last executing test programs: 16.304577517s ago: executing program 1 (id=1101): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x101402, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x3, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x2c9, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e69ba3207c2c1205d45d000000010902b7020100000000090474000affffff0009050f100004098100662366b51c849f076b5b5b25fb80f278f30bb7ef2b628f62479b817451d37db2c74fcb02b1cfadbab37943f4bcfab008f986d10a1540dee08adb9893ce9ea50231962215e018a3703a22d620b4373b14b6bf7556343d7a0470c16027a1b3f1eef9d424e4222d090508032000023f02"], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r6) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000fb800000c0"]) close(r6) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r6], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r10}, 0x10) 13.335923173s ago: executing program 3 (id=1107): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000902000300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xde, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x0, 0x8, 0x10, 0xf1}, 0x86, &(0x7f0000000240)={0x5, 0xf, 0x86, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xb, 0x9c, 0x5, 0x9, 0x38}, @generic={0x6f, 0x10, 0x1, "11d5a76d6240a45bd3c3f026394eb5e2ec8522754ab3b779d00e7c8e8da0f41289cc6d4550d3a479fc4fdb8e99ebda00537cbbb692d574996b3b8648d23076bfa5d3d5eaebb47b438390887f2158d883cbb591247f3ddaad368d5a56228a4e0b5aed248a9a106a1918200031"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x6, 0x8}]}, 0x1, [{0xf1, &(0x7f0000000500)=@string={0xf1, 0x3, "271c98c5aab98ddcc89615a3c20642902a44bcbada3b08b56fe152d2f4c94dd0281fdba893dc7bf327ae0b5313da16a2932b028d153df8cad27faf09d11a5035964883a32e1c99120289b1b13fb8f2dd1c9e06fb5e19f4c451e36f41969fc292a688f454ee89c5620d244cf79028b7c96965dd74227b61c12597ba11fd4e778702cf7718269bf30aa2a616b2e6ab63b7f2e5d5b1229c3a321d44e936ca127aa70edae8c2e2ec2eb47e309ed0e0719e916d0f630d119a7fad00cecd12d950632eeb640e3c8c8664c54173a4a6b93aa2b65b495134abb5d5ea7e0634b8bd871baec263922dd4e167bad12aa73d0cdb96"}}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$input_event(r1, &(0x7f00000003c0)={{0x0, 0x2710}, 0x3, 0x3, 0xfffffffe}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) r4 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000000)=0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x2f0, 0x16, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@nested={0x2d9, 0x0, 0x0, 0x1, [@generic="4b24f784bbbf60bac1efe39d11d20a5dfaa5fb90270fa68ddb50cf69b01e1dc10ec369443d3db338e976aabf7a98b88f794c2a0dd95c39785ba1b96336ffaefc2f71e29c92e28a2cc0463ccfcb209243be9ef33dbacd8689f779b4167719713dd036d0a8c6f075ee409336632b8cd70cff78abce2100f903fd92ea72edda745537588ffd4b00d23f5774bb8a4e971b44024b7f894eb44bfc92f81f2f89dbe68b4e7af94a2dae8f4ff6ab96875cfa722103bf110028fe37826b7157d51b6df943268e1f166ed85632c5c2defc9f5223c46f41ea5ee71b518693eee796c6ffdbae56101682ede92fe2", @typed={0x8, 0x148, 0x0, 0x0, @uid=r5}, @generic="614aec332035cefc2c41407a8f6c474ddee83b59efaffd090f76c068cbecf5afe7bbdf266b2f630582a06ebef2fb727904f347722861e379e2878a4a67", @generic="e9378ebff0ab3017900fbe9fcf6d276497b1acda4d1926772e7613d38d6d2bd234667894ff17ea04ab4b5799c1ae209c9ee6c0bcbe4508fe981950929533d8b0197ea4eabc1930d109a620959c2fa085b9402b5bb8c73b155bdc551dc17272dfafccec22afef0043a4db34a934cfc4a657681eff408c72465f72d3e8ce99c74b0e4691eca4ab21495cc4bd31b60992b1f9c2b6e67f85a91a8abab6bf9929ea372d50f1121e02b70f54a513d4c395082b89854a1fc0e5c4ee05cf778612f6f7c9dea14457cd61d51019320f72d1720efe6d18e5e9b3c444b6", @generic="368490e82b16c7d8dff0600eaaa11f590719dcc5ad2ba01a9e5777396c9be64174ce3074faf67721b1e1ef87c0b825c2666ca3a53a1a13247fa1d75bd6785ae3965428e7c552729bbeea2bf9828b70b8ce1d953a78c142c96468c709226d591a0306ec5d50d6cf36677dc0a0b727929dbca20d35ea92da46a41f4f2f8005d5917739c18210e600729888925ba79f9bf311ff2d3f6538c466d7c5671ab5e1ab6b7add96b41b45a8b236a3b7fe1d6b7263c7b5bac845124423d71798fcbdb1fb15c1b455928339192aa20ad34035cebc00"]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4004080}, 0x40804) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000b80), 0x200020, &(0x7f0000000c40)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x7fff}}], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, '/dev/btrfs-control\x00'}}]}}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x2}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x161000, 0x0) openat$cgroup_devices(r8, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x73, 0xa0, 0xb2, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x21}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x80, 0x4, 0x5, 0x20, 0xb}, 0x108, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x7, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180c}}, {0x1c, &(0x7f0000000780)=@string={0x1c, 0x3, "f4e7048782012ff96fac91cab1960afaed20fb16511a180ccffa"}}, {0xe, &(0x7f00000007c0)=@string={0xe, 0x3, "e62fab0ded2715131acb289c"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}, {0xa3, &(0x7f0000000840)=@string={0xa3, 0x3, "7b4966d1057e212e014f6ac34b4fd1127977ff91cd09eb5a9b5070499c61baa74b634f3b866551796e3b4a47487d43a01e0de2aa615df8744fda159b6d5b6236fde845622ad41eb75c9ff72d749f9e34658a7b71c068a3d1b69071ff1ef70c420b56fd69d50dfa9bbb64dccb6b2e4de528e8901c7c3a7044bcb5052287bdbaf26a10a7fb2b20c5ff32bc4626de63573fbd78a71dd6360817e3753051e3a4257844"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1004}}, {0x3e, &(0x7f0000000940)=@string={0x3e, 0x3, "ee3d23b2dfae13a0a12a295dc64e2492d1f3fdb5cb659780dc9214a0e104e5264dbf7d420fc397c47f4c395e2740dadf92dee817277652cd4c02e0ab"}}]}) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 13.306888176s ago: executing program 1 (id=1108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b 1:* m'], 0xa) syz_emit_vhci(0x0, 0x21) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x80, 0x82) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000414000000b7030000000000008500000083000018bf09000000000000550901000000d724277400009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000018000000000f0ffffffb702000008000000182300009edc06be30a37cdfe2bac70ef19bcec61f000000cd7c434b00e67901bb742a98d003212963479e7e1f468d0e01f6c9eb457286a93af1bae658edb1a39708214b601e7ba70c3dfb1be96ec1b429b9f300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000bb000000bf91000000000000b70200000000000085000000a0000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="03c800b0091eecb3df8a20f14095052f28d7a631399397f1cdb30a1d2261f31d2c3044f227512958115a4ff32d644e0a82dbea7212c05da0837fc0d2d4c405d2372d6b065b41ca9f5780c4d775fb0c536a536c0af9a2f4309555ce2f5db76a2a4ef7831f25d6ebaca462d7048a5fa66dd37254cd30a68577d9b323ec41aa26b94c3f749085977b61c4c567e5e9c64b02b5379711d58704b7f989cb3dae3fb42a4757e4c6d44b54cd50eb9b05dd1d3d87bc158d2907b666d6efd6f05285285a22dfd17df51b8bf71e3eca14e61acccc6fcebf86de71d1ceb37a54c993537d6be96e7eb5f4bf5d247128f510a643f76c018663d5fc62399729ee52b48ca54ed7370960f0754d1db4ac6429f3a74276a01b4430aff80ab107f75d251802bec84b050b20e8e1bdb036ff1705d11bad"], 0xb4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x8, 0xa}, {0x101, 0x6, 0xb0, 0x100, 0x8}}}}, 0x17) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x293) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x9003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 9.715482342s ago: executing program 1 (id=1115): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005dc0)=@delchain={0x168, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xd4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xc0, 0x6, [@m_nat={0x3c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x13, 0x6, "ef93daeef78df7f9a037a0d7a2f92a"}, {0xc}, {0xc}}}, @m_ctinfo={0x80, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x51, 0x6, "007cbe9797ed2fc991bbda934119c50857fa14f72b7e9af7ec8d5705e06fd24455a0d1bc49ce2faa684e9a77ec7882a6f9be5a4ed10a4a816f5d68f97b85bcc59797b7734c4d6d50f76e631b8d"}, {0xc}, {0xc}}}]}]}}]}, 0x168}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x111}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.575395196s ago: executing program 1 (id=1116): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x271, 0x0, &(0x7f0000000140)="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"}) syz_usb_connect(0x2, 0x424, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0xde, 0xeb, 0x2e, 0x10, 0xaf0, 0x6800, 0x1ee6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x412, 0x1, 0xfe, 0x2, 0xc0, 0x3, [{{0x9, 0x4, 0xa6, 0x4c, 0x6, 0x99, 0xfe, 0x30, 0x47, [@hid_hid={0x9, 0x21, 0x77ab, 0xdf, 0x1, {0x22, 0xef7}}], [{{0x9, 0x5, 0x80, 0xc, 0x0, 0xa, 0x9, 0x7, [@generic={0x37, 0x3b, "dce8506ccd47a0c9b8206b3121d2370408a82093197cc569d31c6d595991943161b94708652d759f672cae7b49fbb8744b91ac8f04"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xa, 0x9, 0xf, [@generic={0xa8, 0x23, "50110555105c6b9d11e7b5fe141ba2baf39669488f084a86a112594f3c9015703f0b58e5e88a7746045b01dd2c5b7c1cecf4bf239a14b116f4c9a0281469a2b483cefc7a96e1e288a45a18c6050544c6f1e3d62411359736143c9f185bcc10b9bbe9f176d2444470f8210d7d5cdc931b29affe6d0d22e60aa9e8dc83e31a931c4de7bc75dddc9816c9c4ae5431cb60f241a1a9a4620e18217d03fc73ed25ff95189c32a39dc7"}, @generic={0x6a, 0xe, "7580df1c7fd444a7e026f816a24a2e2ff591decce8f114c56c9c3355802fc15be98950bdcbf1d7f3505307258413cc21fd35f5b1e1e72852684bd34b9449961a587e6d7e2fbcfedac2b984c3f85cae489aea7491c6a244e672a9d2a55eb2684de6d87ea0683e09b3"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x4, 0xa7, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0xc}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0xb, 0x38, 0x7, [@generic={0x9f, 0xc, "08f7ffb1be5dda3bf5254a2dcb4ad030dfbf6a03372c8ee4395c81acb4ae56b132759992ea1adc942295a2e1f7f049d1b4fa4de9d6d29590e9d734f5c6e0c9e7c8b9c3198ce1f5a0b86c0ffa9264933fb97fc60109dc3004d062f6decaf3248993e2a098be87af42704aed67b5e32d00ac07c954141e2cb01a185776fbbfda5b43b110da3f62beb1a01c3a2a810ee9c63b77dbc31326520b9826666806"}, @generic={0xec, 0x23, "3cec22241c3c6a5432d731fc6f6b6d4741de97969d9687d45c5665538b0c52d84d1426f98b5bd8b0c3dbcbb316d1de5585418528c9ffaa5a9610b24e8b37396650a223138a3154f50e39092d46181b348bb58cace10aedb89d413451c30288479a6a38f09f7ac884be0cf5db926f45b51a5fb76850a16719bf0af3cbf47080f800ccb6f8a3fe362f82abd148145721374432a39a27da68d3dbc66de2ea9284fe1371aeebb5e7edb1b0d23fb90dfe3312aeef73fd95002a244263004cdb65d1aaf1b8b3e8eaf5122bb1b099676f7ab661823503743baadfa9578cd263ba1febd1171aa09e3f18ed8f98f1"}]}}, {{0x9, 0x5, 0x1, 0x0, 0xd68998637a7e0079, 0x3, 0x7, 0x9, [@generic={0xe6, 0xf, "8778c313e9c2e8bd1be38005c6bb11fec809efc0bf746cc5f263b89acc7c863e3d8ea6f4582624e25ebd13e3d9462ef297ca8ed98a63197d9d347164ea1eec5db3f634fee10b0caf558c61700ad396767713e14651949eacb2bb0707ebfa223858f612f0c098b44dc13e4417e92d992fbc0722d7bcadea5892fce87a5417dca9feee3de4700d247587ae9948fb69e3a0957dc637fb21c5ddf80acdece040bf9d8224e4901b95e6c7801344fa9aa2c1a3da37b8bebc91ece9e49847c2cb75f47343bfb7df9cfd39d6f2106996a9c18163e30e000265d13e175899161da2d0f22940ccb1a4"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x7, 0x0, 0xf}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x6, 0x6, 0x10, 0x2}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0xe0, &(0x7f0000000940)=@string={0xe0, 0x3, "e181ef9e8133bbe4d6827af73e65e730f42d0fa551ecb1b62416c49bda6a06b5505b5a43c3921ef72fd371c8cbc43daac872e77e4e8e9373354250518fdb4850888be40265c80eacda474d991cc7ac0865e2d2d8012c42ee70805cfb92d4eb278ef78a26764bc0b0488812e0ee3e0aa2edcedc96e26c86d6518ada15baa57d81f4ee46276cd8b6ff1fb7208e0c7f59afb67f6ca6fe73d7f1a451353aafdc8a7fe83e373037d79dc9efcf950f9fc62c6d52acf766213aaa03e1b180737ef17d975f0b2a5f35a209301493b95ec0e68ea09938c735f037cefdf32e6af09db4"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x68, &(0x7f0000000a40)=@string={0x68, 0x3, "1684f443d1989d05c407e5cfbd54a6749f6910b1911235bb7565f0be15ecf841bb2023a9bf2e7dd4da8c83cb0bc4d76939170bb2490375eeff1167a60c157a525ededf94213d0a3dc81f6d2c867bdb121353768e87d63b73d162a83dc3fa596699fbea1e0b62"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1007}}, {0x15, &(0x7f0000000ac0)=@string={0x15, 0x3, "5b317362f69ea02f70ab636445bf8ca5f2c0e5"}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x48, &(0x7f0000000c40)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x71}, @in6={0xa, 0x4e22, 0x0, @mcast2}]}, &(0x7f00000004c0)=0x10) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)={0x0, 0x8}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000bc0), 0x88040, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.520880598s ago: executing program 3 (id=1118): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100000a0000000000000000000000030006000000000002000000ffffffff000000000000000005000500000000000a00000000000000bf0200000000000000000000000000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x25, 0x800, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockname$ax25(r2, &(0x7f0000000580)={{0x3, @bcast}, [@default, @rose, @netrom, @rose, @null, @rose, @rose]}, &(0x7f0000000100)=0x48) ioprio_get$uid(0x3, r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x4e20, 0x81f, 0x4e24, 0x81, 0x2, 0x80, 0x1a0, 0x3a, 0x0, r5}, {0x8, 0x100000001, 0x21aa, 0x4001ff, 0x101, 0x7, 0x2, 0x6}, {0x4, 0xfffffffffffffff8, 0x8, 0x3}, 0x81, 0x6e6bbf, 0x3, 0x0, 0x0, 0x3}, {{@in6=@local, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x1, 0x3, 0x81, 0x9, 0x3, 0x4}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) shutdown(0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x48}}, 0x0) 8.314258073s ago: executing program 3 (id=1121): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000902000300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.105252997s ago: executing program 4 (id=1122): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x215) ftruncate(r0, 0x8208204) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettfilter={0x2c, 0x2e, 0x0, 0x0, 0x0, {}, [{0x8}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0xf12, 0x4) add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000001000)={'syz', 0x3}, &(0x7f0000001000)='.', 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="a000000000000000290000000b000000001000000000000007500000000012040000000000000000000007000000000000000200000000000000080000000000000000000000000000001300000000000000360f00000000000000000000000000000600000000000000c931fe800000000000000000000000000000072000000000060000000000000000002000"/160], 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) 7.208305031s ago: executing program 0 (id=1123): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x8d18, @remote, 0x6}]}, &(0x7f0000000200)=0x10) 7.040750799s ago: executing program 1 (id=1125): syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440)) r1 = creat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x417, 0x0, &(0x7f0000000140)="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"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12) sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9c4c}, [@country_functional={0x10, 0x24, 0x7, 0x80, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0xe36b}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1}}}}}}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000007300ffb1000000006926000000000000bf67000000000000150002000fff52004507000010000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8473e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b196b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.023056554s ago: executing program 4 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b 1:* m'], 0xa) syz_emit_vhci(0x0, 0x21) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x80, 0x82) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000414000000b7030000000000008500000083000018bf09000000000000550901000000d724277400009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000018000000000f0ffffffb702000008000000182300009edc06be30a37cdfe2bac70ef19bcec61f000000cd7c434b00e67901bb742a98d003212963479e7e1f468d0e01f6c9eb457286a93af1bae658edb1a39708214b601e7ba70c3dfb1be96ec1b429b9f300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000bb000000bf91000000000000b70200000000000085000000a0000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xb4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x8, 0xa}, {0x101, 0x6, 0xb0, 0x100, 0x8}}}}, 0x17) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x293) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x9003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 6.861754982s ago: executing program 2 (id=1127): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005dc0)=@delchain={0x168, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xd4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xc0, 0x6, [@m_nat={0x3c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x13, 0x6, "ef93daeef78df7f9a037a0d7a2f92a"}, {0xc}, {0xc}}}, @m_ctinfo={0x80, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x51, 0x6, "007cbe9797ed2fc991bbda934119c50857fa14f72b7e9af7ec8d5705e06fd24455a0d1bc49ce2faa684e9a77ec7882a6f9be5a4ed10a4a816f5d68f97b85bcc59797b7734c4d6d50f76e631b8d"}, {0xc}, {0xc}}}]}]}}]}, 0x168}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x111}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.658620189s ago: executing program 2 (id=1128): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x215) ftruncate(r0, 0x8208204) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0xf12, 0x4) add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000001000)={'syz', 0x3}, &(0x7f0000001000)='.', 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="a000000000000000290000000b000000001000000000000007500000000012040000000000000000000007000000000000000200000000000000080000000000000000000000000000001300000000000000360f00000000000000000000000000000600000000000000c931fe800000000000000000000000000000072000000000060000000000000000002000"/160], 0xa0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) 6.596102658s ago: executing program 0 (id=1129): socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(0x0, 0x0, &(0x7f0000000280), 0x135408c, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x120}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x100, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x85}, 0x20000896) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001800)) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000001c40)={0x900000000000000, 0xf000, 0x2, 0xf, 0x17}) 6.251693653s ago: executing program 0 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x40000080806, 0x10000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{}, {0x20, 'cgroup.controllers\x00'}], 0xa, "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"}, 0x1020) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000170cd769fb72887e87d85ffa0700a8c7636e950a2a83dbdd1a0000000000000013f6321d3ac4d2e71527562bfa9aab000b42729c1910dfe20ee7557ea577902600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a25ada69300"/621], 0x268}}, 0x0) 5.065029864s ago: executing program 3 (id=1131): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x215) ftruncate(r0, 0x8208204) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettfilter={0x2c, 0x2e, 0x0, 0x0, 0x0, {}, [{0x8}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0xf12, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="a000000000000000290000000b000000001000000000000007500000000012040000000000000000000007000000000000000200000000000000080000000000000000000000000000001300000000000000360f00000000000000000000000000000600000000000000c931fe800000000000000000000000000000072000000000060000000000000000002000"/160], 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9}, 0x48) 4.630588746s ago: executing program 0 (id=1132): io_uring_setup(0x30d3, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) r6 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x28, 0x18, 0x901, 0x0, 0x0, {0xa, 0xfc}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) 4.375367969s ago: executing program 3 (id=1133): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0c009900010000000a000000"], 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mlockall(0x1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000003a00)={r6}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, 0x0, 0x0) 4.065982087s ago: executing program 1 (id=1134): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) read$alg(0xffffffffffffffff, &(0x7f00000000c0)=""/84, 0x54) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0xa08000, &(0x7f0000000180)=ANY=[]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001940)=[{0x0}, {&(0x7f0000001800)=""/161, 0xa1}, {&(0x7f00000018c0)=""/77, 0x4d}], 0x3, &(0x7f0000001980), 0x0, 0x142}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.377786737s ago: executing program 0 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x0, 0x10000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{}, {0x20, 'cgroup.controllers\x00'}], 0xa, "64fb9b83581e3fe8e63ea0b24d38dbfcec243b4f5b73046d8a613b01ef07023712f1924cd13ee80137100acebed9e57227de4a79df2cb5fc7dc090938f91ba1fed7cbfb83cb88d28bfcbbd73950fcd461f150b62ce08ab0499c2ab32e53b662a8e9605c1689a2ac2b1f3da26d2446232fb8b0ba2e97f9d053ba8803089ee44d6eafede5a7a35f0c92ce9bed22e151adb29fce5eb224b25e3f8aea2832336f203e71d636c1331ab7c749bc8586f0a329042b1438631e4ae206d69469f2d01daaf15b98685eb3ecddeb3ce519093925ec9381e016546b197f0a0df5f7755975da28666a89ae5f3672fa2c671beb3d32474d02faec12b474ec43947ce57cfffc52deb01aaa9f40620a68fa047e0b8ff6f8f32fca8a8a7d80db658cb6551a44f118efac92161614a90a5284f828c699b205d42fcdd8cb67de458e844aeb936ffad5ccb8e235d32f0e0030e2c4d0019d7fe888da2a0dd1ddf77f90e9feb1c5bcf0644511c245455a789f536bf339681d68aea9b94f109d47a3adca64d06efe46353df3bc0c7764de435381a0c55808dc8c9fd12a8064aa181548043c9bbf6b40ef2ef0ea6398134949da865eb1617e57d9d7cd2a397cbbeb1c183a1fdbcda0b5cb50882d9579ee13fe82326d9cafdf98e63fdfe4baf9edb98313445421113943e19a0d3b9fa1c187a560092caadfec31383f4b3810f73f28e28be9b0388da38a977587a9f841bfe38d40646593873ed0a0ca49183e72ca0a8d4aee03a02f6f4e149943cd88fe9f00777d02f1b44ddfe29385da339d77335b2806330f40474ac08ae5e3e547eccdc057d30c7093ec43754d17f1490facf475682f76ccf4d9c9348ef63832926f9fc5cc75d37af52385536ccf3698c6b7fc85915145772c0229d840e9cdc2de1c347bc7c71edb01bc4c9c9d67abd8639a6a203e1b2f8aba0e41248e8b67ad16043022ea9144b013d50058255110519090889df99376b111efb524ca82c12d8640065e87473767b248e1f6d8eb0948e7c401d7e4523cca70954ec3e644efcdca52ad3cc625e1e03143f28ae1a439db9a51d683e5e4faf354ed135b6166b1117ee22a49e0a9c5a645cf7e46a39b909be25b600ac5842708df96575c7ba225d1708d36a6e87877d32ca958853ab82b33e3dd59a88f817b08e9399755bccbec44cd4bc669ce2222aa2b2b847d07d7e8ded16aa132bc9b77796610ec3fd81bc81bf39efd568fc1197b4af059b02d7225f2bd2ced1091320299d00f78866c5c6bc8bedcdca58ff3d63daff2abebee15098b9b998402c1564b59b6a52c47726a109e1e36c978206efde46acbabb11d176591baf7e227928b8b4371e99200bc7a62e2a6d5eb013d5d0f69ea7a0d1dc3743c004e1397ba0c41ac17c6b08f2734dca705b05c92452b660302127971db53b77f7022747ab284ca628d9f9c94e1b9e28e9d73ad9b106e7c33ac64c334fd232e90ea9e2acd46621ab99173f68549a73bc92615c06f5e8d07f1b3a8bf3f3d9c5b86d0cb6e36b9ba2ccc98e465fd4a1f47e3cad5b5650f1898be15d8d57acf8507f40d3bfc64b8e5b7d26b27ceb61be28f81d120814e2e8311011b00a4e19cfa1134069ebd998aa16dd4c99aaa4e7e59714faee15c3d549da423c6d7aff21c1c468ff94fe227f4abc2f31684eab336c1c20a41785969dbe5cdd6df45fa1a695f63b3104b02bc2197a72bf2ce23f02ab7454a08014abdbead75f68077074d0ecff313299a936b7c5272c43b7c04524e0791370a1c828f5f711b2cbdd4134d2c8ee0b50aa02a7cc0504af0bd1053adf056cb64958462976553c98a7652afe4ba32da342f2e0c4b94b3d52d458c19f7ff7fe44c173aa489548da9727bda55fd6e24a084a0fa17a853a0b9c26248e77315827c195133789afcdf9c0d0dece6e0defe59238e1cac395ae4039c0302fc20dc36361962ff66465552bb6e282aa61569b7832b643c908c13b2aa19e0b157f16d3f1ff2a483c55471f329410172f32f892684a5237c4b04bce618ad1cf06f05aed7f89b5d35165bf616de6d1e420957cb0ebaa0dbac199c16676d473cf03229f285277fa6af38693bf2b11276f327e42dacdd480724ee6b5ee0a01fd68fef9da95b2bcbc2066748fb6038b0642e17f03063012cd2a3908550b5bc64e352f05abf86af8ec3417992ad3f5e3f5b78bc14cb07cc6d1f9d669a39e0ef1cfc6ff4a0a12495bcdb05091d88e1c33f07cf8937cb63abf49a2ac25e859639b1492c698d223acbb644fd9c6cc3c9b3bbd4ebcab2d6dd01ec4bc5be2b2fc74219ac9a71c8aab18ce6a73bb7cc97c727aff0d637e953fac720b79dccaca8700c5cd21eafefbc9570b94134abef191ba46dc29fe0959dc8b5f0ce12ca8f1eaecfb22567604d4ec11a4f7ad8e15a1d45943e85e26b3e8ab6dc05d749a9cf41bdf93994dcf8253a5a908bd16cfa482f37787847e1e1cf2413b92e1e6448c30aa9d78abd1141963d9eec8c2953524309030466e77671fba9ffeb250bb43e5be4be535f355ee14ec2027d42952c1d6c7b2e8c9bbaed7d69ba2339bfc9c60d9b3a446b510d7f78e6dc1051c46e6a5b2537bfe76f83f3acf360a437cf477e60857ffbb60eab1c11d73f5caab6011cba21df90c2e7856c79861c12efd6666f7a5ccd1eba60dc3899bb1992319760be6d137ef951c87c4c8f3bfb74f5ac14a3874c807cf47d3c1ace37594846ee6b6c17113a41e28837380c0e045d1a21a358dcff9fc2de16b6ba02f62809e2073436adc75ebabbcdaf0c584f4ba7e4985c27123c3e10d1a73172034764c0d04ef53d900f11fd1c11643af251eccd85f4b861f90e0ad9415929afd34efe44166db1d3c8bac623eae8fdb040caccc2441ff874581f3911a01167568c20d3929b385a22102472c32b71914ea6ac5d7ca348febec833d3d865c98bed076feee1a2e06f023f399dfb66d2443563a683b95868e95cc5aa05d7cfbdef6381564e9c6009d5beb76bf5a8ac2a2cc31c524a40797d69a1a20ae78c05a63a75c7390cbb91b327d002279c2b5e05e9884d54c2d60f4124d748a7046e064e2860fd30609121c0b12db1003e43ac0c3cc552999b053cd1092dba9cb764033bb490b52e48d0135f2f3fc5a0b9438eb2f2717ce9d339f63ddce251dd8ea0d4586820c4f2f0c89e8bd413e3aa0365c0d27d696b57423bf187dcc1ea487f2e59fe20142aaef75d76c73954510229af3713f90a356117a444d4807c52e75985e600406dfd9f8bd701bee8e9ce6564cd403603d28516d7afa8628203e151d26bfcb05e9973e0f6ee0874a5e8f6f76b4c40adab6dac3b83a80fb154a7c549e3757623f385cba135703581bc4bafdead1a4ea734616f3b5629b17bce041aac1a4907e1791e11de54b7831ea9871e1d397427b083b7df715c467b5b79257b3c6bf77c5b85526f197514aa6dab700c7056ebcd9a41d5545de4a860694f11b330fbe44257185e9c91e645cb4dfdb35f8a2d7a5b88a83e16c14138b679cea99c92bf63b45aeb9c3c867c04c166ec49f5d0c6d06940a4f75cc067e674a33f5b506416f7d2fced4ba0b4af892a5ce3e3d3149a61b681262c123f0c118f1a201653f0d4f7c5fdcdfc006d7af9bb790b2e43b1920553851ca8ad4937707f6dd60b15fc86466481a81719f9d7a7eeada01203035efe7d60eb40fb50ae7ce2c0e69ee6f1c0bca57a4d8ebcaa8f9a15c1851d628b6dce5e63d44440986379802df6145ad8e05d3ba60db08232cde1621b9dde288d6f45caa9301fba6f5b07f071cd71bae1f59f3da3ad9b17ce52ff36da6db86f1927d2c9c090e908f2c2cd7d93ca712a12581699bcfdd33b92ea44a23628068da8d9a80e7f2a24b0e6d26fb324ef9fce37163310960e6f67237cd2ebde59c0c128be1d799de328e0ff6c7b45f64e24e10a4edd2e81a19227bd5189b735d0f05b9eb7c2f41fb23fd54bc9dc6a238aae709a889d9d6b11db5a6b0f1f70be59e5b71d4453aac87f3ae5d3977127986b6d0bc252666dbba5e19b9e11d60c4371c9a519624718e1fb037e5c35d92fbb6f8a6a7231a8ec9d7505eff2be15442c25379100a107c09e7482ffc44ec46e964de804bc1153deaec1d1d3dc7f75387907c489cf9630834f8882c759d27643e41f7f300ae96bf61942b400b15d637ca65ab469163e464ce91149d69b7662a08b8222f2528eadf6cd565c8a3e73085f39ef7a4fd72ca6cdde1e6d0e81cc9bc0703a32b297f1d199879d3c03059e557e5cabfdbd07ab3df3a44dede0b379f83e6503c50d3d203a790ef05242661416e8f1764aa537e60c67706705e01c55b1f30647842147830a2a1c7e5ec1cb81852a57e6da38ae04d426459938ac9ba3c5993f57e6887680f8be9654abc151e868d813d2614dc2a2bbb702a302a2038496793baed22dcc113534062d9bc81de55026139f42aef4d3e82a12c99744fc044d3f64327928660867059e9a84f06ace0a4d79c4819996c164e8fb476f1b1b4cfed31e742db110060ab23b56928caef1c113e40622829f0966dce15a3e04af3e4024633541b629d2d3b09a67cde456359c3435a8e4be6010ed01db01a6f4fdb7f326555e4a433034685ccb8e909fdc632eb75e5e62c021edbc7ad99757ab6e1d9ed73bce66efa296e8e1913f65ac43b2b0d29c1d72de350ffa0b09e7f955153381aab362a05cfd5e8fc9655392a8da6107e82b0cd52d0aff917944412f35943b34ba09f7b5114ed1256a24a5006c297e8f93e2f0191f3693fa9691cf459b3ddd3e6f2638b36b8c9fd14d5894dab0039d3bcc5a2bfa70d59f1554f63602d781ea5f83b0c21fdd278271434bee13f2440b74fb8959f9867cc9b33f74d9706897dbf5a2a8e6c043fc0d2f208edcd30d3ce1594254d8294723571eecbd4ec4feb278217c737e6094b447f5f441f74a30c2c4726c499ad6425731a362252d5792332a9432721dada0cfb3ff8bd3bce5836462f07c3e19e809e970b7a7d55e55fa7242b712c6dd8e6da98dd3c5bd8d980908c18a3521f0377d1de8e3c1f2eb060122b6634c54cf1fc56cd306b751667237c81d82cb8a2db28789942c5dd7c2622475762188225dbf7d2eec991916805434d3f9a9916607a4bccc8cd4c9b80285b3e611acf4a7b80d463f710cf996f411abbf44b62fe560ddfb41990751b46e84f715b5803213ee5d41f3efb921c34507ce591704a76a8afabdd20ba8c6ec849abf9609a4b4437fd270076588498410aad24100b409750a3492f6b7b431d3918ee681c36a84e13705f568589b250a4906d2e412ae450bb61d55789c7208cdd93c36450003e69ec2c34c5ace3731fcba2dc2604d781df6f3a74462349ceac342c7f0d053460ee06bdaf80fe422f30e77daf4ec3366ab18e9501d77106ab52ffb92474748f5fd7a73a6615fe1998e29b0cf5c36beea98f5497d7fe649e4e1b9085b6fffbb43d829c460f2cbf1f0f7ec78624e97942d8fd6852dd15adb6762a06e3bb24262c0e56fccf74753a56e65f91dbec97696e449021a963256297c06e1904926df30ef799295bddb59d1626ca547176f582dadbb4ee91b583185590d72f28aabf99dc11eaf2fac499ef775dd6bece0b42e25ad97b46c8f0904020c2a08c9bbd8af8f6fda423865c132d8051cd6be418273cd8fc4b0dba7eb847dbd916b1d2098cd33965f072b9344e7f9efbdf6d1db8041b9fb9d30985930160dfdbc1b7d12b5ae55e010f4c737a34191552bc7a65004e22995aae719a2fe4f2ed0e031c3669d7d1dafea19898e14556d14acbc6a3c651bc9a53f9"}, 0x1020) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x0, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r5, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f00000000c0)=0xbc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/621], 0x268}}, 0x0) 3.167403134s ago: executing program 4 (id=1136): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x6, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040b144d4827"], 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x6, 0x23, &(0x7f0000001340)=""/4096, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xffffffff, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) poll(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x260300) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(0xffffffffffffffff) setuid(0xee01) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r7, 0x200000000012, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 2.901115023s ago: executing program 2 (id=1137): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.843917969s ago: executing program 3 (id=1138): r0 = socket$inet6(0xa, 0x6, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000079381010c2154000fb0707820b0109021b0009000000080904"], 0x0) pipe2$9p(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9}}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9f, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0xb2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x1, 0x3, 0x6, 0x8, 0x5}, 0xeb, &(0x7f0000000480)={0x5, 0xf, 0xeb, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d1d128c0e8e66d65d145523d27ca6469"}, @generic={0xc5, 0x10, 0xa, "8c952790d614cce22edb607fe061199a7481b69ad283149f91d51ca8afa8c8659a4ab5fef77a23056724be76fad9e404b9d2915355e8066207292c628fa3958a5ee9cef16d19ff4afca62e6089f1df7685438ba0d60d85ec1f5afa378d74571a168e9c622e7fe98245eb77dfcb6312dea2504862cad3946bc652727f487e11a7d4806a8a2f16485df308be9d0cee27734fb6366c65f959d9647521fa8e59c12d92534f7a9430b5cb0c218c109e77fa416257045c3b69a8a47875e4311fdad70d7f46"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x412}}]}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xd2, &(0x7f0000000180), &(0x7f0000000080)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00h', @ANYRES16=0x0, @ANYBLOB="000826bd7000ffdbdf25410000000c009900090000007e0000000800220177000000050019010400000008009f000300000008002201c30100000800a000ffffffff0500190109000000080027000200000008009f00000000000800a10000010000"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4c891) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x2c, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}, @CTA_STATUS_MASK={0x8}]}, 0x2c}}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f00000003c0)=""/31, 0x1f, &(0x7f0000000180)=""/163, 0x1, 0x2}}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2e, 0x0, 0x0, @link_id}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r7, 0x0, 0xb5e93ebbb5af4ebf, &(0x7f0000000000)={@remote, @remote}, 0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'lo\x00'}) 2.412634027s ago: executing program 4 (id=1139): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x8d18, @remote, 0x6}]}, &(0x7f0000000200)=0x10) 2.29278193s ago: executing program 2 (id=1140): socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(0x0, 0x0, 0x0, 0x135408c, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x120}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x100, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x85}, 0x20000896) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001800)) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000001c40)={0x900000000000000, 0xf000, 0x2, 0xf, 0x17}) 2.13965304s ago: executing program 4 (id=1141): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x215) ftruncate(r0, 0x8208204) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettfilter={0x2c, 0x2e, 0x0, 0x0, 0x0, {}, [{0x8}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0xf12, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="a000000000000000290000000b000000001000000000000007500000000012040000000000000000000007000000000000000200000000000000080000000000000000000000000000001300000000000000360f00000000000000000000000000000600000000000000c931fe800000000000000000000000000000072000000000060000000000000000002000"/160], 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9}, 0x48) 2.101153908s ago: executing program 2 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x40000080806, 0x10000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{}, {0x20, 'cgroup.controllers\x00'}], 0xa, "64fb9b83581e3fe8e63ea0b24d38dbfcec243b4f5b73046d8a613b01ef07023712f1924cd13ee80137100acebed9e57227de4a79df2cb5fc7dc090938f91ba1fed7cbfb83cb88d28bfcbbd73950fcd461f150b62ce08ab0499c2ab32e53b662a8e9605c1689a2ac2b1f3da26d2446232fb8b0ba2e97f9d053ba8803089ee44d6eafede5a7a35f0c92ce9bed22e151adb29fce5eb224b25e3f8aea2832336f203e71d636c1331ab7c749bc8586f0a329042b1438631e4ae206d69469f2d01daaf15b98685eb3ecddeb3ce519093925ec9381e016546b197f0a0df5f7755975da28666a89ae5f3672fa2c671beb3d32474d02faec12b474ec43947ce57cfffc52deb01aaa9f40620a68fa047e0b8ff6f8f32fca8a8a7d80db658cb6551a44f118efac92161614a90a5284f828c699b205d42fcdd8cb67de458e844aeb936ffad5ccb8e235d32f0e0030e2c4d0019d7fe888da2a0dd1ddf77f90e9feb1c5bcf0644511c245455a789f536bf339681d68aea9b94f109d47a3adca64d06efe46353df3bc0c7764de435381a0c55808dc8c9fd12a8064aa181548043c9bbf6b40ef2ef0ea6398134949da865eb1617e57d9d7cd2a397cbbeb1c183a1fdbcda0b5cb50882d9579ee13fe82326d9cafdf98e63fdfe4baf9edb98313445421113943e19a0d3b9fa1c187a560092caadfec31383f4b3810f73f28e28be9b0388da38a977587a9f841bfe38d40646593873ed0a0ca49183e72ca0a8d4aee03a02f6f4e149943cd88fe9f00777d02f1b44ddfe29385da339d77335b2806330f40474ac08ae5e3e547eccdc057d30c7093ec43754d17f1490facf475682f76ccf4d9c9348ef63832926f9fc5cc75d37af52385536ccf3698c6b7fc85915145772c0229d840e9cdc2de1c347bc7c71edb01bc4c9c9d67abd8639a6a203e1b2f8aba0e41248e8b67ad16043022ea9144b013d50058255110519090889df99376b111efb524ca82c12d8640065e87473767b248e1f6d8eb0948e7c401d7e4523cca70954ec3e644efcdca52ad3cc625e1e03143f28ae1a439db9a51d683e5e4faf354ed135b6166b1117ee22a49e0a9c5a645cf7e46a39b909be25b600ac5842708df96575c7ba225d1708d36a6e87877d32ca958853ab82b33e3dd59a88f817b08e9399755bccbec44cd4bc669ce2222aa2b2b847d07d7e8ded16aa132bc9b77796610ec3fd81bc81bf39efd568fc1197b4af059b02d7225f2bd2ced1091320299d00f78866c5c6bc8bedcdca58ff3d63daff2abebee15098b9b998402c1564b59b6a52c47726a109e1e36c978206efde46acbabb11d176591baf7e227928b8b4371e99200bc7a62e2a6d5eb013d5d0f69ea7a0d1dc3743c004e1397ba0c41ac17c6b08f2734dca705b05c92452b660302127971db53b77f7022747ab284ca628d9f9c94e1b9e28e9d73ad9b106e7c33ac64c334fd232e90ea9e2acd46621ab99173f68549a73bc92615c06f5e8d07f1b3a8bf3f3d9c5b86d0cb6e36b9ba2ccc98e465fd4a1f47e3cad5b5650f1898be15d8d57acf8507f40d3bfc64b8e5b7d26b27ceb61be28f81d120814e2e8311011b00a4e19cfa1134069ebd998aa16dd4c99aaa4e7e59714faee15c3d549da423c6d7aff21c1c468ff94fe227f4abc2f31684eab336c1c20a41785969dbe5cdd6df45fa1a695f63b3104b02bc2197a72bf2ce23f02ab7454a08014abdbead75f68077074d0ecff313299a936b7c5272c43b7c04524e0791370a1c828f5f711b2cbdd4134d2c8ee0b50aa02a7cc0504af0bd1053adf056cb64958462976553c98a7652afe4ba32da342f2e0c4b94b3d52d458c19f7ff7fe44c173aa489548da9727bda55fd6e24a084a0fa17a853a0b9c26248e77315827c195133789afcdf9c0d0dece6e0defe59238e1cac395ae4039c0302fc20dc36361962ff66465552bb6e282aa61569b7832b643c908c13b2aa19e0b157f16d3f1ff2a483c55471f329410172f32f892684a5237c4b04bce618ad1cf06f05aed7f89b5d35165bf616de6d1e420957cb0ebaa0dbac199c16676d473cf03229f285277fa6af38693bf2b11276f327e42dacdd480724ee6b5ee0a01fd68fef9da95b2bcbc2066748fb6038b0642e17f03063012cd2a3908550b5bc64e352f05abf86af8ec3417992ad3f5e3f5b78bc14cb07cc6d1f9d669a39e0ef1cfc6ff4a0a12495bcdb05091d88e1c33f07cf8937cb63abf49a2ac25e859639b1492c698d223acbb644fd9c6cc3c9b3bbd4ebcab2d6dd01ec4bc5be2b2fc74219ac9a71c8aab18ce6a73bb7cc97c727aff0d637e953fac720b79dccaca8700c5cd21eafefbc9570b94134abef191ba46dc29fe0959dc8b5f0ce12ca8f1eaecfb22567604d4ec11a4f7ad8e15a1d45943e85e26b3e8ab6dc05d749a9cf41bdf93994dcf8253a5a908bd16cfa482f37787847e1e1cf2413b92e1e6448c30aa9d78abd1141963d9eec8c2953524309030466e77671fba9ffeb250bb43e5be4be535f355ee14ec2027d42952c1d6c7b2e8c9bbaed7d69ba2339bfc9c60d9b3a446b510d7f78e6dc1051c46e6a5b2537bfe76f83f3acf360a437cf477e60857ffbb60eab1c11d73f5caab6011cba21df90c2e7856c79861c12efd6666f7a5ccd1eba60dc3899bb1992319760be6d137ef951c87c4c8f3bfb74f5ac14a3874c807cf47d3c1ace37594846ee6b6c17113a41e28837380c0e045d1a21a358dcff9fc2de16b6ba02f62809e2073436adc75ebabbcdaf0c584f4ba7e4985c27123c3e10d1a73172034764c0d04ef53d900f11fd1c11643af251eccd85f4b861f90e0ad9415929afd34efe44166db1d3c8bac623eae8fdb040caccc2441ff874581f3911a01167568c20d3929b385a22102472c32b71914ea6ac5d7ca348febec833d3d865c98bed076feee1a2e06f023f399dfb66d2443563a683b95868e95cc5aa05d7cfbdef6381564e9c6009d5beb76bf5a8ac2a2cc31c524a40797d69a1a20ae78c05a63a75c7390cbb91b327d002279c2b5e05e9884d54c2d60f4124d748a7046e064e2860fd30609121c0b12db1003e43ac0c3cc552999b053cd1092dba9cb764033bb490b52e48d0135f2f3fc5a0b9438eb2f2717ce9d339f63ddce251dd8ea0d4586820c4f2f0c89e8bd413e3aa0365c0d27d696b57423bf187dcc1ea487f2e59fe20142aaef75d76c73954510229af3713f90a356117a444d4807c52e75985e600406dfd9f8bd701bee8e9ce6564cd403603d28516d7afa8628203e151d26bfcb05e9973e0f6ee0874a5e8f6f76b4c40adab6dac3b83a80fb154a7c549e3757623f385cba135703581bc4bafdead1a4ea734616f3b5629b17bce041aac1a4907e1791e11de54b7831ea9871e1d397427b083b7df715c467b5b79257b3c6bf77c5b85526f197514aa6dab700c7056ebcd9a41d5545de4a860694f11b330fbe44257185e9c91e645cb4dfdb35f8a2d7a5b88a83e16c14138b679cea99c92bf63b45aeb9c3c867c04c166ec49f5d0c6d06940a4f75cc067e674a33f5b506416f7d2fced4ba0b4af892a5ce3e3d3149a61b681262c123f0c118f1a201653f0d4f7c5fdcdfc006d7af9bb790b2e43b1920553851ca8ad4937707f6dd60b15fc86466481a81719f9d7a7eeada01203035efe7d60eb40fb50ae7ce2c0e69ee6f1c0bca57a4d8ebcaa8f9a15c1851d628b6dce5e63d44440986379802df6145ad8e05d3ba60db08232cde1621b9dde288d6f45caa9301fba6f5b07f071cd71bae1f59f3da3ad9b17ce52ff36da6db86f1927d2c9c090e908f2c2cd7d93ca712a12581699bcfdd33b92ea44a23628068da8d9a80e7f2a24b0e6d26fb324ef9fce37163310960e6f67237cd2ebde59c0c128be1d799de328e0ff6c7b45f64e24e10a4edd2e81a19227bd5189b735d0f05b9eb7c2f41fb23fd54bc9dc6a238aae709a889d9d6b11db5a6b0f1f70be59e5b71d4453aac87f3ae5d3977127986b6d0bc252666dbba5e19b9e11d60c4371c9a519624718e1fb037e5c35d92fbb6f8a6a7231a8ec9d7505eff2be15442c25379100a107c09e7482ffc44ec46e964de804bc1153deaec1d1d3dc7f75387907c489cf9630834f8882c759d27643e41f7f300ae96bf61942b400b15d637ca65ab469163e464ce91149d69b7662a08b8222f2528eadf6cd565c8a3e73085f39ef7a4fd72ca6cdde1e6d0e81cc9bc0703a32b297f1d199879d3c03059e557e5cabfdbd07ab3df3a44dede0b379f83e6503c50d3d203a790ef05242661416e8f1764aa537e60c67706705e01c55b1f30647842147830a2a1c7e5ec1cb81852a57e6da38ae04d426459938ac9ba3c5993f57e6887680f8be9654abc151e868d813d2614dc2a2bbb702a302a2038496793baed22dcc113534062d9bc81de55026139f42aef4d3e82a12c99744fc044d3f64327928660867059e9a84f06ace0a4d79c4819996c164e8fb476f1b1b4cfed31e742db110060ab23b56928caef1c113e40622829f0966dce15a3e04af3e4024633541b629d2d3b09a67cde456359c3435a8e4be6010ed01db01a6f4fdb7f326555e4a433034685ccb8e909fdc632eb75e5e62c021edbc7ad99757ab6e1d9ed73bce66efa296e8e1913f65ac43b2b0d29c1d72de350ffa0b09e7f955153381aab362a05cfd5e8fc9655392a8da6107e82b0cd52d0aff917944412f35943b34ba09f7b5114ed1256a24a5006c297e8f93e2f0191f3693fa9691cf459b3ddd3e6f2638b36b8c9fd14d5894dab0039d3bcc5a2bfa70d59f1554f63602d781ea5f83b0c21fdd278271434bee13f2440b74fb8959f9867cc9b33f74d9706897dbf5a2a8e6c043fc0d2f208edcd30d3ce1594254d8294723571eecbd4ec4feb278217c737e6094b447f5f441f74a30c2c4726c499ad6425731a362252d5792332a9432721dada0cfb3ff8bd3bce5836462f07c3e19e809e970b7a7d55e55fa7242b712c6dd8e6da98dd3c5bd8d980908c18a3521f0377d1de8e3c1f2eb060122b6634c54cf1fc56cd306b751667237c81d82cb8a2db28789942c5dd7c2622475762188225dbf7d2eec991916805434d3f9a9916607a4bccc8cd4c9b80285b3e611acf4a7b80d463f710cf996f411abbf44b62fe560ddfb41990751b46e84f715b5803213ee5d41f3efb921c34507ce591704a76a8afabdd20ba8c6ec849abf9609a4b4437fd270076588498410aad24100b409750a3492f6b7b431d3918ee681c36a84e13705f568589b250a4906d2e412ae450bb61d55789c7208cdd93c36450003e69ec2c34c5ace3731fcba2dc2604d781df6f3a74462349ceac342c7f0d053460ee06bdaf80fe422f30e77daf4ec3366ab18e9501d77106ab52ffb92474748f5fd7a73a6615fe1998e29b0cf5c36beea98f5497d7fe649e4e1b9085b6fffbb43d829c460f2cbf1f0f7ec78624e97942d8fd6852dd15adb6762a06e3bb24262c0e56fccf74753a56e65f91dbec97696e449021a963256297c06e1904926df30ef799295bddb59d1626ca547176f582dadbb4ee91b583185590d72f28aabf99dc11eaf2fac499ef775dd6bece0b42e25ad97b46c8f0904020c2a08c9bbd8af8f6fda423865c132d8051cd6be418273cd8fc4b0dba7eb847dbd916b1d2098cd33965f072b9344e7f9efbdf6d1db8041b9fb9d30985930160dfdbc1b7d12b5ae55e010f4c737a34191552bc7a65004e22995aae719a2fe4f2ed0e031c3669d7d1dafea19898e14556d14acbc6a3c651bc9a53f9"}, 0x1020) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/621], 0x268}}, 0x0) 982.021364ms ago: executing program 2 (id=1143): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x215) ftruncate(r0, 0x8208204) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettfilter={0x2c, 0x2e, 0x0, 0x0, 0x0, {}, [{0x8}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0xf12, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="a000000000000000290000000b000000001000000000000007500000000012040000000000000000000007000000000000000200000000000000080000000000000000000000000000001300000000000000360f00000000000000000000000000000600000000000000c931fe800000000000000000000000000000072000000000060000000000000000002000"/160], 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9}, 0x48) 397.117922ms ago: executing program 4 (id=1144): r0 = memfd_create(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120101000000001058010001000000000001090224"], 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000006000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0000000000000000000001000000010000000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffffffffffff0010000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000000010000f0ffff00000000", @ANYRES32=r0, @ANYRES32=r0]) r3 = syz_io_uring_setup(0x9cb, &(0x7f0000000400)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x4}, &(0x7f0000000080)=0x18) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="05000000000000000000010000000c00020000000000000000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="c09be778167c56fb9ad51c056d021fd9577606c82f5b17994888e4e9a2d0d3b4b397c98bc64c0dd57b092d58b25e63a335ed496a8e1f9ff571df43812fef76f58bf76f9df8bac1bf9f8ffa52cd5518714a8b872aa59450aa64b1643b7359cdbdeea254edbad2a51028152951dcc32f08e6e09499d7d5fb75d4b489acadf0b45e9894928e283f710420dcde5f56822a965f76a065"], 0x34}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000b72312073f40000102c70b00002d00010138c0200904000601030105064921018000012224060905810340008306070905020310007f0001"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) io_uring_setup(0x5e65, &(0x7f0000000500)={0x0, 0x4a7, 0x4, 0x0, 0xde, 0x0, r3}) 0s ago: executing program 0 (id=1145): io_uring_setup(0x30d3, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$int_in(r2, 0x0, &(0x7f0000000280)) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) r6 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x28, 0x18, 0x901, 0x0, 0x0, {0xa, 0xfc}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): ems! [ 324.647036][ T4477] Bluetooth: hci0: command tx timeout [ 324.652587][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.673376][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.688167][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.716876][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.748752][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.782233][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.815673][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.855871][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.887498][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.980188][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.007590][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.042956][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.074158][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.089675][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.106497][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.127951][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.156600][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.176602][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.198494][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.219521][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.241932][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.263515][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.277151][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.318795][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.352225][ T7671] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.364188][ T7671] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.379697][ T7671] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.389324][ T7671] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.901575][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.912934][ T5137] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 325.944016][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.044973][ T7731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.066015][ T7731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.088239][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.096928][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.104557][ T7731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.116413][ T7731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.138190][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 326.179097][ T5137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.204693][ T5137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.224829][ T5137] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.239853][ T5137] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 326.250680][ T5137] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 326.285399][ T5137] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.307703][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.334084][ T5137] usb 1-1: Product: syz [ 326.348244][ T5137] usb 1-1: Manufacturer: syz [ 326.363288][ T5137] usb 1-1: SerialNumber: syz [ 326.387376][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.433580][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.458674][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.465925][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.519101][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.526403][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.566393][ T29] audit: type=1804 audit(1720498669.858:143): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.788" name="/newroot/1/file0/bus" dev="ramfs" ino=23573 res=1 errno=0 [ 326.614844][ T5137] cdc_ncm 1-1:1.0: bind() failure [ 326.633664][ T5137] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 326.641213][ T5137] cdc_ncm 1-1:1.1: bind() failure [ 326.651209][ T5137] usb 1-1: USB disconnect, device number 21 [ 326.685306][ T29] audit: type=1804 audit(1720498669.978:144): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.788" name="/newroot/1/file0/bus" dev="ramfs" ino=23573 res=1 errno=0 [ 326.725704][ T29] audit: type=1800 audit(1720498669.978:145): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.788" name="bus" dev="ramfs" ino=23573 res=0 errno=0 [ 327.113576][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.353146][ T5096] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 327.353232][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 327.401816][ T7731] veth0_vlan: entered promiscuous mode [ 327.635181][ T7731] veth1_vlan: entered promiscuous mode [ 327.758143][ T7849] libceph: resolve '. [ 327.758143][ T7849] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 327.758143][ T7849] ' (ret=-3): failed [ 328.346308][ T7849] dummy0: entered promiscuous mode [ 328.539193][ T7849] dummy0: left promiscuous mode [ 328.986790][ T7731] veth0_macvtap: entered promiscuous mode [ 329.020295][ T7731] veth1_macvtap: entered promiscuous mode [ 329.087674][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.138124][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.173414][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.207890][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.240146][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.281349][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.339936][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.374886][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.411161][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.456579][ T928] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 329.463976][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.576251][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.601413][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.632965][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.674946][ T928] usb 5-1: Using ep0 maxpacket: 32 [ 329.692698][ T928] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 329.701598][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.711754][ T928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.726367][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.743285][ T928] usb 5-1: config 0 has no interface number 0 [ 329.756130][ T928] usb 5-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 329.767863][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.778115][ T928] usb 5-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 329.798012][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.829872][ T928] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 329.848321][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.868124][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.908780][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.923241][ T928] usb 5-1: config 0 descriptor?? [ 329.938186][ T928] option 5-1:0.116: GSM modem (1-port) converter detected [ 329.976636][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.017490][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.047038][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.062448][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.082316][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.106568][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.136559][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.155315][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.184992][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.206251][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.230961][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.262653][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.274047][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.296537][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.306887][ T928] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 330.312299][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.346180][ T7731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.383093][ T7731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.412376][ T10] block nbd3: Possible stuck request ffff888020cb0000: control (read@0,4096B). Runtime 30 seconds [ 330.426713][ T5215] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 330.434471][ T7731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.470806][ T7731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.528490][ T928] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 330.537571][ T928] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.589650][ T928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.619599][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.646552][ T928] usb 3-1: Product: syz [ 330.650834][ T928] usb 3-1: Manufacturer: syz [ 330.655500][ T928] usb 3-1: SerialNumber: syz [ 330.657463][ T5215] usb 1-1: Using ep0 maxpacket: 32 [ 330.683808][ T928] cdc_ncm 3-1:1.0: skipping garbage [ 330.701217][ T5324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.718160][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.739176][ T5324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.746519][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.776794][ T5215] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 330.806954][ T5215] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 330.828332][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.836234][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.849069][ T5215] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 330.870292][ T5215] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.909479][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.922072][ T5215] usb 1-1: Product: syz [ 330.926296][ T5215] usb 1-1: Manufacturer: syz [ 330.943645][ T5215] usb 1-1: SerialNumber: syz [ 330.992146][ T5080] usb 5-1: USB disconnect, device number 23 [ 331.014888][ T5080] option 5-1:0.116: device disconnected [ 331.166926][ T5215] cdc_ncm 1-1:1.0: bind() failure [ 331.185473][ T5215] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 331.208319][ T5215] cdc_ncm 1-1:1.1: bind() failure [ 331.228535][ T5215] usb 1-1: USB disconnect, device number 22 [ 331.336527][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.355228][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.498309][ T7880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.522071][ T7880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.779120][ T7880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.801260][ T7880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.013464][ T928] cdc_ncm 3-1:1.0: bind() failure [ 332.040750][ T928] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 332.060328][ T928] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 332.082318][ T928] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 332.117730][ T928] usb 3-1: USB disconnect, device number 20 [ 332.917537][ T5096] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 333.117192][ T7923] FAULT_INJECTION: forcing a failure. [ 333.117192][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.147106][ T7923] CPU: 1 PID: 7923 Comm: syz.3.811 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 333.157176][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 333.167269][ T7923] Call Trace: [ 333.170563][ T7923] [ 333.173507][ T7923] dump_stack_lvl+0x241/0x360 [ 333.178240][ T7923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.183639][ T7923] ? __pfx__printk+0x10/0x10 [ 333.188353][ T7923] ? snprintf+0xda/0x120 [ 333.192641][ T7923] should_fail_ex+0x3b0/0x4e0 [ 333.197695][ T7923] _copy_to_user+0x2f/0xb0 [ 333.202132][ T7923] simple_read_from_buffer+0xca/0x150 [ 333.207618][ T7923] proc_fail_nth_read+0x1e9/0x250 [ 333.212665][ T7923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.218235][ T7923] ? rw_verify_area+0x520/0x6b0 [ 333.223142][ T7923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.228728][ T7923] vfs_read+0x204/0xbc0 [ 333.232922][ T7923] ? __pfx_lock_release+0x10/0x10 [ 333.237967][ T7923] ? __pfx_vfs_read+0x10/0x10 [ 333.242666][ T7923] ? __fget_files+0x29/0x470 [ 333.247364][ T7923] ? __fget_files+0x3f6/0x470 [ 333.252085][ T7923] ksys_read+0x1a0/0x2c0 [ 333.256472][ T7923] ? __pfx_ksys_read+0x10/0x10 [ 333.261273][ T7923] ? do_syscall_64+0x100/0x230 [ 333.266102][ T7923] ? do_syscall_64+0xb6/0x230 [ 333.270800][ T7923] do_syscall_64+0xf3/0x230 [ 333.275327][ T7923] ? clear_bhb_loop+0x35/0x90 [ 333.280029][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.285973][ T7923] RIP: 0033:0x7fe485d746bc [ 333.290409][ T7923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 333.310036][ T7923] RSP: 002b:00007fe486a88040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.318488][ T7923] RAX: ffffffffffffffda RBX: 00007fe485f03f60 RCX: 00007fe485d746bc [ 333.326484][ T7923] RDX: 000000000000000f RSI: 00007fe486a880b0 RDI: 0000000000000004 [ 333.334480][ T7923] RBP: 00007fe486a880a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.342472][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.350588][ T7923] R13: 000000000000000b R14: 00007fe485f03f60 R15: 00007fff54af56f8 [ 333.358593][ T7923] [ 333.580860][ T7921] libceph: resolve '. [ 333.580860][ T7921] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 333.580860][ T7921] ' (ret=-3): failed [ 334.012502][ T7924] dummy0: entered promiscuous mode [ 334.026625][ T5080] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 334.094548][ T7924] dummy0: left promiscuous mode [ 334.337052][ T5080] usb 2-1: Using ep0 maxpacket: 32 [ 334.403747][ T5080] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 334.459428][ T5080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.538749][ T5080] usb 2-1: config 0 has no interface number 0 [ 334.574393][ T5080] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 334.576645][ T7931] netlink: 'syz.3.813': attribute type 11 has an invalid length. [ 334.596377][ T7931] netlink: 140 bytes leftover after parsing attributes in process `syz.3.813'. [ 334.604355][ T5080] usb 2-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 334.677940][ T5080] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 334.761173][ T5080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.810777][ T5080] usb 2-1: config 0 descriptor?? [ 334.851046][ T5080] option 2-1:0.116: GSM modem (1-port) converter detected [ 335.226799][ T5137] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 335.428574][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21792, setting to 1024 [ 335.450395][ T5137] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 335.471021][ T5137] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 335.516591][ T5215] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 335.529998][ T5137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 335.556873][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 335.575505][ T5137] usb 3-1: Manufacturer: syz [ 335.596347][ T7936] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 335.608042][ T5137] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 335.742340][ T5215] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 335.757187][ T5215] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.776936][ T5215] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.790531][ T5168] usb 2-1: USB disconnect, device number 19 [ 335.809140][ T5168] option 2-1:0.116: device disconnected [ 335.818537][ T5215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.851836][ T5215] usb 4-1: Product: syz [ 335.856076][ T5215] usb 4-1: Manufacturer: syz [ 335.866693][ T5215] usb 4-1: SerialNumber: syz [ 335.887749][ T5215] cdc_ncm 4-1:1.0: skipping garbage [ 336.418169][ T5138] usb 3-1: USB disconnect, device number 21 [ 336.685803][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.723293][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.823648][ T7967] netlink: 'syz.0.825': attribute type 11 has an invalid length. [ 336.831802][ T5096] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 336.859375][ T7967] netlink: 140 bytes leftover after parsing attributes in process `syz.0.825'. [ 337.000807][ T7969] libceph: resolve '. [ 337.000807][ T7969] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 337.000807][ T7969] ' (ret=-3): failed [ 337.031181][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.060702][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.224224][ T7971] dummy0: entered promiscuous mode [ 337.306211][ T5215] cdc_ncm 4-1:1.0: bind() failure [ 337.316249][ T7971] dummy0: left promiscuous mode [ 337.325442][ T5215] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 337.351897][ T5215] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 337.385711][ T5215] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 337.403944][ T5215] usb 4-1: USB disconnect, device number 16 [ 339.696819][ T5215] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 339.726941][ T5080] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 339.926921][ T5080] usb 1-1: Using ep0 maxpacket: 32 [ 339.934649][ T5215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21792, setting to 1024 [ 339.938739][ T5080] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 339.974669][ T5080] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.977172][ T5215] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 339.997151][ T5080] usb 1-1: config 0 has no interface number 0 [ 340.013519][ T5080] usb 1-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 340.046546][ T5215] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 340.056863][ T5080] usb 1-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 340.092668][ T5215] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 340.106715][ T5080] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 340.115822][ T5080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.117462][ T5215] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 340.160834][ T5215] usb 4-1: Manufacturer: syz [ 340.187064][ T5080] usb 1-1: config 0 descriptor?? [ 340.190808][ T7986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.201212][ T5215] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 340.202921][ T5080] option 1-1:0.116: GSM modem (1-port) converter detected [ 340.621374][ T5080] usb 1-1: USB disconnect, device number 23 [ 340.650397][ T5080] option 1-1:0.116: device disconnected [ 340.926934][ T5168] usb 4-1: USB disconnect, device number 17 [ 341.076647][ T5138] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 341.272454][ T5138] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 341.296973][ T5138] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.335629][ T5138] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.404931][ T5138] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.446847][ T5168] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 341.473032][ T5138] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.506414][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.543895][ T5138] usb 2-1: Product: syz [ 341.569065][ T5138] usb 2-1: Manufacturer: syz [ 341.590517][ T5138] usb 2-1: SerialNumber: syz [ 341.643221][ T5138] cdc_ncm 2-1:1.0: skipping garbage [ 341.668850][ T5168] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 341.699577][ T5168] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.745259][ T5168] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.763656][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.789919][ T5168] usb 4-1: Product: syz [ 341.794502][ T5168] usb 4-1: Manufacturer: syz [ 341.806282][ T5168] usb 4-1: SerialNumber: syz [ 341.843166][ T5168] cdc_ncm 4-1:1.0: skipping garbage [ 342.081356][ T5096] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 342.221442][ T8028] libceph: resolve '. [ 342.221442][ T8028] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 342.221442][ T8028] ' (ret=-3): failed [ 342.430977][ T8028] dummy0: entered promiscuous mode [ 342.503583][ T8028] dummy0: left promiscuous mode [ 342.586318][ T58] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 60 seconds [ 342.700581][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.720169][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.747568][ T5138] cdc_ncm 2-1:1.0: bind() failure [ 342.788444][ T5138] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 342.828948][ T5138] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 342.882086][ T5138] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 342.931680][ T5138] usb 2-1: USB disconnect, device number 20 [ 342.997244][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.021542][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.291089][ T5168] cdc_ncm 4-1:1.0: bind() failure [ 343.316228][ T5168] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 343.329284][ T5168] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 343.380371][ T5168] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 343.428027][ T5168] usb 4-1: USB disconnect, device number 18 [ 345.176657][ T5168] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 345.439441][ T5168] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21792, setting to 1024 [ 345.466618][ T5168] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 345.477399][ T5168] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 345.492702][ T5168] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 345.511374][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 345.543459][ T5168] usb 2-1: Manufacturer: syz [ 345.579883][ T8043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.599904][ T5168] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 346.378251][ T5138] usb 2-1: USB disconnect, device number 21 [ 347.562913][ T5215] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 347.779280][ T5138] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 348.003930][ T5138] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 348.080250][ T5138] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.343284][ T5138] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.465113][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.632280][ T5096] Bluetooth: hci8: ACL packet for unknown connection handle 0 [ 348.656723][ T5138] usb 3-1: Product: syz [ 348.661257][ T5138] usb 3-1: Manufacturer: syz [ 348.671881][ T5138] usb 3-1: SerialNumber: syz [ 348.685726][ T5215] usb 2-1: not running at top speed; connect to a high speed hub [ 348.699685][ T5138] cdc_ncm 3-1:1.0: skipping garbage [ 348.726311][ T8089] libceph: resolve '. [ 348.726311][ T8089] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 348.726311][ T8089] ' (ret=-3): failed [ 348.752540][ T5215] usb 2-1: config 254 has an invalid interface number: 166 but max is 0 [ 348.779611][ T5215] usb 2-1: config 254 has no interface number 0 [ 348.805804][ T8089] dummy0: entered promiscuous mode [ 348.812867][ T5215] usb 2-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 348.846231][ T8089] dummy0: left promiscuous mode [ 348.851491][ T5215] usb 2-1: config 254 interface 166 altsetting 76 endpoint 0x1 has invalid maxpacket 121, setting to 64 [ 348.876665][ T5215] usb 2-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 348.900261][ T5215] usb 2-1: config 254 interface 166 has no altsetting 0 [ 348.946231][ T5215] usb 2-1: New USB device found, idVendor=0af0, idProduct=6800, bcdDevice=1e.e6 [ 348.960530][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.976724][ T5215] usb 2-1: Product: 萖䏴飑֝߄쿥咽璦榟널ኑ묵敵뻰䇸₻ꤣ⺿푽賚쮃쐋槗᜹눋͉ᇿꙧᔌ剺铟㴡㴊ῈⱭ箆ዛ匓蹶횇猻拑㶨遲晙ﮙỪ戋 [ 349.010086][ T5215] usb 2-1: Manufacturer: 㠊 [ 349.014927][ T5215] usb 2-1: SerialNumber: ဇ [ 349.226647][ T5136] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 349.479796][ T5136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21792, setting to 1024 [ 349.508414][ T8095] kvm: pic: non byte write [ 349.520110][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.546872][ T5136] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 349.548551][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.576552][ T5136] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 349.643453][ T5136] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 349.665885][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 349.702926][ T5136] usb 5-1: Manufacturer: syz [ 349.722796][ T8093] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 349.742545][ T5136] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 349.819569][ T5215] option 2-1:254.166: GSM modem (1-port) converter detected [ 349.844351][ T5215] usb 2-1: USB disconnect, device number 22 [ 349.865590][ T5215] option 2-1:254.166: device disconnected [ 349.904178][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.918839][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.961913][ T5136] usb 5-1: USB disconnect, device number 24 [ 350.133199][ T5138] cdc_ncm 3-1:1.0: bind() failure [ 350.159350][ T5138] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 350.189763][ T5138] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 350.211113][ T5138] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 350.243063][ T5138] usb 3-1: USB disconnect, device number 22 [ 350.642610][ T8112] netlink: 172 bytes leftover after parsing attributes in process `syz.4.872'. [ 351.887797][ T29] audit: type=1804 audit(1720498695.168:146): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.875" name="/newroot/54/file0/bus" dev="ramfs" ino=25702 res=1 errno=0 [ 352.283424][ T5096] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 352.285298][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 352.334813][ T29] audit: type=1804 audit(1720498695.628:147): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.875" name="/newroot/54/file0/bus" dev="ramfs" ino=25702 res=1 errno=0 [ 352.416199][ T29] audit: type=1800 audit(1720498695.628:148): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.875" name="bus" dev="ramfs" ino=25702 res=0 errno=0 [ 352.479370][ T8131] libceph: resolve '. [ 352.479370][ T8131] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 352.479370][ T8131] ' (ret=-3): failed [ 352.626101][ T8131] dummy0: entered promiscuous mode [ 352.647215][ T8131] dummy0: left promiscuous mode [ 354.214976][ T5139] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 354.336100][ T8150] syz.4.883 (8150): /proc/8150/oom_adj is deprecated, please use /proc/8150/oom_score_adj instead. [ 354.430608][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21792, setting to 1024 [ 354.456517][ T5139] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 354.483093][ T8154] netlink: 172 bytes leftover after parsing attributes in process `syz.0.885'. [ 354.488267][ T5139] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 354.544652][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 354.556677][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 354.717734][ T5139] usb 4-1: Manufacturer: syz [ 355.208916][ T8147] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 355.486810][ T5139] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 355.677124][ T5139] usb 4-1: USB disconnect, device number 19 [ 355.787487][ T29] audit: type=1804 audit(1720498699.088:149): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.888" name="/newroot/17/file0/bus" dev="ramfs" ino=25832 res=1 errno=0 [ 355.919488][ T29] audit: type=1804 audit(1720498699.208:150): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.888" name="/newroot/17/file0/bus" dev="ramfs" ino=25832 res=1 errno=0 [ 355.975933][ T29] audit: type=1800 audit(1720498699.208:151): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.888" name="bus" dev="ramfs" ino=25832 res=0 errno=0 [ 356.719387][ T5096] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 357.501826][ T8185] dummy0: entered promiscuous mode [ 357.636731][ T8185] dummy0: left promiscuous mode [ 357.783264][ T5096] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 358.594668][ T8195] libceph: resolve '. [ 358.594668][ T8195] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 358.594668][ T8195] ' (ret=-3): failed [ 359.401815][ T8195] dummy0: entered promiscuous mode [ 359.519731][ T8195] dummy0: left promiscuous mode [ 359.684936][ T8206] Bluetooth: MGMT ver 1.22 [ 360.186593][ T5080] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 360.389615][ T5080] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 360.410331][ T5080] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.447128][ T5080] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.489240][ T10] block nbd3: Possible stuck request ffff888020cb0000: control (read@0,4096B). Runtime 60 seconds [ 360.506692][ T5139] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 360.525723][ T5080] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.552719][ T5080] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.574941][ T5080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.594636][ T5080] usb 1-1: Product: syz [ 360.604767][ T5080] usb 1-1: Manufacturer: syz [ 360.615004][ T5080] usb 1-1: SerialNumber: syz [ 360.719152][ T5080] cdc_ncm 1-1:1.0: skipping garbage [ 360.739132][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21792, setting to 1024 [ 360.756787][ T5139] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 360.816575][ T5139] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 360.895795][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 360.931148][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 360.959818][ T5139] usb 4-1: Manufacturer: syz [ 360.991548][ T8210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 361.012161][ T5139] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 361.194608][ T29] audit: type=1804 audit(1720498704.488:152): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.905" name="/newroot/48/file0/bus" dev="ramfs" ino=25898 res=1 errno=0 [ 361.275840][ T5139] usb 4-1: USB disconnect, device number 20 [ 361.361533][ T29] audit: type=1804 audit(1720498704.658:153): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.905" name="/newroot/48/file0/bus" dev="ramfs" ino=25898 res=1 errno=0 [ 361.446910][ T29] audit: type=1800 audit(1720498704.658:154): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.905" name="bus" dev="ramfs" ino=25898 res=0 errno=0 [ 361.745931][ T5080] cdc_ncm 1-1:1.0: bind() failure [ 361.761308][ T5080] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 361.794220][ T5080] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 361.827045][ T5080] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 361.864254][ T5080] usb 1-1: USB disconnect, device number 24 [ 362.436266][ T8228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.088105][ T5096] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 363.198385][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 364.384498][ T8233] dummy0: entered promiscuous mode [ 364.488923][ T8233] dummy0: left promiscuous mode [ 364.873064][ T8247] 9pnet_fd: Insufficient options for proto=fd [ 365.494208][ T8261] FAULT_INJECTION: forcing a failure. [ 365.494208][ T8261] name failslab, interval 1, probability 0, space 0, times 0 [ 365.507570][ T8261] CPU: 0 PID: 8261 Comm: syz.0.918 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 365.517587][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 365.527681][ T8261] Call Trace: [ 365.530989][ T8261] [ 365.533949][ T8261] dump_stack_lvl+0x241/0x360 [ 365.538679][ T8261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.543917][ T8261] ? __pfx__printk+0x10/0x10 [ 365.548556][ T8261] ? __pfx_lock_acquire+0x10/0x10 [ 365.553610][ T8261] ? __sigqueue_alloc+0x2f/0x540 [ 365.558589][ T8261] ? __pfx_lock_release+0x10/0x10 [ 365.563669][ T8261] should_fail_ex+0x3b0/0x4e0 [ 365.568408][ T8261] ? __sigqueue_alloc+0x42e/0x540 [ 365.573484][ T8261] should_failslab+0x9/0x20 [ 365.578040][ T8261] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 365.583738][ T8261] __sigqueue_alloc+0x42e/0x540 [ 365.588647][ T8261] __send_signal_locked+0x22f/0xdc0 [ 365.593897][ T8261] force_sig_info_to_task+0x2ff/0x580 [ 365.599325][ T8261] force_sig_fault+0x12c/0x1d0 [ 365.604153][ T8261] ? __pfx_force_sig_fault+0x10/0x10 [ 365.609514][ T8261] ? fixup_vdso_exception+0x2d1/0x310 [ 365.614950][ T8261] __bad_area_nosemaphore+0x3c8/0x770 [ 365.620368][ T8261] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 365.626310][ T8261] ? lock_mm_and_find_vma+0xf8/0x2f0 [ 365.631635][ T8261] exc_page_fault+0x61d/0x8c0 [ 365.636367][ T8261] asm_exc_page_fault+0x26/0x30 [ 365.641265][ T8261] RIP: 0033:0x7f2fdf0466e7 [ 365.645710][ T8261] Code: c4 0f 85 83 03 00 00 48 8b 04 24 89 5c 24 14 c6 80 d0 00 00 00 01 80 3d 02 f0 de 00 00 74 12 48 8b 04 24 48 8b 80 a8 00 00 00 <48> c7 00 00 00 00 00 48 8b 1c 24 48 c7 83 88 00 00 00 ff ff ff ff [ 365.665807][ T8261] RSP: 002b:00007f2fdfe99070 EFLAGS: 00010202 [ 365.671949][ T8261] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 365.680058][ T8261] RDX: 00007f2fdfe990a0 RSI: 00007f2fdfe990a0 RDI: 00007f2fdfe990a0 [ 365.688081][ T8261] RBP: 00007f2fdfe990a0 R08: 0000000000000000 R09: 00007f2fdfe98e07 [ 365.696083][ T8261] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 365.704084][ T8261] R13: 000000000000006e R14: 00007f2fdf3041e8 R15: 00007ffcef3fc1d8 [ 365.712104][ T8261] [ 365.816757][ T29] audit: type=1804 audit(1720498709.098:155): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.917" name="/newroot/65/file0/bus" dev="ramfs" ino=25956 res=1 errno=0 [ 365.818592][ T5096] Bluetooth: hci1: command 0x0406 tx timeout [ 366.058329][ T29] audit: type=1804 audit(1720498709.208:156): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.917" name="/newroot/65/file0/bus" dev="ramfs" ino=25956 res=1 errno=0 [ 366.114856][ T29] audit: type=1800 audit(1720498709.238:157): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.917" name="bus" dev="ramfs" ino=25956 res=0 errno=0 [ 366.682591][ T8274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.827575][ T5140] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 367.996810][ T5137] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 368.058614][ T5140] usb 2-1: not running at top speed; connect to a high speed hub [ 368.089577][ T5140] usb 2-1: config 254 has an invalid interface number: 166 but max is 0 [ 368.116697][ T5140] usb 2-1: config 254 has no interface number 0 [ 368.123962][ T5140] usb 2-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 368.155952][ T5140] usb 2-1: config 254 interface 166 altsetting 76 endpoint 0x1 has invalid maxpacket 121, setting to 64 [ 368.176883][ T5140] usb 2-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 368.216558][ T5140] usb 2-1: config 254 interface 166 has no altsetting 0 [ 368.231259][ T5137] usb 5-1: not running at top speed; connect to a high speed hub [ 368.247199][ T5140] usb 2-1: New USB device found, idVendor=0af0, idProduct=6800, bcdDevice=1e.e6 [ 368.257751][ T5137] usb 5-1: config 254 has an invalid interface number: 166 but max is 0 [ 368.266146][ T5137] usb 5-1: config 254 has no interface number 0 [ 368.272631][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.280835][ T5137] usb 5-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 368.292157][ T5140] usb 2-1: Product: 萖䏴飑֝߄쿥咽璦榟널ኑ묵敵뻰䇸₻ꤣ⺿푽賚쮃쐋槗᜹눋͉ᇿꙧᔌ剺铟㴡㴊ῈⱭ箆ዛ匓蹶횇猻拑㶨遲晙ﮙỪ戋 [ 368.311579][ T5137] usb 5-1: config 254 interface 166 altsetting 76 endpoint 0x1 has invalid maxpacket 121, setting to 64 [ 368.326533][ T5140] usb 2-1: Manufacturer: 㠊 [ 368.331185][ T5140] usb 2-1: SerialNumber: ဇ [ 368.346127][ T5137] usb 5-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 368.359078][ T5137] usb 5-1: config 254 interface 166 has no altsetting 0 [ 368.399155][ T5137] usb 5-1: New USB device found, idVendor=0af0, idProduct=6800, bcdDevice=1e.e6 [ 368.419721][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.456547][ T5137] usb 5-1: Product: 萖䏴飑֝߄쿥咽璦榟널ኑ묵敵뻰䇸₻ꤣ⺿푽賚쮃쐋槗᜹눋͉ᇿꙧᔌ剺铟㴡㴊ῈⱭ箆ዛ匓蹶횇猻拑㶨遲晙ﮙỪ戋 [ 368.494049][ T5137] usb 5-1: Manufacturer: 㠊 [ 368.504181][ T5137] usb 5-1: SerialNumber: ဇ [ 369.049266][ T8290] kvm: pic: non byte write [ 369.170155][ T5140] option 2-1:254.166: GSM modem (1-port) converter detected [ 369.208731][ T5140] usb 2-1: USB disconnect, device number 23 [ 369.250139][ T5140] option 2-1:254.166: device disconnected [ 369.822379][ T5137] option 5-1:254.166: GSM modem (1-port) converter detected [ 369.966378][ T5137] usb 5-1: USB disconnect, device number 25 [ 370.005347][ T5137] option 5-1:254.166: device disconnected [ 370.059983][ T4477] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 370.240523][ T8296] libceph: resolve '. [ 370.240523][ T8296] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 370.240523][ T8296] ' (ret=-3): failed [ 370.335397][ T8296] dummy0: entered promiscuous mode [ 370.340899][ T4477] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 370.380886][ T8296] dummy0: left promiscuous mode [ 370.916276][ T29] audit: type=1804 audit(1720498714.208:158): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.932" name="/newroot/68/file0/bus" dev="ramfs" ino=26048 res=1 errno=0 [ 370.983987][ T8306] dummy0: entered promiscuous mode [ 371.075996][ T8306] dummy0: left promiscuous mode [ 371.267327][ T783] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 371.527889][ T783] usb 1-1: Using ep0 maxpacket: 32 [ 371.546337][ T783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.846821][ T8319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.741021][ T783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.800999][ T783] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.099174][ T58] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 90 seconds [ 373.141870][ T783] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.159116][ T783] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 373.208552][ T783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.223380][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.233611][ T783] usb 1-1: Product: syz [ 373.238412][ T783] usb 1-1: Manufacturer: syz [ 373.243173][ T783] usb 1-1: SerialNumber: syz [ 373.731663][ T783] cdc_ncm 1-1:1.0: bind() failure [ 373.785122][ T783] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 373.803913][ T29] audit: type=1800 audit(1720498717.078:159): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.932" name="bus" dev="ramfs" ino=26048 res=0 errno=0 [ 373.885814][ T783] cdc_ncm 1-1:1.1: bind() failure [ 374.012845][ T783] usb 1-1: USB disconnect, device number 25 [ 374.558179][ T4477] Bluetooth: hci5: unexpected event for opcode 0x2060 [ 375.368830][ T29] audit: type=1804 audit(1720498718.648:160): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.940" name="/newroot/27/file0/bus" dev="ramfs" ino=25242 res=1 errno=0 [ 375.624715][ T29] audit: type=1804 audit(1720498718.918:161): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.940" name="/newroot/27/file0/bus" dev="ramfs" ino=25242 res=1 errno=0 [ 375.737530][ T5096] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 375.758653][ T5096] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 375.767448][ T5096] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 375.779841][ T5096] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 375.789093][ T29] audit: type=1800 audit(1720498719.078:162): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.940" name="bus" dev="ramfs" ino=25242 res=0 errno=0 [ 375.821372][ T5096] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 375.837069][ T5096] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 376.157587][ T783] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 376.417944][ T783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 376.476852][ T783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 376.517637][ T783] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.539161][ T2433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.565096][ T783] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.593939][ T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.637679][ T783] usb 5-1: config 0 descriptor?? [ 376.663102][ T8346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 376.907361][ T8358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.292318][ T783] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 377.374984][ T8346] FAULT_INJECTION: forcing a failure. [ 377.374984][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.447619][ T783] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 377.471550][ T8346] CPU: 1 PID: 8346 Comm: syz.4.942 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 377.481605][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 377.491892][ T8346] Call Trace: [ 377.495205][ T8346] [ 377.498165][ T8346] dump_stack_lvl+0x241/0x360 [ 377.502899][ T8346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.508144][ T8346] ? __pfx__printk+0x10/0x10 [ 377.512781][ T8346] ? snprintf+0xda/0x120 [ 377.517075][ T8346] should_fail_ex+0x3b0/0x4e0 [ 377.521818][ T8346] _copy_to_user+0x2f/0xb0 [ 377.526374][ T8346] simple_read_from_buffer+0xca/0x150 [ 377.531815][ T8346] proc_fail_nth_read+0x1e9/0x250 [ 377.536899][ T8346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.542505][ T8346] ? rw_verify_area+0x520/0x6b0 [ 377.547413][ T8346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.553013][ T8346] vfs_read+0x204/0xbc0 [ 377.557224][ T8346] ? __pfx_lock_release+0x10/0x10 [ 377.562305][ T8346] ? __pfx_vfs_read+0x10/0x10 [ 377.567044][ T8346] ? __fget_files+0x29/0x470 [ 377.571766][ T8346] ? __fget_files+0x3f6/0x470 [ 377.576492][ T8346] ksys_read+0x1a0/0x2c0 [ 377.580885][ T8346] ? __pfx_ksys_read+0x10/0x10 [ 377.585782][ T8346] ? do_syscall_64+0x100/0x230 [ 377.590681][ T8346] ? do_syscall_64+0xb6/0x230 [ 377.595404][ T8346] do_syscall_64+0xf3/0x230 [ 377.600034][ T8346] ? clear_bhb_loop+0x35/0x90 [ 377.604764][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.610699][ T8346] RIP: 0033:0x7fbff9b746bc [ 377.615270][ T8346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 377.634926][ T8346] RSP: 002b:00007fbffa999040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.643398][ T8346] RAX: ffffffffffffffda RBX: 00007fbff9d03f60 RCX: 00007fbff9b746bc [ 377.651421][ T8346] RDX: 000000000000000f RSI: 00007fbffa9990b0 RDI: 0000000000000004 [ 377.659633][ T8346] RBP: 00007fbffa9990a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.667674][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.675696][ T8346] R13: 000000000000000b R14: 00007fbff9d03f60 R15: 00007ffd6ea15198 [ 377.683736][ T8346] [ 377.705873][ T783] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 377.761133][ T783] usb 5-1: USB disconnect, device number 26 [ 377.816614][ T29] audit: type=1804 audit(1720498721.098:163): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.947" name="/newroot/38/file0/bus" dev="ramfs" ino=25323 res=1 errno=0 [ 377.912864][ T29] audit: type=1804 audit(1720498721.098:164): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.946" name="/newroot/179/file0/bus" dev="ramfs" ino=26143 res=1 errno=0 [ 377.952965][ T2433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.966275][ T4477] Bluetooth: hci9: command tx timeout [ 377.980880][ T29] audit: type=1804 audit(1720498721.178:165): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.946" name="/newroot/179/file0/bus" dev="ramfs" ino=26143 res=1 errno=0 [ 378.004998][ T29] audit: type=1800 audit(1720498721.178:166): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.946" name="bus" dev="ramfs" ino=26143 res=0 errno=0 [ 378.024463][ T29] audit: type=1804 audit(1720498721.178:167): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.948" name="/newroot/29/file0/bus" dev="ramfs" ino=25327 res=1 errno=0 [ 378.048509][ T29] audit: type=1804 audit(1720498721.298:168): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.948" name="/newroot/29/file0/bus" dev="ramfs" ino=25327 res=1 errno=0 [ 378.075626][ T29] audit: type=1800 audit(1720498721.298:169): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.948" name="bus" dev="ramfs" ino=25327 res=0 errno=0 [ 378.315300][ T2433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.399231][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 378.565023][ T2433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.060312][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.066932][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.179863][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.203176][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.226166][ T8339] bridge_slave_0: entered allmulticast mode [ 379.251920][ T8339] bridge_slave_0: entered promiscuous mode [ 379.323959][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.346738][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.376293][ T8339] bridge_slave_1: entered allmulticast mode [ 379.407525][ T8339] bridge_slave_1: entered promiscuous mode [ 379.592961][ T2433] bridge_slave_1: left allmulticast mode [ 379.599767][ T2433] bridge_slave_1: left promiscuous mode [ 379.605688][ T2433] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.653059][ T2433] bridge_slave_0: left allmulticast mode [ 379.659015][ T2433] bridge_slave_0: left promiscuous mode [ 379.664849][ T2433] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.013907][ T4477] Bluetooth: hci9: command tx timeout [ 380.558036][ T29] audit: type=1804 audit(1720498723.858:170): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.958" name="/newroot/75/file0/bus" dev="ramfs" ino=26281 res=1 errno=0 [ 380.668105][ T29] audit: type=1800 audit(1720498723.938:171): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.947" name="bus" dev="ramfs" ino=25323 res=0 errno=0 [ 380.756755][ T29] audit: type=1804 audit(1720498723.988:172): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.958" name="/newroot/75/file0/bus" dev="ramfs" ino=26281 res=1 errno=0 [ 380.892932][ T8396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.176563][ T4477] Bluetooth: hci2: command 0x0406 tx timeout [ 382.091620][ T5096] Bluetooth: hci9: command tx timeout [ 382.464394][ T2433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.497833][ T2433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.524950][ T2433] bond0 (unregistering): Released all slaves [ 382.675348][ T5138] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 382.698194][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.795415][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.898778][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 382.923328][ T8339] team0: Port device team_slave_0 added [ 382.938020][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 382.960114][ T5138] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.973691][ T5138] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.996585][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.020016][ T5138] usb 5-1: config 0 descriptor?? [ 383.026168][ T8410] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 383.121468][ T8339] team0: Port device team_slave_1 added [ 383.153045][ T5096] Bluetooth: hci8: ACL packet for unknown connection handle 0 [ 383.337228][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.365661][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.403150][ T8339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.453808][ T2433] hsr_slave_0: left promiscuous mode [ 383.480700][ T2433] hsr_slave_1: left promiscuous mode [ 383.485837][ T5138] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 383.507728][ T2433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.510968][ T5138] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 383.540084][ T2433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.543655][ T5138] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 383.587801][ T2433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.596029][ T5138] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 383.611662][ T2433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.681839][ T2433] veth1_macvtap: left promiscuous mode [ 383.696917][ T2433] veth0_macvtap: left promiscuous mode [ 383.717285][ T2433] veth1_vlan: left promiscuous mode [ 383.733468][ T2433] veth0_vlan: left promiscuous mode [ 384.169835][ T5096] Bluetooth: hci9: command tx timeout [ 385.031277][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 385.031302][ T29] audit: type=1804 audit(1720498728.318:174): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.968" name="/newroot/184/file0/bus" dev="ramfs" ino=25481 res=1 errno=0 [ 385.512523][ T2433] team0 (unregistering): Port device team_slave_1 removed [ 385.613943][ T2433] team0 (unregistering): Port device team_slave_0 removed [ 386.349648][ T5140] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 387.249661][ T8425] dummy0: entered promiscuous mode [ 387.307087][ T8425] dummy0: left promiscuous mode [ 387.638090][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.645110][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.671285][ T8339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.755438][ T8440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.456983][ T5137] usb 5-1: USB disconnect, device number 27 [ 388.467556][ T29] audit: type=1800 audit(1720498731.768:175): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.968" name="bus" dev="ramfs" ino=25481 res=0 errno=0 [ 388.491253][ T8438] ieee802154 phy0 wpan0: encryption failed: -90 [ 389.516819][ T8339] hsr_slave_0: entered promiscuous mode [ 389.597161][ T8339] hsr_slave_1: entered promiscuous mode [ 389.656740][ T8339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.669150][ T8339] Cannot create hsr debugfs directory [ 389.677061][ T783] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 389.890998][ T783] usb 4-1: Using ep0 maxpacket: 32 [ 389.898904][ T783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 389.923076][ T783] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 389.948731][ T783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.978870][ T783] usb 4-1: Product: syz [ 389.983106][ T783] usb 4-1: Manufacturer: syz [ 390.006601][ T783] usb 4-1: SerialNumber: syz [ 390.038005][ T783] usb 4-1: config 0 descriptor?? [ 390.075849][ T8445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.205765][ T783] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 390.590285][ T10] block nbd3: Possible stuck request ffff888020cb0000: control (read@0,4096B). Runtime 90 seconds [ 390.969750][ T783] usb 4-1: USB disconnect, device number 21 [ 391.354830][ T8339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.404984][ T8339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.431847][ T8339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.447682][ T5139] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 391.459937][ T8339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.576616][ T5138] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 391.646931][ T5139] usb 1-1: Using ep0 maxpacket: 32 [ 391.674303][ T5139] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 391.706305][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.738866][ T5139] usb 1-1: config 0 has no interface number 0 [ 391.752258][ T8339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.761696][ T5139] usb 1-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 391.790476][ T5138] usb 5-1: not running at top speed; connect to a high speed hub [ 391.813057][ T5139] usb 1-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 391.831860][ T5138] usb 5-1: config 254 has an invalid interface number: 166 but max is 0 [ 391.852618][ T5138] usb 5-1: config 254 has no interface number 0 [ 391.870492][ T8339] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.870540][ T5139] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 391.899412][ T5138] usb 5-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 391.915016][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.922316][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.932711][ T5138] usb 5-1: config 254 interface 166 altsetting 76 endpoint 0x1 has invalid maxpacket 121, setting to 64 [ 391.947742][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.967155][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.974545][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.194959][ T5138] usb 5-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 392.213962][ T5139] usb 1-1: config 0 descriptor?? [ 392.219307][ T5138] usb 5-1: config 254 interface 166 has no altsetting 0 [ 392.229752][ T5139] option 1-1:0.116: GSM modem (1-port) converter detected [ 392.239698][ T5138] usb 5-1: New USB device found, idVendor=0af0, idProduct=6800, bcdDevice=1e.e6 [ 392.259236][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.303855][ T5138] usb 5-1: Product: 萖䏴飑֝߄쿥咽璦榟널ኑ묵敵뻰䇸₻ꤣ⺿푽賚쮃쐋槗᜹눋͉ᇿꙧᔌ剺铟㴡㴊ῈⱭ箆ዛ匓蹶횇猻拑㶨遲晙ﮙỪ戋 [ 392.338651][ T8469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.568892][ T5138] usb 5-1: Manufacturer: 㠊 [ 392.671386][ T5138] usb 5-1: SerialNumber: ဇ [ 393.218501][ T29] audit: type=1804 audit(1720498736.508:176): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.981" name="/newroot/45/file0/bus" dev="ramfs" ino=26809 res=1 errno=0 [ 393.258332][ T5138] option 5-1:254.166: GSM modem (1-port) converter detected [ 393.286930][ T5138] usb 5-1: USB disconnect, device number 28 [ 393.312150][ T5138] option 5-1:254.166: device disconnected [ 393.366074][ T5140] usb 1-1: USB disconnect, device number 26 [ 393.386562][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.407296][ T5140] option 1-1:0.116: device disconnected [ 393.438337][ T29] audit: type=1804 audit(1720498736.738:177): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.981" name="/newroot/45/file0/bus" dev="ramfs" ino=26809 res=1 errno=0 [ 393.550643][ T29] audit: type=1800 audit(1720498736.758:178): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.981" name="bus" dev="ramfs" ino=26809 res=0 errno=0 [ 393.557779][ T8339] veth0_vlan: entered promiscuous mode [ 393.652450][ T8339] veth1_vlan: entered promiscuous mode [ 393.797710][ T8339] veth0_macvtap: entered promiscuous mode [ 393.838607][ T8339] veth1_macvtap: entered promiscuous mode [ 393.898503][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.954758][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.984638][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.026674][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.051448][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.066900][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.079142][ T8483] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.982'. [ 394.096570][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.112519][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.134090][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.145419][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.158770][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.175916][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.176972][ T8485] ieee802154 phy0 wpan0: encryption failed: -90 [ 394.189101][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.211715][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.224096][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.234898][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.262858][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.298753][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.323910][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.340709][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.351767][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.372132][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.470640][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.515956][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.570234][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.616138][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.670607][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.717980][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.769038][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.803387][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.843660][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.884939][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.923116][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.960001][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.279063][ T8339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.362238][ T8339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.396541][ T8339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.420971][ T8339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.778787][ T8513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.573981][ T8510] tmpfs: Bad value for 'gid' [ 400.628068][ T2462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.646689][ T2462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.715090][ T29] audit: type=1804 audit(1720498744.008:179): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.993" name="/newroot/84/file0/bus" dev="ramfs" ino=27675 res=1 errno=0 [ 400.929979][ T5080] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 400.969551][ T29] audit: type=1804 audit(1720498744.268:180): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.993" name="/newroot/84/file0/bus" dev="ramfs" ino=27675 res=1 errno=0 [ 400.995818][ T29] audit: type=1800 audit(1720498744.288:181): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.993" name="bus" dev="ramfs" ino=27675 res=0 errno=0 [ 401.017242][ T5139] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 401.047976][ T2462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.094420][ T2462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.166527][ T5080] usb 1-1: Using ep0 maxpacket: 32 [ 401.187378][ T5080] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 401.216370][ T5080] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.236378][ T5080] usb 1-1: config 0 has no interface number 0 [ 401.243411][ T5139] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.257681][ T5080] usb 1-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 401.270000][ T5139] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 401.280588][ T5080] usb 1-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 401.294509][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.321477][ T5080] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 401.333712][ T5139] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 401.343677][ T5080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.364671][ T5080] usb 1-1: config 0 descriptor?? [ 401.385269][ T5080] option 1-1:0.116: GSM modem (1-port) converter detected [ 401.731583][ T8526] netlink: 172 bytes leftover after parsing attributes in process `syz.2.938'. [ 401.754836][ T8527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.995'. [ 401.989279][ T8527] ieee802154 phy0 wpan0: encryption failed: -90 [ 402.729016][ T5080] usb 2-1: USB disconnect, device number 24 [ 402.828039][ T5215] usb 1-1: USB disconnect, device number 27 [ 402.836378][ T5215] option 1-1:0.116: device disconnected [ 402.845464][ T5096] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 402.847926][ T5096] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 403.051465][ T8535] libceph: resolve '. [ 403.051465][ T8535] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 403.051465][ T8535] ' (ret=-3): failed [ 403.290623][ T8535] dummy0: entered promiscuous mode [ 403.303713][ T8535] dummy0: left promiscuous mode [ 403.409448][ T58] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 120 seconds [ 405.314377][ T8555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.119978][ T29] audit: type=1804 audit(1720498754.418:182): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1005" name="/newroot/2/file0/bus" dev="ramfs" ino=27229 res=1 errno=0 [ 411.346718][ T29] audit: type=1804 audit(1720498754.608:183): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1005" name="/newroot/2/file0/bus" dev="ramfs" ino=27229 res=1 errno=0 [ 411.459271][ T29] audit: type=1800 audit(1720498754.608:184): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1005" name="bus" dev="ramfs" ino=27229 res=0 errno=0 [ 411.528449][ T8565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1006'. [ 411.595301][ T8565] ieee802154 phy0 wpan0: encryption failed: -90 [ 411.849991][ T29] audit: type=1804 audit(1720498755.148:185): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1009" name="/newroot/3/file0/bus" dev="ramfs" ino=27258 res=1 errno=0 [ 411.974273][ T5096] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 411.990837][ T29] audit: type=1804 audit(1720498755.258:186): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1009" name="/newroot/3/file0/bus" dev="ramfs" ino=27258 res=1 errno=0 [ 412.170146][ T29] audit: type=1800 audit(1720498755.278:187): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1009" name="bus" dev="ramfs" ino=27258 res=0 errno=0 [ 412.217277][ T8577] libceph: resolve '. [ 412.217277][ T8577] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 412.217277][ T8577] ' (ret=-3): failed [ 412.626043][ T4477] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.678360][ T4477] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.688059][ T4477] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.696149][ T4477] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.706277][ T4477] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 412.713754][ T4477] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.049358][ T8588] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1013'. [ 413.070475][ T8577] dummy0: entered promiscuous mode [ 413.702550][ T8577] dummy0: left promiscuous mode [ 414.391479][ T2433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.759192][ T2433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.817394][ T4477] Bluetooth: hci6: command tx timeout [ 414.964212][ T2433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.191526][ T2433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.366651][ T29] audit: type=1804 audit(1720498758.648:188): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1018" name="/newroot/197/file0/bus" dev="ramfs" ino=27813 res=1 errno=0 [ 415.581254][ T29] audit: type=1804 audit(1720498758.878:189): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1018" name="/newroot/197/file0/bus" dev="ramfs" ino=27813 res=1 errno=0 [ 415.644538][ T29] audit: type=1800 audit(1720498758.928:190): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1018" name="bus" dev="ramfs" ino=27813 res=0 errno=0 [ 416.265637][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 416.310532][ T2433] bridge_slave_1: left allmulticast mode [ 416.316286][ T2433] bridge_slave_1: left promiscuous mode [ 416.346988][ T2433] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.388053][ T2433] bridge_slave_0: left allmulticast mode [ 416.396487][ T2433] bridge_slave_0: left promiscuous mode [ 416.402356][ T2433] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.612067][ T4477] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 416.738859][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 416.891369][ T4477] Bluetooth: hci6: command tx timeout [ 417.402833][ T4477] Bluetooth: hci5: unexpected event for opcode 0x2060 [ 418.041593][ T2433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.174011][ T2433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.225005][ T2433] bond0 (unregistering): Released all slaves [ 418.705780][ T4477] Bluetooth: hci1: command 0x0406 tx timeout [ 418.966730][ T4477] Bluetooth: hci6: command tx timeout [ 419.901971][ T4477] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 420.013459][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 420.048254][ T5141] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 420.258701][ T5141] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 420.272805][ T5141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.294077][ T5141] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.307435][ T5141] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.333570][ T5141] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.342995][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.351326][ T5141] usb 3-1: Product: syz [ 420.355705][ T5141] usb 3-1: Manufacturer: syz [ 420.360550][ T5141] usb 3-1: SerialNumber: syz [ 420.371849][ T2433] hsr_slave_0: left promiscuous mode [ 420.389003][ T5141] cdc_ncm 3-1:1.0: skipping garbage [ 420.397964][ T2433] hsr_slave_1: left promiscuous mode [ 420.421780][ T2433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.431155][ T2433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.445678][ T2433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.453982][ T2433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.628675][ T2433] veth1_macvtap: left promiscuous mode [ 420.657460][ T10] block nbd3: Possible stuck request ffff888020cb0000: control (read@0,4096B). Runtime 120 seconds [ 420.689429][ T2433] veth0_macvtap: left promiscuous mode [ 420.713962][ T2433] veth1_vlan: left promiscuous mode [ 420.732434][ T2433] veth0_vlan: left promiscuous mode [ 421.046925][ T4477] Bluetooth: hci6: command tx timeout [ 421.147399][ T8669] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1034'. [ 421.600373][ T5141] cdc_ncm 3-1:1.0: bind() failure [ 421.745070][ T5141] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 421.817927][ T5141] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 421.835905][ T5141] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 422.397909][ T4477] Bluetooth: hci1: command 0x0406 tx timeout [ 422.425995][ T5141] usb 3-1: USB disconnect, device number 23 [ 423.126946][ T5137] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 423.172341][ T8682] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1038'. [ 423.357882][ T5137] usb 3-1: Using ep0 maxpacket: 32 [ 423.390314][ T5137] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 423.400163][ T5137] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.422886][ T5137] usb 3-1: config 0 has no interface number 0 [ 423.429353][ T5137] usb 3-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 423.443587][ T5137] usb 3-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 423.476724][ T5137] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 423.509246][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.574113][ T5137] usb 3-1: config 0 descriptor?? [ 423.627990][ T5137] option 3-1:0.116: GSM modem (1-port) converter detected [ 423.658278][ T2433] team0 (unregistering): Port device team_slave_1 removed [ 424.084609][ T2433] team0 (unregistering): Port device team_slave_0 removed [ 425.407722][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.425207][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.435585][ T8581] bridge_slave_0: entered allmulticast mode [ 425.629186][ T8581] bridge_slave_0: entered promiscuous mode [ 425.781766][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.859769][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.942331][ T8581] bridge_slave_1: entered allmulticast mode [ 426.054676][ T8581] bridge_slave_1: entered promiscuous mode [ 426.668383][ T4477] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 426.730620][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.797030][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 426.821823][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.873593][ T5137] usb 3-1: USB disconnect, device number 24 [ 426.895162][ T5137] option 3-1:0.116: device disconnected [ 427.095700][ T8581] team0: Port device team_slave_0 added [ 427.137973][ T8581] team0: Port device team_slave_1 added [ 427.240827][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.267015][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.307038][ T783] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 427.346836][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.377862][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.393840][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.442668][ T8581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.551350][ T783] usb 5-1: Using ep0 maxpacket: 32 [ 427.613717][ T783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.650765][ T783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.691349][ T783] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.730976][ T783] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.785242][ T5215] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 427.798277][ T8581] hsr_slave_0: entered promiscuous mode [ 427.804076][ T783] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 427.831462][ T8581] hsr_slave_1: entered promiscuous mode [ 427.845582][ T783] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.874222][ T783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.884250][ T8581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.898731][ T8581] Cannot create hsr debugfs directory [ 427.904340][ T783] usb 5-1: Product: syz [ 427.917645][ T783] usb 5-1: Manufacturer: syz [ 427.938729][ T783] usb 5-1: SerialNumber: syz [ 428.019007][ T5215] usb 1-1: Using ep0 maxpacket: 32 [ 428.031045][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.071254][ T5215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.105155][ T5215] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.136067][ T5215] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.193004][ T783] cdc_ncm 5-1:1.0: bind() failure [ 428.198589][ T5215] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 428.222261][ T783] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 428.232185][ T5215] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.246614][ T783] cdc_ncm 5-1:1.1: bind() failure [ 428.278595][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.281110][ T8717] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1047'. [ 428.299700][ T5215] usb 1-1: Product: syz [ 428.303924][ T5215] usb 1-1: Manufacturer: syz [ 428.310753][ T783] usb 5-1: USB disconnect, device number 29 [ 428.332366][ T5215] usb 1-1: SerialNumber: syz [ 428.740884][ T4477] Bluetooth: hci5: command 0x0406 tx timeout [ 429.147607][ T5215] cdc_ncm 1-1:1.0: bind() failure [ 429.177215][ T5215] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 429.195383][ T5215] cdc_ncm 1-1:1.1: bind() failure [ 429.216968][ T5215] usb 1-1: USB disconnect, device number 28 [ 429.369608][ T4477] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 429.498095][ T8726] libceph: resolve '. [ 429.498095][ T8726] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 429.498095][ T8726] ' (ret=-3): failed [ 430.318487][ T8730] dummy0: entered promiscuous mode [ 430.420366][ T8730] dummy0: left promiscuous mode [ 430.721178][ T8581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.811057][ T8581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.930841][ T5137] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 430.942341][ T8581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.963338][ T8581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.188938][ T5137] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 431.244996][ T5137] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.324187][ T5137] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.345192][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.355983][ T5137] usb 1-1: Product: syz [ 431.360384][ T5137] usb 1-1: Manufacturer: syz [ 431.374237][ T5137] usb 1-1: SerialNumber: syz [ 431.419768][ T5137] cdc_ncm 1-1:1.0: skipping garbage [ 431.534026][ T4477] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 431.581279][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.736331][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.746662][ T5139] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 431.777497][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 431.790831][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.798201][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.826328][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.833712][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.936989][ T5139] usb 5-1: Using ep0 maxpacket: 32 [ 431.946729][ T5139] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 431.973996][ T5139] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.994734][ T5139] usb 5-1: config 0 has no interface number 0 [ 432.016254][ T5139] usb 5-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 432.052322][ T5139] usb 5-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 432.074095][ T5139] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 432.101029][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.130696][ T5139] usb 5-1: config 0 descriptor?? [ 432.150476][ T5139] option 5-1:0.116: GSM modem (1-port) converter detected [ 432.252333][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.267054][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.529495][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.531022][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.578387][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.738098][ T8581] veth0_vlan: entered promiscuous mode [ 432.773112][ T8581] veth1_vlan: entered promiscuous mode [ 432.891861][ T5137] cdc_ncm 1-1:1.0: bind() failure [ 432.908835][ T5137] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 432.922328][ T5137] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 432.936064][ T8581] veth0_macvtap: entered promiscuous mode [ 432.961949][ T5137] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 432.989716][ T8581] veth1_macvtap: entered promiscuous mode [ 433.017805][ T5137] usb 1-1: USB disconnect, device number 29 [ 433.075429][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.102661][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.120176][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.142497][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.176881][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.203703][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.225004][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.247162][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.281943][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.316476][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.336917][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.366909][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.392073][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.425575][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.446007][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.459749][ T58] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 150 seconds [ 433.490985][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.553890][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.607014][ T4477] Bluetooth: hci9: command tx timeout [ 433.634984][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.646229][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.696383][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.707302][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.717766][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.728504][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.738761][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.749622][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.759878][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.772121][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.786726][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.797543][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.808804][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.819587][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.829848][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.851214][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.875136][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.918543][ T5138] usb 5-1: USB disconnect, device number 30 [ 433.932831][ T5138] option 5-1:0.116: device disconnected [ 433.940750][ T8581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.951775][ T8581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.961940][ T5139] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 433.972806][ T8581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.981802][ T8581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.149200][ T5139] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 434.167500][ T5139] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.196996][ T5139] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.210773][ T5139] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.227394][ T5139] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.240138][ T7017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.256008][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.264538][ T7017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.274697][ T5139] usb 1-1: Product: syz [ 434.284860][ T5139] usb 1-1: Manufacturer: syz [ 434.315216][ T5139] usb 1-1: SerialNumber: syz [ 434.334291][ T5139] cdc_ncm 1-1:1.0: skipping garbage [ 434.368257][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.387977][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.829319][ T4477] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 434.848646][ T8774] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1064'. [ 435.026785][ T5137] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 435.256630][ T5137] usb 4-1: Using ep0 maxpacket: 32 [ 435.290739][ T5137] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 435.299715][ T5137] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.358486][ T5137] usb 4-1: config 0 has no interface number 0 [ 435.365154][ T5137] usb 4-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 435.393005][ T5137] usb 4-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 435.515008][ T5137] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 435.526881][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.555987][ T5137] usb 4-1: config 0 descriptor?? [ 435.595954][ T5137] option 4-1:0.116: GSM modem (1-port) converter detected [ 435.858547][ T5139] cdc_ncm 1-1:1.0: bind() failure [ 435.899191][ T5139] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 435.901389][ T5139] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 435.902339][ T5139] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 435.905531][ T5139] usb 1-1: USB disconnect, device number 30 [ 436.097019][ T4477] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 437.016599][ T4477] Bluetooth: hci9: command tx timeout [ 437.211609][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'. [ 437.452623][ T5139] usb 4-1: USB disconnect, device number 22 [ 437.470400][ T5139] option 4-1:0.116: device disconnected [ 437.598086][ T4477] Bluetooth: hci9: ACL packet for unknown connection handle 0 [ 439.046680][ T4477] Bluetooth: hci9: command tx timeout [ 439.177229][ T8799] dummy0: entered promiscuous mode [ 439.247545][ T8799] dummy0: left promiscuous mode [ 439.289776][ T5215] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 439.526603][ T5215] usb 4-1: Using ep0 maxpacket: 32 [ 439.544313][ T5215] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 439.553012][ T5215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.582898][ T5215] usb 4-1: config 0 has no interface number 0 [ 439.596796][ T5215] usb 4-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 439.626253][ T5215] usb 4-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 439.660106][ T5215] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 439.680369][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.704283][ T5215] usb 4-1: config 0 descriptor?? [ 439.731294][ T5215] option 4-1:0.116: GSM modem (1-port) converter detected [ 439.776802][ T5136] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 439.976889][ T5136] usb 2-1: Using ep0 maxpacket: 32 [ 440.143295][ T5136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.276511][ T5136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.296532][ T5136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 440.308196][ T5136] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 440.368821][ T5136] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 440.504465][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.574663][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.637701][ T5136] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.693725][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.771642][ T5136] usb 2-1: Product: syz [ 440.775882][ T5136] usb 2-1: Manufacturer: syz [ 440.816696][ T5136] usb 2-1: SerialNumber: syz [ 441.067465][ T5136] cdc_ncm 2-1:1.0: bind() failure [ 441.086007][ T5136] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 441.105731][ T5136] cdc_ncm 2-1:1.1: bind() failure [ 441.122529][ T5136] usb 2-1: USB disconnect, device number 25 [ 441.133230][ T5096] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 441.216553][ T5141] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 441.282543][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 441.436764][ T5141] usb 1-1: Using ep0 maxpacket: 32 [ 441.460872][ T5141] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 441.474018][ T5141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.502469][ T5141] usb 1-1: config 0 has no interface number 0 [ 441.515896][ T5141] usb 1-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 441.536342][ T5141] usb 1-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 441.571847][ T5141] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 441.603696][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.637792][ T5141] usb 1-1: config 0 descriptor?? [ 441.646236][ T5141] option 1-1:0.116: GSM modem (1-port) converter detected [ 441.677237][ T5096] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 441.731256][ T5141] usb 4-1: USB disconnect, device number 23 [ 441.749246][ T5141] option 4-1:0.116: device disconnected [ 441.832927][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 442.184015][ T5096] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 442.188094][ T5096] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 442.447524][ T5137] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 442.455638][ T5136] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 442.620792][ T29] audit: type=1804 audit(1720498785.918:191): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1085" name="/newroot/3/file0/bus" dev="ramfs" ino=28578 res=1 errno=0 [ 442.632819][ T8845] dummy0: entered promiscuous mode [ 442.647550][ T4477] Bluetooth: hci0: command 0x0406 tx timeout [ 442.655841][ T5168] usb 1-1: USB disconnect, device number 31 [ 442.666559][ T5136] usb 2-1: Using ep0 maxpacket: 32 [ 442.673605][ T5137] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 442.691913][ T5168] option 1-1:0.116: device disconnected [ 442.701733][ T29] audit: type=1804 audit(1720498785.988:192): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1085" name="/newroot/3/file0/bus" dev="ramfs" ino=28578 res=1 errno=0 [ 442.731254][ T5137] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.742841][ T8845] dummy0: left promiscuous mode [ 442.777838][ T5137] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.794868][ T5137] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.810266][ T5136] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 442.820141][ T5136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.833989][ T5136] usb 2-1: config 0 has no interface number 0 [ 442.841032][ T29] audit: type=1800 audit(1720498785.988:193): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1085" name="bus" dev="ramfs" ino=28578 res=0 errno=0 [ 442.864670][ T5137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.896549][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.904612][ T5137] usb 3-1: Product: syz [ 442.913373][ T5137] usb 3-1: Manufacturer: syz [ 442.922531][ T5137] usb 3-1: SerialNumber: syz [ 442.946793][ T5136] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 442.999053][ T5137] cdc_ncm 3-1:1.0: skipping garbage [ 443.007236][ T5136] usb 2-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 443.021485][ T5136] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 443.031571][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.065783][ T5136] usb 2-1: config 0 descriptor?? [ 443.083851][ T5136] option 2-1:0.116: GSM modem (1-port) converter detected [ 443.206603][ T4477] Bluetooth: hci9: command tx timeout [ 443.376589][ T5215] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 443.576668][ T5215] usb 4-1: Using ep0 maxpacket: 32 [ 443.598885][ T5215] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 443.619532][ T5080] usb 2-1: USB disconnect, device number 26 [ 443.625302][ T5215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.643760][ T5080] option 2-1:0.116: device disconnected [ 443.662439][ T5215] usb 4-1: config 0 has no interface number 0 [ 443.678236][ T5215] usb 4-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 443.732867][ T5215] usb 4-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 443.751933][ T5215] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 443.761328][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.827737][ T5215] usb 4-1: config 0 descriptor?? [ 443.846841][ T5215] option 4-1:0.116: GSM modem (1-port) converter detected [ 444.032217][ T29] audit: type=1804 audit(1720498787.328:194): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1089" name="/newroot/216/file0/bus" dev="ramfs" ino=29700 res=1 errno=0 [ 444.087594][ T5137] cdc_ncm 3-1:1.0: bind() failure [ 444.125734][ T5137] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 444.135122][ T29] audit: type=1804 audit(1720498787.408:195): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1089" name="/newroot/216/file0/bus" dev="ramfs" ino=29700 res=1 errno=0 [ 444.202728][ T5137] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 444.235197][ T5137] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 444.246264][ T29] audit: type=1800 audit(1720498787.408:196): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1089" name="bus" dev="ramfs" ino=29700 res=0 errno=0 [ 444.281067][ T5137] usb 3-1: USB disconnect, device number 25 [ 444.384570][ T5215] usb 4-1: USB disconnect, device number 24 [ 444.403774][ T5215] option 4-1:0.116: device disconnected [ 445.286924][ T4477] Bluetooth: hci9: command tx timeout [ 445.496744][ T29] audit: type=1804 audit(1720498788.788:197): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1096" name="/newroot/23/file0/bus" dev="ramfs" ino=29435 res=1 errno=0 [ 445.537091][ T4477] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 445.572926][ T29] audit: type=1804 audit(1720498788.848:198): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1096" name="/newroot/23/file0/bus" dev="ramfs" ino=29435 res=1 errno=0 [ 445.676991][ T5215] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 445.817156][ T29] audit: type=1800 audit(1720498788.858:199): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1096" name="bus" dev="ramfs" ino=29435 res=0 errno=0 [ 446.263868][ T5215] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 446.273859][ T5215] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.334111][ T5215] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.367121][ T5215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.396941][ T5215] usb 4-1: Product: syz [ 446.404853][ T5215] usb 4-1: Manufacturer: syz [ 446.412812][ T5215] usb 4-1: SerialNumber: syz [ 446.432464][ T5215] cdc_ncm 4-1:1.0: skipping garbage [ 446.956692][ T5136] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 446.991344][ T5137] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 447.156560][ T5136] usb 3-1: Using ep0 maxpacket: 16 [ 447.165030][ T5136] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.186747][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 447.216657][ T5137] usb 2-1: Using ep0 maxpacket: 32 [ 447.240544][ T5136] usb 3-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 447.253086][ T5137] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 447.266497][ T5136] usb 3-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 447.272820][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.274821][ T5136] usb 3-1: Product: syz [ 447.287827][ T5137] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.306907][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.326522][ T5137] usb 2-1: config 0 has no interface number 0 [ 447.332749][ T5137] usb 2-1: config 0 interface 116 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 447.363302][ T5136] usb 3-1: Manufacturer: syz [ 447.368917][ T5136] usb 3-1: SerialNumber: syz [ 447.386601][ T5137] usb 2-1: config 0 interface 116 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 447.403073][ T5136] usb 3-1: config 0 descriptor?? [ 447.420417][ T5136] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 447.428340][ T5137] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=5d.d4 [ 447.447447][ T5136] imon 3-1:0.0: unable to initialize intf0, err -19 [ 447.456625][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.476555][ T5136] imon:imon_probe: failed to initialize context! [ 447.483040][ T5136] imon 3-1:0.0: unable to register, err -19 [ 447.490640][ T5137] usb 2-1: config 0 descriptor?? [ 447.504125][ T5137] option 2-1:0.116: GSM modem (1-port) converter detected [ 447.615054][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.646852][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.555699][ T5215] cdc_ncm 4-1:1.0: bind() failure [ 448.562246][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.606883][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.623889][ T5215] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 448.628318][ T5215] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 448.630660][ T5215] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 448.634667][ T5215] usb 4-1: USB disconnect, device number 25 [ 448.805062][ T5141] usb 3-1: USB disconnect, device number 26 [ 448.991139][ T5137] usb 2-1: USB disconnect, device number 27 [ 449.006333][ T5137] option 2-1:0.116: device disconnected [ 449.066857][ T5215] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 449.283138][ T5215] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 449.311162][ T5215] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.353219][ T5215] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.384516][ T5215] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.414068][ T5215] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.423734][ T5215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.436610][ T5215] usb 5-1: Product: syz [ 449.448625][ T5215] usb 5-1: Manufacturer: syz [ 449.462140][ T5215] usb 5-1: SerialNumber: syz [ 449.473448][ T5215] cdc_ncm 5-1:1.0: skipping garbage [ 449.829556][ T4477] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 449.831835][ T4477] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 450.440673][ T5168] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 450.855573][ T8927] libceph: resolve '. [ 450.855573][ T8927] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 450.855573][ T8927] ' (ret=-3): failed [ 450.901850][ T10] block nbd3: Possible stuck request ffff888020cb0000: control (read@0,4096B). Runtime 150 seconds [ 450.972750][ T5168] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 451.047832][ T5168] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.115398][ T5168] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.140305][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.151162][ T5215] cdc_ncm 5-1:1.0: bind() failure [ 451.181563][ T5215] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 451.189392][ T8927] dummy0: entered promiscuous mode [ 451.192559][ T5168] usb 4-1: Product: syz [ 451.218510][ T5168] usb 4-1: Manufacturer: syz [ 451.231178][ T5168] usb 4-1: SerialNumber: syz [ 451.237302][ T5215] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 451.277135][ T29] audit: type=1804 audit(1720498794.568:200): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1110" name="/newroot/221/file0/bus" dev="ramfs" ino=29870 res=1 errno=0 [ 451.300053][ T5215] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 451.311766][ T5215] usb 5-1: USB disconnect, device number 31 [ 451.329574][ T5168] cdc_ncm 4-1:1.0: skipping garbage [ 451.335570][ T8927] dummy0: left promiscuous mode [ 451.439546][ T29] audit: type=1804 audit(1720498794.728:201): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1110" name="/newroot/221/file0/bus" dev="ramfs" ino=29870 res=1 errno=0 [ 451.534066][ T29] audit: type=1800 audit(1720498794.728:202): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1110" name="bus" dev="ramfs" ino=29870 res=0 errno=0 [ 452.148847][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.190297][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.519028][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.557152][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.617886][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.727668][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.811175][ T5168] cdc_ncm 4-1:1.0: bind() failure [ 452.844888][ T5168] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 452.897176][ T5168] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 452.920387][ T5168] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 452.950202][ T5168] usb 4-1: USB disconnect, device number 26 [ 453.747659][ T5168] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 453.960579][ T5168] usb 2-1: not running at top speed; connect to a high speed hub [ 453.985330][ T5168] usb 2-1: config 254 has an invalid interface number: 166 but max is 0 [ 454.005721][ T5168] usb 2-1: config 254 has no interface number 0 [ 454.044926][ T5168] usb 2-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 454.236564][ T5168] usb 2-1: config 254 interface 166 altsetting 76 endpoint 0x1 has invalid maxpacket 121, setting to 64 [ 454.248105][ T5168] usb 2-1: config 254 interface 166 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 454.262847][ T5168] usb 2-1: config 254 interface 166 has no altsetting 0 [ 454.325619][ T5168] usb 2-1: New USB device found, idVendor=0af0, idProduct=6800, bcdDevice=1e.e6 [ 454.355966][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.396930][ T5168] usb 2-1: Product: 萖䏴飑֝߄쿥咽璦榟널ኑ묵敵뻰䇸₻ꤣ⺿푽賚쮃쐋槗᜹눋͉ᇿꙧᔌ剺铟㴡㴊ῈⱭ箆ዛ匓蹶횇猻拑㶨遲晙ﮙỪ戋 [ 454.451341][ T5168] usb 2-1: Manufacturer: 㠊 [ 454.476633][ T5168] usb 2-1: SerialNumber: ဇ [ 454.950940][ T8954] kvm: pic: non byte write [ 455.017345][ T5080] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 455.104092][ T5168] option 2-1:254.166: GSM modem (1-port) converter detected [ 455.153583][ T29] audit: type=1804 audit(1720498798.448:203): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1122" name="/newroot/114/file0/bus" dev="ramfs" ino=30003 res=1 errno=0 [ 455.183976][ T5168] usb 2-1: USB disconnect, device number 28 [ 455.218400][ T5168] option 2-1:254.166: device disconnected [ 455.250664][ T5080] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 455.260120][ T5080] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.283653][ T29] audit: type=1804 audit(1720498798.568:204): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1122" name="/newroot/114/file0/bus" dev="ramfs" ino=30003 res=1 errno=0 [ 455.316267][ T5080] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.357433][ T29] audit: type=1800 audit(1720498798.568:205): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1122" name="bus" dev="ramfs" ino=30003 res=0 errno=0 [ 455.377228][ T5080] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.432103][ T5080] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.451619][ T5080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.496586][ T5080] usb 4-1: Product: syz [ 455.504135][ T5080] usb 4-1: Manufacturer: syz [ 455.510322][ T5080] usb 4-1: SerialNumber: syz [ 455.531527][ T5080] cdc_ncm 4-1:1.0: skipping garbage [ 456.028970][ T4477] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 456.040621][ T4477] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 456.331469][ T5138] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 456.484458][ T8987] libceph: resolve '. [ 456.484458][ T8987] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 456.484458][ T8987] ' (ret=-3): failed [ 456.546842][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 456.557568][ T5080] cdc_ncm 4-1:1.0: bind() failure [ 456.562913][ T29] audit: type=1804 audit(1720498799.838:206): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1128" name="/newroot/29/file0/bus" dev="ramfs" ino=30031 res=1 errno=0 [ 456.594679][ T5080] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 456.618565][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.642177][ T5080] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 456.658090][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.716871][ T5080] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 456.727600][ T5138] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 456.760884][ T5080] usb 4-1: USB disconnect, device number 27 [ 456.773985][ T5138] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 456.991122][ T5138] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 457.723478][ T5138] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.733967][ T8995] dummy0: entered promiscuous mode [ 457.747560][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.769881][ T5138] usb 2-1: Product: syz [ 457.774083][ T5138] usb 2-1: Manufacturer: syz [ 457.792250][ T5138] usb 2-1: SerialNumber: syz [ 457.830149][ T8995] dummy0: left promiscuous mode [ 457.996896][ T29] audit: type=1804 audit(1720498801.278:207): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1131" name="/newroot/10/file0/bus" dev="ramfs" ino=30047 res=1 errno=0 [ 458.078096][ T5138] cdc_ncm 2-1:1.0: bind() failure [ 458.120975][ T5138] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 458.136545][ T5138] cdc_ncm 2-1:1.1: bind() failure [ 458.241684][ T5138] usb 2-1: USB disconnect, device number 29 [ 458.278660][ T29] audit: type=1804 audit(1720498801.578:208): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1131" name="/newroot/10/file0/bus" dev="ramfs" ino=30047 res=1 errno=0 [ 458.327308][ T29] audit: type=1800 audit(1720498801.608:209): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1131" name="bus" dev="ramfs" ino=30047 res=0 errno=0 [ 458.779458][ T9016] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1133'. [ 459.702147][ T29] audit: type=1800 audit(1720498802.958:210): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1128" name="bus" dev="ramfs" ino=30031 res=0 errno=0 [ 460.088233][ T9027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.106785][ T4477] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 460.286206][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'. [ 460.436978][ T5137] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 460.628888][ T5137] usb 4-1: Using ep0 maxpacket: 16 [ 460.654790][ T5137] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.678270][ T5137] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.722871][ T5137] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 460.746562][ T5137] usb 4-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 460.775391][ T5137] usb 4-1: Product: syz [ 460.784898][ T5137] usb 4-1: Manufacturer: syz [ 460.794981][ T5137] usb 4-1: SerialNumber: syz [ 460.807985][ T5137] usb 4-1: config 0 descriptor?? [ 460.839846][ T5137] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 460.875626][ T5137] imon 4-1:0.0: unable to initialize intf0, err -19 [ 460.896646][ T5137] imon:imon_probe: failed to initialize context! [ 460.903058][ T5137] imon 4-1:0.0: unable to register, err -19 [ 461.128825][ T29] audit: type=1804 audit(1720498804.428:211): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1141" name="/newroot/118/file0/bus" dev="ramfs" ino=30099 res=1 errno=0 [ 461.226203][ T9049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.990763][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.017189][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.044302][ T29] audit: type=1804 audit(1720498805.328:212): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1141" name="/newroot/118/file0/bus" dev="ramfs" ino=30099 res=1 errno=0 [ 462.156605][ T29] audit: type=1800 audit(1720498805.328:213): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1141" name="bus" dev="ramfs" ino=30099 res=0 errno=0 [ 462.176844][ T4477] Bluetooth: hci1: command 0x0406 tx timeout [ 462.247758][ T29] audit: type=1804 audit(1720498805.518:214): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1143" name="/newroot/33/file0/bus" dev="ramfs" ino=30106 res=1 errno=0 [ 462.310099][ T5137] usb 4-1: USB disconnect, device number 28 [ 462.379831][ T29] audit: type=1804 audit(1720498805.678:215): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1143" name="/newroot/33/file0/bus" dev="ramfs" ino=30106 res=1 errno=0 [ 462.463954][ T29] audit: type=1800 audit(1720498805.708:216): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1143" name="bus" dev="ramfs" ino=30106 res=0 errno=0 [ 462.888042][ T30] INFO: task syz.2.644:7322 blocked for more than 163 seconds. [ 462.900781][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 462.920865][ T5137] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 462.946881][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.955633][ T30] task:syz.2.644 state:D stack:20528 pid:7322 tgid:7320 ppid:7077 flags:0x00004004 [ 462.970850][ T30] Call Trace: [ 462.975660][ T30] [ 462.979576][ T30] __schedule+0x1796/0x49d0 [ 462.985481][ T30] ? __pfx___schedule+0x10/0x10 [ 462.991794][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.997115][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.003482][ T30] ? schedule+0x90/0x320 [ 463.009216][ T30] schedule+0x14b/0x320 [ 463.014720][ T30] io_schedule+0x8d/0x110 [ 463.032553][ T30] folio_wait_bit_common+0x882/0x12b0 [ 463.046108][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 463.060584][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 463.090818][ T30] ? __filemap_get_folio+0x769/0xc10 [ 463.137480][ T30] do_read_cache_folio+0xb9/0x820 [ 463.154124][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 463.170070][ T5137] usb 5-1: Using ep0 maxpacket: 16 [ 463.178843][ T5137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.184697][ T30] read_part_sector+0xb3/0x330 [ 463.207921][ T5137] usb 5-1: config 0 has no interfaces? [ 463.209218][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 463.228188][ T5137] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 463.232775][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 463.255212][ T30] ? snprintf+0xda/0x120 [ 463.260369][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 463.261265][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.267422][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 463.286330][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 463.291971][ T30] ? vsnprintf+0x184/0x1da0 [ 463.300051][ T30] ? __pfx_snprintf+0x10/0x10 [ 463.306501][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 463.312700][ T30] bdev_disk_changed+0x72c/0x13d0 [ 463.314021][ T5137] usb 5-1: config 0 descriptor?? [ 463.318411][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 463.330222][ T30] ? __pfx___might_resched+0x10/0x10 [ 463.336592][ T30] blkdev_get_whole+0x315/0x470 [ 463.342615][ T30] bdev_open+0x2e9/0xc60 [ 463.348877][ T30] blkdev_open+0x20d/0x2e0 [ 463.355489][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 463.361019][ T30] do_dentry_open+0x970/0x1450 [ 463.368039][ T30] vfs_open+0x3e/0x330 [ 463.380474][ T30] path_openat+0x2c01/0x35f0 [ 463.388950][ T30] ? mark_lock+0x9a/0x350 [ 463.395801][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 463.402777][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 463.436777][ T5136] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 463.439454][ T30] ? __pfx_path_openat+0x10/0x10 [ 463.479043][ T30] do_filp_open+0x235/0x490 [ 463.485166][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 463.494407][ T30] ? _raw_spin_unlock+0x28/0x50 [ 463.514398][ T30] ? alloc_fd+0x5a1/0x640 [ 463.523740][ T30] do_sys_openat2+0x13e/0x1d0 [ 463.533042][ T58] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 180 seconds [ 463.554693][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 463.564537][ T30] __x64_sys_openat+0x247/0x2a0 [ 463.577697][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 463.584939][ T30] ? do_syscall_64+0x100/0x230 [ 463.591202][ T30] ? do_syscall_64+0xb6/0x230 [ 463.597009][ T30] do_syscall_64+0xf3/0x230 [ 463.606800][ T30] ? clear_bhb_loop+0x35/0x90 [ 463.612213][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.621226][ T30] RIP: 0033:0x7f9c29d74610 [ 463.626302][ T30] RSP: 002b:00007f9c2ab0fb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 463.637169][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9c29d74610 [ 463.646629][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 463.656552][ T30] RDX: 0000000000000000 RSI: 00007f9c2ab0fc20 RDI: 00000000ffffff9c [ 463.664937][ T30] RBP: 00007f9c2ab0fc20 R08: 0000000000000000 R09: 002364626e2f7665 [ 463.670546][ T5136] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.693901][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 463.706585][ T30] R13: 000000000000000b R14: 00007f9c29f03f60 R15: 00007ffe64da4248 [ 463.715764][ T5136] usb 4-1: config 0 has no interfaces? [ 463.725995][ T30] [ 463.729749][ T30] INFO: task syz.2.644:7328 blocked for more than 164 seconds. [ 463.738230][ T5136] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 463.743095][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 463.755632][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.772728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.796610][ T30] task:syz.2.644 state:D stack:25008 pid:7328 tgid:7320 ppid:7077 flags:0x00004006 [ 463.810726][ T30] Call Trace: [ 463.815501][ T30] [ 463.821977][ T30] __schedule+0x1796/0x49d0 [ 463.823813][ T5136] usb 4-1: config 0 descriptor?? [ 463.827535][ T30] ? __pfx___schedule+0x10/0x10 [ 463.827703][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.843506][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.850964][ T30] ? schedule+0x90/0x320 [ 463.856513][ T30] schedule+0x14b/0x320 [ 463.861554][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.868793][ T30] __mutex_lock+0x6a4/0xd70 [ 463.876247][ T30] ? __mutex_lock+0x527/0xd70 [ 463.881354][ T30] ? bdev_release+0x184/0x700 [ 463.889357][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.894550][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 463.900063][ T30] bdev_release+0x184/0x700 [ 463.906537][ T30] blkdev_release+0x15/0x20 [ 463.911097][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 463.920759][ T30] __fput+0x24a/0x8a0 [ 463.925770][ T30] task_work_run+0x24f/0x310 [ 463.931423][ T30] ? __pfx_task_work_run+0x10/0x10 [ 463.936741][ T30] get_signal+0x15e6/0x1740 [ 463.941661][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.949002][ T30] ? schedule+0x90/0x320 [ 463.955458][ T30] ? __pfx_get_signal+0x10/0x10 [ 463.960613][ T30] ? __virt_addr_valid+0x183/0x520 [ 463.965859][ T30] ? __virt_addr_valid+0x183/0x520 [ 463.973055][ T30] ? __virt_addr_valid+0x44e/0x520 [ 463.978366][ T30] arch_do_signal_or_restart+0x96/0x860 [ 463.984579][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.993250][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.999588][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 464.005954][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 464.014813][ T30] do_syscall_64+0x100/0x230 [ 464.019690][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.027798][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.033861][ T30] RIP: 0033:0x7f9c29d75bd9 [ 464.039602][ T30] RSP: 002b:00007f9c2aace048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.054112][ T30] RAX: 0000000000000000 RBX: 00007f9c29f04110 RCX: 00007f9c29d75bd9 [ 464.084894][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 464.119819][ T30] RBP: 00007f9c29de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 464.128424][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.145574][ T30] R13: 000000000000006e R14: 00007f9c29f04110 R15: 00007ffe64da4248 [ 464.160500][ T30] [ 464.163617][ T30] INFO: task syz.3.704:7536 blocked for more than 144 seconds. [ 464.175628][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.199245][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.213251][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 464.223782][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.234682][ T30] task:syz.3.704 state:D stack:25952 pid:7536 tgid:7533 ppid:6380 flags:0x00004004 [ 464.246170][ T30] Call Trace: [ 464.252238][ T30] [ 464.256491][ T30] __schedule+0x1796/0x49d0 [ 464.261169][ T30] ? __pfx___schedule+0x10/0x10 [ 464.266078][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.274413][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 464.280507][ T30] ? schedule+0x90/0x320 [ 464.285234][ T30] schedule+0x14b/0x320 [ 464.291641][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.302508][ T30] __mutex_lock+0x6a4/0xd70 [ 464.308426][ T30] ? __mutex_lock+0x527/0xd70 [ 464.314341][ T30] ? bdev_release+0x184/0x700 [ 464.320415][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.327355][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 464.333304][ T30] bdev_release+0x184/0x700 [ 464.338741][ T30] blkdev_release+0x15/0x20 [ 464.344651][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 464.350518][ T30] __fput+0x24a/0x8a0 [ 464.354691][ T30] task_work_run+0x24f/0x310 [ 464.360427][ T30] ? __pfx_task_work_run+0x10/0x10 [ 464.366493][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 464.372435][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 464.379320][ T30] do_syscall_64+0x100/0x230 [ 464.385328][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.391296][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.402679][ T30] RIP: 0033:0x7fcf20b75bd9 [ 464.412393][ T30] RSP: 002b:00007fcf21985048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.421315][ T30] RAX: 0000000000000000 RBX: 00007fcf20d03f60 RCX: 00007fcf20b75bd9 [ 464.430422][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 464.441905][ T30] RBP: 00007fcf20be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 464.451241][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.460540][ T30] R13: 000000000000000b R14: 00007fcf20d03f60 R15: 00007ffc50728198 [ 464.471453][ T30] [ 464.474806][ T30] INFO: task syz.3.704:7539 blocked for more than 144 seconds. [ 464.528816][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 464.539406][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.556585][ T30] task:syz.3.704 state:D stack:21408 pid:7539 tgid:7533 ppid:6380 flags:0x00004004 [ 464.567991][ T30] Call Trace: [ 464.575789][ T30] [ 464.579183][ T30] __schedule+0x1796/0x49d0 [ 464.583866][ T30] ? __pfx___schedule+0x10/0x10 [ 464.595956][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.597943][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.603212][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.617292][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.625147][ T30] ? schedule+0x90/0x320 [ 464.629703][ T30] schedule+0x14b/0x320 [ 464.633884][ T30] io_schedule+0x8d/0x110 [ 464.642246][ T30] folio_wait_bit_common+0x882/0x12b0 [ 464.647970][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 464.653976][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 464.659833][ T30] ? __filemap_get_folio+0x769/0xc10 [ 464.671230][ T30] do_read_cache_folio+0xb9/0x820 [ 464.677282][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 464.682855][ T30] read_part_sector+0xb3/0x330 [ 464.687944][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 464.693378][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 464.699164][ T30] ? snprintf+0xda/0x120 [ 464.705703][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 464.712535][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 464.718489][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 464.723581][ T30] ? vsnprintf+0x184/0x1da0 [ 464.728502][ T30] ? __pfx_snprintf+0x10/0x10 [ 464.733236][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 464.738706][ T30] bdev_disk_changed+0x72c/0x13d0 [ 464.743803][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 464.749493][ T30] ? __pfx___might_resched+0x10/0x10 [ 464.754844][ T30] blkdev_get_whole+0x315/0x470 [ 464.759893][ T30] bdev_open+0x2e9/0xc60 [ 464.764205][ T30] blkdev_open+0x20d/0x2e0 [ 464.769289][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 464.774305][ T30] do_dentry_open+0x970/0x1450 [ 464.779729][ T30] vfs_open+0x3e/0x330 [ 464.783853][ T30] path_openat+0x2c01/0x35f0 [ 464.788629][ T30] ? mark_lock+0x9a/0x350 [ 464.793029][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 464.798963][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 464.804180][ T30] ? __pfx_path_openat+0x10/0x10 [ 464.814866][ T30] do_filp_open+0x235/0x490 [ 464.819592][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 464.824886][ T30] ? _raw_spin_unlock+0x28/0x50 [ 464.843248][ T30] ? alloc_fd+0x5a1/0x640 [ 464.847894][ T30] do_sys_openat2+0x13e/0x1d0 [ 464.852660][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 464.866527][ T30] __x64_sys_openat+0x247/0x2a0 [ 464.871780][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 464.877639][ T30] ? do_syscall_64+0x100/0x230 [ 464.882466][ T30] ? do_syscall_64+0xb6/0x230 [ 464.887858][ T30] do_syscall_64+0xf3/0x230 [ 464.892426][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.897282][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.903231][ T30] RIP: 0033:0x7fcf20b74610 [ 464.909963][ T30] RSP: 002b:00007fcf21963b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 464.918559][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcf20b74610 [ 464.926822][ T30] RDX: 0000000000000000 RSI: 00007fcf21963c20 RDI: 00000000ffffff9c [ 464.934836][ T30] RBP: 00007fcf21963c20 R08: 0000000000000000 R09: 002364626e2f7665 [ 464.943315][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 464.951922][ T30] R13: 000000000000006e R14: 00007fcf20d04038 R15: 00007ffc50728198 [ 464.960009][ T30] [ 464.963169][ T30] [ 464.963169][ T30] Showing all locks held in the system: [ 464.982370][ T30] 2 locks held by kworker/u8:0/11: [ 464.989088][ T30] #0: ffff888017fd6148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 465.003729][ T30] #1: ffffc90000107d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 465.026560][ T30] 1 lock held by khungtaskd/30: [ 465.031471][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 465.056496][ T30] 2 locks held by getty/4836: [ 465.061243][ T30] #0: ffff88802b3510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 465.090765][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 465.115359][ T30] 1 lock held by syz.2.644/7322: [ 465.126444][ T30] #0: ffff8880206ce4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 465.136060][ T30] 1 lock held by syz.2.644/7328: [ 465.141153][ T30] #0: ffff8880206ce4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 465.150876][ T30] 1 lock held by syz.3.704/7536: [ 465.155849][ T30] #0: ffff88802071c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 465.165612][ T30] 1 lock held by syz.3.704/7539: [ 465.170622][ T30] #0: ffff88802071c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 465.180353][ T30] [ 465.182713][ T30] ============================================= [ 465.182713][ T30] [ 465.191234][ T30] NMI backtrace for cpu 0 [ 465.195631][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 465.205651][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 465.215834][ T30] Call Trace: [ 465.219145][ T30] [ 465.222087][ T30] dump_stack_lvl+0x241/0x360 [ 465.226796][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.232029][ T30] ? __pfx__printk+0x10/0x10 [ 465.236631][ T30] ? vprintk_emit+0x631/0x770 [ 465.241324][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 465.246378][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 465.251354][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 465.256913][ T30] ? _printk+0xd5/0x120 [ 465.261082][ T30] ? __pfx__printk+0x10/0x10 [ 465.265687][ T30] ? __wake_up_klogd+0xcc/0x110 [ 465.270555][ T30] ? __pfx__printk+0x10/0x10 [ 465.275167][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 465.280216][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 465.286227][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 465.292246][ T30] watchdog+0xfde/0x1020 [ 465.296643][ T30] ? watchdog+0x1ea/0x1020 [ 465.301084][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.305782][ T30] kthread+0x2f0/0x390 [ 465.309888][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.314662][ T30] ? __pfx_kthread+0x10/0x10 [ 465.319286][ T30] ret_from_fork+0x4b/0x80 [ 465.323721][ T30] ? __pfx_kthread+0x10/0x10 [ 465.328330][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.333140][ T30] [ 465.338278][ T30] Sending NMI from CPU 0 to CPUs 1: [ 465.344608][ C1] NMI backtrace for cpu 1 [ 465.344622][ C1] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 465.344643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 465.344655][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 465.344687][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xc3/0x120 [ 465.344711][ C1] Code: 8b 74 d6 10 65 8b 05 a4 a7 6d 7e a9 00 01 ff 00 74 11 a9 00 01 00 00 74 de 41 83 bb 1c 16 00 00 00 74 d4 41 8b 83 f8 15 00 00 <83> f8 03 75 c8 49 8b 8b 00 16 00 00 45 8b bb fc 15 00 00 49 c1 e7 [ 465.344725][ C1] RSP: 0018:ffffc90000106a60 EFLAGS: 00000246 [ 465.344739][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff8880176b3c00 [ 465.344752][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a13d0 RDI: 0000000000000002 [ 465.344763][ C1] RBP: ffffffff903290f5 R08: 0000000000000005 R09: ffffffff8140ffe6 [ 465.344775][ C1] R10: 0000000000000003 R11: ffff8880176b3c00 R12: ffffffff903290f4 [ 465.344787][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92000020d6c [ 465.344801][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 465.344815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.344827][ C1] CR2: 0000001b334fcff8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 465.344848][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.344858][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.344869][ C1] Call Trace: [ 465.344875][ C1] [ 465.344882][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 465.344902][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 465.344923][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 465.344941][ C1] ? nmi_handle+0x2a/0x5a0 [ 465.344977][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 465.344997][ C1] ? nmi_handle+0x14f/0x5a0 [ 465.345022][ C1] ? nmi_handle+0x2a/0x5a0 [ 465.345048][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 465.345067][ C1] ? default_do_nmi+0x63/0x160 [ 465.345087][ C1] ? exc_nmi+0x123/0x1f0 [ 465.345105][ C1] ? end_repeat_nmi+0xf/0x53 [ 465.345133][ C1] ? unwind_next_frame+0xff6/0x2a00 [ 465.345160][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 465.345180][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 465.345200][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 465.345219][ C1] [ 465.345224][ C1] [ 465.345232][ C1] unwind_next_frame+0xff6/0x2a00 [ 465.345261][ C1] ? __unwind_start+0x6af/0x7c0 [ 465.345283][ C1] ? stack_trace_save+0x118/0x1d0 [ 465.345310][ C1] ? stack_trace_save+0x118/0x1d0 [ 465.345335][ C1] ? __kernel_text_address+0xd/0x40 [ 465.345358][ C1] ? stack_trace_save+0x118/0x1d0 [ 465.345384][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.345412][ C1] arch_stack_walk+0x151/0x1b0 [ 465.345441][ C1] ? stack_trace_save+0x118/0x1d0 [ 465.345470][ C1] stack_trace_save+0x118/0x1d0 [ 465.345495][ C1] ? worker_thread+0x86d/0xd50 [ 465.345512][ C1] ? kthread+0x2f0/0x390 [ 465.345531][ C1] ? ret_from_fork+0x4b/0x80 [ 465.345554][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 465.345590][ C1] kasan_save_track+0x3f/0x80 [ 465.345647][ C1] __kasan_kmalloc+0x98/0xb0 [ 465.345673][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 465.345695][ C1] __kmalloc_noprof+0x1f9/0x400 [ 465.345720][ C1] cfg80211_inform_single_bss_data+0xd78/0x2360 [ 465.345742][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 465.345771][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 465.345796][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 465.345829][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 465.345860][ C1] ? __kernel_text_address+0xd/0x40 [ 465.345883][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 465.345906][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.345934][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 465.345958][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 465.345980][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 465.346018][ C1] ? __pfx_validate_chain+0x10/0x10 [ 465.346057][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 465.346083][ C1] ? mark_lock+0x9a/0x350 [ 465.346105][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 465.346140][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 465.346158][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 465.346188][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 465.346216][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 465.346242][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 465.346271][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 465.346297][ C1] ? __pfx_lock_release+0x10/0x10 [ 465.346325][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 465.346360][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 465.346385][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 465.346418][ C1] ? mark_lock+0x9a/0x350 [ 465.346442][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.346462][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.346482][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 465.346517][ C1] ieee80211_iface_work+0x8a3/0xf10 [ 465.346548][ C1] cfg80211_wiphy_work+0x221/0x260 [ 465.346577][ C1] ? process_scheduled_works+0x945/0x1830 [ 465.346595][ C1] process_scheduled_works+0xa2c/0x1830 [ 465.346629][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.346652][ C1] ? assign_work+0x364/0x3d0 [ 465.346673][ C1] worker_thread+0x86d/0xd50 [ 465.346699][ C1] ? __kthread_parkme+0x169/0x1d0 [ 465.346721][ C1] ? __pfx_worker_thread+0x10/0x10 [ 465.346740][ C1] kthread+0x2f0/0x390 [ 465.346760][ C1] ? __pfx_worker_thread+0x10/0x10 [ 465.346779][ C1] ? __pfx_kthread+0x10/0x10 [ 465.346801][ C1] ret_from_fork+0x4b/0x80 [ 465.346823][ C1] ? __pfx_kthread+0x10/0x10 [ 465.346848][ C1] ret_from_fork_asm+0x1a/0x30 [ 465.346882][ C1] [ 465.429373][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 465.429396][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 465.429423][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 465.429438][ T30] Call Trace: [ 465.429449][ T30] [ 465.429460][ T30] dump_stack_lvl+0x241/0x360 [ 465.429507][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.429543][ T30] ? __pfx__printk+0x10/0x10 [ 465.429573][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.429615][ T30] ? vscnprintf+0x5d/0x90 [ 465.429643][ T30] panic+0x349/0x860 [ 465.429677][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 465.429706][ T30] ? __pfx_panic+0x10/0x10 [ 465.429735][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 465.429770][ T30] ? __irq_work_queue_local+0x137/0x410 [ 465.429797][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 465.429823][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 465.429849][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 465.429879][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 465.429909][ T30] watchdog+0x101d/0x1020 [ 465.429938][ T30] ? watchdog+0x1ea/0x1020 [ 465.429972][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.429998][ T30] kthread+0x2f0/0x390 [ 465.430027][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.430052][ T30] ? __pfx_kthread+0x10/0x10 [ 465.430081][ T30] ret_from_fork+0x4b/0x80 [ 465.430112][ T30] ? __pfx_kthread+0x10/0x10 [ 465.430141][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.430190][ T30] [ 465.434379][ T30] Kernel Offset: disabled [ 466.064271][ T30] Rebooting in 86400 seconds..