last executing test programs: 2m54.110659203s ago: executing program 0 (id=118): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x2ad75, 0x0, 0x1, 0x168}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x7ffd, 0x0, r6}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x3b3d, 0xf7b1, 0x40, 0x0, 0x31) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x0, 0x1000, 0x3e, &(0x7f0000000100)="0a6c241bff9fc04219d0093f2759e256da1da023845a5220747ac85c1f751516b9d89006236df30c7ea03dedd4e2459778cfd8b3194885e8aef14ca38258"}, {0xc3c7, 0x4001, 0xfa, &(0x7f00000001c0)="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"}], 0x2}) 2m51.478635778s ago: executing program 0 (id=131): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xa0100, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000040), &(0x7f0000000140)=""/42}, 0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f0000000140)) mknodat$loop(r7, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000002400)) 2m50.514871628s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x40, r1, 0x8d61ddcfedb48df, 0x0, 0x1000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '))\\\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x40}}, 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000040)='./bus\x00', 0x4, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 2m49.54617555s ago: executing program 0 (id=137): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[], 0x0) 2m45.80645901s ago: executing program 0 (id=152): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4085) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) (async) r2 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3d, 0x1, 0x4e}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0xe, 0x9, 0xb2, 0x40, 0x4}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0x2, 0xf000, 0x4, [0xffc03f, 0xb9a8dd86ac9dd224]}]}, 0x1, [{0xfa, &(0x7f0000000500)=@string={0xfa, 0x3, "eb929154e18259960e5320a4594ee5b8893709050c12622604c8ebf31b82f68d8cf6fb25ccd7304504bd52c06459c8a97f9ce59e746e4826d70dfeacd8c664ec7b5d6289bc444d2826c2520f8e904fe78e11f0ee5207727a50f8d8575fe10d5c2e4f99eaf7ef55e0d2f4b62bf3475bf4179bb60d718d5ecf41eb03805f501919382b8c5a44e52c83fc6131a171f52d9db6cf15aa3b7ba8c095a1f9e183ba9c0608c25e13ed3872232f31178c1ffd9997601ac7b4d94ee694a4d2719e25d45e34f5628ed6825f2a0dec98e15f8a8f7123620ae6326c5835db33606db1457f259f3f7ce08190eef6976bff95ac9bb76430e57103b122b1b950"}}]}) syz_usb_control_io(r2, &(0x7f00000007c0)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="20110000000021079fc32307f6345748d8c95781d9bd9673504ef0904a910c24bb374612694e015205a9f9e295bea7944d5291d3957448c6763dd55ad56964d37d82b38b3be2061a1ff7a6a0843e80fae9b67eb5293ccedb2302cb6cbecb10359abd99402ce76fb01a7369b8e70d6be0921052523cd9a1d627026ea2e66dfce0265fa17d6d0e783b2f4d61a758c1f103364a25f95f39c7da6205c3"], &(0x7f0000000600)={0x0, 0x3, 0x57, @string={0x57, 0x3, "81ff9c278115d16d8da6d9fa00200f4aebe8a2bb621e4b2c123e406d61e5a05b7502f8d226274b305a8e0984bd1acf50d810e8b216ff6758e5a982464c714869cdd2e92b4a7216335d189f2b55ae8c75cdfb3dfc78"}}, &(0x7f0000000680)={0x0, 0xf, 0xb5, {0x5, 0xf, 0xb5, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x9, 0xff6}, @generic={0x99, 0x10, 0x1, "eaf32d1c28ea8d7d64c61760ad27865dc05aeb2863bc25fc670b4ca59fd196658dee7902f9b9c6b876898adba1bd6a29facf9f0bf8f67bf7e1628881ac55dec4ad0957b723cce228c8c40828f1e666aebd1714f6245f7ebb923a5759568717e2072acc6f270c8792ecc5a79ceac8d8e2aad46e5f3f251be23d3f681b487e257c1585e71270b8b3fb536b05e91cf50d596a5b5aa3b5ad"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x4, 0xc0}, @ptm_cap={0x3}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xff, 0x3, "f659c9e4", "467862d6"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x8, 0x0, 0x32, 0x67, 0x6}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000800)={0x20, 0x17, 0xc9, "4353f5827b745b10f999f11bf43d520ecc04f0ebaf9db87ad346dfe54ab5d8ba2b4c96ea07dfc9e44a47739e3b8c835b690466f2e4cd70676aa55b3e0657fadc9548ef80fe0fd7dec8d07246126064abf67f2be64cd86ab9a3f28736947e84a706277939fb44b5bba1cb985bf7169eac1961c8a4c5bc916668a25fae4b675301b285d45a3d3fdb5e0bc56767373821f5710f798611976c7ec5bd12b57b0f33641ae3555bf6c0a96d537f8a84635dfc317819a7b44615870328ff357b187f09824e2e98753d92814afa"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x160, 0x20, [0x5715dd25a591fab4]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0xb, 0x2}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x59}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "a01b"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x23}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x80}}) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_']) (async, rerun: 64) lstat(&(0x7f0000000dc0)='./file1/file2\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) chown(&(0x7f0000000d80)='./file1/file0\x00', 0x0, r6) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{}, 0x4}}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) write$FUSE_IOCTL(r4, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x5, 0x0, 0xffff, 0x6d6}}, 0x20) 2m44.418542577s ago: executing program 0 (id=159): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x3}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x63) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x3, 0x8080000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x2d, 0x0) 2m29.292647959s ago: executing program 32 (id=159): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x3}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x63) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x3, 0x8080000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x2d, 0x0) 12.747751445s ago: executing program 3 (id=695): syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010003000500000056c0020904000000010100000a24010101bb028111240601010000000900000003000200050524050e0f0724060405000405240402040924060502010600000924030303030505f50904010000010200000904010101010200000905010920009301090725010003480f0904020000010200000904020101010200000905820920000d020407250126080300"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) fadvise64(r1, 0x2, 0x106, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) chdir(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x210002, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x1000) r5 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) wait4(r5, 0x0, 0x20000000, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000000)=0x81) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.256711635s ago: executing program 3 (id=710): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5800000010000ffffefffffff7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000006000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="c8000000052a0000080004"], 0x58}, 0x1, 0x0, 0x0, 0x60820}, 0x4008000) r1 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RCREATE(r2, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x8, 0x1, 0x4}, 0x3}}, 0x18) 9.097925578s ago: executing program 1 (id=713): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) unshare(0x26000400) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 8.385313425s ago: executing program 1 (id=716): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffff0bc, 0x301480) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x8) close(r5) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000", 0x23}], 0x1) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r7]) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 7.343026649s ago: executing program 1 (id=720): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904"], 0x0) (async, rerun: 32) r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e00"], 0x20) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000004c0)=0x7) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x30, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r2 = socket$kcm(0x29, 0x7, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x6, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) r5 = getpid() (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x8}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x3136564e, 0x5, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2}}) (async) kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r7, r6, 0xf319}) (async, rerun: 32) r9 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {r1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r1, r10}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000400000000000000"], 0x48) 7.193360003s ago: executing program 3 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x6) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) sendmsg$netlink(r1, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x7fff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2=0xfe800000, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 7.169573764s ago: executing program 1 (id=723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r3], 0x0) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r3], 0x0) 6.162753709s ago: executing program 2 (id=725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004feffff070004000000000008000500ac1414000f0006"], 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 5.974864923s ago: executing program 4 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/packet\x00') preadv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000640)=""/130, 0x82}], 0x3, 0x3, 0x9e0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400002400048020000180070001006374000014000280080002400000000208000140000000160900010073797a30000000000900020073797a3200000000140047001100010000000007d7c38057fd2c19576373bf0204a6464693d1b70ed9a355c0fc20027301bf31829f9de4665a6a26603e4cb123034477910cd5e9d9ded494c120e1cb04150798bee5b1a327112ab4aee10942be4065e53d830674ac64580b9e00"/200], 0x78}}, 0x0) syz_emit_ethernet(0xfffffffffffffec7, &(0x7f0000000180)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x0, 0x4e1f, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) socket(0x40000000015, 0x5, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000040)={0x80, r7}, 0x0) sendmmsg$inet(r9, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 5.705835563s ago: executing program 2 (id=727): r0 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r1, &(0x7f00000001c0)="d89bf4f972ac91bd39f8d2e3cc1349a816a686c0b7ede8f0d088756a5d0110e664aeeb48efbaac8ac1bbd6848d6b65cf2e290dc281fc444492aca652f9e5da77a95df152188ffe889ceae5fb6d11e04364a2f6ee206946cf69dbf9cee1769cb8841481cce7db80b3622a6371a5ea6b190c2d870f770fa6f2562c9642660e58c1a3f56259c841c7fe7ff1d8917a6c4b0ec19c4d59d94e774adb944013c6762dd1c9be4f6f00008e4c1c6d47c14e853c9d7720f5d0cd63ce80a871c80647", 0xbd, 0x4000001, &(0x7f0000000480)={{0x3, @default, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r3}, 0x38) setxattr$security_smack_transmute(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x4, 0x3) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './cgroup\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0x163}, {&(0x7f0000001280)="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", 0xdf6}], 0x2}, 0x800) 5.48293168s ago: executing program 2 (id=728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(0x3) syz_usb_connect$cdc_ncm(0x0, 0x10b, &(0x7f0000002ec0)=ANY=[@ANYBLOB="12010003020000202505a1a44000010203010902f90002018100100904000001020d000008240600014104b105240003000d240f01ffffffff0300fa760306241afbff0295241307884e71fcded68ebe386c50c40d4cb54ce909058858b7f435145c8e2a123766f9a96dbacefbf4db8316b41f145012ae025024fc0e9cd683d83d1bdbc884aac72b8e386e972760758ad9224b526026c0710e972b1229d6ccc7d111b949dc8f41fda7d0d08f4609fe89219d8a8d8535756dba9f7cb7e40842e4083c233e2c3858302e255c368cebbe07f057211bf362109071052414"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x0, 0x10b, &(0x7f0000002ec0)=ANY=[@ANYBLOB="12010003020000202505a1a44000010203010902f90002018100100904000001020d000008240600014104b105240003000d240f01ffffffff0300fa760306241afbff0295241307884e71fcded68ebe386c50c40d4cb54ce909058858b7f435145c8e2a123766f9a96dbacefbf4db8316b41f145012ae025024fc0e9cd683d83d1bdbc884aac72b8e386e972760758ad9224b526026c0710e972b1229d6ccc7d111b949dc8f41fda7d0d08f4609fe89219d8a8d8535756dba9f7cb7e40842e4083c233e2c3858302e255c368cebbe07f057211bf362109071052414"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 4.058639959s ago: executing program 1 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000062a02, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0xb7ce0000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00000000000000000c000200010000000400000004000480"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96557917d5d82cebae9347436de2ace2fe9fa5c4"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000881}, 0x4004) 3.822830314s ago: executing program 4 (id=731): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5891, 0x4d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0xbf, 0xc}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x1, 0x7, 0x2, 0x20, 0x7}, 0x4a, &(0x7f0000000240)={0x5, 0xf, 0x4a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x4, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x8, 0x6, 0xfffd, 0x65}, @wireless={0xb, 0x10, 0x1, 0x4, 0x27, 0x6, 0x81, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1f49071db225352f20b4abdd5dbe6d3f"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x5, 0xff00, 0x1528, [0xf, 0xffc0c0]}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xcd, &(0x7f0000000300)=@string={0xcd, 0x3, "b4e06a333b92b45ca78624555fadff105058613fb8d9c6d032148e4fca08e8c56319abb0cfd0b2051c9954c489c4a62d985f8f07714c621d2ce468f09a3876be3bf0a4ea89d1b2c10100ce85808b8f64cd33db9e8820545a1caa5de8def42d8e5d096a3a8eebd3b5700a2aa43fe836fc59b3b8b19e663f91b9dfec5cf69c795e7122eab84cda13fcc2de7b716da014dc112a73d633a465d048b65f2ffa625a45af9dd4719ae949b347671d9b1b15b293086367abc4e049dab8dd94ef2a794e240f03f01e0e4f2d2b7c6025"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x413}}]}) 3.680658221s ago: executing program 5 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301", @ANYRESOCT], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) splice(r0, 0x0, r1, 0x0, 0x400000008000f28, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 2.158593356s ago: executing program 5 (id=733): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x618c00) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xe0, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x1d0, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0xaf, 0xc, "6d638540811b5c936aeddf8491b436fcda1d86d13705e9a40731bd14ebfd3264351bf728479cb62722bb7f3d716b0757512d07ac351e0f93b339edead6e473670f88bed7ce134850e4b5509b77207c0d23d4831cf5906fc1e87e4bd657abaf8b526f07717d0fccd335b1cda2774686edc9e3001286eee77aed1a9ca48e4fb1120820893b96665e4554547a3f07a2c43ae3f2ef67c4fa56087d4c26d11c694f800062b95e58ab6e1a723a83"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x102, 0xc, "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"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x204, 0x0, 0x0, {0xa, 0x0, 0xa}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x278}}, 0x4048010) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) 2.01487322s ago: executing program 4 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, {0x306, @multicast}, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 'pimreg1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) close(r0) 2.01183721s ago: executing program 3 (id=735): syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@code={0x1, 0x94, {"66baf80cb83053c480ef66bafc0ced66baf80cb8122ca188ef66bafc0c66b855ec66ef0f01c3670f21948fa91002b300000000f0219c7467000000c74424000a000000c744240200000000c7442406000000000f011c240fc79d2c000000b99a020000b8d8000000ba000000000f3066baf80cb880319e81ef66bafc0c66b8be0066ef"}}, @uexit={0x0, 0x18, 0x6d1768b}, @code={0x1, 0x53, {"67420f1c02660f3882950b00000080c90d0f01c20f200366baf80cb80a55298def66bafc0c66edf080619fa3430f06440f20c0350a000000440f22c066440fc77741"}}, @uexit={0x0, 0x18, 0xf2a}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x52, {"3647dd90020000000f01d14a0fc76a1db805000000b9000000000f01c1673e410f01cfc4a17d29f6660f38388600380000c4e27d39fa460f01c9f746009bf40000"}}, @code={0x1, 0x5c, {"360f204166bad00466edb8010000000f01c1c4011cc2e90766baf80cb8ea231e8eef66bafc0cb000eec481f97fbe68cf000067440f30c4416812ed26f0f790794a16c1400fc7b600800000"}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @uexit={0x0, 0x18, 0xf6}, @code={0x1, 0x55, {"c4627d0eb8b1000000430f9066606766460fd628460fbf76a96726660f3882916b8900002e0f01c96467450f9782fa000000400f01df430f005e0dc4814deb91b205baf9"}}, @code={0x1, 0x42, {"f30f1b3766bad004b00deec461e5d4fa260f2080410f01343a0f01df260f062e0f0130c461e55f1d00000000c462fd3113"}}, @uexit={0x0, 0x18, 0x1000000000000000}, @code={0x1, 0x7e, {"c74424009a000000c744240204000000ff1c24440f20c03505000000440f22c03e2e0feb28c744240000000000c74424020a000000c7442406000000000f011424c442793042836566460fc7323640d35b0c66bad10466b80c0066ef66ba4200b0f7ee66baa000b80e000000ef"}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x54, {"b9a30a00000f320f1ee445f4450f7875f13e0f0fe0a7c4e22991ac5201000000652e66420f38811b3666410f38358a06000000c441e8c29f000000000bf30fc7746843"}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @code={0x1, 0x4e, {"470f01c444f48f486097658d3036660f3a08ea0065450f01c366b81d000f00d066baf80cb8d194a784ef66bafc0cb000ee36400fae210f9078060f20c0"}}, @code={0x1, 0x4f, {"c4227d5ab43d3bb400000f01cbc44119f5d0460f01f0b9800000c00f3235000800000f300f01cbb9840500000f32660f3835557146da3366b821000f00d8"}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x74, {"66b821010f00d066b80b000f00d0f466baf80cb874c15085ef66bafc0ced673ef2460f598901000000b9ec0b0000b80ff5f437bab79f8e5b0f300f20e035000001000f22e00f23adc74424002b010000c744240200000100ff2c24b8010000000f01c1"}}, @code={0x1, 0x64, {"66bad10466ed0f01df0f011e400f20dfedc74424001acd0000c744240259ff0000c7442406000000000f01142466baf80cb86c689885ef66bafc0ced470fa319f30f0966baf80cb876d1498def66bafc0c66ed"}}, @uexit={0x0, 0x18, 0xdcc4}, @uexit={0x0, 0x18, 0x67}, @code={0x1, 0x6e, {"0f01c426660f017ebb400f06c744240072000000c7442402ff000000ff2c2466440fc7b6008000002e2e2664410f3066b838010f00d8c481a456d448b805000100000000000f23d80f21f835800000600f23f8643e460fc7b79de315e6"}}], 0x5e9}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) 1.878662492s ago: executing program 2 (id=736): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190001092bbd70000000000002188000ff03ff000010000008001e80"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e30000005215d97010e876774bada39b6c7825237a470bf4ff864e4e9b949afa40cdf5544a6b92327953d5d80aa706106eab137937046ffbf3a6cfb658f8295e115f0daa4d7a0e3630fd7fb085bb70249ff2bb9914ed71ea69d1c06034b05872", @ANYRESOCT, @ANYBLOB="010029bd7000fddbdf25090000000c00060002000000020000000c0006000200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = fsopen(&(0x7f00000002c0)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) 1.876788725s ago: executing program 1 (id=737): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[], 0xffdd) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000ac0)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000008000"/28], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_open_procfs(0x0, 0x0) r5 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r5, 0x5411, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) syz_usb_ep_read(r0, 0x5, 0xb5, &(0x7f0000000080)=""/181) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) 1.867068863s ago: executing program 4 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xc, 0x80000000, 0xc, 0x10000, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x7}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x100003, '\x00', 0x0, 0x0}, 0x50) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x5, 0xfffffffa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x21}, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003040)=ANY=[@ANYBLOB="3c02e4e5", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf251200000018000180140002007665746831000000000000000000000008000700fa0600000800090002000000"], 0x3c}}, 0x4000854) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x0, 0x97}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="187f0000000000000000000000010040b7080000000000007b8af8ff00000000b7080000001000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffefb}, 0x94) 722.205821ms ago: executing program 4 (id=739): clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, &(0x7f0000000140)=""/114, 0x72}, 0x7}, {{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000380)=""/218, 0xda}], 0x3, &(0x7f00000004c0)=""/85, 0x55}, 0x5}], 0x2, 0x40000041, &(0x7f0000000600)={r0, r1+10000000}) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x22c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8004}, 0x4080) connect$unix(0xffffffffffffffff, &(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000a40)={0x1, 0x1, 0x9, r2, 0x40}, 0xc) r6 = semget(0x0, 0x0, 0x1) semtimedop(r6, &(0x7f0000000a80)=[{0x4}], 0x1, &(0x7f0000000ac0)={0x0, 0x3938700}) r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000b00)={{0x3, @bcast}, [@bcast, @default, @remote, @netrom, @bcast, @remote, @bcast, @rose]}, &(0x7f0000000b80)=0x48) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000bc0)={'pim6reg\x00', 0xd8}) (async, rerun: 64) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000c00), 0x117043) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000c40)={0x1, 0x5e09, 0xfffffff3, 0x0, 0x12}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000001100)={&(0x7f0000000cc0)={{@hyper, 0x4}, {@local, 0x1}, 0x400, "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"}, 0x418, 0x5}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)={@map=r8, r8, 0x15, 0x4, 0x0, @void, @value=r8}, 0x20) (async) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000017c0)={&(0x7f00000011c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001200)="00849d89fd6edbcedfae8a7be0072514eaf10d36cd6588092672e01d4d70b29ec3feb620fd883c23867e1d505e69e204eb85c8e9306f3f08bcd4cf95bddeabec19ef5054e65ac90550cd64da68feb85621343bba54538624420e6d883bdd77da125159912522055be088f354b2ec1e38e232e7d170511a7133d75589aa2c8c144a58c88d5d9b1690076deae023cce0ba258d5a39ef6f899508f42a58b03bd733e34aa34c286091270a1db700496918eb92d0900c16", 0xb5}, {&(0x7f00000012c0)="b24664d8c414e830191311c24d852b504f34297fbfdf1d596432f8294ec5c3846d7b26d013eb9e48cd57aa7d352be4ae9c23274ac55ea662c668ba3dd7317288d97c61cb10fff194bd93638d3acccba9d9195b3d4fb3e74ad57771f75542797b4a54c688ec08ee95618a85439dfa0e289061459d013dded6a5176d8ba72f262252587f69b3058a49d7ae245d06ebeca89c1b2882905bf384", 0x98}, {&(0x7f0000001380)="ed8ee64967437d9f79cb1672c38f9a98345c5455a0186094e775e07d188a8f733a7cb2b667e9a9cb78a2ad2c2c16d127248e5fa2ae1a06c130f42ffe7dda0f335126cc31bac89eff575387ec51", 0x4d}, {&(0x7f0000001400)="bd96c6d5f0127e7bb878f0318912dbe70cedc033b076b9494cc24a889e45bc9751842516ad47431aaabd604c141925b88161db9835fec1399ee214c1e283f78ff9c1934b8bf30067ae2c165314a84249c998721c69ec44956633d29c699bd0aeb44756e7335eb0857bdf3b7c378a2f64389b6d77d0281c33f05759cb1e77d4e74c25323a66d622d64d1c196c6cf1f30c62346afc28c80c03b668542cd680ef30dd88e662740344d085d13c24f3ec5899c8b3f266ff461c01ce631c10f30845314b5b69b42816cef88080f12b5cb49dd06699e45e7c12f87de157277f4117", 0xde}, {&(0x7f0000001500)="c3b8d63ce607fa2ae185b117b2dfbb5894ce675e83ea9c7e0fa01c176c2b6419abefd282882c7868560bdd0e8526af32101dea18ff8007b696efcb43db6c6d0c2ef21b13396a0dfc39e1826ad02d8e08a29e9749859dccc5d64a75976de1b2151c776ba0a3e9a25c6bc3cee66fdd317f69", 0x71}, {&(0x7f0000001580)="801d5817ea044a375e4c8f712a29992686a345decf4bbd2f3a2cddc5d3a2ef997ac388498fc76c964b9bf1b2bec6bec604529bf2d074b22f5170fd3612e9b6a8e2fcf3e938bb6139c39b71428e1818994cf057", 0x53}, {&(0x7f0000001600)="b7f33e3a2c070efa6e3cf06410e1", 0xe}], 0x7, &(0x7f00000016c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x73}}], 0xf8}, 0x20040184) (async) r10 = dup3(r7, r9, 0x80000) ioctl$SNDCTL_SYNTH_MEMAVL(r10, 0xc004510e, &(0x7f0000001800)=0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000001840)={0x0, 0x0, 0x5, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x28}, @multicast1}, 0x10) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000001880)={0xffffffffffffffff, 0x0, 0x7f, r2, 0x8}, 0xc) ioctl$IOCTL_STATUS_ACCEL_DEV(r10, 0x40046103, &(0x7f00000018c0)={0x880558bbd5a61b29, 0x2, 0xfffffff8, 0x43, 0x2, 0x4, 0x18, 0x2, 0xe, 0x7, 0x80, "0af206745cb41d6ee4f8a82636aa25840a7984f3efe5e2d0fbf775bfa416551f"}) ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000001d00)={0x2, 0x1, 0x13, 0x1f, 0x10f, &(0x7f0000001900)="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"}) clock_nanosleep(0x4, 0x1, &(0x7f0000001d40)={0x77359400}, 0x0) getpeername$packet(r8, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001dc0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r11, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x84, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 637.91874ms ago: executing program 3 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8e}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8e}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) (async) 514.467289ms ago: executing program 5 (id=741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000004fc0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000083a00fe8000000000000000000000000000bbff0200000000000000000000000000018100907800070006ad3b4cc6d0af05f9ef431d8229e05cce50801436e3122fb80e39247e4066bb990d63e58a3e968cde2e97ad04c9f8a78d881fadd4047502340d932c795ba5e6f20ecadcf1a881ae6510ae454dc5cdd0cf461d80ae98723dc48bbef1dd0789899e961f8d74b1d79631b5f502ed828af8b9c4f0ae58a85b3c5f5fa22b1c66f3b47f4e2f6277501c008816516769"], 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000440)=0xffffffff00000001, 0x12) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r7, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000180)=0xd0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r9 = socket(0x40000000015, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000480)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/207, 0xcf}, {&(0x7f0000001680)=""/217, 0xd9}], 0x3, &(0x7f0000000400)=""/39, 0x27}, 0x3}, {{&(0x7f0000001840)=@nfc_llcp, 0x80, &(0x7f0000003b00)=[{&(0x7f0000000500)}, {&(0x7f00000018c0)=""/110, 0x6e}, {&(0x7f0000001940)=""/148, 0x94}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000001780)}, {&(0x7f0000003a00)=""/233, 0xe9}], 0x7, &(0x7f0000003b80)=""/223, 0xdf}, 0x16b9}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003c80)}, {&(0x7f0000003cc0)=""/57, 0x39}, {&(0x7f0000003d00)=""/119, 0x77}, {&(0x7f0000003d80)=""/204, 0xcc}, {&(0x7f0000003e80)=""/203, 0xcb}], 0x5}, 0xd1}, {{&(0x7f0000004000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004080)=""/7, 0x7}, {&(0x7f00000040c0)=""/24, 0x18}, {&(0x7f0000004100)=""/173, 0xad}, {&(0x7f00000041c0)=""/211, 0xd3}, {&(0x7f00000042c0)=""/208, 0xd0}, {&(0x7f00000043c0)=""/139, 0x8b}, {&(0x7f0000004480)=""/113, 0x71}], 0x7, &(0x7f0000004580)=""/248, 0xf8}, 0x4}, {{&(0x7f0000004680)=@caif=@util, 0x80, &(0x7f0000004800)=[{&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f00000047c0)=""/58, 0x3a}], 0x2, &(0x7f0000004840)=""/179, 0xb3}, 0x3}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004900)=""/188, 0xbc}, {&(0x7f00000049c0)=""/202, 0xca}, {&(0x7f0000004ac0)=""/171, 0xab}, {&(0x7f0000004b80)=""/219, 0xdb}, {&(0x7f0000004c80)=""/103, 0x67}], 0x5, &(0x7f0000004d80)=""/96, 0x60}}], 0x6, 0x1, &(0x7f0000004f80)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r10 = open(&(0x7f00000000c0)='./cgroup\x00', 0x141080, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000300)={0xa, @sdr={0x49323159, 0xe68f}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x3, 0x2}, 0x10) 506.398647ms ago: executing program 4 (id=742): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc88d4) socket$inet6_sctp(0xa, 0x801, 0x84) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) set_mempolicy(0x3, &(0x7f00000002c0)=0x9, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xf84, 0x123000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000180)=""/135) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0xffffffffffffffff, 0x9, 0x100000001, 0xf, 0x80000006}, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @empty, 0x0, 0x0, 'team0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d747a3b2be34f8c0809a2d0e0c3e83db33055f35201078241f18c41298e8d27fae15db83081df04c2233cf6aeee560a70da700912dad2f5d5111750464582601"}}}], {{'\x00', 0x0, 0xa, 0x98}, {0x28}}}}, 0x2b8) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000000c0)={0xa, 0x5, 0x100, 0x4, '\x00', 0x7}) 361.015832ms ago: executing program 3 (id=743): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0x8, 0xa, {0x7, 0x25, 0x1, 0x80, 0x19, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3, 0x7}}}}}}}]}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000060c0)={0x34, r4, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x7, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0xb, 0x0, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x20, 0x8000, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x9, 0xffff0009, {{0x2a, 0x4, 0x1, 0x2d, 0xa8, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xdf, [@empty, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x4, [{@multicast2, 0x80000001}, {@broadcast, 0xa243}, {@local, 0x2}]}, @lsrr={0x83, 0x1f, 0x1f, [@broadcast, @empty, @remote, @loopback, @loopback, @rand_addr=0x64010100, @remote]}, @lsrr={0x83, 0x17, 0x15, [@multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @loopback]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x1, 0x12, "e7eb38e9386338d9a58be6a50d23d7dc"}, {0x1, 0xc, "0dfc8e692dcc2a963a27"}, {0x0, 0x8, 'WKJr|T'}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1d}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x3, 0x3, 0x41, @remote, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x40, 0x7, 0x4, 0x3}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x180, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x180}}, 0x4008c90) close(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x375b}}, './file0\x00'}) 232.017044ms ago: executing program 5 (id=744): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x17, 0x114, 0x2, {0x2, 0x7}}], 0x18, 0x400c8c5}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x4, 0x1000, 0x1}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) (async, rerun: 64) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x4, 0x1, 0x0, 0x0, @sint={0x3, 0x4}}]}) (rerun: 64) 126.619528ms ago: executing program 2 (id=745): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x3, 0x280000) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x12, r0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYRES64=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x7, [@struct={0x8, 0x4, 0x0, 0x4, 0x1, 0x1, [{0xe, 0x2, 0x1}, {0x3, 0x4, 0x3}, {0x7, 0x5, 0x2}, {0x5, 0x3, 0x3e3}]}, @enum={0x8}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x69, 0x6}, @enum={0xc, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x6, 0x8}, {0x0, 0xa}]}, @struct={0x2, 0x3, 0x0, 0x4, 0x1, 0x5, [{0x1, 0x3, 0x7}, {0x1, 0x1}, {0x5, 0x5, 0x47}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/172, 0xd7, 0xac, 0x0, 0x5}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x84}}, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socket$rds(0x15, 0x5, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "a171dbaaf043311f7d666624e92fb0d2552295f9891527548e9c482e5a24bff72d42c46dd353398df71e03ac06d42cc54ebf7a690b4fcb7b8e9081d34e6699b27f916e7193d3b52eb55c2aa1876c85609693243ca36b2e7cc8dd65936acc653287161c0bdcbef41a8d26f3242dab5a231e6c152c5fd33daad749d45b6d1ca4c382905e7a1a641bbbd298c7cb73b6336671c6286ebf43040b39a3ffcc41548208537d31a3c0ad2ec3faf74107d1865e40ddd6ba03e1f055e28cb0f6930d452d54b1e0a7083763fa78fc49b468a2331939bc8ca6c4a578416291b817654566e7379ab66c9fd2ca09003022d7fe2db76ecd5f5f914251517902976d458d176e64e36e1a12d6012ff3e5fc05278f3e4af67a5481ed66aab991baae8d846444950e4b7913144c3029f361f6025e8e5f60b84561ef017633d7e5aaac76c052e3df8a1773bcfd8358bc4dd5d99ee4e201cbe2ca3c78601ac18c1bc619ec91d1bbf67bfefd62e414c14a298a569dce8ca113cdd0f1257e316327481078ced8aa21b1d0a91cbe943ea74c0465b076337ebeb6690199dfc63e22ea3f0e31d6a268c8bd6d8a0983f7de4b617d13add3c0400d7480245ace1528d46a5f3eaf3be33a889c480b77fe05d332a829b7e433162a18e4994825d0c799679e5747fa547d7acf54b49d77716cf2ffd3fe5e41698c65962579e8de962bb96d0a1924dc1791d267c54b8a3efbb3af721e2ae29d86724f7259e95b128e6a22e0ad287d63bf7256465426858ace50a2d630e1e5d36818ae63d49e8acb929b83565f40edfadfa80d253bc40ff4fd617901ed09726d44324a351e94a28e52acacfba95945050c84b44f6f3b833c1823515df2ab992d80107b016cc8d121925b6e2ae99eb8269fcc29b1600afb13b69252849cb53f2f7c7adf7f4d771e6896279f8d72c793f6314982e55768e89307505a11d718f56b5b7829d54d1e031d2ec09b497ade45f113672a0c73a7073b77daf1e6c985ec65a26010e5e2c066788c2a65a66f530001b98e8347bca71bd9844ae2fe825929e0c220f03003bb25649fdf2b3504df37014036cdb9182dcc650f3aeb679ccd141b1d1e6259c5052861f9fe949fc801b792931a7f94a0ae9a3bba97a285da2624c61827158a5f8de3123092f61a1793729eebce5d154a0c394037316d4d5f607010d1ddd6c49309236f853fb2ca7aefa0e0b3d149b89a0203bca028aedbef8f554a2d9bc2ff46ea8f05297ecd0beead5a27b1e5541110b742e435df8b971e4b94ba842d2b8a69a66cea142dc62a6a4762b6efce5dbf0965eada661a805bda48a132da134b4dc722a561f32112e62d9e32e1fd2d3320504b1c65024281e5730435e3c09f083dda44992db9a93e192edafebb3d4d81c2b68bdc250ccad2b1abd5037634374d3ab0be40fa9fc26dcc3e918a00832be8ae9e8dc4a95c7e2b8cb3178d0ac1814442393d889b7b370e56c6da7c4ffe58a6fea2d07c2667cc313dc97fe5eaa9bd33642de9d36b0354fe40dd2221794393f6693efd05557e2292c91876d4db2a5064828f32ebcf6cf09f7867833c88a1a4449b0f1e481f2234b2d1f55c8c27520244a3a2f5159127c3085c036cf314bd83e11725cb745e55cb54feecd481c23f604829b09a82d47fb835ebd80b4573639153674e799a694b8e2eb433ddb4a6e839047c53abf33d87121629b51f4eadb78f62bb894b5fbd84457f0492c7ccb2f1782fa0e9216daec1706c6b832b2ad4afe9516948d5574fc00b2edace6e097a361dcccf3ad4f4734cab5745793fcb34c0b71da5a29852484afad345e533fce678ac0035cca1abf269f7c7a66bf809a072eb8db7ea4178ff756d1dd7dbb33f1faf0f3d88bf09480950cc73a190c9809e792d05f00c48c257b5e652819a0703e49934c4f9246361a535aa5896a94f771412f80a7db05c98fa0958583b457c9f5aa603fd0aa13780411eb7d47ad2acef2041d297e4513d31d028ca49e38228330b3cd20d41a508dda5f04ce66c915e726c919c759335e9dbba06ed06954c491b16503a56e67072e820a9fe58a8a3d4bd687832f29e7f5668946535ed05b90b6a7b497a8ea8a51950883b51506eb1ecee7e98468a3f572b06a28e4c088ab617e6af01da73ba0fb4bf6b7c863698223024f84994dcd63524af5a8dcd07328d1a72a6480b05e5c747f945695de101e41714f914accd5181e807ae34ebdc3aaaa0dbc9407a2967fb836e32a9b3864cb1da6e7d6c31d2f3149b2e54d3237e1e769440b5d6c667b5af4d42611922b391122407860f81e26287e80cbe2360370bae365a3996563a43ba38f7133218ae1e16c2cb9eb24d02a0da1e5ee70e4ff49dfab89799de7536c4cd24a83424270b2706a3a2779f323c4b3eaa5e5bc88216fee2663a9cbcf51f04c620b947aaa5656e1988d1bcbb95d66505b9910b555ccf4e0530fb0f6abcd5959494e890576e92f172ac2028fe2b91b4741977a65490503c4233af2edfe16f3adadaff865bc438e095fb8b4a415541c134aa1e0bf9ab3b6976d7d70d324d102f812862376ca3f6bc52dcc72935abc78e3027057e8be96173c8b0c90672434cb673ee97c81ea0566066d5748bb291e4713d53d32e3ed78e54babb54a59a38000cc8080e7a002b68f75d42c8006df46b0a4e01958d5ced6898c50f0b803310b7af0433db76b5eb06a204b7d7cd25230e258433386d8050f08ad155e17baef0d6c1a92327afb481f085677b5710c6e365420d8f7c5e1a77a8a52e09873bab632c60afa05093062018bf4e5a7b4c94c673d0615f1bc2a003e1abeab8e378c0b99f779d85fab0c229d6a2faf5503de101a026d2c664115aa1511419a5b75cfb0c6c36bd51be67f23afde19bb59f40cb5474a523b5940573625a8429b112dc84973bb2331ccbc7095254de3e333f4f3f25ec9086eabdc76d5aa9afc7bd5711a3c3536ca780af41cfdb57135fb72f624cfc82a4e179912615272b0c784d847665264cf426fcbe50b57470b185deb49d39770e353178629c47085ef611d0e8100c72d933524747ffea3def4cafda081f2c006138980be10f619226b142e08117474e8b09a8f365e221079ca16440d34dac80e4eb5dd778fad232a06719a7312ed72e9814904ff19581cd08bbca369097bd8dc6b449bc5e74f33d2cc7f6a99311a3cf0a2e0858724edb4e21f86db65795c6c2597a96fc6d09ffb6c7d15a928e2eb218c66e4b7bfa883866c858b8bc1c568e3758abe11bad87ea0839e048d6515c36eb593ac5ddfd3fabd9d0730dfb6ecd715bfc406bc5272023d8a1590f3a43aa0b15ba81246e7b1535ff4b1b5be7e5563c3478c8861f2704d120189a460fe60e43bc365c7ee000edeb4d07c0080397c5cba7e8809e4407b8fbf0dee6885dece6eb4aa6905e93afcf403ec5b0d2d9f91ebcd300095a57c6d2e84cb1b7fd78e07b6279b6d52730d300b0b8f38d86b66b34a92cc0c85c7c21a4b9b05c575db8e56d86ad8cadf36c5278263a2afda9e2a79e224238e61625dd4e83e965cdcad5b6c4a7743dcae724321460fadf307fce76b835b1f48f6141c6f39ecbd8f34d4e3105869c84029dbdab218af03c2e4cb1a25512185ad3fdc7d91500e10bf66140f7c7babb98074b31aeb3a702c8883ac323e623a9bbba99e19f9d428d84bb2cf1732e8711d29ac66675e94afa7a9c4f5f7724abac3c8c478980d6b6871365c11343e162a86b35194586193fcf02b34fe64fb163b7615a1212e6744f45d231721adf1c5d06591c9d690c100b4fcf1c19c8ac2c0bd7da2d7b1c5a1d29eaee8c6e29eb9de20f3fa88a0a9896ad405f116f2cda2d77e51d984fb956e927dbc46bda0b2cd05af620e6c51bccd6182a61e23611561fe495e3bd2556089a8184313bce92f3b310fb768b2e5d25c78c723515a7d3f5e3c509acd5d6c93393a786ab211000e6be07c0bb9d82c723e7fb3b6d3d34209cde856a87e1d915b87e542a5756d57de07983aa2dea22ef5d5be3089cd62df2d7b5558070e1c3aaa6a2f1d4cabe32ced4c6b52dd7c4130c2f7aec6385f171838739f1e08b6996336f75a011cbd52edd8e2a3c711a87084212b83c7edfcb21dd6ad218ba544c50c7cc712279af4a8aa042859cbdf227371051914d1fb9e02ce0e851775a47c5e1c58a2fe9aca9de575c72b841c559ff9cf631901c74054a74547f27d25ad8c6c8b10e6ab6c5daa620553b1ee9ae429b794fa642372f9ccd6e72d1f8784377be2bcdd4c7c7f710ea3f22f741698b264250d52549d846350315c7b0af871104d0e2f42f0d143d2a338e884e585c7cdfd406aac9e44b9a1432d87c358febc7891719a46bdd975792caf61a8e228b11187b4d2b8edfb87e2801387d1b02bcbc914310003de14449d666abe3b77f29934b5705f6be069cd005498da9860977aabd3905d900cd46c557d340a3890dd675e328264255fa66dd401787d133a0439744184fe15812994875410c19a5248eb1c19f7efe7b7474ea01ea0dad86662f58788c08d7ae931fd2dbe5d1a00f6f624af40d2c57afd4296449f83ece811e647d52a0891ccde7172fdac75db835e1d03d8ff20b4fcb4e3ab879298d70069fd54a0955ad5fc3f58709600ee74e8e2efed25f142837dee01796142ab2eb4e031944b9a25eaaf24f33c7d2a32c006592bfc7ba8fdb7b8add4d744f996069b5c63d79142e8d5d93f1bf1006ee3d044c8f860bad4f33e57b8407f939c8db4c3973b86ece3ed256c60f63eabaf6932b312cfd3348bfa135c8c9537a5e7d39a1c67c89d66921213989668d48f1164973678dca33473f0129c1fb09b3028bf3dc810f785e56bc3edfc0aa25be331695674ab74b70826707ac3c3b1b351ea234e3cefba5fe92854a24a06c483ea933b8e2743c93071c8c9937529af7a4c44c6958da0050edb38b419ccd50e6f53a77d6cdf9be8f7f055be39bd50966f7fbfba4c78b4e9c248adfb9d7c0edc7e90203c9cff5a35cc8714165fff1111540ea8defd09f0688469741dab266c88dc0756b8725a48fc9724355988f3b0fc4391147f7ac2837ec978d8240eae640a3271a6fee9b879e747f148d7d339fca205cdd75600ffcc5d3fdcad91c08ad427c18e378ebd38ea3fedeb11f14f89f9f5599edd0be44dbb83d02032ab4d043dc077eadec0588f922f968aa6fcbea1dd501a17ac9927e025354544b60e46d0758539c7df8a582ff0c2090daa4e8ccbe79284ec06c93b1690773dcb49368458e8184f19cca86eb62f88ff056987b092b3d3c4d8736dc3eecece651402266990498604e7704eff265b0763316dacd9796332d260dc148096e3d55d497543d3bae6e51dc3807154aec1aff5dc408de344b34d8c8d410b1503625fbd5547a18139310e3f026bb2dfe4001507d54c3988987"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000004c0)={{r5, 0x4, 0x0, 0x1, 0x9, 0x4, 0x7, 0x2, 0x6, 0x4, 0x5, 0x7, 0x1, 0x2, 0x6}, 0x10, [0x0, 0x0]}) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 115.340712ms ago: executing program 2 (id=746): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="e00000001300010000000000000000004015147f4729d72384a65b0f683ca0a21fdf11444d00000000d961bdc2e3267150aaca5d87ea3a2db872f6a704000000000000004f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed"], 0xe0}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="8401", @ANYRES16, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001"], 0x184}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3b89960, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x2002, 0x39) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$key(0xf, 0x3, 0x2) r6 = dup(r5) accept$unix(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 107.249372ms ago: executing program 5 (id=747): getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000740), 0x64082) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'erspan0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x3, 0x4, {{0xe, 0x4, 0x1, 0x17, 0x38, 0x65, 0x0, 0x9d, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp_addr={0x44, 0x24, 0xc8, 0x1, 0x6, [{@empty, 0x500a}, {@multicast2, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x8}, {@remote, 0x4}]}]}}}}}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x2, 0xffffffff, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x6, 0x8, 0x401, 0x200, 0xe81d, 0xfffffff9, 0xa000, 0xd, r6, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000980)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000cc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b80200001600100026bd00000000000000000000000001fe8000000000000000000000000000bb4e2300054e24fffd080090a02b000000", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="00000000000000000000ffff0a010101000004d63c000000ac1414bb0000000000000000000000000400000000000000ba090000000000009001000000000000140000000000000002000000000000000900000000000000530e00000000000004000000000000000500000000000000cc0000000000000009000000000000000600000000000000ff07000003000000080000002abd700006350000020001001000000000000000030000005b000000240009003c00000000000000030000000000000007000000000000000600000000000000bc001400626c616b6532732d3136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800300000001000074fbc78df3cbff0949175c68f9564397f1baebd13d666ca3be9b6f43de1106c51b6d95dfbd72d80321e41df32e7ada405c9e2f03579f6017bb70e7b855b5093505701a9bed03d5f87fcdba412d28eb2ed0566df534bfcc9259483e59c9f652cef863aae94493b056a623927481901cfa050019002b0000002a0008002600080000561e008ec817eb24c118bc2ecd94491d1f6e1ca6e52c77e2fe0da363a75e8293640000ac000700fc010000000000000000000000000000ac1414bb0000000000000000000000004e2100004e210009020080003a000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="018000000000000000000000000000000700000000000000b377000000000000020000000000000003000000000000000100000001000000ff07000000000000f6f8ffffffffffff00000000000000004f550000000000000100000000000000ff0f0000b76b6e000001010200000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r8}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) io_setup(0x66f, &(0x7f0000000140)=0x0) r13 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r14 = eventfd2(0x4, 0x803) io_submit(r12, 0x4, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xc, r9, &(0x7f0000000200)="50cb21e568b8205df8510a33f0c3c196d7637048ca6060ce230c31cd89406e0fac13e35ce7725e6206972b825e76a3a739a73b18f7a8292060495ba6f33f4d9c484b1d5436cc8c7376258b285389401e556275d0a8b6f72e82", 0x59, 0x9, 0x0, 0x0, r8}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x7, r13, &(0x7f0000000380)="854ad1e02d6a7e843d8e9c4daf295c44cabd3f17aa23d461340942862ceb544698f014adade0a10acf1f851c13bf4f2fece8a73189bbd5a774a629fdd862a307d45ccb7bb7f2ef3e61cc61d3b835cd968a6beb2f89c634b6bb15efa5859bb1f41e42277f77c549095344f24de9a961663d7cb9971cea8d53d4f67becb023ff6143a44f09f346208c6cd457768b4311bd10eb56904dc461514693335bf90337d6b5aef7776b1f77a782a3", 0xaa, 0x8, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000440)="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", 0xfc, 0xfff, 0x0, 0x0, r14}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000680)="ed49d0562591ae5d053dc500affdb56af72d9bc73d70e68d0b9d91decc479b5f4b8a2ab4b61d187759", 0x29, 0x3, 0x0, 0x3}]) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) 0s ago: executing program 5 (id=748): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047105bc79e0b9971bcbedac0eead49dbecf96eebb1fd", 0x4b}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x110, 0x22c01) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_adjtime(0x0, &(0x7f0000000040)={0x8001, 0x2, 0x14, 0x7e, 0x9af, 0x7, 0x4, 0x5, 0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0xce, 0x7, 0x9, 0x5, 0x10001, 0xb12b, 0x0, 0x7005, 0x1, 0x6, 0x8000000000000000, 0x3b30, 0x241f}) setreuid(0x0, 0xee00) (async) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x18, 0x20, 0x76, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x50, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0xe, 0x9}}}}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x18, 0x20, 0x76, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x50, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0xe, 0x9}}}}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): ses=4294967295 subj=_ pid=6788 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed43d8ebe9 code=0x7fc00000 [ 149.447813][ T30] audit: type=1326 audit(1754914824.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed43d8ebe9 code=0x7fc00000 [ 149.473960][ T30] audit: type=1326 audit(1754914824.908:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed43d8ebe9 code=0x7fc00000 [ 149.502932][ T30] audit: type=1326 audit(1754914824.908:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed43d8ebe9 code=0x7fc00000 [ 149.548346][ T30] audit: type=1326 audit(1754914824.908:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed43d8ebe9 code=0x7fc00000 [ 149.637208][ T30] audit: type=1326 audit(1754914824.908:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed43d8ebe9 code=0x7fc00000 [ 149.836989][ T5985] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.337727][ T30] audit: type=1326 audit(1754914824.908:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed43d8ebe9 code=0x7fc00000 [ 150.359234][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.432490][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.479691][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 150.527348][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.547523][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.558976][ T2911] bond0 (unregistering): Released all slaves [ 150.571721][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.586368][ T5985] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 150.596319][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.617454][ T5985] usb 3-1: config 0 descriptor?? [ 150.627031][ T5985] hub 3-1:0.0: USB hub found [ 150.798890][ T51] Bluetooth: hci0: command tx timeout [ 151.230000][ T5985] hub 3-1:0.0: 1 port detected [ 151.431164][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.459495][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.489684][ T6773] bridge_slave_0: entered allmulticast mode [ 151.503466][ T6773] bridge_slave_0: entered promiscuous mode [ 151.583534][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.596847][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.607873][ T6773] bridge_slave_1: entered allmulticast mode [ 151.637534][ T6773] bridge_slave_1: entered promiscuous mode [ 151.762392][ T2911] hsr_slave_0: left promiscuous mode [ 151.777692][ T2911] hsr_slave_1: left promiscuous mode [ 151.789739][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.802852][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.820080][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.828397][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.836016][ T10] hub 3-1:0.0: activate --> -90 [ 151.852759][ T6830] random: crng reseeded on system resumption [ 151.899558][ T2911] veth1_macvtap: left promiscuous mode [ 151.913905][ T2911] veth0_macvtap: left promiscuous mode [ 151.927290][ T2911] veth1_vlan: left promiscuous mode [ 151.933157][ T2911] veth0_vlan: left promiscuous mode [ 152.712644][ T6845] netlink: 104 bytes leftover after parsing attributes in process `syz.2.205'. [ 152.743884][ T6843] sd 0:0:1:0: device reset [ 152.804714][ T10] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 152.807046][ T24] usb 3-1: USB disconnect, device number 9 [ 152.878007][ T51] Bluetooth: hci0: command tx timeout [ 153.337334][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 153.380139][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 153.789198][ T6773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.829289][ T6773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.942875][ T6773] team0: Port device team_slave_0 added [ 153.964204][ T6773] team0: Port device team_slave_1 added [ 154.042751][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.055053][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.090060][ T6773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.109772][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.123790][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.156018][ T6773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.226584][ T10] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 154.946913][ T51] Bluetooth: hci0: command tx timeout [ 155.006284][ T10] usb 4-1: device descriptor read/64, error -71 [ 155.127800][ T6866] netlink: 68 bytes leftover after parsing attributes in process `syz.1.220'. [ 155.204344][ T6773] hsr_slave_0: entered promiscuous mode [ 155.227335][ T6773] hsr_slave_1: entered promiscuous mode [ 155.233849][ T6773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.269523][ T6773] Cannot create hsr debugfs directory [ 155.326293][ T10] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 155.726808][ T10] usb 4-1: device descriptor read/64, error -71 [ 156.054084][ T10] usb usb4-port1: attempt power cycle [ 156.569956][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 156.581855][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.589402][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.604513][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.612027][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.665292][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.700736][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.756738][ T10] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 156.807728][ T10] usb 4-1: device descriptor read/8, error -71 [ 156.861333][ T6773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.895538][ T6773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.991756][ T6773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.231927][ T6773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.826326][ T5986] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 157.998116][ T5986] usb 5-1: not running at top speed; connect to a high speed hub [ 158.023768][ T5986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.063560][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.070217][ T5986] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.095758][ T6773] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.111666][ T5986] usb 5-1: too many endpoints for config 1 interface 1 altsetting 4: 112, using maximum allowed: 30 [ 158.131847][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.139070][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.155790][ T5986] usb 5-1: config 1 interface 1 altsetting 4 endpoint 0x4 has invalid maxpacket 63478, setting to 64 [ 158.155980][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.174052][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.188588][ T5986] usb 5-1: config 1 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 112 [ 158.239165][ T5986] usb 5-1: config 1 interface 1 has no altsetting 0 [ 158.434372][ T6908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.457009][ T6908] syz.1.228: attempt to access beyond end of device [ 158.457009][ T6908] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 158.470203][ T6908] FAT-fs (loop3): unable to read boot sector [ 158.535615][ T5986] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.557941][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.703984][ T5986] usb 5-1: Product: Э [ 158.708616][ T5986] usb 5-1: Manufacturer: à»ï†£á¯œæ•†å²®â±¡ïŒéšºã¶½è ³è˜è©½ë±˜ï®Ú¥ì‚‚ꥴ怢틸峆䕎Л朇镤˔ߑ陉㘅í²á§›å¥ºç”®ë¾¡î…¡âž¹éˆ‰ï“—铑啃並䦺⯶㉷㶟敓愻宺à¼ãŠœàª™í‡Œï‰“ﱾᦻꂉꫢꔈ䀹ؖ㬀歄燎峨綒咩ꭞ烈ష̟鈩觑ä´ìŽŠèŒŒå­“䇽횺芄豯æ—狭홄ꔾ앓 [ 158.870626][ T5986] usb 5-1: SerialNumber: Ð [ 159.121406][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.137433][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.205525][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.217270][ T5986] usb 5-1: 0:2 : does not exist [ 159.273235][ T5986] usb 5-1: USB disconnect, device number 10 [ 159.865285][ T6773] veth0_vlan: entered promiscuous mode [ 159.883079][ T6773] veth1_vlan: entered promiscuous mode [ 159.928105][ T6773] veth0_macvtap: entered promiscuous mode [ 159.949535][ T6773] veth1_macvtap: entered promiscuous mode [ 159.981378][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.999295][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.013053][ T6773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.023978][ T6773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.039388][ T6773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.051151][ T6773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.679606][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.231'. [ 160.936713][ T6188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.975582][ T6188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.031362][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.051532][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.185105][ T6952] syz_tun: entered allmulticast mode [ 161.202703][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 161.476467][ T5985] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.656329][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.664314][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 161.677881][ T5985] usb 5-1: descriptor type invalid, skip [ 161.687840][ T5985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 161.712846][ T5985] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 161.738619][ T5985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.761081][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.769823][ T5985] usb 5-1: Product: syz [ 161.774223][ T5985] usb 5-1: Manufacturer: syz [ 161.779099][ T5985] usb 5-1: SerialNumber: syz [ 161.827215][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 161.835981][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.847268][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 161.856756][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.891490][ T10] usb 6-1: config 0 descriptor?? [ 161.903164][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 162.027100][ T5985] cdc_ncm 5-1:1.0: bind() failure [ 162.042683][ T6951] syz_tun: left allmulticast mode [ 162.181883][ T5985] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 162.192103][ T5985] cdc_ncm 5-1:1.1: bind() failure [ 162.202875][ T5985] usb 5-1: USB disconnect, device number 11 [ 162.574087][ T6987] netlink: 56 bytes leftover after parsing attributes in process `syz.3.247'. [ 162.765290][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.777030][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.026979][ T5985] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 163.084141][ T10] gspca_vc032x: reg_w err -110 [ 163.089277][ T10] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 163.276283][ T5985] usb 3-1: Invalid ep0 maxpacket: 16 [ 163.291772][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 163.296605][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 163.312072][ T6999] veth0_to_bond: entered allmulticast mode [ 163.908568][ T5985] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 164.079300][ T5985] usb 3-1: Invalid ep0 maxpacket: 16 [ 164.086465][ T5985] usb usb3-port1: attempt power cycle [ 164.440049][ T48] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 164.475180][ T122] usb 6-1: USB disconnect, device number 2 [ 164.496348][ T5985] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 164.517759][ T5985] usb 3-1: Invalid ep0 maxpacket: 16 [ 164.582318][ T7016] Bluetooth: MGMT ver 1.23 [ 164.609681][ T48] usb 5-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 1024 [ 164.621591][ T48] usb 5-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 8 [ 164.631940][ T48] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.645773][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.655649][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.664059][ T48] usb 5-1: Product: ⳇ匾蔱裄ีἱ䲃暅払蔙䆌н铪ë铮櫌켒⎉懩ó¼°å°‘é¶äŒƒä¯¦í˜±ì–•å®·å›‡â–Žë„“è°‚ë™â•‹í‘®â¦¾î³…᜚깅옣狆鋤⢊箵꯰㊅웛僬ç”î»ã¶¤â¿¢í´è‘šãš»å¶é£¼î³ã‡¶å¯¼éªœã…·ë¨±ç¦§ï´£ì›¢ç®‚ê“Œ [ 164.687046][ T48] usb 5-1: Manufacturer: ㊖儇ﴵ᱖뺤ற潅ㅶ㸾蛬ϯ￲苻ã‰åŠƒ [ 164.696413][ T48] usb 5-1: SerialNumber: syz [ 164.696702][ T5985] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 164.712057][ T7008] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 164.719937][ T7008] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 164.726957][ T5985] usb 3-1: Invalid ep0 maxpacket: 16 [ 164.732993][ T5985] usb usb3-port1: unable to enumerate USB device [ 165.143591][ T48] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 11 proto 3 vid 0x0525 pid 0xA4A8 [ 165.160655][ T48] usb 5-1: USB disconnect, device number 12 [ 165.171101][ T48] usblp0: removed [ 165.413129][ T7020] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 165.613013][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 165.613029][ T30] audit: type=1326 audit(1754914841.338:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 165.650111][ T30] audit: type=1326 audit(1754914841.338:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 165.932031][ T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 165.940386][ T30] audit: type=1326 audit(1754914841.368:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 165.969131][ T30] audit: type=1326 audit(1754914841.368:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 165.992180][ T30] audit: type=1326 audit(1754914841.368:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 166.014212][ T30] audit: type=1326 audit(1754914841.368:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 166.062507][ T30] audit: type=1326 audit(1754914841.368:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 166.116266][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 166.121685][ T30] audit: type=1326 audit(1754914841.368:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 166.158584][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.179686][ T30] audit: type=1326 audit(1754914841.368:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 166.201766][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.218198][ T48] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.237019][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.245141][ T30] audit: type=1326 audit(1754914841.368:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd8ebe9 code=0x7ffc0000 [ 166.286755][ T48] usb 6-1: config 0 descriptor?? [ 166.294663][ T48] hub 6-1:0.0: USB hub found [ 166.299459][ T5885] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 166.494861][ T48] hub 6-1:0.0: 1 port detected [ 166.499898][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 166.511887][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.535180][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.545993][ T5885] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.555659][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.668520][ T5885] usb 5-1: config 0 descriptor?? [ 166.924143][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'. [ 167.099376][ T48] hub 6-1:0.0: activate --> -90 [ 167.437222][ T7063] netlink: 104 bytes leftover after parsing attributes in process `syz.5.258'. [ 167.478827][ T48] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 167.482252][ T10] usb 6-1: USB disconnect, device number 3 [ 168.898744][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 168.904810][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 169.362964][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 169.379441][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 169.430451][ T7065] team0: No ports can be present during mode change [ 169.443569][ T7065] team0: No ports can be present during mode change [ 169.584695][ T5885] usb 5-1: USB disconnect, device number 13 [ 169.796893][ T7068] warning: `syz.3.272' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.892028][ T7073] program syz.4.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.909448][ T7073] program syz.4.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.919915][ T7073] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 170.708090][ T7087] loop6: detected capacity change from 0 to 7 [ 170.729490][ T7087] Dev loop6: unable to read RDB block 7 [ 170.746787][ T7087] loop6: AHDI p1 p2 p3 [ 170.751478][ T7087] loop6: partition table partially beyond EOD, truncated [ 170.766755][ T7087] loop6: p1 start 926365495 is beyond EOD, truncated [ 170.774167][ T7087] loop6: p2 size 116 extends beyond EOD, truncated [ 171.234133][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.244877][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.384688][ T7103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.278'. [ 171.514657][ T7101] syz.3.282 (7101): drop_caches: 1 [ 171.668182][ T122] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 171.826400][ T122] usb 3-1: Using ep0 maxpacket: 32 [ 171.833570][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.852256][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.863808][ T122] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 171.873280][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.890471][ T122] usb 3-1: config 0 descriptor?? [ 171.902162][ T122] hub 3-1:0.0: USB hub found [ 171.936402][ T48] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 172.427379][ T122] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 172.448947][ T7101] syz.3.282 (7101): drop_caches: 1 [ 172.566276][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 172.583022][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.642312][ T7095] loop4: detected capacity change from 0 to 7 [ 172.662068][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.686528][ T7095] Dev loop4: unable to read RDB block 7 [ 172.692883][ T7095] loop4: unable to read partition table [ 172.703109][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.718656][ T7095] loop4: partition table beyond EOD, truncated [ 172.751529][ T7095] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.770199][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.780474][ T122] usbhid 3-1:0.0: can't add hid device: -71 [ 172.804678][ T122] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.821623][ T48] usb 5-1: config 0 descriptor?? [ 172.841194][ T48] hub 5-1:0.0: USB hub found [ 172.860747][ T122] usb 3-1: USB disconnect, device number 14 [ 173.048594][ T48] hub 5-1:0.0: 1 port detected [ 173.186719][ T7126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.201286][ T7126] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 173.490098][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 173.621289][ T7139] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 173.635185][ T7139] Error validating options; rc = [-22] [ 173.663227][ T48] hub 5-1:0.0: activate --> -90 [ 173.800642][ T7142] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 174.009064][ T7146] netlink: 104 bytes leftover after parsing attributes in process `syz.4.284'. [ 174.112810][ T5985] usb 5-1: USB disconnect, device number 14 [ 174.373638][ T48] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 176.042678][ T7155] netlink: 'syz.4.299': attribute type 11 has an invalid length. [ 176.876315][ T7173] pimreg: entered allmulticast mode [ 176.904755][ T7173] pimreg: left allmulticast mode [ 176.918621][ T7179] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.106386][ T5885] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 177.196650][ T5985] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.377030][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 177.427080][ T5985] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 177.485132][ T5985] usb 6-1: config 0 has no interface number 0 [ 177.541349][ T5985] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 177.678475][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.744298][ T5985] usb 6-1: Product: syz [ 177.780845][ T5985] usb 6-1: Manufacturer: syz [ 177.819956][ T5985] usb 6-1: SerialNumber: syz [ 178.060839][ T5885] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.061059][ T5985] usb 6-1: config 0 descriptor?? [ 178.070463][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.222462][ T5885] usb 3-1: config 0 descriptor?? [ 178.225030][ T5985] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 178.238729][ T5885] cp210x 3-1:0.0: cp210x converter detected [ 178.245948][ T5985] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 178.808239][ T5985] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 178.912730][ T5985] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 179.009149][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 179.296325][ T7196] syz.1.309: attempt to access beyond end of device [ 179.296325][ T7196] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 179.310107][ T7196] FAT-fs (loop3): unable to read boot sector [ 179.675726][ T7176] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.765153][ T7176] kvm: pic: non byte read [ 179.770453][ T7176] kvm: pic: level sensitive irq not supported [ 179.770597][ T7176] kvm: pic: non byte read [ 179.785158][ T7176] kvm: pic: level sensitive irq not supported [ 179.785231][ T7176] kvm: pic: non byte read [ 179.804399][ T5885] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 180.000631][ T5885] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 180.011851][ T5885] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 180.106991][ T5885] usb 3-1: cp210x converter now attached to ttyUSB0 [ 180.145609][ T5885] usb 3-1: USB disconnect, device number 15 [ 180.300460][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.327338][ T5885] cp210x 3-1:0.0: device disconnected [ 180.746567][ T5885] usb 6-1: USB disconnect, device number 4 [ 181.445937][ T7235] netlink: 304 bytes leftover after parsing attributes in process `syz.5.319'. [ 184.015984][ T7259] afs: Unknown parameter 'permit_directio' [ 184.431592][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 184.469344][ T9] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 184.485689][ T9] usb 2-1: USB disconnect, device number 3 [ 184.509130][ T7261] xt_hashlimit: overflow, rate too high: 0 [ 184.612015][ T7271] tipc: Started in network mode [ 184.627070][ T7271] tipc: Node identity 32056bbeba72, cluster identity 4711 [ 184.639044][ T7271] tipc: Enabled bearer , priority 0 [ 184.650015][ T7263] syzkaller0: entered promiscuous mode [ 184.660013][ T7263] syzkaller0: entered allmulticast mode [ 184.695873][ T7263] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.972266][ T7271] tipc: Resetting bearer [ 184.987166][ T7262] tipc: Resetting bearer [ 185.069758][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 185.104457][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 185.217943][ T7262] tipc: Disabling bearer [ 185.355484][ T5885] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 185.598671][ T5885] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 185.632464][ T5885] usb 3-1: config 0 has no interface number 0 [ 185.639618][ T5885] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 185.678633][ T5885] usb 3-1: New USB device found, idVendor=0f11, idProduct=1020, bcdDevice=90.16 [ 185.716272][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.724712][ T5885] usb 3-1: Product: syz [ 185.729617][ T5885] usb 3-1: Manufacturer: syz [ 185.734254][ T5885] usb 3-1: SerialNumber: syz [ 185.741760][ T5885] usb 3-1: config 0 descriptor?? [ 185.750346][ T7283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.760046][ T5885] ldusb 3-1:0.122: Interrupt in endpoint not found [ 185.798507][ T7292] veth3: entered promiscuous mode [ 186.049775][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.069570][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.094224][ T5985] usb 3-1: USB disconnect, device number 16 [ 186.517800][ T7321] tty tty26: ldisc open failed (-12), clearing slot 25 [ 186.646328][ T5985] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.783690][ T7335] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 186.791979][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.345'. [ 186.817852][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 186.817868][ T30] audit: type=1326 audit(1754914862.538:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 186.845843][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.848466][ T5985] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.880016][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.895871][ T30] audit: type=1326 audit(1754914862.538:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 186.944498][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.945257][ T30] audit: type=1326 audit(1754914862.538:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 186.958449][ T5985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 186.994156][ T5985] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 187.033845][ T5985] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 187.053227][ T30] audit: type=1326 audit(1754914862.548:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 187.074676][ T5985] usb 6-1: Manufacturer: syz [ 187.080000][ T5985] usb 6-1: config 0 descriptor?? [ 187.156274][ T30] audit: type=1326 audit(1754914862.548:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 187.202911][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'. [ 187.228710][ T30] audit: type=1326 audit(1754914862.548:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 187.284865][ T30] audit: type=1326 audit(1754914862.548:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 187.346951][ T30] audit: type=1326 audit(1754914862.548:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 187.476398][ T30] audit: type=1326 audit(1754914862.548:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 187.506401][ T30] audit: type=1326 audit(1754914862.548:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4de78ebe9 code=0x7ffc0000 [ 188.026702][ T5985] usbhid 6-1:0.0: can't add hid device: -71 [ 188.032781][ T5985] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 188.076703][ T5985] usb 6-1: USB disconnect, device number 5 [ 188.636334][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.039128][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 189.050703][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 189.065028][ T24] usb 2-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 189.096238][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.119189][ T24] usb 2-1: Product: syz [ 189.131034][ T24] usb 2-1: Manufacturer: syz [ 189.149669][ T24] usb 2-1: SerialNumber: syz [ 189.180460][ T24] usb 2-1: config 0 descriptor?? [ 189.461002][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 189.527396][ T7366] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.536538][ T7366] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.545432][ T7366] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.554481][ T7366] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.570943][ T7366] vxlan0: entered promiscuous mode [ 189.699389][ T7377] netlink: 48 bytes leftover after parsing attributes in process `syz.5.357'. [ 189.859199][ T5985] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.006416][ T5985] usb 4-1: device descriptor read/64, error -71 [ 190.256584][ T5985] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 190.316029][ T7403] netlink: 80 bytes leftover after parsing attributes in process `syz.4.364'. [ 190.329840][ T7403] netlink: 80 bytes leftover after parsing attributes in process `syz.4.364'. [ 190.396283][ T5985] usb 4-1: device descriptor read/64, error -71 [ 190.507055][ T5985] usb usb4-port1: attempt power cycle [ 190.850719][ T7408] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 190.857944][ T9] IPVS: starting estimator thread 0... [ 190.863668][ T5985] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 190.897092][ T5985] usb 4-1: device descriptor read/8, error -71 [ 190.987493][ T7409] IPVS: using max 27 ests per chain, 64800 per kthread [ 191.579669][ T5912] usb 2-1: USB disconnect, device number 4 [ 191.601406][ T5985] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.620600][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 191.647955][ T5985] usb 4-1: device descriptor read/8, error -71 [ 191.767187][ T5985] usb usb4-port1: unable to enumerate USB device [ 191.779804][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.793810][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.823886][ T9] usb 5-1: config 0 descriptor?? [ 192.036376][ T5912] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.059323][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 192.269461][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 192.291210][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 192.298195][ T9] [drm] Initialized udl on minor 2 [ 192.306910][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 192.319241][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 192.330996][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.345964][ T5985] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 192.366490][ T9] usb 5-1: USB disconnect, device number 15 [ 192.386784][ T5985] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 192.394739][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.409217][ T5912] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 192.429269][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.440232][ T5912] usb 2-1: config 0 descriptor?? [ 192.827083][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.137960][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.384397][ T5912] cypress 0003:04B4:DE61.0002: item fetching failed at offset 5/7 [ 193.399217][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 193.461104][ T5912] cypress 0003:04B4:DE61.0002: parse failed [ 193.461158][ T7440] netlink: zone id is out of range [ 193.487838][ T5912] cypress 0003:04B4:DE61.0002: probe with driver cypress failed with error -22 [ 193.495227][ T7440] netlink: zone id is out of range [ 193.511282][ T7440] netlink: zone id is out of range [ 193.511734][ T7443] netlink: 256 bytes leftover after parsing attributes in process `syz.4.375'. [ 193.543724][ T7440] netlink: zone id is out of range [ 193.576676][ T7440] netlink: zone id is out of range [ 193.582031][ T7440] netlink: zone id is out of range [ 193.582653][ T5912] usb 2-1: USB disconnect, device number 5 [ 193.618892][ T7440] netlink: zone id is out of range [ 193.626691][ T7440] netlink: zone id is out of range [ 193.638333][ T7440] netlink: zone id is out of range [ 194.407603][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.417103][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.020355][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 195.032027][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 195.032055][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.032068][ T51] Workqueue: hci3 hci_rx_work [ 195.032106][ T51] Call Trace: [ 195.032117][ T51] [ 195.032126][ T51] dump_stack_lvl+0x189/0x250 [ 195.032151][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 195.032177][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.032199][ T51] ? __pfx__printk+0x10/0x10 [ 195.032225][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 195.032247][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 195.032272][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 195.032293][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 195.032318][ T51] sysfs_create_dir_ns+0x259/0x280 [ 195.032343][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 195.032368][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 195.032407][ T51] kobject_add_internal+0x59f/0xb40 [ 195.032441][ T51] kobject_add+0x155/0x220 [ 195.032470][ T51] ? __pfx_kobject_add+0x10/0x10 [ 195.032493][ T51] ? _raw_spin_unlock+0x28/0x50 [ 195.032526][ T51] ? get_device_parent+0x366/0x3a0 [ 195.032558][ T51] device_add+0x408/0xb50 [ 195.032589][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 195.032623][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 195.032657][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 195.032676][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 195.032695][ T51] ? __asan_memcpy+0x40/0x70 [ 195.032724][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 195.032745][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.032766][ T51] ? skb_pull_data+0xfb/0x200 [ 195.032792][ T51] hci_le_conn_complete_evt+0x187/0x450 [ 195.032824][ T51] hci_event_packet+0x78c/0x1200 [ 195.032848][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 195.032874][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 195.032897][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 195.032927][ T51] ? lockdep_hardirqs_on+0x90/0x150 [ 195.032950][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 195.032979][ T51] hci_rx_work+0x46a/0xe80 [ 195.033008][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 195.033032][ T51] process_scheduled_works+0xade/0x17b0 [ 195.033085][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 195.033123][ T51] worker_thread+0x8a0/0xda0 [ 195.033173][ T51] kthread+0x70e/0x8a0 [ 195.033201][ T51] ? __pfx_worker_thread+0x10/0x10 [ 195.033221][ T51] ? __pfx_kthread+0x10/0x10 [ 195.033248][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 195.033265][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.033282][ T51] ? __pfx_kthread+0x10/0x10 [ 195.033308][ T51] ret_from_fork+0x3fc/0x770 [ 195.033330][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 195.033355][ T51] ? __switch_to_asm+0x39/0x70 [ 195.033377][ T51] ? __switch_to_asm+0x33/0x70 [ 195.033405][ T51] ? __pfx_kthread+0x10/0x10 [ 195.033431][ T51] ret_from_fork_asm+0x1a/0x30 [ 195.033472][ T51] [ 195.033586][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 195.089632][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 195.091193][ T5912] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.105046][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 195.107792][ T51] Bluetooth: hci3: failed to register connection device [ 195.286328][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 195.546981][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.576269][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.598700][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.616306][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.679766][ T5912] usb 4-1: config 0 descriptor?? [ 195.697912][ T5912] hub 4-1:0.0: USB hub found [ 195.770061][ T7498] Illegal XDP return value 4294967294 on prog (id 77) dev N/A, expect packet loss! [ 195.805522][ T7497] netlink: 52 bytes leftover after parsing attributes in process `syz.1.392'. [ 195.887889][ T5912] hub 4-1:0.0: 1 port detected [ 195.946365][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 196.026331][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 196.096286][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 196.106047][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.116025][ T24] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 196.128323][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.137582][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 196.147378][ T24] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 196.155584][ T24] usb 6-1: Product: syz [ 196.160041][ T24] usb 6-1: Manufacturer: syz [ 196.164654][ T24] usb 6-1: SerialNumber: syz [ 196.169247][ T5985] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.177666][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 196.178337][ T24] usb 6-1: config 0 descriptor?? [ 196.188785][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 196.197424][ T10] usb 3-1: config 0 has no interface number 0 [ 196.203758][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.214800][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 196.224731][ T10] usb 3-1: config 0 interface 55 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 196.235120][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.248570][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 196.258726][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.270613][ T10] usb 3-1: config 0 descriptor?? [ 196.281917][ T10] ldusb 3-1:0.55: Interrupt in endpoint not found [ 196.316300][ T5985] usb 2-1: device descriptor read/64, error -71 [ 196.390638][ T24] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 196.398125][ T24] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 196.483696][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.494695][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.498723][ T10] hub 4-1:0.0: activate --> -90 [ 196.510033][ T10] usb 3-1: USB disconnect, device number 17 [ 196.566437][ T5985] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.706842][ T5985] usb 2-1: device descriptor read/64, error -71 [ 196.826581][ T7512] netlink: 104 bytes leftover after parsing attributes in process `syz.3.384'. [ 196.929388][ T48] usb 4-1: USB disconnect, device number 13 [ 197.011854][ T5912] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 197.084419][ T24] usb 6-1: USB disconnect, device number 6 [ 197.456488][ T5985] usb usb2-port1: attempt power cycle [ 198.606271][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 198.696447][ T5985] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.812670][ T5985] usb 2-1: device descriptor read/8, error -71 [ 199.154253][ T5985] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 200.192389][ T5985] usb 2-1: device descriptor read/8, error -71 [ 201.393853][ T5985] usb usb2-port1: unable to enumerate USB device [ 201.462625][ T24] usb 3-1: device descriptor read/all, error -71 [ 202.146350][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 202.297298][ T5912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 202.876958][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 202.891014][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.903553][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.921392][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.943975][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 202.956750][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.972329][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.978344][ T7550] netlink: 56 bytes leftover after parsing attributes in process `syz.3.407'. [ 202.987752][ T5912] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.012937][ T5912] usb 5-1: Manufacturer: syz [ 203.032321][ T5912] usb 5-1: config 0 descriptor?? [ 203.348782][ T7546] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.960743][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 203.960773][ T5912] rc_core: IR keymap rc-hauppauge not found [ 203.984819][ T5912] Registered IR keymap rc-empty [ 204.093561][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.195311][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.321225][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 204.362037][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 204.637031][ T5936] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.637637][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.695089][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.756372][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.866344][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 204.866373][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.873606][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.917954][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.057930][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.066480][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.652194][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.668931][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 205.668950][ T30] audit: type=1400 audit(1754914880.878:60): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7573 comm="syz.2.413" path="socket:[16626]" dev="sockfs" ino=16626 [ 205.697779][ T5936] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.723755][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.725601][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.765973][ T30] audit: type=1400 audit(1754914880.898:61): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=7573 comm="syz.2.413" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 205.821025][ T5936] usb 2-1: config 0 descriptor?? [ 205.837806][ T5936] hub 2-1:0.0: USB hub found [ 205.887731][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.898686][ T7565] syz.4.410 (7565): drop_caches: 1 [ 205.916382][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.938248][ T5912] mceusb 5-1:0.0: Registered  with mce emulator interface version 1 [ 205.963143][ T5912] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 206.039414][ T5936] hub 2-1:0.0: 1 port detected [ 206.046567][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.414'. [ 206.342396][ T5912] usb 5-1: USB disconnect, device number 16 [ 206.509241][ T7565] syz.4.410 (7565): drop_caches: 1 [ 206.709901][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 206.709915][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 206.709979][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 206.731411][ T24] hub 2-1:0.0: activate --> -90 [ 207.386656][ T5885] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 207.846445][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 207.873396][ T5885] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 207.939203][ T7593] netlink: 104 bytes leftover after parsing attributes in process `syz.1.411'. [ 207.964882][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.044632][ T122] usb 2-1: USB disconnect, device number 10 [ 208.065935][ T5936] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 208.383043][ T5885] pvrusb2: Hardware description: Terratec Grabster AV400 [ 208.499577][ T5885] pvrusb2: ********** [ 208.545518][ T5885] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 208.675149][ T5885] pvrusb2: Important functionality might not be entirely working. [ 208.774813][ T5885] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 208.885041][ T5885] pvrusb2: ********** [ 208.938268][ T2343] pvrusb2: Invalid write control endpoint [ 209.283764][ T7581] netlink: 44 bytes leftover after parsing attributes in process `syz.3.414'. [ 209.314545][ T7604] kvm: kvm [7603]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 209.345346][ T7581] ntfs3(nullb0): Primary boot signature is not NTFS. [ 209.353776][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 209.382580][ T7581] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 209.500147][ T2343] pvrusb2: Invalid write control endpoint [ 209.536281][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 209.545999][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 209.591565][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 209.610899][ T2343] pvrusb2: Device being rendered inoperable [ 209.620910][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 209.628574][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 209.692620][ T2343] pvrusb2: Attached sub-driver cx25840 [ 209.699161][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 209.717878][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 209.866354][ T5985] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 210.018271][ T5985] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.030776][ T5985] usb 3-1: New USB device found, idVendor=03b7, idProduct=1540, bcdDevice=b7.5a [ 210.040596][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.049040][ T5985] usb 3-1: Product: syz [ 210.053469][ T5985] usb 3-1: Manufacturer: syz [ 210.058331][ T5985] usb 3-1: SerialNumber: syz [ 210.065801][ T5985] usb 3-1: config 0 descriptor?? [ 210.292378][ T5985] usb 3-1: USB disconnect, device number 20 [ 210.480379][ T5885] usb 4-1: USB disconnect, device number 14 [ 210.988775][ T5885] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 211.138145][ T7636] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.147598][ T7636] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.791864][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 211.804560][ T5885] usb 4-1: can't read configurations, error -61 [ 211.977152][ T5885] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 212.297760][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 212.305500][ T5885] usb 4-1: can't read configurations, error -61 [ 212.317835][ T5885] usb usb4-port1: attempt power cycle [ 212.457155][ T5936] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 212.689365][ T5885] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 212.704086][ T5936] usb 6-1: device descriptor read/64, error -71 [ 212.748975][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 212.766272][ T5885] usb 4-1: can't read configurations, error -61 [ 212.886353][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.011382][ T7651] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.026573][ T5912] usb 3-1: device descriptor read/64, error -71 [ 213.054372][ T5885] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 213.080351][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 213.088529][ T5885] usb 4-1: can't read configurations, error -61 [ 213.095564][ T5885] usb usb4-port1: unable to enumerate USB device [ 213.106332][ T5936] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 213.736362][ T5912] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 213.747805][ T5936] usb 6-1: device descriptor read/64, error -71 [ 213.866721][ T5936] usb usb6-port1: attempt power cycle [ 213.896331][ T5912] usb 3-1: device descriptor read/64, error -71 [ 214.006949][ T5912] usb usb3-port1: attempt power cycle [ 214.206958][ T5936] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 214.263597][ T7665] tmpfs: Bad value for 'mpol' [ 214.272331][ T5936] usb 6-1: device descriptor read/8, error -71 [ 214.557376][ T5936] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 214.576416][ T5912] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 214.587259][ T5936] usb 6-1: device descriptor read/8, error -71 [ 214.609462][ T5912] usb 3-1: device descriptor read/8, error -71 [ 214.706741][ T5936] usb usb6-port1: unable to enumerate USB device [ 214.887064][ T5912] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 214.916935][ T5912] usb 3-1: device descriptor read/8, error -71 [ 215.036837][ T5912] usb usb3-port1: unable to enumerate USB device [ 215.183880][ T7693] Can't find a SQUASHFS superblock on nullb0 [ 215.497654][ T5912] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 215.666312][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 215.672740][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 216.050710][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.175369][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.218650][ T5912] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 216.240264][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.367799][ T5912] usb 4-1: config 0 descriptor?? [ 216.408633][ T7709] GUP no longer grows the stack in syz.1.447 (7709): 200000005000-200000008000 (200000004000) [ 216.423220][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.1.447 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 216.423254][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.423261][ T7709] Call Trace: [ 216.423266][ T7709] [ 216.423271][ T7709] dump_stack_lvl+0x189/0x250 [ 216.423292][ T7709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.423304][ T7709] ? __pfx__printk+0x10/0x10 [ 216.423315][ T7709] ? find_vma+0xe7/0x160 [ 216.423332][ T7709] fixup_user_fault+0x661/0x720 [ 216.423350][ T7709] fault_in_user_writeable+0x72/0xe0 [ 216.423364][ T7709] futex_lock_pi+0x283/0xa60 [ 216.423383][ T7709] ? __pfx_futex_lock_pi+0x10/0x10 [ 216.423395][ T7709] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.423426][ T7709] ? __pfx_futex_wake_mark+0x10/0x10 [ 216.423448][ T7709] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 216.423467][ T7709] do_futex+0x292/0x420 [ 216.423482][ T7709] ? __pfx_do_futex+0x10/0x10 [ 216.423494][ T7709] ? __vm_munmap+0x301/0x3d0 [ 216.423511][ T7709] __se_sys_futex+0x36f/0x400 [ 216.423532][ T7709] ? __pfx___se_sys_futex+0x10/0x10 [ 216.423546][ T7709] ? rcu_is_watching+0x15/0xb0 [ 216.423560][ T7709] ? __x64_sys_futex+0x21/0xf0 [ 216.423574][ T7709] do_syscall_64+0xfa/0x3b0 [ 216.423587][ T7709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.423596][ T7709] ? asm_sysvec_call_function_single+0x1a/0x20 [ 216.423605][ T7709] ? clear_bhb_loop+0x60/0xb0 [ 216.423617][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.423626][ T7709] RIP: 0033:0x7fee3fd8ebe9 [ 216.423648][ T7709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.423656][ T7709] RSP: 002b:00007fee40b43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.423668][ T7709] RAX: ffffffffffffffda RBX: 00007fee3ffb6090 RCX: 00007fee3fd8ebe9 [ 216.423676][ T7709] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 216.423682][ T7709] RBP: 00007fee3fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 216.423688][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.423694][ T7709] R13: 00007fee3ffb6128 R14: 00007fee3ffb6090 R15: 00007ffd5db06b68 [ 216.423710][ T7709] [ 216.787446][ T7723] Cannot find add_set index 0 as target [ 216.799581][ T7723] netlink: 'syz.5.450': attribute type 9 has an invalid length. [ 216.824952][ T7723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.749730][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 217.795272][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.800911][ T7728] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 217.867688][ T7728] netlink: 'syz.2.452': attribute type 8 has an invalid length. [ 217.873961][ T5912] usb 4-1: USB disconnect, device number 19 [ 218.398296][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 219.908753][ T7750] netlink: 36 bytes leftover after parsing attributes in process `syz.5.459'. [ 219.955107][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 219.964447][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 219.979212][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 219.988438][ T7750] ceph: No mds server is up or the cluster is laggy [ 220.001699][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 220.020764][ T30] audit: type=1400 audit(1754914895.748:62): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7758 comm="syz.4.460" name="secretmem" dev="secretmem" ino=16325 [ 220.139157][ T5885] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 220.194939][ T7762] FAULT_INJECTION: forcing a failure. [ 220.194939][ T7762] name failslab, interval 1, probability 0, space 0, times 1 [ 220.210579][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.4.461 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 220.210607][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.210618][ T7762] Call Trace: [ 220.210625][ T7762] [ 220.210634][ T7762] dump_stack_lvl+0x189/0x250 [ 220.210660][ T7762] ? __pfx____ratelimit+0x10/0x10 [ 220.210680][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.210701][ T7762] ? __pfx__printk+0x10/0x10 [ 220.210730][ T7762] ? __pfx___might_resched+0x10/0x10 [ 220.210750][ T7762] ? fs_reclaim_acquire+0x7d/0x100 [ 220.210775][ T7762] should_fail_ex+0x414/0x560 [ 220.210800][ T7762] should_failslab+0xa8/0x100 [ 220.210822][ T7762] __kmalloc_noprof+0xcb/0x4f0 [ 220.210839][ T7762] ? kfree+0x4d/0x440 [ 220.210863][ T7762] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 220.210892][ T7762] tomoyo_realpath_from_path+0xe3/0x5d0 [ 220.210918][ T7762] ? tomoyo_domain+0xda/0x130 [ 220.210951][ T7762] tomoyo_path_perm+0x213/0x4b0 [ 220.210970][ T7762] ? tomoyo_path_perm+0x1e3/0x4b0 [ 220.210988][ T7762] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 220.211017][ T7762] ? vfs_write+0x8d8/0xa90 [ 220.211054][ T7762] ? __lock_acquire+0xab9/0xd20 [ 220.211086][ T7762] security_file_truncate+0xb1/0x270 [ 220.211109][ T7762] do_ftruncate+0x270/0x540 [ 220.211134][ T7762] ? __pfx_do_ftruncate+0x10/0x10 [ 220.211151][ T7762] ? __fget_files+0x3a0/0x420 [ 220.211170][ T7762] ? __fget_files+0x2a/0x420 [ 220.211200][ T7762] __x64_sys_ftruncate+0x92/0xf0 [ 220.211226][ T7762] do_syscall_64+0xfa/0x3b0 [ 220.211245][ T7762] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.211265][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.211283][ T7762] ? clear_bhb_loop+0x60/0xb0 [ 220.211306][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.211323][ T7762] RIP: 0033:0x7fed43d8ebe9 [ 220.211340][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.211355][ T7762] RSP: 002b:00007fed44bb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 220.211375][ T7762] RAX: ffffffffffffffda RBX: 00007fed43fb5fa0 RCX: 00007fed43d8ebe9 [ 220.211388][ T7762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 220.211399][ T7762] RBP: 00007fed44bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 220.211410][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.211421][ T7762] R13: 00007fed43fb6038 R14: 00007fed43fb5fa0 R15: 00007ffe88c46f68 [ 220.211451][ T7762] [ 220.474953][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.505073][ T7762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.512476][ T30] audit: type=1400 audit(1754914896.238:63): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7761 comm="syz.4.461" name="secretmem" dev="secretmem" ino=16336 [ 220.724129][ T5885] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 220.741723][ T5885] usb 3-1: too many endpoints for config 2 interface 0 altsetting 1: 128, using maximum allowed: 30 [ 220.802591][ T5885] usb 3-1: config 2 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 220.817126][ T5912] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 220.826038][ T5885] usb 3-1: config 2 interface 0 has no altsetting 0 [ 220.878344][ T5885] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 220.891894][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.912773][ T5885] usb 3-1: Product: syz [ 220.929866][ T5885] usb 3-1: Manufacturer: syz [ 220.936735][ T5885] usb 3-1: SerialNumber: syz [ 220.972665][ T5885] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 220.985733][ T5912] usb 6-1: config 0 has an invalid interface number: 104 but max is 0 [ 220.997034][ T5885] usb 3-1: selecting invalid altsetting 0 [ 221.029765][ T5912] usb 6-1: config 0 has no interface number 0 [ 221.030780][ T5885] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 221.061890][ T5912] usb 6-1: config 0 interface 104 has no altsetting 0 [ 221.099208][ T5912] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=cf.b6 [ 221.113736][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.124235][ T5912] usb 6-1: Product: syz [ 221.135145][ T5912] usb 6-1: Manufacturer: syz [ 221.140075][ T5912] usb 6-1: SerialNumber: syz [ 221.158238][ T5912] usb 6-1: config 0 descriptor?? [ 221.177696][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.179641][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.464'. [ 221.187043][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.221171][ T5985] usb 3-1: USB disconnect, device number 25 [ 221.271854][ T7771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.464'. [ 221.284880][ T7771] netlink: 'syz.4.464': attribute type 10 has an invalid length. [ 221.310667][ T7771] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.378978][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.390206][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.442297][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.104/input/input10 [ 221.463712][ T5190] bcm5974 6-1:0.104: could not read from device [ 221.482246][ T5190] bcm5974 6-1:0.104: could not read from device [ 221.493180][ T5912] usb 6-1: USB disconnect, device number 11 [ 221.493588][ T5190] bcm5974 6-1:0.104: could not read from device [ 221.518061][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 221.911450][ T7787] 9pnet: Unknown protocol version 9p20\++} [ 222.049742][ T7791] FAULT_INJECTION: forcing a failure. [ 222.049742][ T7791] name failslab, interval 1, probability 0, space 0, times 0 [ 222.063395][ T7791] CPU: 0 UID: 0 PID: 7791 Comm: syz.5.473 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 222.063421][ T7791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.063433][ T7791] Call Trace: [ 222.063441][ T7791] [ 222.063448][ T7791] dump_stack_lvl+0x189/0x250 [ 222.063474][ T7791] ? __pfx____ratelimit+0x10/0x10 [ 222.063496][ T7791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.063517][ T7791] ? __pfx__printk+0x10/0x10 [ 222.063542][ T7791] ? __pfx___might_resched+0x10/0x10 [ 222.063563][ T7791] ? fs_reclaim_acquire+0x7d/0x100 [ 222.063591][ T7791] should_fail_ex+0x414/0x560 [ 222.063616][ T7791] should_failslab+0xa8/0x100 [ 222.063639][ T7791] __kmalloc_noprof+0xcb/0x4f0 [ 222.063656][ T7791] ? tomoyo_encode+0x28b/0x550 [ 222.063685][ T7791] tomoyo_encode+0x28b/0x550 [ 222.063714][ T7791] tomoyo_realpath_from_path+0x58d/0x5d0 [ 222.063740][ T7791] ? tomoyo_domain+0xda/0x130 [ 222.063774][ T7791] tomoyo_path_perm+0x213/0x4b0 [ 222.063793][ T7791] ? tomoyo_path_perm+0x1e3/0x4b0 [ 222.063819][ T7791] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 222.063848][ T7791] ? vfs_write+0x8d8/0xa90 [ 222.063885][ T7791] ? __lock_acquire+0xab9/0xd20 [ 222.063919][ T7791] security_file_truncate+0xb1/0x270 [ 222.063942][ T7791] do_ftruncate+0x270/0x540 [ 222.063967][ T7791] ? __pfx_do_ftruncate+0x10/0x10 [ 222.063984][ T7791] ? __fget_files+0x3a0/0x420 [ 222.064004][ T7791] ? __fget_files+0x2a/0x420 [ 222.064034][ T7791] __x64_sys_ftruncate+0x92/0xf0 [ 222.064054][ T7791] do_syscall_64+0xfa/0x3b0 [ 222.064071][ T7791] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.064091][ T7791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.064110][ T7791] ? clear_bhb_loop+0x60/0xb0 [ 222.064132][ T7791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.064149][ T7791] RIP: 0033:0x7f2be938ebe9 [ 222.064166][ T7791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.064182][ T7791] RSP: 002b:00007f2bea173038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 222.064202][ T7791] RAX: ffffffffffffffda RBX: 00007f2be95b5fa0 RCX: 00007f2be938ebe9 [ 222.064217][ T7791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 222.064227][ T7791] RBP: 00007f2bea173090 R08: 0000000000000000 R09: 0000000000000000 [ 222.064239][ T7791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.064250][ T7791] R13: 00007f2be95b6038 R14: 00007f2be95b5fa0 R15: 00007ffe9d9fa048 [ 222.064281][ T7791] [ 222.064303][ T7791] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.256246][ T5885] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 222.275797][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.277474][ T30] audit: type=1400 audit(1754914898.008:64): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7790 comm="syz.5.473" name="secretmem" dev="secretmem" ino=17659 [ 222.376000][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.486417][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 223.064387][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.089694][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 223.125553][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 223.155876][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.190681][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 223.354994][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.387561][ T5885] usb 4-1: config 0 descriptor?? [ 223.400059][ T5885] hub 4-1:0.0: USB hub found [ 223.706732][ T122] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.940164][ T5885] hub 4-1:0.0: 1 port detected [ 224.097788][ T122] usb 2-1: Using ep0 maxpacket: 16 [ 224.109147][ T122] usb 2-1: config 1 interface 0 altsetting 229 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.122394][ T122] usb 2-1: config 1 interface 0 altsetting 229 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.142613][ T122] usb 2-1: config 1 interface 0 has no altsetting 0 [ 224.163403][ T122] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.40 [ 224.182508][ T122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.191238][ T122] usb 2-1: Product: 樅嗢ï¥ã†«ç…§ã•–钴ᶾ黎⟥隖此竪｠äœî€ì„‘￈㓧﷙੢競愮샜柲ãŽèœ¥à´¿ëš•ç„§æ¿‚経譲텱ﮞ增蒭橇鼜뾉쬭㛊â›î†”퉶㞥〩㙜âºÒ蓿咰걵褮î–黦횇頒䔛沀救ïµå°†è¦¯é°‚䮢夜罵䓱広施鰊뻌㭩쟊焽â»æ£ë«¥ê¦„ﾑᙣᾊäœâ‘¯ä±‰å“¥ë³½ä»Žç®°ê–¸çº…혉瓗á¤ã£±é–Žì±°î©¹å…™ [ 224.224222][ T122] usb 2-1: Manufacturer: 諶䤷ࡅåˆâŽ¶á‹Œæœ¸ÞŸï‡¢îŠ·ç¦€ï®¨ë‚±ê¨œá”¥â—௠㢧饗븄绾蕪ẚ͂䦶ᆬ陕픤賃鹙äœî´…á—‰î¦æ€ªç’‰ê¦·æƒ¯ä©•ã¹’⿗籱臓å½Ò—ì°°å±ï’¼î€¥è¶†è‘嵙ᄄçšì™“伨屿헺í‚싳兰෤렲麯봥쾧몞囆㈔爴郆瞧׶ꭺã„妇áŒæª¦æ–±ê€Œâº·ìƒ¬ç‹•ç²ìŠžì§é¸â­¨äššÐŒã¸ã¾ˆæ‡é¯°è¡è«’ [ 224.264790][ T122] usb 2-1: SerialNumber: 鰽џä”দǤㇶ倢æ¹æž’詙绰긘ïƒà³‹ì®àµ¨à£–ä±ê£©î¨¿ﵓ뢪㲾懦츭ꘉ躂頶ç½ë ¦å«©ì›™î¨¨çŠ¸ê¥€ë’¸ç©…â±å­»ë¨©î³µçŸâ³©ä£¶ç¾£Êµå´®í†µäŽ¿ë¬Žá¿ ä¦´ä£”禳죫㄄雷招ሊૂ襖ÈⰚ䜛腳舞抣覸밨æ›æ¶´áˆ˜ê¦¨î“šî…ªêªœâ³›àª½ì¼‘㵲病㼤褈ɂì¿é軥쓶ì¢å—…〧玨袕 [ 224.948047][ T122] usbhid 2-1:1.0: can't add hid device: -71 [ 224.954507][ T122] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 224.976760][ T122] usb 2-1: USB disconnect, device number 11 [ 224.988738][ T5885] hub 4-1:0.0: activate --> -90 [ 225.586387][ T48] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.666564][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 226.099585][ T7835] netlink: 104 bytes leftover after parsing attributes in process `syz.3.470'. [ 226.153576][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 226.230560][ T24] usb 4-1: USB disconnect, device number 20 [ 226.253763][ T5885] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 226.288984][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 226.341040][ T48] usb 6-1: device descriptor read/64, error -32 [ 226.695306][ T48] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 227.675836][ T30] audit: type=1400 audit(1754914903.398:65): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7844 comm="syz.4.488" name="secretmem" dev="secretmem" ino=17751 [ 227.726118][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 227.891155][ T7857] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.490'. [ 228.018910][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 229.251105][ T7875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.322462][ T7874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.416288][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 229.558963][ T48] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.843931][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.935345][ T36] Bluetooth: Error in BCSP hdr checksum [ 229.949008][ T48] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 229.960134][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.973588][ T48] usb 2-1: config 0 descriptor?? [ 229.983319][ T48] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 230.028264][ T9] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 230.037456][ T9] usb 3-1: config 0 has no interface number 0 [ 230.043965][ T9] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 230.078522][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 230.096237][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.108845][ T9] usb 3-1: Product: syz [ 230.114034][ T9] usb 3-1: Manufacturer: syz [ 230.119282][ T9] usb 3-1: SerialNumber: syz [ 230.127329][ T9] usb 3-1: config 0 descriptor?? [ 230.134353][ T7870] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.144026][ T9] usb-storage 3-1:0.20: USB Mass Storage device detected [ 230.266469][ T30] audit: type=1400 audit(1754914905.988:66): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7884 comm="syz.3.497" name="secretmem" dev="secretmem" ino=18448 [ 230.348453][ T9] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 230.357763][ T9] scsi host1: usb-storage 3-1:0.20 [ 230.370195][ T9] usb 3-1: USB disconnect, device number 26 [ 230.732409][ T48] pwc: send_video_command error -71 [ 230.908569][ T48] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 230.947638][ T48] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 230.968525][ T48] usb 2-1: USB disconnect, device number 12 [ 230.973110][ T7898] netlink: 'syz.1.499': attribute type 5 has an invalid length. [ 231.260539][ T7902] 8021q: VLANs not supported on ip6gre0 [ 231.586447][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 232.252894][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 232.477444][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.506'. [ 232.756460][ T48] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.209352][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 235.037635][ T48] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 235.068213][ T48] usb 2-1: config 0 has no interface number 0 [ 235.084126][ T48] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.105408][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.207761][ T48] usb 2-1: Product: syz [ 235.212259][ T48] usb 2-1: Manufacturer: syz [ 235.239387][ T48] usb 2-1: SerialNumber: syz [ 235.255278][ T48] usb 2-1: config 0 descriptor?? [ 235.279613][ T48] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.516712][ T48] usb 2-1: qt2_attach - failed to power on unit: -71 [ 235.526409][ T24] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 235.539138][ T48] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 235.578348][ T48] usb 2-1: USB disconnect, device number 13 [ 235.676717][ T24] usb 6-1: device descriptor read/64, error -71 [ 235.736345][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 235.907360][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 235.914809][ T9] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 235.935973][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 235.956292][ T24] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 235.959890][ T9] usb 3-1: config 8 has no interface number 0 [ 235.989027][ T9] usb 3-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.016951][ T9] usb 3-1: config 8 interface 39 has no altsetting 0 [ 236.036245][ T48] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 236.045896][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 236.065704][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.075750][ T9] usb 3-1: Product: syz [ 236.083694][ T9] usb 3-1: Manufacturer: syz [ 236.089987][ T9] usb 3-1: SerialNumber: syz [ 236.116309][ T24] usb 6-1: device descriptor read/64, error -71 [ 236.208733][ T48] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 236.219519][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.231456][ T24] usb usb6-port1: attempt power cycle [ 236.243146][ T48] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.255244][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.267013][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.280747][ T48] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 236.289139][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.300399][ T48] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.313961][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.319077][ T9] ipheth 3-1:8.39: Unable to find endpoints [ 236.326179][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.347194][ T48] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 236.354767][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.364710][ T9] usb 3-1: USB disconnect, device number 27 [ 236.366253][ T48] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.384626][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.397305][ T48] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.413223][ T48] usb 2-1: string descriptor 0 read error: -22 [ 236.419870][ T48] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 236.430609][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.466051][ T48] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 236.576337][ T24] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 236.606999][ T24] usb 6-1: device descriptor read/8, error -71 [ 236.626505][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 236.758432][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.788291][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.811245][ T5912] usb 2-1: USB disconnect, device number 14 [ 236.848611][ T7987] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 236.858168][ T7987] audit: out of memory in audit_log_start [ 236.896405][ T24] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 236.949049][ T24] usb 6-1: device descriptor read/8, error -71 [ 237.067769][ T24] usb usb6-port1: unable to enumerate USB device [ 238.546480][ T5885] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 239.265436][ T8012] netlink: 256 bytes leftover after parsing attributes in process `syz.1.533'. [ 239.312959][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 239.437909][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.497171][ T7975] ALSA: mixer_oss: invalid OSS volume 'XÍh8^' [ 239.506396][ T5885] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 239.516007][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.526378][ T7975] ALSA: mixer_oss: invalid OSS volume 'p' [ 239.532417][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 239.552924][ T24] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 239.633780][ T24] usb 6-1: config 0 has no interface number 0 [ 239.657892][ T5885] usb 4-1: config 0 descriptor?? [ 239.676279][ T24] usb 6-1: config 0 interface 32 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 239.698584][ T24] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=15.e8 [ 239.722705][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.771986][ T8030] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 239.799348][ T24] usb 6-1: Product: syz [ 239.803873][ T24] usb 6-1: Manufacturer: syz [ 239.823506][ T24] usb 6-1: SerialNumber: syz [ 240.269177][ T24] usb 6-1: config 0 descriptor?? [ 240.286637][ T8007] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 240.305809][ T24] s2255 6-1:0.32: Could not find bulk-in endpoint [ 240.314300][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 240.340865][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 240.354220][ T24] Sensoray 2255 driver load failed: 0xfffffff4 [ 240.451895][ T24] s2255 6-1:0.32: probe with driver s2255 failed with error -12 [ 240.476958][ T5885] usb 4-1: USB disconnect, device number 21 [ 240.529833][ T8007] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 240.629183][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 240.762595][ T8047] xfrm0: entered promiscuous mode [ 240.768286][ T8047] xfrm0: entered allmulticast mode [ 240.827598][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.850839][ T8048] NILFS (loop1): device size too small [ 240.967902][ T5885] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 241.055166][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.183249][ T5912] usb 6-1: USB disconnect, device number 18 [ 241.236350][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 241.247778][ T5885] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 241.288182][ T5885] usb 4-1: config 0 has no interface number 0 [ 241.319889][ T5885] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 241.351536][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.399953][ T5885] usb 4-1: config 0 descriptor?? [ 241.428625][ T5885] speedtch 4-1:0.168: speedtch_bind: wrong device class 176 [ 241.441343][ T5885] speedtch 4-1:0.168: usbatm_usb_probe: bind failed: -19! [ 241.516245][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.543534][ T8063] netlink: 'syz.4.546': attribute type 30 has an invalid length. [ 241.625188][ T5912] usb 4-1: USB disconnect, device number 22 [ 241.666404][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 241.675873][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 241.690760][ T30] audit: type=1804 audit(1754914917.418:67): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.548" name="/newroot/118/file0" dev="tmpfs" ino=635 res=1 errno=0 [ 241.698709][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.725051][ T9] usb 2-1: config 0 descriptor?? [ 241.733652][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 242.590401][ T9] gspca_sunplus: reg_w_riv err -71 [ 242.596007][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 242.624528][ T9] usb 2-1: USB disconnect, device number 15 [ 242.696255][ T5912] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 242.876915][ T5912] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.924266][ T5912] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.951542][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.971294][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.999423][ T8079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.022445][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.107954][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 243.233376][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.252798][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.259890][ T9] usb 3-1: device descriptor read/64, error -71 [ 243.285995][ T5885] usb 4-1: USB disconnect, device number 23 [ 243.466223][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 243.527448][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 243.676597][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 243.869592][ T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 243.918519][ T9] usb 3-1: device descriptor read/64, error -71 [ 243.924645][ T24] usb 2-1: config 0 has no interface number 0 [ 243.974672][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 243.994128][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.005354][ T24] usb 2-1: Product: syz [ 244.010040][ T24] usb 2-1: Manufacturer: syz [ 244.019125][ T24] usb 2-1: SerialNumber: syz [ 244.036936][ T9] usb usb3-port1: attempt power cycle [ 244.037308][ T24] usb 2-1: config 0 descriptor?? [ 244.074510][ T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.094841][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'. [ 244.334965][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.339771][ T8104] input: syz1 as /devices/virtual/input/input11 [ 244.375599][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 244.377011][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 244.469691][ T9] usb 3-1: device descriptor read/8, error -71 [ 244.534169][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 95 [ 244.796584][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 244.797066][ T10] usb 2-1: USB disconnect, device number 16 [ 244.815502][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 244.830578][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 244.843395][ T10] quatech2 2-1:0.51: device disconnected [ 244.850134][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 244.887288][ T9] usb 3-1: device descriptor read/8, error -71 [ 244.895536][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.559'. [ 244.997797][ T9] usb usb3-port1: unable to enumerate USB device [ 247.251942][ T8133] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.543531][ T8141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.836268][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 248.071867][ T9] usb 5-1: config 6 has an invalid interface number: 57 but max is 0 [ 248.084231][ T9] usb 5-1: config 6 has no interface number 0 [ 248.092869][ T9] usb 5-1: config 6 interface 57 has no altsetting 0 [ 248.102699][ T9] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 248.130869][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.144254][ T9] usb 5-1: Product: syz [ 248.675120][ T9] usb 5-1: Manufacturer: syz [ 248.700984][ T9] usb 5-1: SerialNumber: syz [ 248.921220][ T9] usb-storage 5-1:6.57: USB Mass Storage device detected [ 249.357973][ T9] usb 5-1: USB disconnect, device number 17 [ 249.632879][ T8178] fuse: root generation should be zero [ 249.640307][ T8179] netlink: 76 bytes leftover after parsing attributes in process `syz.3.578'. [ 249.667300][ T8179] netlink: 76 bytes leftover after parsing attributes in process `syz.3.578'. [ 249.956480][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 250.240418][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 250.254945][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 250.265462][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 250.275743][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.286648][ T9] usb 4-1: config 0 descriptor?? [ 250.307065][ T9] em28xx 4-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 250.315829][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 250.338153][ T8202] dlm: no locking on control device [ 250.474766][ T8205] vivid-000: kernel_thread() failed [ 250.569677][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 250.693193][ T8217] FAULT_INJECTION: forcing a failure. [ 250.693193][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 250.706729][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.2.585 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 250.706755][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.706767][ T8217] Call Trace: [ 250.706775][ T8217] [ 250.706783][ T8217] dump_stack_lvl+0x189/0x250 [ 250.706810][ T8217] ? __pfx____ratelimit+0x10/0x10 [ 250.706830][ T8217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.706851][ T8217] ? __pfx__printk+0x10/0x10 [ 250.706876][ T8217] ? __might_fault+0xb0/0x130 [ 250.706906][ T8217] should_fail_ex+0x414/0x560 [ 250.706930][ T8217] _copy_from_user+0x2d/0xb0 [ 250.706956][ T8217] ___sys_recvmsg+0x12e/0x510 [ 250.706972][ T8217] ? rcu_is_watching+0x15/0xb0 [ 250.706999][ T8217] ? __pfx____sys_recvmsg+0x10/0x10 [ 250.707042][ T8217] ? __fget_files+0x3a0/0x420 [ 250.707074][ T8217] do_recvmmsg+0x307/0x770 [ 250.707100][ T8217] ? __pfx_do_recvmmsg+0x10/0x10 [ 250.707130][ T8217] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.707161][ T8217] ? __f_unlock_pos+0xd/0x20 [ 250.707189][ T8217] __x64_sys_recvmmsg+0x190/0x240 [ 250.707218][ T8217] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 250.707242][ T8217] ? do_syscall_64+0xbe/0x3b0 [ 250.707267][ T8217] do_syscall_64+0xfa/0x3b0 [ 250.707288][ T8217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.707306][ T8217] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 250.707324][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 250.707347][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.707364][ T8217] RIP: 0033:0x7fc4de78ebe9 [ 250.707382][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.707398][ T8217] RSP: 002b:00007fc4df6a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 250.707418][ T8217] RAX: ffffffffffffffda RBX: 00007fc4de9b6180 RCX: 00007fc4de78ebe9 [ 250.707433][ T8217] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000003 [ 250.707445][ T8217] RBP: 00007fc4df6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 250.707457][ T8217] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 250.707469][ T8217] R13: 00007fc4de9b6218 R14: 00007fc4de9b6180 R15: 00007ffde2c5e648 [ 250.707500][ T8217] [ 250.944637][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 250.959090][ T9] em28xx 4-1:0.0: board has no eeprom [ 251.040797][ T9] em28xx 4-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 251.052889][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 251.062523][ T5912] em28xx 4-1:0.0: Binding DVB extension [ 251.086582][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 251.094562][ T9] usb 4-1: USB disconnect, device number 24 [ 251.105084][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 251.246478][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 251.265571][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 251.279693][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.291001][ T5985] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 251.304783][ T10] usb 5-1: Product: syz [ 251.313669][ T10] usb 5-1: Manufacturer: syz [ 251.322876][ T10] usb 5-1: SerialNumber: syz [ 251.348051][ T10] usb 5-1: config 0 descriptor?? [ 251.415187][ T5912] DVB: Unable to find symbol drxk_attach() [ 251.430365][ T5912] em28xx 4-1:0.0: Registering input extension [ 251.440029][ T9] em28xx 4-1:0.0: Closing input extension [ 251.466424][ T5985] usb 6-1: Using ep0 maxpacket: 16 [ 251.493969][ T5985] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 251.504987][ T9] em28xx 4-1:0.0: Freeing device [ 251.544678][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.557508][ T5985] usb 6-1: Product: syz [ 251.563442][ T5985] usb 6-1: Manufacturer: syz [ 251.571012][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 251.579931][ T5985] usb 6-1: SerialNumber: syz [ 251.594983][ T5985] usb 6-1: config 0 descriptor?? [ 251.625127][ T8226] gretap1: entered promiscuous mode [ 251.853609][ T5985] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 251.871656][ T5985] usb 6-1: USB disconnect, device number 19 [ 252.097288][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 252.298427][ T8238] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.594'. [ 252.313994][ T8238] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.594'. [ 252.324070][ T8238] netlink: 396 bytes leftover after parsing attributes in process `syz.2.594'. [ 252.397304][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 252.609932][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 252.619883][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 252.646321][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.689616][ T9] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 252.712102][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.736957][ T9] usb 4-1: Product: syz [ 252.741314][ T9] usb 4-1: Manufacturer: syz [ 252.745951][ T9] usb 4-1: SerialNumber: syz [ 252.793262][ T9] usb 4-1: config 0 descriptor?? [ 252.810554][ T9] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 252.944370][ T8234] syz.1.593 (8234): drop_caches: 1 [ 253.016420][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 253.031887][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 253.035548][ T9] usb 4-1: USB disconnect, device number 25 [ 253.055891][ T10] usb 5-1: USB disconnect, device number 18 [ 253.062062][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 253.306580][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 253.315092][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 253.316303][ T5912] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 253.328664][ T24] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 253.342059][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.350088][ T24] usb 6-1: Product: syz [ 253.354345][ T24] usb 6-1: Manufacturer: syz [ 253.358970][ T24] usb 6-1: SerialNumber: syz [ 253.365266][ T24] usb 6-1: config 0 descriptor?? [ 253.371146][ T8244] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 253.380883][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.488518][ T5912] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 253.497066][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.507299][ T5912] usb 3-1: config 0 has no interface number 0 [ 253.514022][ T5912] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.527490][ T5912] usb 3-1: config 0 interface 25 has no altsetting 0 [ 253.540031][ T5912] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 253.549335][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.566230][ T5912] usb 3-1: Product: syz [ 253.576225][ T5912] usb 3-1: Manufacturer: syz [ 253.586204][ T5912] usb 3-1: SerialNumber: syz [ 253.599899][ T5912] usb 3-1: config 0 descriptor?? [ 253.712161][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.721096][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.019949][ T5912] usb 3-1: Found UVC 0.00 device syz (1b3b:2951) [ 254.076619][ T5912] usb 3-1: No valid video chain found. [ 254.852357][ T8273] block nbd2: NBD_DISCONNECT [ 255.220954][ T5912] usb 6-1: USB disconnect, device number 20 [ 255.452444][ T10] usb 3-1: USB disconnect, device number 32 [ 255.561224][ T8286] syz.3.608 (8286): drop_caches: 1 [ 255.594254][ T8286] syz.3.608 (8286): drop_caches: 1 [ 255.736352][ T5912] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 256.386095][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.392690][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.487105][ T5912] usb 5-1: config 8 has an invalid interface number: 235 but max is 0 [ 256.496065][ T5912] usb 5-1: config 8 has no interface number 0 [ 256.505395][ T5912] usb 5-1: config 8 interface 235 has no altsetting 0 [ 256.615000][ T5912] usb 5-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 256.906872][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.182535][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.194568][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.237543][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.265667][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.377870][ T5912] usb 5-1: string descriptor 0 read error: -71 [ 257.469064][ T5912] keyspan 5-1:8.235: Keyspan - (without firmware) converter detected [ 257.489754][ T5912] usb 5-1: USB disconnect, device number 19 [ 257.505081][ T5912] keyspan 5-1:8.235: device disconnected [ 257.535621][ T122] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 257.726296][ T122] usb 4-1: Using ep0 maxpacket: 8 [ 257.745339][ T122] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 257.770843][ T8328] syz.2.620 (8328): drop_caches: 1 [ 257.785294][ T122] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 257.806630][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.855076][ T122] usb 4-1: config 0 descriptor?? [ 257.874932][ T8328] syz.2.620 (8328): drop_caches: 1 [ 258.326402][ T5912] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 258.393993][ T122] corsair 0003:1B1C:1B09.0003: unbalanced delimiter at end of report description [ 258.413451][ T122] corsair 0003:1B1C:1B09.0003: parse failed [ 258.420432][ T122] corsair 0003:1B1C:1B09.0003: probe with driver corsair failed with error -22 [ 258.476282][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 258.486844][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.501849][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 258.533709][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.573301][ T5912] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 258.592259][ T8320] tipc: Started in network mode [ 258.602417][ T8320] tipc: Node identity 917f, cluster identity 4711 [ 258.611166][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.622935][ T8320] tipc: Node number set to 37247 [ 258.629602][ T5912] usb 5-1: Product: syz [ 258.637731][ T8320] tipc: Cannot configure node identity twice [ 258.644003][ T5912] usb 5-1: Manufacturer: syz [ 258.649542][ T5912] usb 5-1: SerialNumber: syz [ 258.661681][ T5912] usb 5-1: config 0 descriptor?? [ 258.662108][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.676034][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.681857][ T5912] radioshark 5-1:0.0: Invalid radioSHARK device [ 258.706336][ T5912] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 258.725739][ T5912] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 258.908890][ T5913] usb 5-1: USB disconnect, device number 20 [ 259.726946][ T8358] Device name cannot be null; rc = [-22] [ 260.831347][ T122] usb 4-1: USB disconnect, device number 26 [ 261.213173][ T8367] netlink: 56 bytes leftover after parsing attributes in process `syz.5.628'. [ 261.232453][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 262.088806][ T5885] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 262.886727][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 262.915544][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.928162][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.942591][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.955202][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.002197][ T5885] usb 4-1: config 0 descriptor?? [ 263.035489][ T5885] hub 4-1:0.0: USB hub found [ 263.285067][ T5885] hub 4-1:0.0: 1 port detected [ 263.969003][ T5885] hub 4-1:0.0: activate --> -90 [ 264.282305][ T8421] netlink: 104 bytes leftover after parsing attributes in process `syz.3.635'. [ 264.307461][ T48] usb 4-1: USB disconnect, device number 27 [ 264.316461][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 264.330572][ T5885] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 264.486388][ T24] usb 6-1: device descriptor read/64, error -71 [ 264.778048][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 264.787399][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.990935][ T8420] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 265.008270][ T24] usb 6-1: device descriptor read/64, error -71 [ 265.141842][ T24] usb usb6-port1: attempt power cycle [ 265.216471][ T5913] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 265.255641][ T8435] netlink: 'syz.2.647': attribute type 3 has an invalid length. [ 265.268235][ T8435] netlink: 'syz.2.647': attribute type 3 has an invalid length. [ 265.560672][ T8437] netlink: 88 bytes leftover after parsing attributes in process `syz.4.648'. [ 265.576603][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 265.698163][ T5913] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 265.726246][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.759255][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.776233][ T5913] usb 2-1: config 1 has no interface number 0 [ 265.782474][ T5913] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.817776][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 265.833996][ T5913] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.856489][ T24] usb 6-1: device descriptor read/8, error -71 [ 265.858708][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.886209][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.894252][ T5913] usb 2-1: Product: syz [ 265.924159][ T5913] usb 2-1: Manufacturer: syz [ 265.936380][ T5913] usb 2-1: SerialNumber: syz [ 265.957622][ T5913] cdc_wdm 2-1:1.128: skipping garbage [ 265.975383][ T5913] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 265.992239][ T5913] cdc_wdm 2-1:1.128: Unknown control protocol [ 266.043240][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'. [ 266.106218][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 266.153058][ T24] usb 6-1: device descriptor read/8, error -71 [ 266.161236][ T5913] usb 2-1: USB disconnect, device number 18 [ 266.216387][ T5885] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 266.266874][ T24] usb usb6-port1: unable to enumerate USB device [ 266.386925][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 266.402944][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.418279][ T5885] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 266.435870][ T5885] usb 5-1: config 8 has no interface number 0 [ 266.462203][ T5885] usb 5-1: config 8 interface 255 has no altsetting 0 [ 266.488830][ T5885] usb 5-1: string descriptor 0 read error: -22 [ 266.500697][ T5885] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 266.533227][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.537297][ T8457] syz.2.654 (8457): drop_caches: 1 [ 266.945502][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 267.060698][ T5885] catc 5-1:8.255: Can't set altsetting 1. [ 267.073396][ T5885] catc 5-1:8.255: probe with driver catc failed with error -5 [ 267.330276][ T5885] usb 5-1: USB disconnect, device number 21 [ 269.294669][ T8457] syz.2.654 (8457): drop_caches: 1 [ 269.882885][ T8485] FAULT_INJECTION: forcing a failure. [ 269.882885][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.897619][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.2.660 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 269.897645][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.897657][ T8485] Call Trace: [ 269.897664][ T8485] [ 269.897672][ T8485] dump_stack_lvl+0x189/0x250 [ 269.897697][ T8485] ? __pfx____ratelimit+0x10/0x10 [ 269.897718][ T8485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.897739][ T8485] ? __pfx__printk+0x10/0x10 [ 269.897762][ T8485] ? __might_fault+0xb0/0x130 [ 269.897792][ T8485] should_fail_ex+0x414/0x560 [ 269.897817][ T8485] _copy_from_user+0x2d/0xb0 [ 269.897843][ T8485] ___sys_recvmsg+0x12e/0x510 [ 269.897868][ T8485] ? __pfx____sys_recvmsg+0x10/0x10 [ 269.897917][ T8485] ? __might_fault+0xb0/0x130 [ 269.897939][ T8485] do_recvmmsg+0x307/0x770 [ 269.897967][ T8485] ? __pfx_do_recvmmsg+0x10/0x10 [ 269.897998][ T8485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.898038][ T8485] __x64_sys_recvmmsg+0x190/0x240 [ 269.898060][ T8485] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 269.898076][ T8485] ? rcu_is_watching+0x15/0xb0 [ 269.898102][ T8485] ? do_syscall_64+0xbe/0x3b0 [ 269.898127][ T8485] do_syscall_64+0xfa/0x3b0 [ 269.898146][ T8485] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.898172][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.898191][ T8485] ? clear_bhb_loop+0x60/0xb0 [ 269.898213][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.898231][ T8485] RIP: 0033:0x7fc4de78ebe9 [ 269.898248][ T8485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.898263][ T8485] RSP: 002b:00007fc4df6a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 269.898283][ T8485] RAX: ffffffffffffffda RBX: 00007fc4de9b6180 RCX: 00007fc4de78ebe9 [ 269.898297][ T8485] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000003 [ 269.898309][ T8485] RBP: 00007fc4df6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 269.898320][ T8485] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 269.898332][ T8485] R13: 00007fc4de9b6218 R14: 00007fc4de9b6180 R15: 00007ffde2c5e648 [ 269.898362][ T8485] [ 270.467607][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 270.526323][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 270.697840][ T122] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 270.731631][ T8487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.946607][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 271.214662][ T122] usb 5-1: Using ep0 maxpacket: 32 [ 271.232066][ T122] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 271.246274][ T122] usb 5-1: config 0 has no interface number 0 [ 271.252560][ T122] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.280534][ T122] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 271.290062][ T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.298482][ T122] usb 5-1: Product: syz [ 271.302906][ T122] usb 5-1: Manufacturer: syz [ 271.307824][ T122] usb 5-1: SerialNumber: syz [ 271.323710][ T122] usb 5-1: config 0 descriptor?? [ 271.339431][ T122] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 271.349460][ T122] em28xx 5-1:0.132: Video interface 132 found: [ 271.895210][ T122] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 272.872206][ T122] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 272.901073][ T122] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 272.933691][ T122] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 273.046489][ T122] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 273.054612][ T122] em28xx 5-1:0.132: analog set to bulk mode. [ 273.060724][ T5936] em28xx 5-1:0.132: Registering V4L2 extension [ 273.078245][ T122] usb 5-1: USB disconnect, device number 22 [ 273.090393][ T122] em28xx 5-1:0.132: Disconnecting em28xx [ 273.257212][ T8525] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.268540][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 274.473919][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.673'. [ 274.479313][ T5936] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 274.810707][ T5936] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 274.826689][ T5936] em28xx 5-1:0.132: No AC97 audio processor [ 274.888395][ T8518] syz.3.670 (8518): drop_caches: 1 [ 274.910071][ T5936] usb 5-1: Decoder not found [ 274.916348][ T5936] em28xx 5-1:0.132: failed to create media graph [ 274.922950][ T5936] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 274.938404][ T5936] em28xx 5-1:0.132: Remote control support is not available for this card. [ 274.948785][ T122] em28xx 5-1:0.132: Closing input extension [ 274.977592][ T122] em28xx 5-1:0.132: Freeing device [ 275.029967][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 275.046363][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 275.290380][ T8548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.676'. [ 275.326239][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 275.976376][ T5840] Bluetooth: hci5: command 0x1003 tx timeout [ 275.982896][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 276.157236][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 276.160456][ T5848] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 276.167266][ T10] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 276.276256][ T10] usb 2-1: config 0 has no interface number 0 [ 276.289001][ T8552] XFS (nullb0): Invalid superblock magic number [ 276.325906][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=f7.98 [ 276.681082][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.689870][ T10] usb 2-1: Product: syz [ 276.694189][ T10] usb 2-1: Manufacturer: syz [ 276.698969][ T10] usb 2-1: SerialNumber: syz [ 276.716403][ T10] usb 2-1: config 0 descriptor?? [ 276.740232][ T10] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 277.166460][ T122] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 277.342461][ T122] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.609289][ T122] usb 6-1: not running at top speed; connect to a high speed hub [ 277.639495][ T122] usb 6-1: config index 0 descriptor too short (expected 32795, got 27) [ 277.648057][ T122] usb 6-1: config 129 has an invalid interface number: 145 but max is 0 [ 277.660135][ T2343] pvrusb2: Invalid write control endpoint [ 277.661001][ T10] usb 2-1: USB disconnect, device number 19 [ 277.699134][ T122] usb 6-1: config 129 has no interface number 0 [ 277.705639][ T122] usb 6-1: config 129 interface 145 has no altsetting 0 [ 277.734487][ T2343] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 277.766600][ T2343] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 277.869960][ T8580] "syz.3.683" (8580) uses obsolete ecb(arc4) skcipher [ 277.992522][ T8593] syz.2.685 (8593): drop_caches: 1 [ 278.019210][ T122] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 278.348556][ T122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.362939][ T122] usb 6-1: Product: syz [ 278.368817][ T122] usb 6-1: Manufacturer: syz [ 278.373598][ T122] usb 6-1: SerialNumber: syz [ 278.382051][ T8580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.422752][ T8593] syz.2.685 (8593): drop_caches: 1 [ 278.619042][ T5913] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 278.796983][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 278.875247][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.931416][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.958174][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 278.992477][ T5913] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 279.002131][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.016803][ T5913] usb 5-1: config 0 descriptor?? [ 279.126108][ T8532] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 279.350183][ T8532] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 279.430111][ T8532] usb 3-1: config 0 has no interface number 0 [ 279.445790][ T75] Bluetooth: Error in BCSP hdr checksum [ 279.529228][ T8532] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 279.679498][ T8532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.801372][ T8532] usb 3-1: config 0 descriptor?? [ 279.975520][ T5913] usbhid 5-1:0.0: can't add hid device: -71 [ 279.981894][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 279.982250][ T8532] usb 3-1: bad CDC descriptors [ 279.993549][ T5913] usb 5-1: USB disconnect, device number 23 [ 280.011448][ T122] usb 6-1: USB disconnect, device number 25 [ 280.099806][ T8600] netlink: 'syz.2.688': attribute type 6 has an invalid length. [ 280.112790][ T8600] netlink: 'syz.2.688': attribute type 6 has an invalid length. [ 280.260941][ T8600] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 280.345028][ T8600] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 280.658810][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 281.187430][ T5840] Bluetooth: hci5: command 0x1003 tx timeout [ 281.193957][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 281.653121][ T8615] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 281.827058][ T122] usb 3-1: USB disconnect, device number 33 [ 281.907210][ T5913] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 282.096322][ T5913] usb 4-1: device descriptor read/64, error -71 [ 283.295161][ T5913] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 283.816266][ T5913] usb 4-1: device descriptor read/64, error -71 [ 283.930377][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.704'. [ 283.931377][ T5913] usb usb4-port1: attempt power cycle [ 284.577971][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 285.770413][ T8701] program syz.1.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.630170][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.649210][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.650965][ T30] audit: type=1800 audit(1754914962.378:68): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.723" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 286.678284][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.710472][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.745782][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.755375][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.846208][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 287.037925][ T8723] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.346402][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 287.367851][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.379263][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.396258][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.406746][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.470821][ T9] usb 4-1: config 0 descriptor?? [ 287.479431][ T9] hub 4-1:0.0: USB hub found [ 287.654951][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 287.678026][ T9] hub 4-1:0.0: 1 port detected [ 288.131452][ T8736] binder: 8735:8736 ioctl c018937e 200000000600 returned -22 [ 288.283329][ T9] hub 4-1:0.0: activate --> -90 [ 288.513677][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 288.578911][ T8745] Invalid logical block size (-5) [ 288.807225][ T8532] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 288.902488][ T8751] netlink: 104 bytes leftover after parsing attributes in process `syz.3.722'. [ 288.924139][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 288.937304][ T9] usb 4-1: Failed to suspend device, error -71 [ 288.967858][ T9] usb 4-1: USB disconnect, device number 31 [ 288.970819][ T8532] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 288.982676][ T8532] usb 6-1: config 0 has no interface number 0 [ 288.991338][ T8532] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 289.002690][ T8532] usb 6-1: config 0 interface 11 has no altsetting 0 [ 289.009667][ T8532] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 289.019022][ T8532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.041213][ T8532] usb 6-1: config 0 descriptor?? [ 289.047789][ T8744] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 289.057053][ T8532] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 289.066882][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 289.074933][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 289.083043][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 289.091052][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 289.099080][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 289.107174][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 289.118877][ T8532] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 289.128998][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 289.137050][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 289.144959][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 289.152889][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 289.160833][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 289.169989][ T8532] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 289.183968][ T8532] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 289.415535][ T8753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.726'. [ 289.476254][ T8754] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.026802][ T122] usb 6-1: USB disconnect, device number 26 [ 290.040097][ T122] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 290.060364][ T122] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 290.077486][ T122] keyspan 6-1:0.11: device disconnected [ 290.426972][ T122] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 290.599534][ T122] usb 6-1: Using ep0 maxpacket: 32 [ 290.629702][ T122] usb 6-1: unable to get BOS descriptor or descriptor too short [ 290.650763][ T122] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 290.659969][ T122] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.670420][ T122] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.718771][ T122] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.728044][ T122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.737017][ T122] usb 6-1: Product: syz [ 290.741257][ T122] usb 6-1: Manufacturer: syz [ 290.745978][ T122] usb 6-1: SerialNumber: syz [ 291.020283][ T8765] netlink: 240 bytes leftover after parsing attributes in process `syz.5.732'. [ 291.057846][ T122] usb 6-1: 0:2 : does not exist [ 291.103666][ T122] usb 6-1: USB disconnect, device number 27 [ 293.243751][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 293.426103][ T8800] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 293.447321][ T8794] mmap: syz.5.741 (8794): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 293.606382][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 293.721200][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.735841][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.784211][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 293.895424][ T8820] ------------[ cut here ]------------ [ 293.900198][ T5985] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 293.901480][ T8820] WARNING: CPU: 1 PID: 8820 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 293.920256][ T8820] Modules linked in: [ 293.924575][ T8820] CPU: 1 UID: 0 PID: 8820 Comm: syz.2.746 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 293.934618][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.944904][ T8820] RIP: 0010:folio_memcg+0x1a8/0x310 [ 293.950290][ T8820] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 293.970602][ T8820] RSP: 0018:ffffc9000bd07250 EFLAGS: 00010287 [ 293.976864][ T8820] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 293.985351][ T8820] RDX: ffffc9000fd45000 RSI: 0000000000004554 RDI: 0000000000004555 [ 293.993668][ T8820] RBP: 0000000000000000 R08: ffffea0001f536c7 R09: 1ffffd40003ea6d8 [ 294.001883][ T8820] R10: dffffc0000000000 R11: fffff940003ea6d9 R12: ffffea0001f536f0 [ 294.010195][ T8820] R13: dffffc0000000000 R14: ffff88802f65e580 R15: 0000000000000002 [ 294.018592][ T8820] FS: 00007fc4df6a16c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 294.027907][ T8820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.034704][ T8820] CR2: 0000000000000000 CR3: 0000000079820000 CR4: 00000000003526f0 [ 294.043237][ T8820] DR0: 0000000000000003 DR1: 0000000000000008 DR2: 0000000000000401 [ 294.051382][ T8820] DR3: 0000000000001810 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 294.059598][ T8820] Call Trace: [ 294.062909][ T8820] [ 294.065876][ T8820] workingset_activation+0x5f/0x4a0 [ 294.071247][ T8820] ? folio_mark_accessed+0x361/0x4a0 [ 294.076834][ T8820] folio_mark_accessed+0x3b5/0x4a0 [ 294.082078][ T8820] kvm_release_page_clean+0x9a/0xe0 [ 294.087348][ T8820] kvm_tdp_page_fault+0x2dd/0x370 [ 294.092409][ T8820] kvm_mmu_do_page_fault+0x2c5/0x640 [ 294.097828][ T8820] ? vmx_vcpu_run+0xcb0/0x25d0 [ 294.102616][ T8820] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 294.108505][ T8820] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 294.114174][ T8820] kvm_mmu_page_fault+0x22f/0xb70 [ 294.119419][ T8820] ? __pfx_handle_ept_violation+0x10/0x10 [ 294.125519][ T8820] vmx_handle_exit+0x1090/0x18a0 [ 294.131252][ T8820] ? vcpu_run+0x361c/0x6f70 [ 294.135888][ T8820] ? preempt_schedule_thunk+0x16/0x30 [ 294.141354][ T8820] vcpu_run+0x432e/0x6f70 [ 294.146000][ T8820] ? vcpu_run+0x361c/0x6f70 [ 294.150779][ T8820] ? __pfx_vcpu_run+0x10/0x10 [ 294.155505][ T8820] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 294.161302][ T8820] ? rcu_is_watching+0x15/0xb0 [ 294.166099][ T8820] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 294.171714][ T8820] ? preempt_schedule_common+0x83/0xd0 [ 294.177419][ T8820] ? preempt_schedule+0xae/0xc0 [ 294.182391][ T8820] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 294.188225][ T8820] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 294.194236][ T8820] ? preempt_schedule_thunk+0x16/0x30 [ 294.199785][ T8820] ? look_up_lock_class+0x74/0x170 [ 294.205017][ T8820] ? register_lock_class+0x51/0x320 [ 294.210304][ T8820] ? __lock_acquire+0xab9/0xd20 [ 294.215215][ T8820] kvm_vcpu_ioctl+0x95c/0xe90 [ 294.219983][ T8820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 294.225381][ T8820] ? __lock_acquire+0xab9/0xd20 [ 294.230515][ T8820] ? __asan_memset+0x22/0x50 [ 294.235316][ T8820] ? smack_file_ioctl+0x302/0x340 [ 294.240401][ T8820] ? __pfx_smack_file_ioctl+0x10/0x10 [ 294.245899][ T8820] ? __fget_files+0x2a/0x420 [ 294.250754][ T8820] ? __fget_files+0x3a0/0x420 [ 294.255550][ T8820] ? __fget_files+0x2a/0x420 [ 294.260409][ T8820] ? bpf_lsm_file_ioctl+0x9/0x20 [ 294.265375][ T8820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 294.270744][ T8820] __se_sys_ioctl+0xfc/0x170 [ 294.275470][ T8820] do_syscall_64+0xfa/0x3b0 [ 294.280107][ T8820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.286316][ T8820] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 294.291973][ T8820] ? clear_bhb_loop+0x60/0xb0 [ 294.296743][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.302662][ T8820] RIP: 0033:0x7fc4de78ebe9 [ 294.307272][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.327380][ T8820] RSP: 002b:00007fc4df6a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.336108][ T8820] RAX: ffffffffffffffda RBX: 00007fc4de9b6180 RCX: 00007fc4de78ebe9 [ 294.344322][ T8820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 294.352362][ T8820] RBP: 00007fc4de811e19 R08: 0000000000000000 R09: 0000000000000000 [ 294.360424][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.368486][ T8820] R13: 00007fc4de9b6218 R14: 00007fc4de9b6180 R15: 00007ffde2c5e648 [ 294.376559][ T8820] [ 294.379694][ T8820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 294.387222][ T8820] CPU: 1 UID: 0 PID: 8820 Comm: syz.2.746 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 294.397224][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.407388][ T8820] Call Trace: [ 294.410684][ T8820] [ 294.413629][ T8820] dump_stack_lvl+0x99/0x250 [ 294.418242][ T8820] ? __asan_memcpy+0x40/0x70 [ 294.422959][ T8820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.428188][ T8820] ? __pfx__printk+0x10/0x10 [ 294.432899][ T8820] panic+0x2db/0x790 [ 294.436920][ T8820] ? __pfx_panic+0x10/0x10 [ 294.441393][ T8820] __warn+0x31b/0x4b0 [ 294.445391][ T8820] ? folio_memcg+0x1a8/0x310 [ 294.450002][ T8820] ? folio_memcg+0x1a8/0x310 [ 294.454619][ T8820] report_bug+0x2be/0x4f0 [ 294.458978][ T8820] ? folio_memcg+0x1a8/0x310 [ 294.463595][ T8820] ? folio_memcg+0x1a8/0x310 [ 294.468201][ T8820] ? folio_memcg+0x1aa/0x310 [ 294.472817][ T8820] handle_bug+0x84/0x160 [ 294.477097][ T8820] exc_invalid_op+0x1a/0x50 [ 294.481622][ T8820] asm_exc_invalid_op+0x1a/0x20 [ 294.486592][ T8820] RIP: 0010:folio_memcg+0x1a8/0x310 [ 294.491905][ T8820] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 294.511886][ T8820] RSP: 0018:ffffc9000bd07250 EFLAGS: 00010287 [ 294.518340][ T8820] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 294.526418][ T8820] RDX: ffffc9000fd45000 RSI: 0000000000004554 RDI: 0000000000004555 [ 294.534423][ T8820] RBP: 0000000000000000 R08: ffffea0001f536c7 R09: 1ffffd40003ea6d8 [ 294.542417][ T8820] R10: dffffc0000000000 R11: fffff940003ea6d9 R12: ffffea0001f536f0 [ 294.550415][ T8820] R13: dffffc0000000000 R14: ffff88802f65e580 R15: 0000000000000002 [ 294.558417][ T8820] ? folio_memcg+0x1a7/0x310 [ 294.563100][ T8820] workingset_activation+0x5f/0x4a0 [ 294.568330][ T8820] ? folio_mark_accessed+0x361/0x4a0 [ 294.573998][ T8820] folio_mark_accessed+0x3b5/0x4a0 [ 294.579231][ T8820] kvm_release_page_clean+0x9a/0xe0 [ 294.584694][ T8820] kvm_tdp_page_fault+0x2dd/0x370 [ 294.589754][ T8820] kvm_mmu_do_page_fault+0x2c5/0x640 [ 294.595123][ T8820] ? vmx_vcpu_run+0xcb0/0x25d0 [ 294.599914][ T8820] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 294.605786][ T8820] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 294.611359][ T8820] kvm_mmu_page_fault+0x22f/0xb70 [ 294.616514][ T8820] ? __pfx_handle_ept_violation+0x10/0x10 [ 294.622270][ T8820] vmx_handle_exit+0x1090/0x18a0 [ 294.627335][ T8820] ? vcpu_run+0x361c/0x6f70 [ 294.631883][ T8820] ? preempt_schedule_thunk+0x16/0x30 [ 294.637393][ T8820] vcpu_run+0x432e/0x6f70 [ 294.641780][ T8820] ? vcpu_run+0x361c/0x6f70 [ 294.646438][ T8820] ? __pfx_vcpu_run+0x10/0x10 [ 294.651157][ T8820] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 294.657081][ T8820] ? rcu_is_watching+0x15/0xb0 [ 294.661929][ T8820] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 294.667621][ T8820] ? preempt_schedule_common+0x83/0xd0 [ 294.673118][ T8820] ? preempt_schedule+0xae/0xc0 [ 294.678003][ T8820] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 294.683843][ T8820] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 294.690050][ T8820] ? preempt_schedule_thunk+0x16/0x30 [ 294.695464][ T8820] ? look_up_lock_class+0x74/0x170 [ 294.700627][ T8820] ? register_lock_class+0x51/0x320 [ 294.705864][ T8820] ? __lock_acquire+0xab9/0xd20 [ 294.710761][ T8820] kvm_vcpu_ioctl+0x95c/0xe90 [ 294.715474][ T8820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 294.720702][ T8820] ? __lock_acquire+0xab9/0xd20 [ 294.725665][ T8820] ? __asan_memset+0x22/0x50 [ 294.730286][ T8820] ? smack_file_ioctl+0x302/0x340 [ 294.735331][ T8820] ? __pfx_smack_file_ioctl+0x10/0x10 [ 294.740741][ T8820] ? __fget_files+0x2a/0x420 [ 294.745386][ T8820] ? __fget_files+0x3a0/0x420 [ 294.750100][ T8820] ? __fget_files+0x2a/0x420 [ 294.754821][ T8820] ? bpf_lsm_file_ioctl+0x9/0x20 [ 294.759795][ T8820] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 294.765029][ T8820] __se_sys_ioctl+0xfc/0x170 [ 294.769657][ T8820] do_syscall_64+0xfa/0x3b0 [ 294.774364][ T8820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.780541][ T8820] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 294.786198][ T8820] ? clear_bhb_loop+0x60/0xb0 [ 294.790994][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.797080][ T8820] RIP: 0033:0x7fc4de78ebe9 [ 294.801686][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.821749][ T8820] RSP: 002b:00007fc4df6a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.830454][ T8820] RAX: ffffffffffffffda RBX: 00007fc4de9b6180 RCX: 00007fc4de78ebe9 [ 294.838479][ T8820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 294.846579][ T8820] RBP: 00007fc4de811e19 R08: 0000000000000000 R09: 0000000000000000 [ 294.854572][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.862647][ T8820] R13: 00007fc4de9b6218 R14: 00007fc4de9b6180 R15: 00007ffde2c5e648 [ 294.870652][ T8820] [ 294.873967][ T8820] Kernel Offset: disabled [ 294.878306][ T8820] Rebooting in 86400 seconds..