgrp(0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x5, 0x2, @tid=r3}, &(0x7f0000001100)=0x0) timer_settime(r4, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000140)="400b9c5fd359417002c5b4790eda73d5b2ad4fd30b9c5c88fd3b17d0d23858d36b46994521fba0b477549a7ad2eb4afaef50bfd571946667c88a7d53e2ed0bb179afc858df9f43670835fb2afe3ab0bbdf232bb48e", &(0x7f0000000340)="220da91cbde1228ccfe00a9742cc5290dc327550470b3addb052d7199c73194e7d1eb9f71843de7c5c1c049ce5e2960a8de59e4bfadc7ed8a1221c821672eaa381784c667f806879b998ce4d1e5c28548ff67614b01020c2877123e416f6263640594c0056a7fb59348e802de7d010f3918a252614220b662d8c3093725d3c64e534f12730d65fafa8638db55f8f0fb816c4387839be1f45cafd97029b4a51660092750fc3dbbacfc12c110b9316d3f348b55aaa0ae4ee756afcb582edc0b5ce1819317ded4ff40c5c4e883683f5b08c9931a7d6162adf984f765e23fa059896ff684d1a3abdbc360dec7a4898857950feb7aa9fe72bd8990c233f772871"}}, &(0x7f0000000200)) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) dup(r0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x18, 0xa}, 0x20) r5 = epoll_create(0x8) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x400]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.38429424s ago: executing program 2 (id=940): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000003000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800e000100696d6d6564696174650000002800028008000140008b00001c0002801800028008000180fffffffc0900020073797a31000000000900010073797a30"], 0xdc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x13, 0x80000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffffb5000040"]) write$binfmt_script(r3, 0x0, 0xfffffe5d) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r8, {0xd}}}, 0x24}}, 0x0) 6.170178425s ago: executing program 3 (id=941): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xffff80fe, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 6.168598981s ago: executing program 1 (id=942): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x5608, 0x0) mount$nfs4(&(0x7f00000006c0)='gre0\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x800000, &(0x7f0000000780)=ANY=[@ANYBLOB='appraise,smackhat=gre0\x00,fsmagic=0x000000003f6af0d7,smackfshat=%,\x00\x00\x00']) 6.116112125s ago: executing program 4 (id=943): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000000)=[{r0, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x42}, &(0x7f0000000040), &(0x7f0000000280)) 6.036334457s ago: executing program 4 (id=944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af24, &(0x7f0000000100)={0x1, 0x1000}) 5.948336597s ago: executing program 3 (id=945): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x1, 0x0) syz_io_uring_setup(0x1d71, &(0x7f0000000400)={0x0, 0xffffffff, 0x200, 0x20, 0x32e}, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x5c928c36, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='f2fs\x00', 0x0, 0x0) 5.916752341s ago: executing program 4 (id=946): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1fc}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(r2, 0xa3b, 0xf00, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x624b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0x25b}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x18, 0x20000000, r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) connect$unix(r0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x4bfb, &(0x7f0000000240)={0xfa}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x400c031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 5.659433637s ago: executing program 2 (id=947): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x8, 0x5, 0x1a, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x1, 0xb3e, 0xfffffffb}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x4, 0x6, 0x87, 0xfffff800, 0x88, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast1, 0x700, 0x0, 0x5, 0x4}}) r4 = open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x802240, 0x112) getdents(r4, &(0x7f0000000300)=""/88, 0x58) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x8, 0xe3, 0x4}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x9, 0x4, 0x800b, 0x8, 0x7, 0x7, 0x8, 0x6, r5}, &(0x7f0000000440)=0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000480)={0x0, 'netpci0\x00', {0x2}}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000004c0)={r6, 0x4}, &(0x7f0000000500)=0x8) r8 = syz_io_uring_setup(0x100, &(0x7f0000000540)={0x0, 0xdb04, 0x4, 0x3, 0x188}, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x19bd, &(0x7f0000000640)={0x0, 0xe72d, 0xac0, 0x2, 0x165, 0x0, r8}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_NAT={0x50, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000800), 0x40041, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000840)={0x7, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, &(0x7f0000000880)={0x0, r10}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x49c000, 0x0) sendmsg$alg(r11, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000900)="a528d7c38d457cf8e181d4074dfc52ac6d04d436ee6c873a106fdb654c79bf523ffe3cf4453a624b4083c6e963c3d8bfef7d869de15af1b38eb4db026295586af58f9627c06194d15a1c94f69189b809b7bc1e7650d4afff9a95f9e775d07ec48af651f53ad7ac7308c0b29b8040e297b97e698e7fd3e3ba5becc35f79df2b6079462467d92fbe9f8657cbdc4513f21acd4ced9b7f187213097363a0af309093a97ab255da07b3aafbe62eb4a475152decd639bd06628696ec3c2f8a32f0a9", 0xbf}, {&(0x7f00000009c0)="0ae9370dc2c16c31f2ac00db0623dfad718311781fce082d5989abfced0b4b0065ad3bce8cb49021d165cee848c49e", 0x2f}, {&(0x7f0000000a00)="4c0c4de38f915e1450", 0x9}, {&(0x7f0000000a40)="570f93f50c0e92911d2aaa1919e704c4d2c1c34e88a573942f9ba50874ade2e008de7514b0c42c548667b3660a6d1deab51fae0b11156c57b1127838a5c79e62bd5b", 0x42}, {&(0x7f0000000ac0)="6cf28393eb968c054ed32b3ac8563e25cc31182fd034f37cea97418b6fcd4a99c53323a3c54fcd5889e4938bbf021e14f6dd", 0x32}, {&(0x7f0000000b00)="f475", 0x2}], 0x6, &(0x7f0000000bc0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18}, @iv={0x60, 0x117, 0x2, 0x45, "ccf2e7a0bf7ff20095faeac2f94de4ffadff2b9717c1adb1219df4f7ee5fe3822f8bda613d9abc7061698e7080ce19d519ced40a19d3d512679326fd79a7c12819f14b251c"}], 0x90, 0x20000004}, 0x4004800) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000cc0)={{0x2, 0x4e23, @empty}, {0x6}, 0xa8, {0x2, 0x4e22, @broadcast}, 'ip6erspan0\x00'}) connect$inet(r11, &(0x7f0000000d40)={0x2, 0x4e24, @private=0xa010100}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d80)={'ip6_vti0\x00', r3, 0x29, 0x0, 0x3, 0x7, 0x9, @private1, @private1, 0x10, 0x8, 0x101, 0x6}}) r12 = msgget$private(0x0, 0x20) msgctl$IPC_STAT(r12, 0x2, &(0x7f0000000e40)=""/82) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000f00)=0x0) connect$nfc_llcp(r11, &(0x7f0000000f40)={0x27, r13, 0xffffffffffffffff, 0x3, 0x5, 0x5f, "07da99393ccd9a4bea0d689f0fb112ff1901162edc112f6af62ceb2e22e76463b6d7f949d15c1fd9f56a28e0064d162dd4c71ea11915c955e13917611489f8", 0xd}, 0x60) 4.65999029s ago: executing program 3 (id=948): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c000280080001", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32], 0x60}}, 0x0) 4.532086583s ago: executing program 0 (id=949): fanotify_mark(0xffffffffffffffff, 0x1, 0x48001023, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xa) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x4, 0x200, {0x0}, {}, 0x7, 0x7fffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r0, 0x0, 0x9, &(0x7f0000000000)='blkisive\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x8, 0x0, 0x80, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map=r0, r0, 0x0, 0xc, 0x0, @prog_id=r3, r4}, 0x20) socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) openat(r7, &(0x7f0000000380)='./file0\x00', 0x8002, 0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000340)={0x0, &(0x7f0000000200), 0x0, r9}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r9}) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, 0x0, &(0x7f0000000180)=0x4) 4.128231224s ago: executing program 2 (id=950): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x1, 0x0) syz_io_uring_setup(0x1d71, &(0x7f0000000400)={0x0, 0xffffffff, 0x200, 0x20, 0x32e}, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x5c928c36, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='f2fs\x00', 0x0, 0x0) 3.701517393s ago: executing program 3 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x2c}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, 0x0, 0xfce) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f00000004c0)=ANY=[@ANYRES8=r4, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000010095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) iopl(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) fsopen(0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 2.341424818s ago: executing program 2 (id=952): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = gettid() ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='hfs\x00', 0x0, 0x0) 2.276129422s ago: executing program 4 (id=953): r0 = socket$inet_smc(0x2b, 0x1, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x35000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000000c0)="e7", 0x1, 0x24000094, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) fsetxattr$smack_xattr_label(r0, &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000140)={']/)!^\\)\xf1'}, 0x9, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6490, 0x4) close(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x76ed, {{0x2, 0x4e22, @loopback}}}, 0x88) r5 = dup2(r0, r1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000180)={0x7ff, 0x4, 0x2, 0x7}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x600, 0x483, 0x0, 0x0) 2.151540973s ago: executing program 3 (id=954): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[]) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000008001a8004000700"], 0x28}, 0x1, 0x0, 0x0, 0x48885}, 0x0) 2.134358535s ago: executing program 0 (id=955): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_emit_vhci(0x0, 0x2fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x900}, &(0x7f0000000040), &(0x7f0000000280)) 1.722481281s ago: executing program 1 (id=956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af24, &(0x7f0000000100)={0x1, 0x1000}) 1.528267011s ago: executing program 1 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000020c0)=ANY=[@ANYBLOB="980300", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r0], 0x398}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 1.322625464s ago: executing program 1 (id=958): unshare(0x2c060000) unshare(0x24020400) (async) unshare(0x24020400) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x100b]}) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='gfs2\x00', 0x0, 0x0) (async) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='gfs2\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001439) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0xb, @private0={0xfc, 0x2}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000001f00)={0x1f}) (async) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000001f00)={0x1f}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lchown(&(0x7f0000000200)='./file0\x00', 0xee01, 0x0) (async) lchown(&(0x7f0000000200)='./file0\x00', 0xee01, 0x0) sendmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="00535b0a3926148fa0f65f20f416c728f232a6f42b8f349c6235cf35c87da39b4e62f27229cded285b644c53a649851401346a062cab5c067cbc5c4de22423a1a8bb71fb7e6fb02a4cf478b4faf2599dc1b526d6825bae5842383c85e29a2bf479782135cfe67178d4cb1574000ba93e130450ee72101cf58fe8f32a533f", 0x7e}, {&(0x7f0000000180)="211809", 0x3}], 0x2, &(0x7f0000000500)=[{0x10, 0x114, 0x81}, {0x60, 0x103, 0x1f, "17916d95595692d58dd85fdca0b746643a36b42de9562f53974d8be45920b8d5264ce1030d9929124ebcc7f162f242d3ddafcf608d8bee1fc56d163bea187647abe134ce4e5f8323c76536b26d49ef"}, {0x1010, 0x107, 0x10001, "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"}, {0x100, 0x25, 0x0, "08b4ff5dec0c2c8399de9d9cecfdfb0c9d0117c02a0ac8ad8b37b7f3316e9a2049868aac5cbbdff4dc03cca4259f130fe01ab65a1465e26adbaffbaa09cd415a4a7aa882857286ec873642aef4303baec838aa620fd8377b4481b6706ec7c3f6126c58dbc80852933da548f8dccbec618de8d8e73fde791c56b6bd20a4dcb087ab38ea02b00ec4603996a8c5712135f01af502e8d3db817e71f1a056ed0fc67145207e56f4f53b17d09b07f13a8ab1e93bb008f1a3bb79fd0a8917a7db9995f97231f8ecb8d7f94971a25fae4474148c072f93dda4b24a0f4c9738976f35feb15554fb598f34ded383e0949dbc8527"}, {0xc8, 0x130, 0x1ff, "049a95aba6749e36a1e7fd8a2e779d6499524875026637a927713b164cfc6d90c27834e334f1095bb7a8d8b8206f7289fa2d96e588a26461d0bc6a383a6788194df7f4847bef1198300390d855bc9c7011e5a92d6724ed12e5f3a50d68d378e40c0f41f601bdbfdb3497a49c5fb533db5207b1a82c9a7ef91d3f87a8c37030916d711dd03fe4598820eaba632a97b67ad716b74b37ac0a48ecd7bba5d2a90f4cc19a2611e9401890ebb85c29c6a25429a0e76c8799fba8"}, {0x28, 0x1, 0x6, "eaea7fc68ecdb54fa28ce41a7a8ee05cdf6663bcb4abb747"}, {0x18, 0x119, 0x80000000, "524a8e7e02"}], 0x1288}, 0x6010) rmdir(0x0) (async) rmdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.153052852s ago: executing program 3 (id=959): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "7b8c5c34"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0xf, 0x51, {0x51, 0x11, "3e9bf9a21680f34b477557a8edfb2bbdce9eda24ba92307c9084d27da745b9bd221180687ef9cf239e35a1f9a175f35db10cc3b9b8217538108aa5c5bdbccfbd73124ab1bb0fbeeaac5decbc9723e5"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f00000001c0)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "8167da5ece0a7ac6e15fd1cd8e9a0acd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x80, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x6, 0x2, 0x7, 0x5, 0x0, 0xf7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a9495fc2401db0a1aea396cfea2bc587"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x4, 0xb6}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x1, 0x81, 0xc, "5256a494", "a7f1b04a"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0xa, 0x1, 0x1, 0x1ff, 0x80}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0xf, 0xfa, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x160, 0x10, [0xf0f0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8d09}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000580)={0x40, 0xb, 0x2, "d427"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "51b1"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x412}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x1}}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16], 0x48}}, 0x0) syz_emit_ethernet(0x14f, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0x8f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x0, 0x6, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "182b44"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000400)=@string={0x2}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) socket$inet(0x2, 0x3, 0x2) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0x40) sendmmsg$inet6(r6, &(0x7f0000009940)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="d16564a94a8ec6a60db801000000000000000000020200000800f303", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x8011}, 0x20000040) 1.021802886s ago: executing program 1 (id=960): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) shutdown(r0, 0x2) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="00ebfa1794f0ab1fd757284201c4e9302130673c41740f5851a1e57bce4cb51a2056f50a54805f33100fbe8b99c7a9e0b10df4b736276f5a0c02daa95463230ffe31221b41b8a7b1e09c78a14ae4ff18b84ee835f6fa8767e851549b7dae207008eec69dc0fcacbaaa360909edfeccd62020a25db09d6239364281885fcf8427fca9f6a0c82230a4139fab0c3c898f084b486fd9381c6afa9161f50b7055b99c92140d866a70fdd9ffca1f41579e4f3a8e156ada9e14fa150e49100516e79719e5eba5b1c94ef724a6fc8c726a210eb2e7783e7007ca959cd3018ab8dcbedd7aacc69db95d725e22bf41f33e3802fa423170f2b55bc096f3a4dcff6c5e56fc73") 1.001487701s ago: executing program 2 (id=961): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x7, 0x5, 0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, r0, 0x2, 0x2}, 0x98) 931.748124ms ago: executing program 0 (id=962): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4004c030) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f00000003c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYRES16=r2, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x4000005) unshare(0x26020280) syz_clone(0x81080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x60000004, 0x0) socket$inet6(0xa, 0x0, 0x0) ftruncate(r0, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, 0xffffffffffffffff, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c}, 0x90) 817.032926ms ago: executing program 2 (id=963): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000040)={0x20, 0xe, 0x97, "2db7f21c536fc386a0b73509aa8b0482fc9fff1567677d0fd6dac6a086180efa45ae00ecfe1d559b704bb27239cb4ea88ec0ee03a2784771dbbe624f3ead0a7ae099a827befe94e66113021bb9860960807187d50da7089eecbc8b893a59faea4315ff90a2e893abe03a56661e50094d9f3dcd7515b73aea5e51fb00"/151}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000040)={0x20, 0xe, 0x97, "2db7f21c536fc386a0b73509aa8b0482fc9fff1567677d0fd6dac6a086180efa45ae00ecfe1d559b704bb27239cb4ea88ec0ee03a2784771dbbe624f3ead0a7ae099a827befe94e66113021bb9860960807187d50da7089eecbc8b893a59faea4315ff90a2e893abe03a56661e50094d9f3dcd7515b73aea5e51fb00"/151}, 0x0, 0x0}) 771.383382ms ago: executing program 1 (id=964): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/514, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) unshare(0x24020400) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x9, 0x8, 0x101, 0x1, 0x8, 0x9, 0xff, 0x6, 0x7, 0x8, 0x5, 0xc60, 0x80000001, 0x6, 0x10000, 0xef]}) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='gfs2\x00', 0x0, 0x0) 312.491152ms ago: executing program 4 (id=965): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 0s ago: executing program 0 (id=966): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x5, 0x3, 0x0, 0x0, [0x0]}]}}}}}}}}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) socket(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): e_slave_0: left promiscuous mode [ 482.201282][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.370938][ T4607] Bluetooth: hci4: command tx timeout [ 482.530724][ T4607] Bluetooth: hci1: command tx timeout [ 482.703301][ T4607] Bluetooth: hci0: command tx timeout [ 482.780979][ T4607] Bluetooth: hci5: command tx timeout [ 482.853146][ T4607] Bluetooth: hci2: command tx timeout [ 483.116833][ T5349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.132775][ T5349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.143490][ T5349] bond0 (unregistering): Released all slaves [ 483.254982][ T5349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.270383][ T5349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.286626][ T5349] bond0 (unregistering): Released all slaves [ 483.407472][ T5349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.424241][ T5349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.436561][ T5349] bond0 (unregistering): Released all slaves [ 483.488433][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.539147][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.677959][ T8847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 483.698347][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.705549][ T5352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.725953][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.733127][ T5352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.756511][ T8847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 483.771518][ T8847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 483.795040][ T8847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 483.864920][ T8849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.368001][ T8853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.379576][ T8853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.395354][ T8853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.409452][ T8853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.459808][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.503598][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.588355][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.649039][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.656182][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.679947][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.687147][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.856116][ T5349] hsr_slave_0: left promiscuous mode [ 484.872290][ T5349] hsr_slave_1: left promiscuous mode [ 484.878585][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.896930][ T5349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.908823][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.927819][ T5349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.958430][ T5349] hsr_slave_0: left promiscuous mode [ 484.978066][ T5349] hsr_slave_1: left promiscuous mode [ 484.995051][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.009302][ T5349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.022741][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.030217][ T5349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.057989][ T5349] hsr_slave_0: left promiscuous mode [ 485.075238][ T5349] hsr_slave_1: left promiscuous mode [ 485.082359][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.102021][ T5349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.110187][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.118114][ T5349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.217756][ T5349] veth1_macvtap: left promiscuous mode [ 485.233607][ T5349] veth0_macvtap: left promiscuous mode [ 485.239308][ T5349] veth1_vlan: left promiscuous mode [ 485.245312][ T5349] veth0_vlan: left promiscuous mode [ 485.266055][ T5349] veth1_macvtap: left promiscuous mode [ 485.280664][ T5349] veth0_macvtap: left promiscuous mode [ 485.286356][ T5349] veth1_vlan: left promiscuous mode [ 485.300858][ T5349] veth0_vlan: left promiscuous mode [ 485.308511][ T5349] veth1_macvtap: left promiscuous mode [ 485.320723][ T5349] veth0_macvtap: left promiscuous mode [ 485.326415][ T5349] veth1_vlan: left promiscuous mode [ 485.343449][ T5349] veth0_vlan: left promiscuous mode [ 486.581711][ T5349] team0 (unregistering): Port device team_slave_1 removed [ 486.641492][ T5349] team0 (unregistering): Port device team_slave_0 removed [ 486.988511][ T5349] team0 (unregistering): Port device batadv0 removed [ 487.579636][ T5349] team0 (unregistering): Port device team_slave_1 removed [ 487.624843][ T5349] team0 (unregistering): Port device team_slave_0 removed [ 488.474190][ T5349] team0 (unregistering): Port device team_slave_1 removed [ 488.519285][ T5349] team0 (unregistering): Port device team_slave_0 removed [ 489.052278][ T8849] veth0_vlan: entered promiscuous mode [ 489.230047][ T8849] veth1_vlan: entered promiscuous mode [ 489.290694][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.446402][ T8855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.470022][ T8850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.495257][ T8850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.582897][ T8855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.614073][ T8850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 489.675987][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.702962][ T8850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 489.767863][ T8855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.786914][ T8849] veth0_macvtap: entered promiscuous mode [ 489.854367][ T8849] veth1_macvtap: entered promiscuous mode [ 489.881748][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.907723][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.914948][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.934629][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.941917][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.003875][ T8855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.026579][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.041923][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.063164][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.151307][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.169072][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.182887][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.273848][ T8849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.291116][ T8849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.299844][ T8849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.316918][ T8849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.477631][ T8853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.493099][ T8853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.648419][ T8855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.674543][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.682777][ T8847] veth0_vlan: entered promiscuous mode [ 490.698379][ T8855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.721660][ T8855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.750861][ T5342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.758741][ T5342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.807961][ T8855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 490.833634][ T8847] veth1_vlan: entered promiscuous mode [ 490.945287][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.013660][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.020850][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.029968][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.043633][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.053041][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.060137][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.156333][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.225607][ T8847] veth0_macvtap: entered promiscuous mode [ 491.305454][ T8847] veth1_macvtap: entered promiscuous mode [ 491.403800][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.415669][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.427323][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.439679][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.452186][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.496077][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.513287][ T8853] veth0_vlan: entered promiscuous mode [ 491.541991][ T5261] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 491.557127][ T8853] veth1_vlan: entered promiscuous mode [ 491.576564][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.596425][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.606696][ T8847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.623347][ T8847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.635336][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.647707][ T8847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.668567][ T8847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.678208][ T8847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.690030][ T8847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.721930][ T8853] veth0_macvtap: entered promiscuous mode [ 491.741408][ T5261] usb 2-1: Using ep0 maxpacket: 16 [ 491.754706][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.755621][ T5261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.776938][ T8853] veth1_macvtap: entered promiscuous mode [ 491.790293][ T5261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.802067][ T5261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.816881][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.820664][ T5261] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 491.824053][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.834340][ T5261] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.856193][ T5261] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 491.866822][ T5261] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 491.875252][ T5261] usb 2-1: Manufacturer: syz [ 491.885035][ T5261] usb 2-1: config 0 descriptor?? [ 491.915233][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.922411][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.955503][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.014978][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.027784][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.038188][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.049337][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.060216][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.071131][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.083336][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.136064][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.147610][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.157911][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.168675][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.178793][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.189444][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.201832][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.221556][ T5261] rc_core: IR keymap rc-hauppauge not found [ 492.245070][ T8853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.255184][ T5261] Registered IR keymap rc-empty [ 492.260179][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.268579][ T8853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.277571][ T8853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.286495][ T8853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.303287][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.314679][ T5352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.348648][ T5352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.358395][ T5261] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 492.376620][ T8850] veth0_vlan: entered promiscuous mode [ 492.385532][ T5261] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 492.402950][ T8850] veth1_vlan: entered promiscuous mode [ 492.424908][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.465716][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.481005][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.489414][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.521841][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.563059][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.608886][ T8850] veth0_macvtap: entered promiscuous mode [ 492.620942][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.661075][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.682436][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.715273][ T8850] veth1_macvtap: entered promiscuous mode [ 492.732744][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.741200][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.754141][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.766338][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.775848][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.814266][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.832270][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.876024][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.910667][ T5261] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 492.930991][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.941219][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.954783][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.101458][ T5261] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 493.109576][ T5261] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 493.129935][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.140806][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.160379][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.243327][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.259582][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.337679][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.380645][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.409997][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.452140][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.503785][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.554748][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.626209][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.664489][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.749432][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.767601][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.008989][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.117919][ T8850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.220511][ T8850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.254543][ T8850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.288326][ T8850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.359824][ T5260] usb 2-1: USB disconnect, device number 49 [ 494.601442][ T5352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.609920][ T5352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.750723][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 494.853733][ T5349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.863962][ T5349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.961159][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 495.024355][ T8] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 495.130187][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.282990][ T8] usb 1-1: config 0 descriptor?? [ 495.361869][ T8] gspca_main: sq930x-2.14.0 probing 041e:403c [ 495.432658][ T8855] veth0_vlan: entered promiscuous mode [ 495.487514][ T8855] veth1_vlan: entered promiscuous mode [ 495.572702][ T9130] FAULT_INJECTION: forcing a failure. [ 495.572702][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 495.680356][ T9130] CPU: 1 UID: 0 PID: 9130 Comm: syz.2.663 Not tainted 6.11.0-rc4-syzkaller #0 [ 495.689276][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 495.699374][ T9130] Call Trace: [ 495.702682][ T9130] [ 495.705640][ T9130] dump_stack_lvl+0x241/0x360 [ 495.710438][ T9130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.715683][ T9130] ? __pfx__printk+0x10/0x10 [ 495.720311][ T9130] ? fs_reclaim_acquire+0x93/0x140 [ 495.725454][ T9130] ? __pfx___might_resched+0x10/0x10 [ 495.730775][ T9130] should_fail_ex+0x3b0/0x4e0 [ 495.735561][ T9130] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 495.741321][ T9130] should_failslab+0xac/0x100 [ 495.746051][ T9130] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 495.751896][ T9130] __kmalloc_noprof+0xd8/0x400 [ 495.756690][ T9130] ? kfree+0x4e/0x360 [ 495.760688][ T9130] tomoyo_realpath_from_path+0xcf/0x5e0 [ 495.766247][ T9130] tomoyo_path_number_perm+0x23a/0x880 [ 495.771711][ T9130] ? tomoyo_path_number_perm+0x208/0x880 [ 495.777337][ T9130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.783310][ T9130] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 495.789293][ T9130] ? kasan_save_track+0x51/0x80 [ 495.794137][ T9130] ? kasan_save_track+0x3f/0x80 [ 495.798980][ T9130] ? kasan_save_free_info+0x40/0x50 [ 495.804192][ T9130] ? poison_slab_object+0xe0/0x150 [ 495.809674][ T9130] ? __kasan_slab_free+0x37/0x60 [ 495.814728][ T9130] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 495.820811][ T9130] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 495.827135][ T9130] ? hook_path_mknod+0x3c7/0x540 [ 495.832078][ T9130] tomoyo_path_mknod+0x176/0x1b0 [ 495.837018][ T9130] ? __pfx_hook_path_mknod+0x10/0x10 [ 495.842296][ T9130] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 495.847757][ T9130] security_path_mknod+0xf8/0x150 [ 495.852785][ T9130] unix_bind+0x4aa/0xf20 [ 495.857030][ T9130] ? __might_fault+0xaa/0x120 [ 495.861717][ T9130] ? __pfx_unix_bind+0x10/0x10 [ 495.866494][ T9130] ? bpf_lsm_socket_bind+0x9/0x10 [ 495.871514][ T9130] ? security_socket_bind+0x87/0xb0 [ 495.876715][ T9130] __sys_bind+0x23d/0x2f0 [ 495.881047][ T9130] ? __pfx___sys_bind+0x10/0x10 [ 495.885901][ T9130] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 495.892237][ T9130] ? do_syscall_64+0x100/0x230 [ 495.896999][ T9130] __x64_sys_bind+0x7a/0x90 [ 495.901497][ T9130] do_syscall_64+0xf3/0x230 [ 495.905998][ T9130] ? clear_bhb_loop+0x35/0x90 [ 495.910673][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.916564][ T9130] RIP: 0033:0x7f73f0f79e79 [ 495.920981][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.940598][ T9130] RSP: 002b:00007f73f1d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 495.949023][ T9130] RAX: ffffffffffffffda RBX: 00007f73f1116058 RCX: 00007f73f0f79e79 [ 495.956988][ T9130] RDX: 000000000000006e RSI: 0000000020000180 RDI: 0000000000000005 [ 495.965046][ T9130] RBP: 00007f73f1d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 495.973016][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.980992][ T9130] R13: 0000000000000000 R14: 00007f73f1116058 R15: 00007ffc5b419ff8 [ 495.988976][ T9130] [ 496.134912][ T8] gspca_sq930x: reg_r 001f failed -110 [ 496.141134][ T8] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 496.163199][ T9130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 496.195048][ T8855] veth0_macvtap: entered promiscuous mode [ 496.218116][ T8855] veth1_macvtap: entered promiscuous mode [ 496.407754][ T9135] ./bus: Can't lookup blockdev [ 497.485527][ T47] usb 1-1: USB disconnect, device number 46 [ 497.675375][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.719523][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.736801][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.750790][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.773886][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.573502][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.585316][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.597678][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.621464][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.621497][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 498.639910][ T5261] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 498.650390][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.661996][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.672033][ T9144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.673'. [ 498.685943][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.700353][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.711288][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.742985][ T9145] tmpfs: Bad value for 'nr_inodes' [ 498.748341][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.804217][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.815052][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.827540][ T5261] usb 4-1: Using ep0 maxpacket: 16 [ 498.834205][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.847881][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.861679][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.875374][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 498.886423][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.900900][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.912655][ T25] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 498.928635][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.952731][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.962827][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.980097][ T9148] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 498.980588][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.006211][ T5261] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 499.016743][ T5261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.029549][ T5261] usb 4-1: config 0 descriptor?? [ 499.047864][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 499.071831][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.086374][ T8855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.105964][ T8855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.116541][ T8855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.129647][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 499.129680][ T25] hub 3-1:1.0: probe with driver hub failed with error -5 [ 499.130248][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 499.130265][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 499.130315][ T25] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 499.130598][ T8855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.272874][ T5261] usbhid 4-1:0.0: can't add hid device: -71 [ 499.272997][ T5261] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 499.275159][ T5261] usb 4-1: USB disconnect, device number 33 [ 499.404406][ T9156] FAULT_INJECTION: forcing a failure. [ 499.404406][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 499.435447][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.456357][ T9156] CPU: 1 UID: 0 PID: 9156 Comm: syz.3.677 Not tainted 6.11.0-rc4-syzkaller #0 [ 499.458832][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.465231][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 499.465248][ T9156] Call Trace: [ 499.465258][ T9156] [ 499.465266][ T9156] dump_stack_lvl+0x241/0x360 [ 499.465295][ T9156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.465315][ T9156] ? __pfx__printk+0x10/0x10 [ 499.465341][ T9156] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 499.465364][ T9156] ? __pfx___might_resched+0x10/0x10 [ 499.465389][ T9156] should_fail_ex+0x3b0/0x4e0 [ 499.465412][ T9156] ? seq_open+0x62/0x140 [ 499.465434][ T9156] should_failslab+0xac/0x100 [ 499.465458][ T9156] ? seq_open+0x62/0x140 [ 499.465479][ T9156] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 499.465514][ T9156] seq_open+0x62/0x140 [ 499.541838][ T9156] kernfs_fop_open+0x635/0xd10 [ 499.541874][ T9156] ? __pfx_kernfs_fop_open+0x10/0x10 [ 499.551925][ T9156] do_dentry_open+0x970/0x1440 [ 499.556734][ T9156] vfs_open+0x3e/0x330 [ 499.560835][ T9156] path_openat+0x2b3e/0x3470 [ 499.565488][ T9156] ? __pfx_path_openat+0x10/0x10 [ 499.570499][ T9156] do_filp_open+0x235/0x490 [ 499.575032][ T9156] ? __pfx_do_filp_open+0x10/0x10 [ 499.580088][ T9156] ? _raw_spin_unlock+0x28/0x50 [ 499.584958][ T9156] ? alloc_fd+0x5a1/0x640 [ 499.589329][ T9156] do_sys_openat2+0x13e/0x1d0 [ 499.594047][ T9156] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.599307][ T9156] __x64_sys_openat+0x247/0x2a0 [ 499.604199][ T9156] ? __pfx___x64_sys_openat+0x10/0x10 [ 499.609617][ T9156] ? exc_page_fault+0x590/0x8c0 [ 499.614502][ T9156] ? do_syscall_64+0xb6/0x230 [ 499.619211][ T9156] do_syscall_64+0xf3/0x230 [ 499.623735][ T9156] ? clear_bhb_loop+0x35/0x90 [ 499.628454][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.634387][ T9156] RIP: 0033:0x7f3442f78810 [ 499.638839][ T9156] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 499.658474][ T9156] RSP: 002b:00007f3443d5ca00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 499.666923][ T9156] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f3442f78810 [ 499.673355][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.674897][ T9156] RDX: 0000000000080001 RSI: 00007f3442fd6c38 RDI: 00000000ffffff9c [ 499.674915][ T9156] RBP: 00007f3442fd6c38 R08: 0000000000000000 R09: 0000000000000000 [ 499.674929][ T9156] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 499.674941][ T9156] R13: 00007f3443d5caa0 R14: 00007f3443115f80 R15: 00007ffe816972d8 [ 499.696668][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.698663][ T9156] [ 499.731310][ T7023] usb 3-1: USB disconnect, device number 30 [ 499.816571][ T9160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.672513][ T9182] FAULT_INJECTION: forcing a failure. [ 501.672513][ T9182] name failslab, interval 1, probability 0, space 0, times 0 [ 501.685329][ T9182] CPU: 1 UID: 0 PID: 9182 Comm: syz.4.682 Not tainted 6.11.0-rc4-syzkaller #0 [ 501.694208][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 501.704282][ T9182] Call Trace: [ 501.707587][ T9182] [ 501.710529][ T9182] dump_stack_lvl+0x241/0x360 [ 501.715336][ T9182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.720554][ T9182] ? __pfx__printk+0x10/0x10 [ 501.725165][ T9182] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 501.731237][ T9182] ? __pfx___might_resched+0x10/0x10 [ 501.736994][ T9182] should_fail_ex+0x3b0/0x4e0 [ 501.741966][ T9182] should_failslab+0xac/0x100 [ 501.746668][ T9182] ? __alloc_skb+0x1c3/0x440 [ 501.751282][ T9182] kmem_cache_alloc_node_noprof+0x71/0x320 [ 501.757128][ T9182] __alloc_skb+0x1c3/0x440 [ 501.761577][ T9182] ? __pfx___alloc_skb+0x10/0x10 [ 501.766621][ T9182] ? netlink_autobind+0xd6/0x2f0 [ 501.771571][ T9182] ? netlink_autobind+0x2b0/0x2f0 [ 501.776728][ T9182] netlink_sendmsg+0x638/0xcb0 [ 501.781539][ T9182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.786866][ T9182] ? __import_iovec+0x536/0x820 [ 501.791770][ T9182] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 501.797101][ T9182] ? security_socket_sendmsg+0x87/0xb0 [ 501.802594][ T9182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.807981][ T9182] __sock_sendmsg+0x221/0x270 [ 501.812689][ T9182] ____sys_sendmsg+0x525/0x7d0 [ 501.817494][ T9182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.822833][ T9182] __sys_sendmsg+0x2b0/0x3a0 [ 501.827458][ T9182] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.832592][ T9182] ? vfs_write+0x7c4/0xc90 [ 501.837063][ T9182] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.843413][ T9182] ? do_syscall_64+0x100/0x230 [ 501.848199][ T9182] ? do_syscall_64+0xb6/0x230 [ 501.852906][ T9182] do_syscall_64+0xf3/0x230 [ 501.857438][ T9182] ? clear_bhb_loop+0x35/0x90 [ 501.862145][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.868334][ T9182] RIP: 0033:0x7fc0e8b79e79 [ 501.872752][ T9182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.892567][ T9182] RSP: 002b:00007fc0e89f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.901359][ T9182] RAX: ffffffffffffffda RBX: 00007fc0e8d15f80 RCX: 00007fc0e8b79e79 [ 501.909430][ T9182] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 501.917414][ T9182] RBP: 00007fc0e89f8090 R08: 0000000000000000 R09: 0000000000000000 [ 501.925477][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.933448][ T9182] R13: 0000000000000000 R14: 00007fc0e8d15f80 R15: 00007fffcf358218 [ 501.941433][ T9182] [ 501.978269][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.985688][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.643136][ T9202] MTD: Couldn't look up './file0': -15 [ 503.683767][ T9203] vivid-000: ================= START STATUS ================= [ 503.691755][ T9203] vivid-000: Generate PTS: true [ 503.697841][ T9203] vivid-000: Generate SCR: true [ 503.703099][ T9203] tpg source WxH: 640x360 (Y'CbCr) [ 503.708561][ T9203] tpg field: 1 [ 503.712012][ T9203] tpg crop: 640x360@0x0 [ 503.716414][ T9203] tpg compose: 640x360@0x0 [ 503.721025][ T9203] tpg colorspace: 8 [ 503.724941][ T9203] tpg transfer function: 0/0 [ 503.729661][ T9203] tpg Y'CbCr encoding: 0/0 [ 503.734541][ T9203] tpg quantization: 0/0 [ 503.738729][ T9203] tpg RGB range: 0/2 [ 503.742686][ T9203] vivid-000: ================== END STATUS ================== [ 504.053501][ T9215] netlink: 184 bytes leftover after parsing attributes in process `syz.2.691'. [ 504.070551][ T8] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 504.100627][ T9215] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 504.124327][ T9217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.300932][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 504.332100][ T9219] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 504.426628][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 504.495477][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.061804][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.080878][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.101445][ T8] usb 1-1: config 0 descriptor?? [ 505.125348][ T8] usb 1-1: can't set config #0, error -71 [ 505.145088][ T8] usb 1-1: USB disconnect, device number 47 [ 505.190724][ T5360] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 505.226774][ T9223] block nbd2: shutting down sockets [ 505.560235][ T5360] usb 4-1: Using ep0 maxpacket: 32 [ 507.757191][ T5360] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 507.817197][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.870579][ T5360] usb 4-1: Product: syz [ 507.875201][ T5360] usb 4-1: Manufacturer: syz [ 507.879918][ T5360] usb 4-1: SerialNumber: syz [ 507.963931][ T5360] usb 4-1: config 0 descriptor?? [ 508.376903][ T8] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 509.146077][ T5360] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 509.199710][ T5360] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 509.267053][ T9245] tmpfs: Bad value for 'nr_inodes' [ 509.354446][ T9255] Cannot find del_set index 65531 as target [ 509.372777][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 509.383063][ T9255] netlink: 52 bytes leftover after parsing attributes in process `syz.4.700'. [ 509.404129][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 509.420836][ T5360] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 509.440625][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.463235][ T5360] usb 4-1: USB disconnect, device number 34 [ 509.480791][ T8] usb 1-1: Product: syz [ 509.485012][ T8] usb 1-1: Manufacturer: syz [ 509.489728][ T8] usb 1-1: SerialNumber: syz [ 509.562291][ T8] usb 1-1: config 0 descriptor?? [ 509.579155][ T9258] netlink: 184 bytes leftover after parsing attributes in process `syz.4.700'. [ 509.592360][ T8] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 509.835252][ T8] usb 1-1: qt2_attach - failed to power on unit: -71 [ 509.864803][ T8] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 509.889645][ T8] usb 1-1: USB disconnect, device number 48 [ 509.986491][ T9265] FAULT_INJECTION: forcing a failure. [ 509.986491][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.000373][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.3.701 Not tainted 6.11.0-rc4-syzkaller #0 [ 510.009230][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 510.019367][ T9265] Call Trace: [ 510.022659][ T9265] [ 510.025606][ T9265] dump_stack_lvl+0x241/0x360 [ 510.030377][ T9265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.035578][ T9265] ? __pfx__printk+0x10/0x10 [ 510.040193][ T9265] ? __pfx_lock_release+0x10/0x10 [ 510.045236][ T9265] should_fail_ex+0x3b0/0x4e0 [ 510.049947][ T9265] _copy_from_iter+0x1f6/0x1960 [ 510.054813][ T9265] ? __virt_addr_valid+0x183/0x530 [ 510.059937][ T9265] ? __pfx_lock_release+0x10/0x10 [ 510.064988][ T9265] ? __alloc_skb+0x2d5/0x440 [ 510.069610][ T9265] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 510.075444][ T9265] ? __pfx__copy_from_iter+0x10/0x10 [ 510.080732][ T9265] ? __virt_addr_valid+0x183/0x530 [ 510.085837][ T9265] ? __virt_addr_valid+0x183/0x530 [ 510.090938][ T9265] ? __virt_addr_valid+0x45f/0x530 [ 510.096040][ T9265] ? __check_object_size+0x49c/0x900 [ 510.101323][ T9265] tcp_sendmsg_locked+0x1c83/0x4e10 [ 510.106649][ T9265] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 510.112197][ T9265] ? __local_bh_enable_ip+0x168/0x200 [ 510.117586][ T9265] ? do_raw_spin_unlock+0x13c/0x8b0 [ 510.122789][ T9265] tcp_sendmsg+0x30/0x50 [ 510.127029][ T9265] __sock_sendmsg+0x1a6/0x270 [ 510.131726][ T9265] __sys_sendto+0x3a4/0x4f0 [ 510.136229][ T9265] ? __pfx___sys_sendto+0x10/0x10 [ 510.141351][ T9265] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 510.147326][ T9265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 510.153657][ T9265] __x64_sys_sendto+0xde/0x100 [ 510.158508][ T9265] do_syscall_64+0xf3/0x230 [ 510.163003][ T9265] ? clear_bhb_loop+0x35/0x90 [ 510.167673][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.173604][ T9265] RIP: 0033:0x7f3442f79e79 [ 510.178009][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.197698][ T9265] RSP: 002b:00007f3443d3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 510.206201][ T9265] RAX: ffffffffffffffda RBX: 00007f3443116058 RCX: 00007f3442f79e79 [ 510.214275][ T9265] RDX: 000000000000fe6a RSI: 0000000020000700 RDI: 0000000000000004 [ 510.222240][ T9265] RBP: 00007f3443d3c090 R08: 0000000000000000 R09: fffffffffffffe93 [ 510.230201][ T9265] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 510.238177][ T9265] R13: 0000000000000000 R14: 00007f3443116058 R15: 00007ffe816972d8 [ 510.246236][ T9265] [ 511.412792][ T7023] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 511.622070][ T7023] usb 4-1: Using ep0 maxpacket: 16 [ 511.671516][ T7023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.717428][ T7023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.889317][ T7023] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 511.918660][ T7023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.950168][ T7023] usb 4-1: config 0 descriptor?? [ 512.487455][ T9304] MTD: Couldn't look up './file0': -15 [ 513.230885][ T9303] 9pnet_fd: Insufficient options for proto=fd [ 513.241162][ T7023] apple 0003:05AC:027D.000A: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 513.434126][ T5360] usb 4-1: USB disconnect, device number 35 [ 513.940866][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 514.132955][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 514.140239][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.154241][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.165534][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 514.175772][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 514.185593][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.199870][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 514.209152][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 514.218971][ T9] usb 3-1: Manufacturer: syz [ 514.235563][ T9] usb 3-1: config 0 descriptor?? [ 514.300897][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 514.492652][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 514.505608][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 514.515396][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.524233][ T8] usb 4-1: Product: syz [ 514.528496][ T8] usb 4-1: Manufacturer: syz [ 514.534375][ T8] usb 4-1: SerialNumber: syz [ 514.553496][ T8] usb 4-1: config 0 descriptor?? [ 514.565538][ T8] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 514.797398][ T8] usb 4-1: qt2_attach - failed to power on unit: -71 [ 514.804558][ T8] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 514.817487][ T8] usb 4-1: USB disconnect, device number 36 [ 516.121018][ T9320] Dead loop on virtual device ip6_vti0, fix it urgently! [ 516.139019][ T9323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.155849][ T9320] Dead loop on virtual device ip6_vti0, fix it urgently! [ 516.168521][ T9320] Dead loop on virtual device ip6_vti0, fix it urgently! [ 516.176218][ T9320] Dead loop on virtual device ip6_vti0, fix it urgently! [ 516.208387][ T9320] Dead loop on virtual device ip6_vti0, fix it urgently! [ 516.234964][ T9320] Dead loop on virtual device ip6_vti0, fix it urgently! [ 517.850575][ T9] rc_core: IR keymap rc-hauppauge not found [ 517.868226][ T9] Registered IR keymap rc-empty [ 517.889287][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.931698][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 517.975557][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 518.003845][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 518.030356][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.073560][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.110953][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.143229][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.183814][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.231123][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.250277][ T9352] FAULT_INJECTION: forcing a failure. [ 518.250277][ T9352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.264014][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.0.728 Not tainted 6.11.0-rc4-syzkaller #0 [ 518.270787][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.272877][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 518.272894][ T9352] Call Trace: [ 518.272903][ T9352] [ 518.272911][ T9352] dump_stack_lvl+0x241/0x360 [ 518.272938][ T9352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.272958][ T9352] ? __pfx__printk+0x10/0x10 [ 518.301792][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.306601][ T9352] ? __pfx_lock_release+0x10/0x10 [ 518.306647][ T9352] should_fail_ex+0x3b0/0x4e0 [ 518.328080][ T9352] _copy_to_user+0x2f/0xb0 [ 518.332511][ T9352] bpf_verifier_vlog+0x31e/0x860 [ 518.337581][ T9352] __btf_verifier_log+0xd5/0x120 [ 518.341662][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.342514][ T9352] ? bpf_verifier_vlog+0x32b/0x860 [ 518.342547][ T9352] ? __pfx___btf_verifier_log+0x10/0x10 [ 518.360295][ T9352] ? btf_parse_hdr+0x1e3/0x710 [ 518.365162][ T9352] btf_parse_hdr+0x2ce/0x710 [ 518.369784][ T9352] btf_new_fd+0x391/0xd30 [ 518.374213][ T9352] ? safesetid_security_capable+0xb2/0x1d0 [ 518.380044][ T9352] ? __pfx_btf_new_fd+0x10/0x10 [ 518.380636][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 518.384897][ T9352] ? bpf_btf_load+0xcf/0x1a0 [ 518.384930][ T9352] __sys_bpf+0x6ef/0x810 [ 518.384954][ T9352] ? __pfx___sys_bpf+0x10/0x10 [ 518.384983][ T9352] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 518.411680][ T9352] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 518.418046][ T9352] ? do_syscall_64+0x100/0x230 [ 518.422300][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 518.422851][ T9352] __x64_sys_bpf+0x7c/0x90 [ 518.422881][ T9352] do_syscall_64+0xf3/0x230 [ 518.422903][ T9352] ? clear_bhb_loop+0x35/0x90 [ 518.422927][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.439775][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 518.444422][ T9352] RIP: 0033:0x7f239d779e79 [ 518.444445][ T9352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.444459][ T9352] RSP: 002b:00007f239e593038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.444481][ T9352] RAX: ffffffffffffffda RBX: 00007f239d915f80 RCX: 00007f239d779e79 [ 518.444495][ T9352] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 518.444506][ T9352] RBP: 00007f239e593090 R08: 0000000000000000 R09: 0000000000000000 [ 518.444518][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.444530][ T9352] R13: 0000000000000000 R14: 00007f239d915f80 R15: 00007ffdf63c3608 [ 518.444556][ T9352] [ 518.485282][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.552326][ T7023] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 518.622886][ T9] usb 3-1: USB disconnect, device number 31 [ 518.750680][ T7023] usb 5-1: Using ep0 maxpacket: 16 [ 518.757857][ T7023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.850653][ T7023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.018052][ T7023] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 519.474032][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 519.723092][ T7023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.878067][ T7023] usb 5-1: config 0 descriptor?? [ 519.960863][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 519.999531][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 520.019647][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.040047][ T9] usb 3-1: Product: syz [ 520.044632][ T9] usb 3-1: Manufacturer: syz [ 520.055970][ T9] usb 3-1: SerialNumber: syz [ 520.065585][ T9366] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 520.107838][ T9] usb 3-1: config 0 descriptor?? [ 520.135531][ T9] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 520.354385][ T7023] apple 0003:05AC:027D.000B: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0 [ 520.519680][ T7023] usb 5-1: USB disconnect, device number 41 [ 520.546569][ T9] usb 3-1: qt2_attach - failed to power on unit: -71 [ 520.587574][ T9] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 520.667174][ T9] usb 3-1: USB disconnect, device number 32 [ 522.110594][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 522.320657][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 522.327434][ T8] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 522.337734][ T8] usb 4-1: config 150 has an invalid descriptor of length 90, skipping remainder of the config [ 522.348296][ T8] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 522.357713][ T8] usb 4-1: config 150 has no interface number 0 [ 522.364146][ T8] usb 4-1: config 150 interface 204 has no altsetting 0 [ 522.445109][ T9401] MTD: Couldn't look up './file0': -15 [ 522.455973][ T7023] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 522.610778][ T5261] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 522.670603][ T7023] usb 1-1: Using ep0 maxpacket: 16 [ 522.698600][ T7023] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.762048][ T7023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.814863][ T7023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.879519][ T5261] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 522.900814][ T7023] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 522.943018][ T5261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.976324][ T7023] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.025582][ T5261] usb 3-1: config 0 descriptor?? [ 523.060894][ T8] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 523.071736][ T8] usb 4-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 523.079949][ T8] usb 4-1: Product: syz [ 523.083445][ T7023] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.084654][ T8] usb 4-1: Manufacturer: syz [ 523.096685][ T5261] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 523.101900][ T8] usb 4-1: SerialNumber: syz [ 523.142779][ T5261] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 523.188755][ T7023] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.196979][ T7023] usb 1-1: Manufacturer: syz [ 523.218525][ T7023] usb 1-1: config 0 descriptor?? [ 523.371263][ T9404] tmpfs: Bad value for 'nr_inodes' [ 523.513162][ T5261] usb 3-1: USB disconnect, device number 33 [ 523.544861][ T5261] ftdi_sio 3-1:0.0: device disconnected [ 525.277030][ T8] usb 4-1: USB disconnect, device number 37 [ 525.344105][ T9422] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 525.352388][ T9422] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 525.365014][ T9422] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 525.373439][ T9422] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 526.481885][ T7023] rc_core: IR keymap rc-hauppauge not found [ 526.521705][ T7023] Registered IR keymap rc-empty [ 526.526725][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.610679][ T5258] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 526.632175][ T9450] FAULT_INJECTION: forcing a failure. [ 526.632175][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.694504][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.865655][ T7023] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 526.891193][ T5258] usb 2-1: Using ep0 maxpacket: 32 [ 526.906687][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.2.756 Not tainted 6.11.0-rc4-syzkaller #0 [ 526.915590][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 526.925748][ T9450] Call Trace: [ 526.929037][ T9450] [ 526.932162][ T9450] dump_stack_lvl+0x241/0x360 [ 526.936869][ T9450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.942092][ T9450] ? __pfx__printk+0x10/0x10 [ 526.946724][ T9450] ? vfs_write+0x7c4/0xc90 [ 526.951159][ T9450] should_fail_ex+0x3b0/0x4e0 [ 526.955883][ T9450] _copy_from_user+0x2f/0xe0 [ 526.960538][ T9450] move_addr_to_kernel+0x82/0x150 [ 526.965678][ T9450] __sys_connect+0xc1/0x310 [ 526.970195][ T9450] ? __pfx___sys_connect+0x10/0x10 [ 526.975330][ T9450] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 526.981684][ T9450] ? do_syscall_64+0x100/0x230 [ 526.986498][ T9450] __x64_sys_connect+0x7a/0x90 [ 526.991277][ T9450] do_syscall_64+0xf3/0x230 [ 526.995796][ T9450] ? clear_bhb_loop+0x35/0x90 [ 527.000487][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.006489][ T9450] RIP: 0033:0x7f73f0f79e79 [ 527.010918][ T9450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.030572][ T9450] RSP: 002b:00007f73f1d6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 527.039110][ T9450] RAX: ffffffffffffffda RBX: 00007f73f1115f80 RCX: 00007f73f0f79e79 [ 527.047099][ T9450] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000004 [ 527.055091][ T9450] RBP: 00007f73f1d6b090 R08: 0000000000000000 R09: 0000000000000000 [ 527.063077][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.071059][ T9450] R13: 0000000000000000 R14: 00007f73f1115f80 R15: 00007ffc5b419ff8 [ 527.079065][ T9450] [ 527.100094][ T7023] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 527.583764][ T5258] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 527.594996][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.603513][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 527.656967][ T5258] usb 2-1: Product: syz [ 527.664221][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 527.793337][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 527.801138][ T5258] usb 2-1: Manufacturer: syz [ 527.805789][ T5258] usb 2-1: SerialNumber: syz [ 527.817670][ T5258] usb 2-1: config 0 descriptor?? [ 527.840971][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 528.823246][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 528.982946][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 529.056689][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 529.151728][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 529.220681][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 529.288387][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 529.566500][ T7023] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 529.575295][ T7023] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 529.596709][ T7023] usb 1-1: USB disconnect, device number 49 [ 529.833653][ T9478] overlayfs: failed to resolve './file0': -2 [ 530.953119][ T5258] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 530.981221][ T5258] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 531.512342][ T5258] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 531.578842][ T5258] usb 2-1: USB disconnect, device number 50 [ 532.400761][ T7023] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 532.600689][ T7023] usb 1-1: Using ep0 maxpacket: 16 [ 532.616328][ T7023] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.638542][ T7023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.664338][ T7023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 532.674682][ T7023] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 532.686393][ T7023] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.707233][ T7023] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.721240][ T7023] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.730842][ T7023] usb 1-1: Manufacturer: syz [ 532.739292][ T7023] usb 1-1: config 0 descriptor?? [ 532.746485][ T9509] FAULT_INJECTION: forcing a failure. [ 532.746485][ T9509] name failslab, interval 1, probability 0, space 0, times 0 [ 532.784051][ T9509] CPU: 0 UID: 0 PID: 9509 Comm: syz.1.772 Not tainted 6.11.0-rc4-syzkaller #0 [ 532.792967][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 532.803080][ T9509] Call Trace: [ 532.806390][ T9509] [ 532.809334][ T9509] dump_stack_lvl+0x241/0x360 [ 532.814058][ T9509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.819286][ T9509] ? __pfx__printk+0x10/0x10 [ 532.823909][ T9509] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 532.829403][ T9509] ? __pfx___might_resched+0x10/0x10 [ 532.834735][ T9509] should_fail_ex+0x3b0/0x4e0 [ 532.839451][ T9509] should_failslab+0xac/0x100 [ 532.844158][ T9509] ? kernfs_fop_open+0x829/0xd10 [ 532.849298][ T9509] __kmalloc_cache_noprof+0x6c/0x2c0 [ 532.854709][ T9509] kernfs_fop_open+0x829/0xd10 [ 532.859510][ T9509] ? __pfx_kernfs_fop_open+0x10/0x10 [ 532.864917][ T9509] do_dentry_open+0x970/0x1440 [ 532.869825][ T9509] vfs_open+0x3e/0x330 [ 532.873933][ T9509] path_openat+0x2b3e/0x3470 [ 532.878686][ T9509] ? __pfx_path_openat+0x10/0x10 [ 532.883767][ T9509] do_filp_open+0x235/0x490 [ 532.888308][ T9509] ? __pfx_do_filp_open+0x10/0x10 [ 532.893396][ T9509] ? _raw_spin_unlock+0x28/0x50 [ 532.898280][ T9509] ? alloc_fd+0x5a1/0x640 [ 532.902645][ T9509] do_sys_openat2+0x13e/0x1d0 [ 532.907363][ T9509] ? __pfx_do_sys_openat2+0x10/0x10 [ 532.912607][ T9509] __x64_sys_openat+0x247/0x2a0 [ 532.917489][ T9509] ? __pfx___x64_sys_openat+0x10/0x10 [ 532.922904][ T9509] ? exc_page_fault+0x590/0x8c0 [ 532.927798][ T9509] ? do_syscall_64+0xb6/0x230 [ 532.932507][ T9509] do_syscall_64+0xf3/0x230 [ 532.937047][ T9509] ? clear_bhb_loop+0x35/0x90 [ 532.941762][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.947679][ T9509] RIP: 0033:0x7f4510b78810 [ 532.952120][ T9509] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 532.971753][ T9509] RSP: 002b:00007f4511a1fa00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 532.980202][ T9509] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f4510b78810 [ 532.988203][ T9509] RDX: 0000000000080001 RSI: 00007f4510bd6c38 RDI: 00000000ffffff9c [ 532.996200][ T9509] RBP: 00007f4510bd6c38 R08: 0000000000000000 R09: 0000000000000000 [ 533.004201][ T9509] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 533.012201][ T9509] R13: 00007f4511a1faa0 R14: 00007f4510d15f80 R15: 00007ffe09b17fb8 [ 533.020207][ T9509] [ 533.116271][ T9510] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 533.149103][ T9510] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 533.159416][ T9510] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 533.171335][ T9510] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 533.312962][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 533.447416][ T9517] sp0: Synchronizing with TNC [ 533.556178][ T9517] tmpfs: Bad value for 'nr_inodes' [ 535.047448][ T9539] netlink: 892 bytes leftover after parsing attributes in process `syz.1.780'. [ 535.340526][ T7023] rc_core: IR keymap rc-hauppauge not found [ 535.773703][ T7023] Registered IR keymap rc-empty [ 535.778705][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 535.890646][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 535.951906][ T7023] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 536.014494][ T7023] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 536.100769][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 536.141335][ T9550] block nbd2: shutting down sockets [ 536.150700][ T5261] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 536.159489][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 536.301110][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 536.330678][ T5261] usb 4-1: device descriptor read/64, error -71 [ 536.352267][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 536.550785][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 537.200633][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 537.222467][ T9557] sp0: Synchronizing with TNC [ 537.232885][ T5261] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 537.270713][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 537.470753][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 537.479658][ T9557] tmpfs: Bad value for 'nr_inodes' [ 538.100527][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 538.125410][ T5261] usb 4-1: device descriptor read/64, error -71 [ 538.170735][ T7023] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 538.232359][ T7023] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 538.255569][ T7023] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 538.269140][ T7023] usb 1-1: USB disconnect, device number 50 [ 538.298924][ T5261] usb usb4-port1: attempt power cycle [ 538.310551][ T5258] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 538.510886][ T8] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 538.511948][ T5258] usb 3-1: Using ep0 maxpacket: 32 [ 538.602084][ T5258] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 538.612332][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.631573][ T5258] usb 3-1: config 0 descriptor?? [ 538.639716][ T5258] gspca_main: sq930x-2.14.0 probing 041e:403c [ 538.790551][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 538.849356][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 538.859448][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.878572][ T8] usb 5-1: config 0 descriptor?? [ 539.291736][ T5258] gspca_sq930x: reg_r 001f failed -110 [ 539.308253][ T47] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 539.316703][ T5258] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 539.366806][ T8] gspca_main: sq930x-2.14.0 probing 041e:403c [ 539.374801][ T9576] block nbd3: shutting down sockets [ 539.523680][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 539.544734][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.569868][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.605871][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 539.610826][ T5211] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 539.723886][ T9583] MTD: Couldn't look up './file0': -15 [ 539.753069][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 539.766450][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.822518][ T47] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.835480][ T47] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.867060][ T47] usb 2-1: Manufacturer: syz [ 540.217814][ T8] gspca_sq930x: reg_r 001f failed -110 [ 540.236345][ T8] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 540.254289][ T47] usb 2-1: config 0 descriptor?? [ 540.550967][ T5211] usb 1-1: Using ep0 maxpacket: 32 [ 540.818339][ T9587] ./bus: Can't lookup blockdev [ 542.046360][ T5211] usb 1-1: string descriptor 0 read error: -71 [ 542.273250][ T5211] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 542.329144][ T5211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.398489][ T5211] usb 1-1: config 0 descriptor?? [ 542.464850][ T5261] usb 3-1: USB disconnect, device number 35 [ 542.473002][ T47] rc_core: IR keymap rc-hauppauge not found [ 542.480692][ T47] Registered IR keymap rc-empty [ 542.487125][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.505204][ T5211] usb 1-1: can't set config #0, error -71 [ 542.523018][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.532375][ T9596] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 542.571896][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 542.584648][ T5211] usb 1-1: USB disconnect, device number 51 [ 542.586553][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 542.646651][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.681918][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.711332][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.782102][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.820753][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.850732][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 542.900790][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 543.424492][ T5262] usb 5-1: USB disconnect, device number 42 [ 543.470862][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 543.523103][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 543.621400][ T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 543.652576][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.796'. [ 543.692251][ T47] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 543.712780][ T47] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 545.542291][ T47] usb 2-1: USB disconnect, device number 51 [ 545.690545][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 546.264580][ T9618] fuse: Unknown parameter '2ootmode' [ 546.293117][ T9625] block nbd3: shutting down sockets [ 546.840602][ T47] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 546.926422][ T9641] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 547.061918][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 547.076977][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.094029][ T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 547.270687][ T5262] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 547.300614][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 547.324298][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 547.380815][ T5360] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 547.473509][ T8] usb 4-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=2d.ac [ 547.487592][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.525525][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 547.540459][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 547.550229][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.563000][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.564382][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 547.581102][ T8] usb 4-1: Product: syz [ 547.585299][ T8] usb 4-1: Manufacturer: syz [ 547.589911][ T8] usb 4-1: SerialNumber: syz [ 547.603641][ T47] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 547.633776][ T8] usb 4-1: config 0 descriptor?? [ 547.642180][ T8] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 547.649139][ T47] usb 3-1: Manufacturer: syz [ 547.651244][ T5262] usb 1-1: Using ep0 maxpacket: 8 [ 547.660645][ T5360] usb 5-1: Using ep0 maxpacket: 32 [ 547.678315][ T5262] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.684651][ T47] usb 3-1: config 0 descriptor?? [ 547.689941][ T5360] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 547.707588][ T5360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.716422][ T5360] usb 5-1: Product: syz [ 547.723075][ T5262] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.743190][ T5360] usb 5-1: Manufacturer: syz [ 547.748143][ T5262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.759708][ T5360] usb 5-1: SerialNumber: syz [ 547.764846][ T5262] usb 1-1: Product: syz [ 547.770497][ T5262] usb 1-1: Manufacturer: syz [ 547.777559][ T5360] usb 5-1: config 0 descriptor?? [ 547.782715][ T5262] usb 1-1: SerialNumber: syz [ 547.860723][ T5258] usb 4-1: USB disconnect, device number 41 [ 548.020570][ T5261] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 548.027872][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.090901][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.220570][ T5261] usb 2-1: Using ep0 maxpacket: 32 [ 548.236620][ T5261] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 548.259737][ T5261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.289243][ T5261] usb 2-1: config 0 descriptor?? [ 548.322722][ T5261] gspca_main: sq930x-2.14.0 probing 041e:403c [ 549.286291][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 549.814630][ T5360] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 549.830536][ T5360] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 549.830669][ T5261] gspca_sq930x: reg_r 001f failed -110 [ 549.887658][ T5261] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 550.049545][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 550.058276][ T5360] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 550.111312][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 550.140605][ T8] usb 4-1: config 179 has no interface number 0 [ 550.149700][ T5360] usb 5-1: USB disconnect, device number 43 [ 550.172246][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 550.227554][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 550.264174][ T47] rc_core: IR keymap rc-hauppauge not found [ 550.283914][ T47] Registered IR keymap rc-empty [ 550.301247][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.307713][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 551.959704][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 554.011142][ T5262] cdc_ncm 1-1:1.0: bind() failure [ 554.197986][ T5262] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 554.220595][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 554.279168][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.341774][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 554.353602][ T5262] cdc_ncm 1-1:1.1: bind() failure [ 554.359926][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 554.401681][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 554.450223][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 554.492371][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.518583][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.526344][ T5258] usb 2-1: USB disconnect, device number 52 [ 554.540735][ T8] usb 4-1: can't set config #179, error -71 [ 554.571101][ T8] usb 4-1: USB disconnect, device number 42 [ 554.593817][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.652067][ T9662] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 554.662845][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.757151][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.775839][ T5211] usb 1-1: USB disconnect, device number 52 [ 554.820689][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.830354][ T9665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.812'. [ 554.866953][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.933844][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 554.985760][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 555.050570][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 555.095418][ T9671] block nbd1: shutting down sockets [ 555.110728][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 555.205689][ T47] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 555.231965][ T47] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 555.302926][ T47] usb 3-1: USB disconnect, device number 36 [ 555.550504][ T8] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 556.073768][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 556.095487][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 556.105144][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.114576][ T8] usb 4-1: Product: syz [ 556.119155][ T8] usb 4-1: Manufacturer: syz [ 556.123968][ T8] usb 4-1: SerialNumber: syz [ 556.130684][ T7023] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 556.133174][ T8] usb 4-1: config 0 descriptor?? [ 556.253524][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 556.279431][ T9098] udevd[9098]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.340577][ T7023] usb 2-1: Using ep0 maxpacket: 8 [ 556.370751][ T7023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.400576][ T7023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.431678][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 556.621461][ T47] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 556.827780][ T7023] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.840876][ T7023] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 556.892988][ T7023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.928137][ T7023] usb 2-1: config 0 descriptor?? [ 557.020542][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 557.033290][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.194022][ T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.260609][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.280510][ T47] usb 3-1: Product: syz [ 557.284754][ T47] usb 3-1: Manufacturer: syz [ 558.317584][ T9691] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 559.766123][ T47] usb 3-1: SerialNumber: syz [ 559.776951][ T7023] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 559.809639][ T7023] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 559.891097][ T7023] hid-picolcd 0003:04D8:C002.000C: No report with id 0x11 found [ 559.947271][ T47] usb 3-1: can't set config #1, error -71 [ 559.961073][ T47] usb 3-1: USB disconnect, device number 37 [ 560.029646][ T9678] nfs4: Unknown parameter 'appraise' [ 560.047352][ T8525] usb 2-1: USB disconnect, device number 53 [ 560.165085][ T5262] usb 4-1: USB disconnect, device number 43 [ 560.232248][ T5211] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 560.240016][ T8] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 560.430597][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 560.436087][ T5211] usb 5-1: Using ep0 maxpacket: 16 [ 560.453686][ T5211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.453810][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.474631][ T5211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 560.485348][ T5211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.498721][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 560.510187][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 560.521982][ T5211] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 560.535711][ T5211] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 560.544143][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 560.556312][ T5211] usb 5-1: Manufacturer: syz [ 560.562230][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.576555][ T5211] usb 5-1: config 0 descriptor?? [ 560.600116][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 560.612001][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 560.620291][ T8] usb 1-1: Manufacturer: syz [ 560.636762][ T8] usb 1-1: config 0 descriptor?? [ 560.680712][ T5258] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 563.931750][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.938172][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.941314][ T5262] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 564.035553][ T7023] usb 5-1: USB disconnect, device number 44 [ 564.140603][ T5258] usb 2-1: Using ep0 maxpacket: 32 [ 564.171723][ T5258] usb 2-1: device descriptor read/all, error -71 [ 564.330720][ T8] rc_core: IR keymap rc-hauppauge not found [ 564.381174][ T8] Registered IR keymap rc-empty [ 564.386209][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 564.401717][ T5262] usb 4-1: device not accepting address 44, error -71 [ 564.490849][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.191458][ T7023] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 565.323978][ T9720] block nbd1: shutting down sockets [ 565.332115][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 565.402253][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 565.455270][ T7023] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 565.471191][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.490797][ T7023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.510610][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.519843][ T5292] kernel read not supported for file /dsp (pid: 5292 comm: kworker/1:7) [ 565.530231][ T7023] usb 5-1: config 0 descriptor?? [ 565.553563][ T7023] cp210x 5-1:0.0: cp210x converter detected [ 565.560079][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.590638][ T5360] IPVS: starting estimator thread 0... [ 565.622255][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.670716][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.710684][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.710687][ T9735] IPVS: using max 19 ests per chain, 45600 per kthread [ 565.730507][ T47] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 565.743315][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.810700][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.859793][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.910622][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 565.940786][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 565.944854][ T8] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 565.959283][ T47] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 565.960286][ T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 565.979229][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.015602][ T8] usb 1-1: USB disconnect, device number 53 [ 566.025934][ T47] usb 3-1: config 0 descriptor?? [ 566.238631][ T47] gspca_main: sq930x-2.14.0 probing 041e:403c [ 566.410801][ T5262] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 566.895319][ T9758] ./bus: Can't lookup blockdev [ 568.691058][ T47] gspca_sq930x: reg_r 001f failed -110 [ 568.701426][ T47] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 568.730606][ T5262] usb 4-1: Using ep0 maxpacket: 16 [ 568.807039][ T5262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.827572][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 568.877902][ T5262] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 568.914653][ T5262] usb 4-1: string descriptor 0 read error: -71 [ 568.921728][ T5262] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 568.942603][ T5262] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 568.963826][ T5262] usb 4-1: config 0 descriptor?? [ 568.970102][ T5262] usb 4-1: can't set config #0, error -71 [ 568.980805][ T5262] usb 4-1: USB disconnect, device number 46 [ 569.154097][ T7023] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 569.316018][ T7023] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 569.350681][ T7023] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 569.364953][ T7023] usb 5-1: cp210x converter now attached to ttyUSB0 [ 569.378040][ T7023] usb 5-1: USB disconnect, device number 45 [ 569.392211][ T7023] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 569.404130][ T7023] cp210x 5-1:0.0: device disconnected [ 569.571453][ T9775] block nbd1: shutting down sockets [ 569.652819][ T5262] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 569.815905][ T5261] usb 3-1: USB disconnect, device number 38 [ 569.850659][ T5262] usb 4-1: Using ep0 maxpacket: 16 [ 569.871660][ T5262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.890947][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 569.893569][ T9781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.908606][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 569.919065][ T5262] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 569.938694][ T5262] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.964901][ T5262] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 569.975216][ T5262] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 569.981054][ T5260] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 569.993620][ T5262] usb 4-1: Manufacturer: syz [ 570.031527][ T5262] usb 4-1: config 0 descriptor?? [ 570.062668][ T7023] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 570.174136][ T5260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 570.189630][ T5260] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 570.199926][ T5260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 570.215445][ T5260] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 570.228912][ T5260] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 570.244172][ T5260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.252473][ T7023] usb 5-1: device descriptor read/64, error -71 [ 570.262595][ T5260] usb 2-1: Product: syz [ 570.266788][ T5260] usb 2-1: Manufacturer: syz [ 570.272589][ T5260] usb 2-1: SerialNumber: syz [ 570.279419][ T5260] usb 2-1: config 0 descriptor?? [ 570.287926][ T5260] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 570.361109][ T5360] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 570.440560][ T5261] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 570.494225][ T9779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.503528][ T9779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.530577][ T7023] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 570.553074][ T5360] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 570.554421][ T5260] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 570.573376][ T5360] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 570.583228][ T5360] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 570.593030][ T5360] usb 1-1: config 0 has no interface number 0 [ 570.599226][ T5360] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 570.614233][ T5360] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 570.626114][ T5360] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 570.637600][ T5360] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.640463][ T5261] usb 3-1: Using ep0 maxpacket: 32 [ 570.652000][ T5360] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 570.663003][ T5261] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 570.665153][ T5360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.676579][ T5261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.692161][ T7023] usb 5-1: device descriptor read/64, error -71 [ 570.692564][ T5360] usb 1-1: config 0 descriptor?? [ 570.708852][ T5360] gspca_main: spca561-2.14.0 probing abcd:cdee [ 570.729218][ T5261] usb 3-1: config 0 descriptor?? [ 570.730086][ T8] usb 2-1: USB disconnect, device number 56 [ 570.742991][ T5261] gspca_main: sq930x-2.14.0 probing 041e:403c [ 570.818287][ T7023] usb usb5-port1: attempt power cycle [ 570.914371][ T9784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.925033][ T9784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.235262][ T5360] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 571.247848][ T5360] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.369110][ T5261] gspca_sq930x: reg_r 001f failed -110 [ 571.387211][ T5261] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 571.444588][ T9795] ./bus: Can't lookup blockdev [ 571.520741][ T7023] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 572.907096][ T5360] usb 1-1: MIDIStreaming interface descriptor not found [ 573.111012][ T5360] usb 1-1: USB disconnect, device number 54 [ 573.122369][ T7023] usb 5-1: device descriptor read/8, error -71 [ 573.250679][ T5262] rc_core: IR keymap rc-hauppauge not found [ 573.259289][ T5262] Registered IR keymap rc-empty [ 573.288435][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 573.291349][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.486558][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.523809][ T5262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 573.541614][ T5262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 573.557984][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.607034][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.642207][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.680745][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.725284][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.801036][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.837997][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 573.901006][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 574.019091][ T5360] usb 3-1: USB disconnect, device number 39 [ 574.051234][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 574.160779][ T5262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 574.294716][ T5262] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 574.314107][ T9818] 9pnet_fd: Insufficient options for proto=fd [ 574.323349][ T5262] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 574.349733][ T5262] usb 4-1: USB disconnect, device number 47 [ 574.982353][ T5262] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 575.381804][ T5262] usb 4-1: Using ep0 maxpacket: 16 [ 575.389312][ T5262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.401055][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 575.412749][ T5262] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 575.473212][ T5262] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 575.532845][ T5262] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 575.561748][ T9829] IPVS: set_ctl: invalid protocol: 103 172.20.20.37:8 [ 575.574723][ T5262] usb 4-1: Manufacturer: syz [ 575.606655][ T5262] usb 4-1: config 0 descriptor?? [ 576.354134][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.115363][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.696007][ T9835] FAULT_INJECTION: forcing a failure. [ 577.696007][ T9835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.714486][ T9835] CPU: 0 UID: 0 PID: 9835 Comm: syz.4.856 Not tainted 6.11.0-rc4-syzkaller #0 [ 577.723481][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 577.733648][ T9835] Call Trace: [ 577.736946][ T9835] [ 577.739890][ T9835] dump_stack_lvl+0x241/0x360 [ 577.744619][ T9835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.749839][ T9835] ? __pfx__printk+0x10/0x10 [ 577.754470][ T9835] ? __pfx_lock_release+0x10/0x10 [ 577.759578][ T9835] should_fail_ex+0x3b0/0x4e0 [ 577.764371][ T9835] _copy_from_iter+0x1f6/0x1960 [ 577.769246][ T9835] ? __virt_addr_valid+0x183/0x530 [ 577.774559][ T9835] ? __pfx_lock_release+0x10/0x10 [ 577.779662][ T9835] ? __pfx__copy_from_iter+0x10/0x10 [ 577.784991][ T9835] ? __virt_addr_valid+0x183/0x530 [ 577.790140][ T9835] ? __virt_addr_valid+0x183/0x530 [ 577.795333][ T9835] ? __virt_addr_valid+0x45f/0x530 [ 577.800478][ T9835] ? __check_object_size+0x49c/0x900 [ 577.805799][ T9835] tcp_sendmsg_locked+0x1c83/0x4e10 [ 577.811071][ T9835] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 577.816646][ T9835] ? __local_bh_enable_ip+0x168/0x200 [ 577.822061][ T9835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 577.827302][ T9835] tcp_sendmsg+0x30/0x50 [ 577.831574][ T9835] __sock_sendmsg+0x1a6/0x270 [ 577.836290][ T9835] __sys_sendto+0x3a4/0x4f0 [ 577.840830][ T9835] ? __pfx___sys_sendto+0x10/0x10 [ 577.845902][ T9835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.851911][ T9835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 577.858272][ T9835] __x64_sys_sendto+0xde/0x100 [ 577.863065][ T9835] do_syscall_64+0xf3/0x230 [ 577.867589][ T9835] ? clear_bhb_loop+0x35/0x90 [ 577.872308][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.878242][ T9835] RIP: 0033:0x7fc0e8b79e79 [ 577.882679][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.902309][ T9835] RSP: 002b:00007fc0e89f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.910769][ T9835] RAX: ffffffffffffffda RBX: 00007fc0e8d15f80 RCX: 00007fc0e8b79e79 [ 577.918733][ T9835] RDX: 000000000000fe6a RSI: 0000000020000700 RDI: 0000000000000004 [ 577.926814][ T9835] RBP: 00007fc0e89f8090 R08: 0000000000000000 R09: fffffffffffffe93 [ 577.934781][ T9835] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 577.942767][ T9835] R13: 0000000000000000 R14: 00007fc0e8d15f80 R15: 00007fffcf358218 [ 577.950741][ T9835] [ 577.953894][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.071140][ T9851] overlay: Unknown parameter 'defcontext' [ 578.071639][ T9850] overlay: Unknown parameter 'defcontext' [ 578.116171][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 578.116190][ T29] audit: type=1326 audit(1724056551.700:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9854 comm="syz.1.861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4510b79e79 code=0x0 [ 578.171158][ T7023] usb 4-1: USB disconnect, device number 48 [ 579.178957][ T9864] netlink: 48 bytes leftover after parsing attributes in process `syz.4.863'. [ 580.392206][ T9879] block nbd3: shutting down sockets [ 582.637941][ T9894] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.645909][ T9894] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 582.657814][ T9894] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.666286][ T9894] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 583.718270][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 583.894089][ T9904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.913906][ T9907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.030286][ T5211] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 584.114151][ T9907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.075481][ T9916] block nbd0: shutting down sockets [ 585.184283][ T5258] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 585.190665][ T5211] usb 3-1: Using ep0 maxpacket: 16 [ 585.210109][ T5211] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.235764][ T5211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 585.258068][ T5211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 585.288664][ T5211] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 585.312540][ T5211] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 585.321532][ T5211] usb 3-1: Manufacturer: syz [ 585.342853][ T5211] usb 3-1: config 0 descriptor?? [ 585.361541][ T5258] usb 4-1: device descriptor read/64, error -71 [ 585.670514][ T5258] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 585.822957][ T5261] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 585.830836][ T5258] usb 4-1: device descriptor read/64, error -71 [ 585.881088][ T47] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 585.970504][ T5258] usb usb4-port1: attempt power cycle [ 586.012955][ T5261] usb 5-1: Using ep0 maxpacket: 32 [ 586.023378][ T5261] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 586.033862][ T5261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.054759][ T5261] usb 5-1: config 0 descriptor?? [ 586.070032][ T5261] gspca_main: sq930x-2.14.0 probing 041e:403c [ 586.090762][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 586.098404][ T47] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 586.108596][ T47] usb 1-1: config 150 has an invalid descriptor of length 90, skipping remainder of the config [ 586.120152][ T47] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 586.132271][ T47] usb 1-1: config 150 has no interface number 0 [ 586.138609][ T47] usb 1-1: config 150 interface 204 has no altsetting 0 [ 586.149956][ T47] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 586.162613][ T47] usb 1-1: New USB device strings: Mfr=73, Product=2, SerialNumber=3 [ 586.180491][ T47] usb 1-1: Product: syz [ 586.185292][ T47] usb 1-1: Manufacturer: syz [ 586.189936][ T47] usb 1-1: SerialNumber: syz [ 586.314150][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.139457][ T9938] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 587.160777][ T5258] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 587.165652][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.179066][ T5261] gspca_sq930x: reg_r 001f failed -110 [ 587.203650][ T5261] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 587.246573][ T5258] usb 4-1: device descriptor read/8, error -71 [ 587.502440][ T9941] ./bus: Can't lookup blockdev [ 588.097723][ T5258] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 588.758770][ T5258] usb 4-1: device descriptor read/8, error -71 [ 588.801865][ T8] usb 3-1: USB disconnect, device number 40 [ 588.900907][ T5262] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 588.901528][ T5258] usb usb4-port1: unable to enumerate USB device [ 589.006303][ T47] usb 1-1: USB disconnect, device number 55 [ 589.334215][ T9951] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 589.344415][ T9951] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 589.430652][ T5262] usb 2-1: device not accepting address 57, error -71 [ 589.820584][ T5262] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 589.883441][ T8] usb 5-1: USB disconnect, device number 50 [ 589.978431][ T29] audit: type=1326 audit(1724056563.560:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9959 comm="syz.3.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3442f79e79 code=0x0 [ 590.095943][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.109101][ T9963] tmpfs: Bad value for 'nr_inodes' [ 590.139749][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.159662][ T5262] usb 2-1: unable to get BOS descriptor or descriptor too short [ 590.206485][ T5262] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 590.241200][ T5262] usb 2-1: can't read configurations, error -71 [ 590.269181][ T5262] usb usb2-port1: attempt power cycle [ 590.380284][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.895'. [ 590.482824][ T7023] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 590.670681][ T7023] usb 3-1: Using ep0 maxpacket: 32 [ 590.688986][ T7023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.702885][ T7023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.718811][ T7023] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 590.729062][ T7023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.755438][ T7023] usb 3-1: config 0 descriptor?? [ 591.266975][ T7023] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 592.320542][ T7023] ft260 0003:0403:6030.000D: chip code: 5e81 abf2 [ 592.851307][ T5261] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 593.107059][ T47] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 593.202615][ T9996] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 593.222292][ T9996] hsr0: entered promiscuous mode [ 593.240965][ T9996] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 593.253825][ T5261] usb 4-1: Using ep0 maxpacket: 16 [ 593.259140][ T9996] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 593.275006][ T9996] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 593.288717][ T9996] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 593.330955][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 593.337028][ T5261] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 593.346535][ T5261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.355531][ T5261] usb 4-1: Product: syz [ 593.360071][ T5261] usb 4-1: Manufacturer: syz [ 593.365175][ T5261] usb 4-1: SerialNumber: syz [ 593.375856][ T47] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 593.388369][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.397748][ T5261] usb 4-1: config 0 descriptor?? [ 593.406171][ T47] usb 1-1: Product: syz [ 593.412138][ T5261] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 593.421022][ T47] usb 1-1: Manufacturer: syz [ 593.426587][ T47] usb 1-1: SerialNumber: syz [ 593.440989][ T47] usb 1-1: config 0 descriptor?? [ 593.854116][ T9994] FAULT_INJECTION: forcing a failure. [ 593.854116][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 593.892999][ T9994] CPU: 0 UID: 0 PID: 9994 Comm: syz.3.900 Not tainted 6.11.0-rc4-syzkaller #0 [ 593.901987][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 593.912071][ T9994] Call Trace: [ 593.915385][ T9994] [ 593.918420][ T9994] dump_stack_lvl+0x241/0x360 [ 593.923132][ T9994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.928361][ T9994] ? __pfx__printk+0x10/0x10 [ 593.933007][ T9994] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 593.939016][ T9994] ? __pfx___might_resched+0x10/0x10 [ 593.944327][ T9994] ? __lock_acquire+0x137a/0x2040 [ 593.949383][ T9994] should_fail_ex+0x3b0/0x4e0 [ 593.954116][ T9994] should_failslab+0xac/0x100 [ 593.958801][ T9994] ? __alloc_skb+0x1c3/0x440 [ 593.963479][ T9994] kmem_cache_alloc_node_noprof+0x71/0x320 [ 593.969293][ T9994] __alloc_skb+0x1c3/0x440 [ 593.973715][ T9994] ? validate_chain+0x11e/0x5900 [ 593.978675][ T9994] ? __pfx___alloc_skb+0x10/0x10 [ 593.983694][ T9994] ? __lock_acquire+0x2000/0x2040 [ 593.988815][ T9994] alloc_skb_with_frags+0xc3/0x770 [ 593.993929][ T9994] ? mark_lock+0x9a/0x350 [ 593.998263][ T9994] ? __lock_acquire+0x137a/0x2040 [ 594.003286][ T9994] sock_alloc_send_pskb+0x91a/0xa60 [ 594.008510][ T9994] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 594.014237][ T9994] ? smack_socket_sendmsg+0x172/0x540 [ 594.019624][ T9994] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 594.025349][ T9994] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 594.031815][ T9994] hci_sock_sendmsg+0x22b/0x11c0 [ 594.036777][ T9994] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 594.042164][ T9994] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 594.047453][ T9994] ? security_socket_sendmsg+0x87/0xb0 [ 594.053030][ T9994] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 594.058393][ T9994] __sock_sendmsg+0x221/0x270 [ 594.063080][ T9994] sock_write_iter+0x2dd/0x400 [ 594.067846][ T9994] ? __pfx_sock_write_iter+0x10/0x10 [ 594.073146][ T9994] ? bpf_lsm_file_permission+0x9/0x10 [ 594.078515][ T9994] ? security_file_permission+0x7f/0xa0 [ 594.084071][ T9994] vfs_write+0xa72/0xc90 [ 594.088314][ T9994] ? __pfx_sock_write_iter+0x10/0x10 [ 594.093684][ T9994] ? __pfx_vfs_write+0x10/0x10 [ 594.098465][ T9994] ksys_write+0x1a0/0x2c0 [ 594.102805][ T9994] ? __pfx_ksys_write+0x10/0x10 [ 594.107649][ T9994] ? do_syscall_64+0x100/0x230 [ 594.112434][ T9994] ? do_syscall_64+0xb6/0x230 [ 594.117124][ T9994] do_syscall_64+0xf3/0x230 [ 594.121671][ T9994] ? clear_bhb_loop+0x35/0x90 [ 594.126356][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.132345][ T9994] RIP: 0033:0x7f3442f79e79 [ 594.136764][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.156377][ T9994] RSP: 002b:00007f3443d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.164797][ T9994] RAX: ffffffffffffffda RBX: 00007f3443115f80 RCX: 00007f3442f79e79 [ 594.172766][ T9994] RDX: 000000000000000d RSI: 0000000020000080 RDI: 000000000000001f [ 594.180745][ T9994] RBP: 00007f3443d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 594.188881][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.196947][ T9994] R13: 0000000000000000 R14: 00007f3443115f80 R15: 00007ffe816972d8 [ 594.204945][ T9994] [ 594.275774][ T5261] usb 4-1: qt2_attach - failed to power on unit: -71 [ 594.299518][ T5261] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 594.353010][ T5261] usb 4-1: USB disconnect, device number 53 [ 594.768038][T10011] MTD: Couldn't look up './file0': -15 [ 595.645018][ T47] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 595.663858][ T7023] ft260 0003:0403:6030.000D: failed to retrieve system status [ 595.678912][ T7023] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -71 [ 595.750511][ T47] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 595.800908][ T7023] usb 3-1: USB disconnect, device number 41 [ 595.853214][T10018] vxfs: WRONG superblock magic 00000000 at 1 [ 595.861305][T10018] vxfs: WRONG superblock magic 00000000 at 8 [ 595.867329][T10018] vxfs: can't find superblock. [ 595.921044][ T47] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 596.191271][ T47] usb 1-1: USB disconnect, device number 56 [ 596.208599][T10026] tmpfs: Bad value for 'nr_inodes' [ 596.280854][ T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 596.371249][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 596.381977][T10029] capability: warning: `syz.4.910' uses deprecated v2 capabilities in a way that may be insecure [ 596.480534][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 596.494044][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.518599][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.555265][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.600561][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 596.620351][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.664517][ T8] usb 4-1: config 0 descriptor?? [ 596.770733][ T47] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 596.983690][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 597.042239][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 597.076424][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 597.118969][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 597.157029][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 597.225879][ T8] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 597.474051][ T8] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 597.491704][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.528243][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.546762][T10036] block nbd2: shutting down sockets [ 597.560822][ T8] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 598.386639][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.436659][ T8] usb 4-1: USB disconnect, device number 54 [ 598.489088][ T47] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 598.699531][T10048] FAULT_INJECTION: forcing a failure. [ 598.699531][T10048] name failslab, interval 1, probability 0, space 0, times 0 [ 598.754668][T10048] CPU: 1 UID: 0 PID: 10048 Comm: syz.0.914 Not tainted 6.11.0-rc4-syzkaller #0 [ 598.763749][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 598.773926][T10048] Call Trace: [ 598.777268][T10048] [ 598.780414][T10048] dump_stack_lvl+0x241/0x360 [ 598.785136][T10048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.790874][T10048] ? __pfx__printk+0x10/0x10 [ 598.795545][T10048] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 598.801581][T10048] ? __pfx___might_resched+0x10/0x10 [ 598.806898][T10048] should_fail_ex+0x3b0/0x4e0 [ 598.811600][T10048] should_failslab+0xac/0x100 [ 598.816317][T10048] ? __alloc_skb+0x1c3/0x440 [ 598.820943][T10048] kmem_cache_alloc_node_noprof+0x71/0x320 [ 598.826804][T10048] __alloc_skb+0x1c3/0x440 [ 598.831272][T10048] ? __pfx___alloc_skb+0x10/0x10 [ 598.836248][T10048] ? netlink_ack_tlv_len+0x6e/0x200 [ 598.841482][T10048] netlink_ack+0x13f/0xa30 [ 598.845921][T10048] ? __pfx_lock_acquire+0x10/0x10 [ 598.850966][T10048] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 598.856610][T10048] ? __pfx_nl80211_post_doit+0x10/0x10 [ 598.862092][T10048] netlink_rcv_skb+0x262/0x430 [ 598.866890][T10048] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.871928][T10048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.877229][T10048] ? __netlink_deliver_tap+0x77e/0x7c0 [ 598.882705][T10048] genl_rcv+0x28/0x40 [ 598.886697][T10048] netlink_unicast+0x7f6/0x990 [ 598.891481][T10048] ? __pfx_netlink_unicast+0x10/0x10 [ 598.896787][T10048] ? __virt_addr_valid+0x183/0x530 [ 598.901917][T10048] ? __check_object_size+0x49c/0x900 [ 598.907219][T10048] ? bpf_lsm_netlink_send+0x9/0x10 [ 598.912342][T10048] netlink_sendmsg+0x8e4/0xcb0 [ 598.917125][T10048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.922425][T10048] ? __import_iovec+0x536/0x820 [ 598.927301][T10048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 598.932603][T10048] ? security_socket_sendmsg+0x87/0xb0 [ 598.938114][T10048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.943413][T10048] __sock_sendmsg+0x221/0x270 [ 598.948205][T10048] ____sys_sendmsg+0x525/0x7d0 [ 598.952996][T10048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.958318][T10048] __sys_sendmsg+0x2b0/0x3a0 [ 598.963023][T10048] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.968198][T10048] ? vfs_write+0x7c4/0xc90 [ 598.972675][T10048] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 598.979123][T10048] ? do_syscall_64+0x100/0x230 [ 598.983992][T10048] ? do_syscall_64+0xb6/0x230 [ 598.988665][T10048] do_syscall_64+0xf3/0x230 [ 598.993187][T10048] ? clear_bhb_loop+0x35/0x90 [ 598.998317][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.004210][T10048] RIP: 0033:0x7f239d779e79 [ 599.008620][T10048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.028318][T10048] RSP: 002b:00007f239e593038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.036756][T10048] RAX: ffffffffffffffda RBX: 00007f239d915f80 RCX: 00007f239d779e79 [ 599.044743][T10048] RDX: 0000000000040000 RSI: 0000000020003500 RDI: 0000000000000003 [ 599.052729][T10048] RBP: 00007f239e593090 R08: 0000000000000000 R09: 0000000000000000 [ 599.060728][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.068712][T10048] R13: 0000000000000000 R14: 00007f239d915f80 R15: 00007ffdf63c3608 [ 599.076692][T10048] [ 599.213440][T10055] openvswitch: netlink: IP tunnel dst address not specified [ 599.249827][ T55] Bluetooth: hci2: link tx timeout [ 599.258579][ T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 599.280822][ T5220] Bluetooth: hci2: link tx timeout [ 599.300975][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 599.308691][ T5220] Bluetooth: hci2: link tx timeout [ 599.315192][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 599.331351][T10061] MTD: Couldn't look up './file0': -15 [ 599.638521][T10066] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 601.333257][ T6719] Bluetooth: hci2: command 0x0406 tx timeout [ 601.340003][ T6719] Bluetooth: hci5: command 0x0406 tx timeout [ 601.345481][ T5220] Bluetooth: hci1: command 0x0406 tx timeout [ 601.458622][ T7023] usb 5-1: USB disconnect, device number 51 [ 601.561558][ T5260] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 602.285073][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 602.604866][T10084] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 602.613487][T10084] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 602.625138][T10084] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 602.633677][T10084] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 603.535669][T10098] FAULT_INJECTION: forcing a failure. [ 603.535669][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 603.550519][T10098] CPU: 1 UID: 0 PID: 10098 Comm: syz.4.929 Not tainted 6.11.0-rc4-syzkaller #0 [ 603.559502][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 603.569669][T10098] Call Trace: [ 603.572970][T10098] [ 603.575923][T10098] dump_stack_lvl+0x241/0x360 [ 603.580623][T10098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.585831][T10098] ? __pfx__printk+0x10/0x10 [ 603.590431][T10098] ? ref_tracker_alloc+0x332/0x490 [ 603.595572][T10098] should_fail_ex+0x3b0/0x4e0 [ 603.600245][T10098] ? skb_clone+0x20c/0x390 [ 603.604661][T10098] should_failslab+0xac/0x100 [ 603.609336][T10098] ? skb_clone+0x20c/0x390 [ 603.613753][T10098] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 603.619127][T10098] skb_clone+0x20c/0x390 [ 603.623371][T10098] __netlink_deliver_tap+0x3cc/0x7c0 [ 603.628657][T10098] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.633882][T10098] netlink_deliver_tap+0x19d/0x1b0 [ 603.638996][T10098] netlink_sendskb+0x68/0x140 [ 603.643688][T10098] netlink_unicast+0x39d/0x990 [ 603.648479][T10098] ? __asan_memcpy+0x40/0x70 [ 603.653072][T10098] ? __pfx_netlink_unicast+0x10/0x10 [ 603.658363][T10098] netlink_rcv_skb+0x262/0x430 [ 603.663122][T10098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.668172][T10098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.673462][T10098] ? __netlink_deliver_tap+0x77e/0x7c0 [ 603.678925][T10098] genl_rcv+0x28/0x40 [ 603.682901][T10098] netlink_unicast+0x7f6/0x990 [ 603.687668][T10098] ? __pfx_netlink_unicast+0x10/0x10 [ 603.692950][T10098] ? __virt_addr_valid+0x183/0x530 [ 603.698054][T10098] ? __check_object_size+0x49c/0x900 [ 603.703335][T10098] ? bpf_lsm_netlink_send+0x9/0x10 [ 603.708441][T10098] netlink_sendmsg+0x8e4/0xcb0 [ 603.713209][T10098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.718493][T10098] ? __import_iovec+0x536/0x820 [ 603.723343][T10098] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 603.729057][T10098] ? security_socket_sendmsg+0x87/0xb0 [ 603.734522][T10098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.739800][T10098] __sock_sendmsg+0x221/0x270 [ 603.744482][T10098] ____sys_sendmsg+0x525/0x7d0 [ 603.749384][T10098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.754690][T10098] __sys_sendmsg+0x2b0/0x3a0 [ 603.759309][T10098] ? __pfx___sys_sendmsg+0x10/0x10 [ 603.764767][T10098] ? vfs_write+0x7c4/0xc90 [ 603.769218][T10098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 603.775544][T10098] ? do_syscall_64+0x100/0x230 [ 603.780305][T10098] ? do_syscall_64+0xb6/0x230 [ 603.784977][T10098] do_syscall_64+0xf3/0x230 [ 603.789473][T10098] ? clear_bhb_loop+0x35/0x90 [ 603.794157][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.800072][T10098] RIP: 0033:0x7fc0e8b79e79 [ 603.804497][T10098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.824209][T10098] RSP: 002b:00007fc0e89f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.832621][T10098] RAX: ffffffffffffffda RBX: 00007fc0e8d15f80 RCX: 00007fc0e8b79e79 [ 603.840584][T10098] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 603.848549][T10098] RBP: 00007fc0e89f8090 R08: 0000000000000000 R09: 0000000000000000 [ 603.856521][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.864580][T10098] R13: 0000000000000000 R14: 00007fc0e8d15f80 R15: 00007fffcf358218 [ 603.872559][T10098] [ 603.894962][ T5260] usb 2-1: device not accepting address 60, error -71 [ 606.738584][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 608.237876][ T5262] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 608.470940][ T5262] usb 1-1: Using ep0 maxpacket: 8 [ 608.507077][ T5262] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.560593][ T5262] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.627236][ T5262] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.670752][ T5262] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.713859][ T5262] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.745463][ T5262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.829287][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 609.084096][ T25] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 609.106839][ T5262] usb 1-1: usb_control_msg returned -32 [ 609.135558][ T5262] usbtmc 1-1:16.0: can't read capabilities [ 609.372623][T10164] overlayfs: failed to resolve './file1': -2 [ 609.488093][T10164] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 609.504601][T10164] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 609.517463][T10164] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 609.525924][T10164] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 609.847816][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 610.097185][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.145593][ T5262] usb 1-1: USB disconnect, device number 57 [ 610.158213][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.231588][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.319498][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 610.328541][T10177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.948'. [ 611.094353][ T25] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 611.116140][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.163304][ T25] usb 2-1: config 0 descriptor?? [ 611.659461][T10187] overlayfs: failed to resolve './file1': -2 [ 611.754801][T10188] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 611.762859][T10188] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 611.771894][T10188] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 611.779902][T10188] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 612.313320][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 612.324453][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 612.401939][ T25] usb 2-1: USB disconnect, device number 62 [ 613.312764][T10196] syz.2.952: attempt to access beyond end of device [ 613.312764][T10196] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 613.334863][T10196] hfs: can't find a HFS filesystem on dev nbd2 [ 613.512103][T10220] ./bus: Can't lookup blockdev [ 613.512407][T10219] ./bus: Can't lookup blockdev [ 614.002026][ T5261] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 614.213733][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.225011][ T5261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.238763][ T5261] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 614.249063][ T5261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.274325][ T5261] usb 4-1: config 0 descriptor?? [ 614.351198][ T8] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 614.360487][ T5262] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 614.550844][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 614.558418][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 614.568174][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.577689][ T5262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.590624][ T8] usb 2-1: config 0 descriptor?? [ 614.598461][ T5262] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 614.607947][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.633136][ T8] gspca_main: sq930x-2.14.0 probing 041e:403c [ 614.652952][ T5262] usb 3-1: config 0 descriptor?? [ 614.663411][ T5262] pwc: Askey VC010 type 2 USB webcam detected. [ 614.709875][ T5261] mcp2221 0003:04D8:00DD.000F: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 614.868223][ T5262] pwc: send_video_command error -71 [ 614.877188][T10244] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 614.889993][ T5262] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 614.913777][ T5262] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 614.978357][ T5262] usb 3-1: USB disconnect, device number 42 [ 615.147136][ T8] gspca_sq930x: reg_r 001f failed -110 [ 615.160959][ T8] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 615.250799][ T30] INFO: task syz.4.654:8806 blocked for more than 143 seconds. [ 615.261981][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 615.281816][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.301785][ T30] task:syz.4.654 state:D stack:24672 pid:8806 tgid:8806 ppid:7528 flags:0x00004004 [ 615.304563][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.330667][ T30] Call Trace: [ 615.338873][ T30] [ 615.347391][ T30] __schedule+0x17ae/0x4a10 [ 615.388897][ T30] ? __pfx___schedule+0x10/0x10 [ 615.402628][ T30] ? __pfx_lock_release+0x10/0x10 [ 615.410149][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 615.470862][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 615.485698][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 615.587193][T10250] ./bus: Can't lookup blockdev [ 615.606575][ T5262] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 615.622199][ T30] ? schedule+0x90/0x320 [ 615.644143][ T30] schedule+0x14b/0x320 [ 615.656619][ T30] ? do_exit+0x4ff/0x27f0 [ 615.668248][ T30] do_exit+0x57c/0x27f0 [ 615.679144][ T30] ? __pfx_do_exit+0x10/0x10 [ 615.690169][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 615.760565][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 615.774941][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 615.788425][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 615.818288][ T30] do_group_exit+0x207/0x2c0 [ 615.829556][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.872476][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 615.888811][ T30] get_signal+0x1695/0x1730 [ 615.896720][ T30] ? __pfx_get_signal+0x10/0x10 [ 615.901899][ T30] arch_do_signal_or_restart+0x96/0x860 [ 615.909233][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 615.915647][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 615.926134][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 615.933942][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 615.939544][ T30] do_syscall_64+0x100/0x230 [ 615.944226][ T5262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.944802][ T5262] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 615.954788][ T30] ? clear_bhb_loop+0x35/0x90 [ 615.969760][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.972961][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.993426][ T5262] usb 3-1: config 0 descriptor?? [ 615.995283][ T30] RIP: 0033:0x7f6e72579e79 [ 616.004063][ T5262] pwc: Askey VC010 type 2 USB webcam detected. [ 616.017895][ T30] RSP: 002b:00007ffcdf764768 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 616.031846][ T5261] usb 4-1: reset high-speed USB device number 55 using dummy_hcd [ 616.043359][ T30] RAX: fffffffffffffdfc RBX: 000000000006eda5 RCX: 00007f6e72579e79 [ 616.052079][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6e72716064 [ 616.061528][ T30] RBP: 00007f6e72716064 R08: 00007f6e72715f80 R09: 00007ffcdf764a4f [ 616.069557][ T30] R10: 00007ffcdf764860 R11: 0000000000000246 R12: 0000000000000032 [ 616.078446][ T30] R13: 00007ffcdf764860 R14: 00007ffcdf764880 R15: 000000000006ed73 [ 616.086616][ T30] [ 616.090125][ T30] INFO: task syz.4.654:8808 blocked for more than 144 seconds. [ 616.098482][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.124621][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 616.143997][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.161348][T10222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.170003][ T30] task:syz.4.654 state:D stack:26072 pid:8808 tgid:8806 ppid:7528 flags:0x00004006 [ 616.188383][ T30] Call Trace: [ 616.192608][ T30] [ 616.195598][ T30] __schedule+0x17ae/0x4a10 [ 616.200178][ T30] ? __pfx___schedule+0x10/0x10 [ 616.210587][ T30] ? __pfx_lock_release+0x10/0x10 [ 616.215732][ T30] ? schedule+0x90/0x320 [ 616.220118][ T30] schedule+0x14b/0x320 [ 616.226028][ T30] schedule_timeout+0xb0/0x310 [ 616.230946][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 616.238999][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 616.245840][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.252250][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 616.257573][ T30] __wait_for_common+0x3ea/0x6d0 [ 616.263282][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 616.268735][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 616.274871][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 616.280061][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 616.286206][ T30] wait_for_completion_state+0x1c/0x40 [ 616.292154][ T30] do_coredump+0x984/0x2a30 [ 616.296759][ T30] ? __pfx_lock_release+0x10/0x10 [ 616.302725][ T30] ? __kasan_slab_free+0x37/0x60 [ 616.307914][ T30] ? arch_do_signal_or_restart+0x96/0x860 [ 616.314928][ T30] ? __pfx_do_coredump+0x10/0x10 [ 616.320034][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.326578][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 616.335944][ T30] get_signal+0x13ee/0x1730 [ 616.344927][ T30] ? __pfx_get_signal+0x10/0x10 [ 616.349867][ T30] arch_do_signal_or_restart+0x96/0x860 [ 616.355625][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 616.362380][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 616.368458][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 616.375257][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 616.381184][ T30] do_syscall_64+0x100/0x230 [ 616.385915][ T30] ? clear_bhb_loop+0x35/0x90 [ 616.391477][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.397545][ T30] RIP: 0033:0x7f6e7243c370 [ 616.409339][ T30] RSP: 002b:00007f6e7341ca78 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 616.418528][ T30] RAX: 0000000000000000 RBX: 00007f6e72716058 RCX: 00007f6e72579e79 [ 616.427281][ T30] RDX: 00007f6e7341ca80 RSI: 00007f6e7341cbb0 RDI: 000000000000000b [ 616.436344][ T30] RBP: 00007f6e725e7916 R08: 0000000000000000 R09: 0000000000000000 [ 616.450348][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.475107][ T30] R13: 0000000000000000 R14: 00007f6e72716058 R15: 00007ffcdf764608 [ 616.486936][ T30] [ 616.490063][ T30] INFO: task syz.4.654:8809 blocked for more than 144 seconds. [ 616.494193][T10222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.503343][ T30] Not tainted 6.11.0-rc4-syzkaller #0 [ 616.519299][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.528925][ T30] task:syz.4.654 state:D stack:26624 pid:8809 tgid:8806 ppid:7528 flags:0x00004004 [ 616.539484][ T30] Call Trace: [ 616.551096][ T30] [ 616.558757][ T30] __schedule+0x17ae/0x4a10 [ 616.571170][ T30] ? __pfx___schedule+0x10/0x10 [ 616.579524][ T30] ? __pfx_lock_release+0x10/0x10 [ 616.592198][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 616.599730][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 616.612152][ T5262] pwc: recv_control_msg error -71 req 02 val 2c00 [ 616.612928][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 616.624976][ T5262] pwc: recv_control_msg error -71 req 04 val 1000 [ 616.629735][ T30] ? schedule+0x90/0x320 [ 616.634068][ T5262] pwc: recv_control_msg error -71 req 04 val 1300 [ 616.636306][ T30] schedule+0x14b/0x320 [ 616.648072][ T5262] pwc: recv_control_msg error -71 req 04 val 1400 [ 616.649113][ T30] ? do_exit+0x4ff/0x27f0 [ 616.657709][ T5262] pwc: recv_control_msg error -71 req 02 val 2000 [ 616.666140][ T30] do_exit+0x57c/0x27f0 [ 616.671230][ T5262] pwc: recv_control_msg error -71 req 02 val 2100 [ 616.677288][ T30] ? __pfx_do_exit+0x10/0x10 [ 616.678353][ T5262] pwc: recv_control_msg error -71 req 04 val 1500 [ 616.683080][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 616.689665][ T5262] pwc: recv_control_msg error -71 req 02 val 2500 [ 616.700722][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 616.701924][ T5262] pwc: recv_control_msg error -71 req 02 val 2400 [ 616.713508][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 616.713546][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 616.713579][ T30] do_group_exit+0x207/0x2c0 [ 616.713598][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.713621][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 616.713657][ T30] get_signal+0x1695/0x1730 [ 616.713696][ T30] ? __pfx_get_signal+0x10/0x10 [ 616.713726][ T30] arch_do_signal_or_restart+0x96/0x860 [ 616.713752][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 616.713774][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 616.721471][ T5262] pwc: recv_control_msg error -71 req 02 val 2600 [ 616.734002][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 616.736419][ T5262] pwc: recv_control_msg error -71 req 02 val 2900 [ 616.741542][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 616.748511][ T5262] pwc: recv_control_msg error -71 req 02 val 2800 [ 616.760186][ T30] do_syscall_64+0x100/0x230 [ 616.768342][ T5262] pwc: recv_control_msg error -71 req 04 val 1100 [ 616.771519][ T30] ? clear_bhb_loop+0x35/0x90 [ 616.775934][ T5262] pwc: recv_control_msg error -71 req 04 val 1200 [ 616.811202][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.811241][ T30] RIP: 0033:0x7f6e72579e79 [ 616.811262][ T30] RSP: 002b:00007f6e733fc0e8 EFLAGS: 00000246 [ 616.829491][ T5262] pwc: Registered as video71. [ 616.844369][ T30] ORIG_RAX: 00000000000000ca [ 616.844389][ T30] RAX: fffffffffffffe00 RBX: 00007f6e72716138 RCX: 00007f6e72579e79 [ 616.866747][ T5262] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 616.895887][ T5262] usb 3-1: USB disconnect, device number 43 [ 616.938844][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6e72716138 [ 616.947086][ T30] RBP: 00007f6e72716130 R08: 0000000000000000 R09: 0000000000000000 [ 616.965385][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e7271613c [ 616.974823][ T30] R13: 0000000000000000 R14: 00007ffcdf764520 R15: 00007ffcdf764608 [ 616.989712][ T30] [ 616.994591][ T30] [ 616.994591][ T30] Showing all locks held in the system: [ 617.060171][ T30] 1 lock held by khungtaskd/30: [ 617.071278][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 617.084930][ T30] 4 locks held by kworker/1:1/47: [ 617.091582][ T30] #0: ffff88801ae97948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 617.109011][ T30] #1: ffffc90000b77d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 617.127170][ T30] #2: ffff888023cf6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 617.137835][ T30] #3: ffff888023d11518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x7d5/0x5150 [ 617.150646][ T30] 2 locks held by kworker/u8:6/972: [ 617.158529][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 617.169497][ T30] #1: ffff8880b9328948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 617.181821][ T30] 2 locks held by getty/4970: [ 617.186618][ T30] #0: ffff88802ae4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 617.196698][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 617.207370][ T30] 6 locks held by kworker/1:6/5261: [ 617.216356][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 617.227724][ T30] #1: ffffc90004017d00 ((work_completion)(&intf->reset_ws)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 617.240735][ T30] #2: ffff88802e6c3190 (&dev->mutex){....}-{3:3}, at: usb_lock_device_for_reset+0x128/0x330 [ 617.251457][ T30] #3: ffff888023d11518 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_reset_device+0x5c8/0xb60 [ 617.264364][ T30] #4: ffff8880227d5168 (hcd->address0_mutex){+.+.}-{3:3}, at: usb_reset_and_verify_device+0x319/0x1440 [ 617.275962][ T30] #5: ffffffff8f33f450 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1f8/0x1b30 [ 617.287104][ T30] 2 locks held by kworker/u8:9/5326: [ 617.292681][ T30] 1 lock held by syz.1.964/10232: [ 617.297767][ T30] #0: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 617.308959][ T30] [ 617.311849][ T30] ============================================= [ 617.311849][ T30] [ 617.322414][ T25] usb 2-1: USB disconnect, device number 63 [ 617.324955][ T30] NMI backtrace for cpu 0 [ 617.332667][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller #0 [ 617.341425][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 617.351575][ T30] Call Trace: [ 617.354848][ T30] [ 617.357792][ T30] dump_stack_lvl+0x241/0x360 [ 617.362481][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.367718][ T30] ? __pfx__printk+0x10/0x10 [ 617.372311][ T30] ? vprintk_emit+0x631/0x770 [ 617.377001][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 617.382038][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 617.387098][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 617.392554][ T30] ? _printk+0xd5/0x120 [ 617.396726][ T30] ? __pfx__printk+0x10/0x10 [ 617.401323][ T30] ? __wake_up_klogd+0xcc/0x110 [ 617.406186][ T30] ? __pfx__printk+0x10/0x10 [ 617.410803][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 617.415883][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 617.421883][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 617.427874][ T30] watchdog+0xff4/0x1040 [ 617.432128][ T30] ? watchdog+0x1ea/0x1040 [ 617.433433][ T47] usb 4-1: USB disconnect, device number 55 [ 617.436550][ T30] ? __pfx_watchdog+0x10/0x10 [ 617.447361][ T30] kthread+0x2f0/0x390 [ 617.451424][ T30] ? __pfx_watchdog+0x10/0x10 [ 617.456365][ T30] ? __pfx_kthread+0x10/0x10 [ 617.460944][ T30] ret_from_fork+0x4b/0x80 [ 617.465350][ T30] ? __pfx_kthread+0x10/0x10 [ 617.469924][ T30] ret_from_fork_asm+0x1a/0x30 [ 617.474687][ T30] [ 617.478810][ T30] Sending NMI from CPU 0 to CPUs 1: [ 617.484687][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 617.503090][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 617.509970][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller #0 [ 617.518739][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 617.528787][ T30] Call Trace: [ 617.532053][ T30] [ 617.534977][ T30] dump_stack_lvl+0x241/0x360 [ 617.539639][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.544837][ T30] ? __pfx__printk+0x10/0x10 [ 617.549409][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 617.555380][ T30] ? vscnprintf+0x5d/0x90 [ 617.559692][ T30] panic+0x349/0x860 [ 617.563589][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 617.569879][ T30] ? __pfx_panic+0x10/0x10 [ 617.574318][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 617.579775][ T30] ? __irq_work_queue_local+0x137/0x410 [ 617.585312][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 617.590671][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 617.596809][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 617.602963][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 617.609119][ T30] watchdog+0x1033/0x1040 [ 617.613650][ T30] ? watchdog+0x1ea/0x1040 [ 617.618097][ T30] ? __pfx_watchdog+0x10/0x10 [ 617.622896][ T30] kthread+0x2f0/0x390 [ 617.627005][ T30] ? __pfx_watchdog+0x10/0x10 [ 617.631706][ T30] ? __pfx_kthread+0x10/0x10 [ 617.636330][ T30] ret_from_fork+0x4b/0x80 [ 617.640778][ T30] ? __pfx_kthread+0x10/0x10 [ 617.645391][ T30] ret_from_fork_asm+0x1a/0x30 [ 617.650191][ T30] [ 617.653494][ T30] Kernel Offset: disabled [ 617.657810][ T30] Rebooting in 86400 seconds..