last executing test programs: 2m33.720443474s ago: executing program 0 (id=67): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={0x0, 0x124}}, 0x0) sendmmsg$alg(r0, &(0x7f0000001340)=[{0x0, 0x0, 0x0}], 0x7, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x2010, r2, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xffffffffffffdffd, 0x4, 0x0, 0x20, 0x5c}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) getpgid(0x0) r8 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104000000000200000000940bf1", @ANYRES32=0x0, @ANYBLOB="07800000000000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) 2m32.708405712s ago: executing program 0 (id=68): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2m31.601875665s ago: executing program 0 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2070) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401070ca, &(0x7f0000000040)) 2m31.349548998s ago: executing program 0 (id=73): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x21, 0x5, 0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0xff, 0x70000000, 0x0, 0x6, 0x81, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}]}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b000000", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) 2m31.20321589s ago: executing program 0 (id=75): r0 = syz_usb_connect$hid(0x5, 0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000404f045ab600000000000109022d0001000000000904000001030001000921090008032207000905810300000d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x6, 'a'}, @local=@item_4={0x3, 0x2, 0x9, "ba5eeea0"}]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xe8f, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x8d, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1ff, 0x80, 0x1, {0x22, 0x960}}, {{{0x9, 0x5, 0x81, 0x3, 0x230, 0x0, 0x10, 0x4}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0xe8, 0xf9, 0x8, 0x28, 0x81}, 0xa6, &(0x7f00000009c0)={0x5, 0xf, 0xa6, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5e, 0x5, 0x3f6e}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x2, 0x0, 0x1000, [0xff00, 0x0, 0x3f00, 0xff00d8, 0x0]}, @ptm_cap={0x3}, @generic={0x6a, 0x10, 0x2, "82494c056c9557b844a9c3e38d3afba6c7222d9ca4d549781b323082a72d141f719bc46a5e2a3e7cd3453b404ef317048d45f8c5651aaf1dad979f2df5ce06a21c117202ac54e09b35f1f7138a40b700999c931ba024b81e41c37fe11696de40d87b1441aae01c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3b, 0x9, 0x806}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1001}}, {0xe4, &(0x7f0000000a80)=@string={0xe4, 0x3, "44620fbe6a6352d134b6dabb826b1a264ba10f8bc30ada689553ca39d8ecf394d69530b6e5d27a46a7b8fac4a964f2da295e343980036926094e9ea97326e4df3ed4f66f7c32ce87fafa83c582abb82921ac698c145341f7edad8ab60979e54575d979cc292be687b3e25dcbee71930b6adf1c2d9b5139ae8676ce1672ea028451c171681db5f683ba709c63679765442b8ae40ed433c8bdccc463b6883734e1d90e59464eb030db0238eed299ef3d22179551d093607c6870e4d7ff68c3a4cf0808da6a21ae526743e0d66a0a0cddf921a95bb39c73002be83108aeef8e517c232c"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc65}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000000c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x78]}}]}) syz_usb_connect(0x1, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000473442207a250826e999000000000106ff00000904600000830b8a293418818431003918e2b85f147fe805fdb4b29b736ab8c4feb2e0aeabe8d6452d3bd8a53f379a0dc96e9afe019ffd383a05afb69ed294e5d49ec7371ebec2d21a32bc"], 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x80) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000140)="9db269a628b3a71260845dfab7780dc48a16591b617b264158eece13ab4b2f338e3c0e342f99e3090f4b5bfe0577764f2a8681edd81c03dc465bbde07d03df130078da6300e4f6ec3c6113c6deac25c5cfe78369d15c6de39f17a96401b8867b9b41d5062f3178096633251aa7901e99b4f31fa71fe5e7dd4337e3298917abadf65c4eb8bd3c72aeb5fa216e5c833b17712d88783111dadc65bd25b9a3", 0x9d}, {&(0x7f0000000240)="bb04ccac4df7476f084266a8ef243567e564d4297b4d99323452ddae18f7cc1a1a8bc0533bd04c6565283d10d86bf9b633aabf1ee8f659fcf01aed6aa8ff14f094fac7a9da606437dd3843bb318ab06c88ca234c6358b507be304118f035e8121bb575debf539dac69ffbc9bcf98482c20e55da1925c408709b306c9ea2545c48644fc28c905bf2105c5b67241bf18", 0x8f}, {&(0x7f0000000300)="9ef5ec0f4e7bf12c20dd357b9f63533f459de910dd25f6106d88cb01ec2a329c4cab342d13e75c1f81a2602f86d245a9a36d", 0x32}, {&(0x7f0000000340)="b70a96c9c12872ef2159772b41f4f6d0c8026f0cbacb62d8cb9435918a19aa75db5d0f1def284b6d2dd6e012a8b5b519e63e1532d82a291e1146f56c200597a5e2d4f6967b470a691a831822ec9d8f5f25afaed5cbae156fbe5ff95830c598b021ee94f63da64e259cf1d2d5e29381cd1ce75f0d9e1b530ab44ccc0d6cb1cf9eb0487787be0a67943c3a60ece50f829a41da159dd2ea588edf789865dd8f7f4ded8f80eb86f3a0a9dfe3863c881f09f12b23ed3a715fe3e07c6ea26a8f", 0xbd}, {&(0x7f0000000780)="c6bec5be4ac763551d92cad972787be4e74dbf10fc0a02594a90240908ece9356d504f2249d44f158885c3f1c4e905000000f1c96f04219f89dc9b42745edb3f746cb919381b6df411e99ec405e9d72715a5d9a9750c57a57e5d67ac5bdad800e0135d6d63e1c518035215236aa61c87bc371bf09bf2075f6da6b144138caba2564751dc11854fefedf9ca5e3d7c737a45fa7d5a9733ce86055c591e521e1598c659d5c97d5cccae24b27ea07815ad75f459d1be6f5452fc1ba1298a921e062f831709cd6a21576a7ce1d4453f7d8bab036e6d312a21ca47c1eff311b3ee1b2f2684401f74ebea8f34bf755a6647832d617ad08b71bd516969fc559c1c47bb9041d487b512c06203d5761ad66939518b909d0d", 0x113}, {&(0x7f0000000540)="070d3add56f1a38441be8df7020073434dc1e12a29b182406d2e037dbfbac36ba3d978596b6f575460fd12dc589a13273ec0728617fdcd297b2e5c78c7e0ab3010a3cf954b5b845a89dd343b5cbb2a9e31d0eda28d951b6eeb08e890dfdc2d286106d26ddd3e4416fbf0ea222c519cc96f47cd3f4c0726ba9c951eb7e32c1dbdb1b0d9672dde0f5d6f84250d2766eb75943535a941fdcc532521a9d3e47422b7c93b733a945f70dcaf72f29be9adcae1782a2caa726d6fbb00"/200, 0xc8}, {&(0x7f0000000400)="d3ddb3c220917a4286ba6fe115b3716d61a1f1f39e9168127fbd61302afaa2b017864e838ff08d98084c4dbf6f3a3dd5d19f6348277283045d61317a55e6c78e0aa8f92ddb5b4beb3424e078b0fc5d996b2954f10c343aa2df80296c4398b20d7b84417dcca4a4bb9cde329109f25d78409f93fe75c9f43d400c2234969c370f23392a85dcc43e830923efdf7d879a1248eede9a35658f94df3598425a4308b9238b89d30376c1e6bbc27fd2fc0ce83f4838ec6e", 0xb4}, {&(0x7f00000008c0)="f7933f68b0714ef54ad6236e7ffa04e879358be57a6863f4abc93d7ca051590c6ca367de1f6d9b7d8779da4b9f1736aad552a25cac9540856df9268856b662fe1865e70ce6df349a7222250dc03e676a3acede178e4a043f82366d1f8ed7be64649a1599e7797a9100ecae8f807489175bb3289c44b66783c1b909b27270ca62ec7be8c9bb61d9ca4050a866210ee6bd4a67b27ec4442f59400aef9047eceb5855ee8d6f719cba054a83a097a4412e7d0ff1f5f6ae30345c9cb09514756f9513a8dc3c680f2d4c67bc54801300b78f010faa351d0cd35ba221e74b4fd05e86394a", 0xe1}], 0x8) syz_usb_connect$hid(0x5, 0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000404f045ab600000000000109022d0001000000000904000001030001000921090008032207000905810300000d"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x6, 'a'}, @local=@item_4={0x3, 0x2, 0x9, "ba5eeea0"}]}}, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xe8f, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x8d, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1ff, 0x80, 0x1, {0x22, 0x960}}, {{{0x9, 0x5, 0x81, 0x3, 0x230, 0x0, 0x10, 0x4}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0xe8, 0xf9, 0x8, 0x28, 0x81}, 0xa6, &(0x7f00000009c0)={0x5, 0xf, 0xa6, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5e, 0x5, 0x3f6e}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x2, 0x0, 0x1000, [0xff00, 0x0, 0x3f00, 0xff00d8, 0x0]}, @ptm_cap={0x3}, @generic={0x6a, 0x10, 0x2, "82494c056c9557b844a9c3e38d3afba6c7222d9ca4d549781b323082a72d141f719bc46a5e2a3e7cd3453b404ef317048d45f8c5651aaf1dad979f2df5ce06a21c117202ac54e09b35f1f7138a40b700999c931ba024b81e41c37fe11696de40d87b1441aae01c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3b, 0x9, 0x806}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1001}}, {0xe4, &(0x7f0000000a80)=@string={0xe4, 0x3, "44620fbe6a6352d134b6dabb826b1a264ba10f8bc30ada689553ca39d8ecf394d69530b6e5d27a46a7b8fac4a964f2da295e343980036926094e9ea97326e4df3ed4f66f7c32ce87fafa83c582abb82921ac698c145341f7edad8ab60979e54575d979cc292be687b3e25dcbee71930b6adf1c2d9b5139ae8676ce1672ea028451c171681db5f683ba709c63679765442b8ae40ed433c8bdccc463b6883734e1d90e59464eb030db0238eed299ef3d22179551d093607c6870e4d7ff68c3a4cf0808da6a21ae526743e0d66a0a0cddf921a95bb39c73002be83108aeef8e517c232c"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc65}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000000c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x78]}}]}) (async) syz_usb_connect(0x1, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000473442207a250826e999000000000106ff00000904600000830b8a293418818431003918e2b85f147fe805fdb4b29b736ab8c4feb2e0aeabe8d6452d3bd8a53f379a0dc96e9afe019ffd383a05afb69ed294e5d49ec7371ebec2d21a32bc"], 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x80) (async) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000140)="9db269a628b3a71260845dfab7780dc48a16591b617b264158eece13ab4b2f338e3c0e342f99e3090f4b5bfe0577764f2a8681edd81c03dc465bbde07d03df130078da6300e4f6ec3c6113c6deac25c5cfe78369d15c6de39f17a96401b8867b9b41d5062f3178096633251aa7901e99b4f31fa71fe5e7dd4337e3298917abadf65c4eb8bd3c72aeb5fa216e5c833b17712d88783111dadc65bd25b9a3", 0x9d}, {&(0x7f0000000240)="bb04ccac4df7476f084266a8ef243567e564d4297b4d99323452ddae18f7cc1a1a8bc0533bd04c6565283d10d86bf9b633aabf1ee8f659fcf01aed6aa8ff14f094fac7a9da606437dd3843bb318ab06c88ca234c6358b507be304118f035e8121bb575debf539dac69ffbc9bcf98482c20e55da1925c408709b306c9ea2545c48644fc28c905bf2105c5b67241bf18", 0x8f}, {&(0x7f0000000300)="9ef5ec0f4e7bf12c20dd357b9f63533f459de910dd25f6106d88cb01ec2a329c4cab342d13e75c1f81a2602f86d245a9a36d", 0x32}, {&(0x7f0000000340)="b70a96c9c12872ef2159772b41f4f6d0c8026f0cbacb62d8cb9435918a19aa75db5d0f1def284b6d2dd6e012a8b5b519e63e1532d82a291e1146f56c200597a5e2d4f6967b470a691a831822ec9d8f5f25afaed5cbae156fbe5ff95830c598b021ee94f63da64e259cf1d2d5e29381cd1ce75f0d9e1b530ab44ccc0d6cb1cf9eb0487787be0a67943c3a60ece50f829a41da159dd2ea588edf789865dd8f7f4ded8f80eb86f3a0a9dfe3863c881f09f12b23ed3a715fe3e07c6ea26a8f", 0xbd}, {&(0x7f0000000780)="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", 0x113}, {&(0x7f0000000540)="070d3add56f1a38441be8df7020073434dc1e12a29b182406d2e037dbfbac36ba3d978596b6f575460fd12dc589a13273ec0728617fdcd297b2e5c78c7e0ab3010a3cf954b5b845a89dd343b5cbb2a9e31d0eda28d951b6eeb08e890dfdc2d286106d26ddd3e4416fbf0ea222c519cc96f47cd3f4c0726ba9c951eb7e32c1dbdb1b0d9672dde0f5d6f84250d2766eb75943535a941fdcc532521a9d3e47422b7c93b733a945f70dcaf72f29be9adcae1782a2caa726d6fbb00"/200, 0xc8}, {&(0x7f0000000400)="d3ddb3c220917a4286ba6fe115b3716d61a1f1f39e9168127fbd61302afaa2b017864e838ff08d98084c4dbf6f3a3dd5d19f6348277283045d61317a55e6c78e0aa8f92ddb5b4beb3424e078b0fc5d996b2954f10c343aa2df80296c4398b20d7b84417dcca4a4bb9cde329109f25d78409f93fe75c9f43d400c2234969c370f23392a85dcc43e830923efdf7d879a1248eede9a35658f94df3598425a4308b9238b89d30376c1e6bbc27fd2fc0ce83f4838ec6e", 0xb4}, {&(0x7f00000008c0)="f7933f68b0714ef54ad6236e7ffa04e879358be57a6863f4abc93d7ca051590c6ca367de1f6d9b7d8779da4b9f1736aad552a25cac9540856df9268856b662fe1865e70ce6df349a7222250dc03e676a3acede178e4a043f82366d1f8ed7be64649a1599e7797a9100ecae8f807489175bb3289c44b66783c1b909b27270ca62ec7be8c9bb61d9ca4050a866210ee6bd4a67b27ec4442f59400aef9047eceb5855ee8d6f719cba054a83a097a4412e7d0ff1f5f6ae30345c9cb09514756f9513a8dc3c680f2d4c67bc54801300b78f010faa351d0cd35ba221e74b4fd05e86394a", 0xe1}], 0x8) (async) 2m27.543496383s ago: executing program 0 (id=82): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="4c04", 0xfdef}], 0x1, 0x8, 0x7, 0x4) 2m23.40141641s ago: executing program 3 (id=94): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={0x0, 0x124}}, 0x0) sendmmsg$alg(r0, &(0x7f0000001340)=[{0x0, 0x0, 0x0}], 0x7, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x2010, r2, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xffffffffffffdffd, 0x4, 0x0, 0x20, 0x5c}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) getpgid(0x0) r8 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104000000000200000000940bf1", @ANYRES32=0x0, @ANYBLOB="07800000000000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) 2m21.656449018s ago: executing program 3 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x830440, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x8002, 0x0) 2m20.446493855s ago: executing program 3 (id=103): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x11, 0x1, {0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0xfc, 0x5, 0x9}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/profiling', 0x8201, 0x81) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001c8, 0x12) 2m20.261222506s ago: executing program 3 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x10000, 0x0, [0x0, 0x0, 0x0, 0x20000, 0x3, 0x4]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x5, 0x2, 0xd, 0x2, 0x20000, r0, 0xe02, '\x00', r5, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r7}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_emit_ethernet(0xfc0, &(0x7f00000002c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf8a, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xf8a, 0x0, @gue={{0x2, 0x0, 0x0, 0x5}, "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"}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x40400d0) 2m19.934686605s ago: executing program 3 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x7fffffff, 0x3, 0x4, 0xc, 0x7, 0x2, 0x0, 0x3, 0xfe, 0x5, 0x5, 0x80, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xb5, 0x5, 0x2, 0xc, 0xfe, 0x40, 0x6, 0x18, 0xa}, {0xa20000, 0x0, 0x3, 0xb, 0x2, 0x77, 0x3, 0x9, 0x2, 0x5, 0x8, 0x54, 0x18bf}], 0xd9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 2m19.678021165s ago: executing program 3 (id=108): r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x2, 0x9, 0x1, 0xa0363159, [0x3, 0xffff], [0x3, 0x4], 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280100000d14040029bde700fedbdf25080001000100c828e1cd1e3f5b40000008003e0005000000433ebc60a3c05dd043965175766dbd61b6df"], 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3f, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 2m12.559113224s ago: executing program 32 (id=82): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="4c04", 0xfdef}], 0x1, 0x8, 0x7, 0x4) 2m3.454105784s ago: executing program 33 (id=108): r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x2, 0x9, 0x1, 0xa0363159, [0x3, 0xffff], [0x3, 0x4], 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280100000d14040029bde700fedbdf25080001000100c828e1cd1e3f5b40000008003e0005000000433ebc60a3c05dd043965175766dbd61b6df"], 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3f, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 1m48.961140817s ago: executing program 1 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x10000, 0x0, [0x0, 0x0, 0x0, 0x20000, 0x3, 0x4]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x5, 0x2, 0xd, 0x2, 0x20000, r0, 0xe02, '\x00', r4, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_emit_ethernet(0xfc0, &(0x7f00000002c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf8a, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xf8a, 0x0, @gue={{0x2, 0x0, 0x0, 0x5}, "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"}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x40400d0) 1m48.237465233s ago: executing program 1 (id=200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ffffff7f0000000000000000850000002900000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020037564e7764c078946a85c50008000000b703000009000000850000b30a00"/107], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f00000001c0), 0x84000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x2, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mbind(&(0x7f0000405000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000100)=0xffffffff, 0x6, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x8, 0x2, {0x0, 0x1}, {0x47, 0x6}, @cond=[{0x84, 0x402, 0x404, 0x4, 0x1, 0x29}, {0x0, 0xa0, 0x3, 0x5, 0x800, 0xff01}]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) get_mempolicy(0x0, &(0x7f0000000040), 0x100, &(0x7f0000131000/0x3000)=nil, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xf4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0xc17a) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m48.070745248s ago: executing program 1 (id=201): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$unix(0x1, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x5f, &(0x7f0000000140)={0x6}) prlimit64(r4, 0x6, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 1m47.114298057s ago: executing program 1 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6a, 0xe8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f0000000080)={{@any, 0xffffffff}, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x20000007, 0x20000005}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x3, 0x9) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 1m46.185018995s ago: executing program 1 (id=208): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffffff, 0x0, 0x151) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) 1m45.015414692s ago: executing program 1 (id=212): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x2768, &(0x7f0000000100)={0x0, 0x8db8, 0x8, 0xfffffffc, 0x40000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) socket$packet(0x11, 0x2, 0x300) bind$nfc_llcp(r2, 0x0, 0x0) listen(r2, 0x0) ioctl$int_in(r2, 0x5421, 0x0) mount$9p_rdma(&(0x7f00000013c0), 0x0, 0x0, 0x800, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0x100000530) close_range(r0, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000b34000/0x3000)=nil, 0x3000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) 1m44.847792406s ago: executing program 34 (id=212): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x2768, &(0x7f0000000100)={0x0, 0x8db8, 0x8, 0xfffffffc, 0x40000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) socket$packet(0x11, 0x2, 0x300) bind$nfc_llcp(r2, 0x0, 0x0) listen(r2, 0x0) ioctl$int_in(r2, 0x5421, 0x0) mount$9p_rdma(&(0x7f00000013c0), 0x0, 0x0, 0x800, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0x100000530) close_range(r0, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000b34000/0x3000)=nil, 0x3000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) 9.377352549s ago: executing program 7 (id=488): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000052"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x118, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x582}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x111}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="300000001114010029bd70000000000008000100000000000800030001"], 0x30}}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x80002, 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) fcntl$setlease(r9, 0x400, 0x0) r10 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmmsg$inet6(r7, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="178614", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)="0c8e4ea8", 0x4}], 0x1}}], 0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 9.246909355s ago: executing program 5 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x808500, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) acct(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, 0x0, 0x0) ioperm(0x0, 0x6, 0x8000000000004) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) write$selinux_user(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c811}, 0x0) 8.963283938s ago: executing program 7 (id=491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000004000400ffff0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000f0000000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fchdir(r7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000001e80)={{0x5, 0x1, 0x94b, 0x4bac, 'syz1\x00', 0x8}, 0x0, [0xff, 0x3ff, 0xfffffffffffffffd, 0xc0000000, 0xb, 0x6d, 0x7, 0x5, 0x7, 0x5, 0x7, 0x2, 0x10, 0x660, 0x2, 0xb, 0x101, 0x0, 0x7, 0xeb33, 0x80000000000000, 0x5, 0xb90, 0x3, 0x5, 0x10001, 0xffffffff, 0x80, 0x9, 0xfff, 0x3, 0xdc8, 0x80000000, 0x9, 0x0, 0xffff, 0x5, 0x8000, 0x800, 0xcc9e, 0x101, 0x9, 0x5f, 0x2, 0x2, 0x1, 0xfff, 0x4, 0xfffffffffffffff7, 0xd87, 0xfffffffffffffff7, 0x3, 0x1e4, 0x6, 0x311, 0xf, 0x1000, 0x1ff, 0xd, 0xffffffff, 0x1, 0x3, 0x2, 0x8000000000000000, 0x200, 0x20, 0x9, 0x28, 0xffff, 0x6, 0xffffffffe7bb8924, 0x10001, 0x9, 0x4, 0x6, 0x7, 0x9, 0x4, 0x4b45, 0xffffffff7fffffff, 0x92, 0x0, 0x36, 0x6, 0x48, 0xffffffffffffff51, 0x0, 0x5, 0x7, 0x400, 0x0, 0xb, 0x7, 0x5d, 0xffff, 0x65d, 0x6, 0x9, 0x7, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x8, 0xfffffffffffffff1, 0x2, 0x0, 0xb, 0x20a, 0xffffffffffffffff, 0x37d5, 0x6, 0x2, 0x3, 0xffffffff, 0x401, 0x9, 0x7, 0x200, 0x1, 0x6, 0x5, 0x6, 0x8, 0x8, 0xffffffffffffff81, 0x7fffffff, 0x5, 0x3, 0x5ae]}) r8 = open(&(0x7f0000000200)='./file0\x00', 0x400000, 0x0) openat$cgroup_subtree(r8, 0x0, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000000e80)={{r6}, r11, 0x4, @inherit={0x78, &(0x7f0000000380)={0x0, 0x6, 0x1, 0x7f, {0x8, 0x5, 0x1, 0x7, 0x3ff}, [0x4, 0x4, 0xe0c, 0x6, 0x5, 0x100]}}, @subvolid=0x9}) sendfile(r10, r9, 0x0, 0x5) iopl(0x3) fanotify_mark(0xffffffffffffffff, 0x2, 0x5000003a, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.40906247s ago: executing program 6 (id=492): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a0000c4050001000700000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240fe"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040601020000000200000000000000000500010007"], 0x1c}}, 0x0) 8.394246215s ago: executing program 7 (id=493): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000653000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x10, 0x0, &(0x7f00000001c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) prctl$PR_MCE_KILL(0x35, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffbc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.18919607s ago: executing program 5 (id=494): syz_clone(0x4000, &(0x7f0000000500)="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", 0xaf6, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x800, 0x8) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000140)=0x20) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mknod(0x0, 0x8001420, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000400)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0xfffffffc}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r5, 0x1ad72f7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000003"], 0x114}], 0x1}, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000040)={0xfdfdfffe, 0xffff8000, 0x9, 0x81, 0x3, "330dbaffffffff0000e4ffff1f00"}) dup(r7) sendto$inet6(r6, &(0x7f0000000200)="d4", 0x1, 0x4048005, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 7.218840929s ago: executing program 5 (id=496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000933607ba0924cc25c1ef51d3250000000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x5bff310724993e37) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) (async) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x10000, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000240)='smaps_rollup\x00') syz_usb_disconnect(0xffffffffffffffff) (async) read$eventfd(r6, &(0x7f0000000180), 0x8) (async) io_submit(0x0, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) (async) r7 = socket(0x22, 0x2, 0x1) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) recvmsg$kcm(r7, 0x0, 0x20223) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'vlan0\x00'}) 7.160098639s ago: executing program 2 (id=497): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @empty}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x4, 0x6, 0x7, 0x5, 0x8, @loopback, @private1={0xfc, 0x1, '\x00', 0x2}, 0x8000, 0x8000, 0x1, 0x6}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x0) 6.589066383s ago: executing program 5 (id=498): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x301841, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x2, 0x5, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f00000005c0)={0x6, r1, r2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x22, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}]}}]}, 0xa0}}, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r11, r10) splice(r9, 0x0, r12, 0x0, 0x4ff9c, 0x0) 6.585956318s ago: executing program 7 (id=499): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x21, 0xd9, {0xd9, 0x21, "72f30e6c896bc7e3f54658d44e7577826d2c4248b8dcf32183a64f2461a28a95ce04b38b32367cc505667f5c6108527d6ce96d38ae35030c4c051c24ebe12cf8119e76cf89b3e6dba3cbfad96d77e006e3cf0170a0ddb4cb677a448da7be8489016ad2d2fc1d00d3b97ec29bafacb77e5d6289c9a2dab58c1d0eab9bedacb40e1c1282e83f2996a79c13cc4e0be2137609fbe2bc855b888d2675cb9e4ebc85545d7b1f66217add60bfba2c653f80dcfe29a4207098784ac01849d70a00f9cf503f25f7154b09ec3b2deaa9b160c3fcca6b34f1cb2ec6bc"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x20, 0xc, 0xcd, "e7576690a6932b733e0e4c00e73f7b19db3e83b6f539d6095083527e1965ddcc808b4cb61e66476549c89e26899ae642c820c1bac280614899af6c715f04b53c751ed82d447bd43e3c088e4190c9e4aeca744d52f4390b94d5801d17736017e0024a25369e4d3837241839fb7aa3420262df77d97e68f50124e2db16daa56418734b56582d26b136bbedfdc1d8f72f3b99988ac78e9808e23eb0c2cdcca7f20e654edeca1100c48b296afed3816639d052123fcd6643dba30b11b1358b36f7a438ca438a3d3579dc641753cbde"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}}) 5.783630463s ago: executing program 2 (id=500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000040)={0x3, 0x0, [{0x0, 0x6}, {0x1, 0xfffffffb, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0xc0000000, 0x4, 0x1, 0x5, 0x3, 0x7f, 0x4}]}) 5.643696007s ago: executing program 5 (id=501): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 4.448339034s ago: executing program 6 (id=504): openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0xff, &(0x7f0000000280)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x8c01, 0x0) 4.336625276s ago: executing program 4 (id=505): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000005c80)=""/4108, 0x100c}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x40000000015, 0x5, 0x0) read$alg(r3, &(0x7f0000003780)=""/4087, 0xff7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000240)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0xfffb, 0x0, {0x0, 0x1}, {0x4d, 0x2}, @rumble={0x18, 0x20c}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) 4.21453852s ago: executing program 2 (id=506): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000653000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x10, 0x0, &(0x7f00000001c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) prctl$PR_MCE_KILL(0x35, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffbc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.415625641s ago: executing program 4 (id=507): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ppoll(&(0x7f00000004c0)=[{r0, 0x4}], 0x1, &(0x7f0000000580)={0x0, 0x989680}, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x139e) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x3, 0x5, 0x5, 0x3, 'syz1\x00', 0xffff}, 0x0, 0x30, 0x3, r1, 0x8, 0xefb, 'syz1\x00', &(0x7f0000000080)=['/\x00', '^.\x00', '/dev/snd/controlC#\x00', '/dco\xeet\x04\x00\x00\x00\x00\x00\x00\x00\x80\x1a\x00\x00\x00', '\x00', '\x00', '/dev/snd/controlC#\x00', '&\x00'], 0x42}) 3.397893523s ago: executing program 4 (id=508): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x6) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x4c, 0x0, 0x0, 0x3, &(0x7f0000000000)={0x77359400}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(0x0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r1, 0x3516, 0x3fffe, 0x9, 0x0, 0x0) 3.386021479s ago: executing program 7 (id=509): mkdir(&(0x7f0000000140)='./control\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000d00000000e2000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x94) r2 = fsopen(&(0x7f0000000300)='affs\x00', 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000003c0)={0x100, 0x5, 0x3, 0x1, 0x6, 0x0, [{0x0, 0x3, 0x0, '\x00', 0x2008}, {0x8, 0xf3, 0x6}, {0x5, 0x3, 0x7, '\x00', 0x2004}, {0x80000001, 0x7, 0x3, '\x00', 0x100}, {0x5, 0x2, 0xffff, '\x00', 0x80}, {0x7f, 0x1, 0xeea, '\x00', 0x80}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x480}, @CTA_FILTER_ORIG_FLAGS={0x60, 0x1, 0x81c}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x4008080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180100001c00000000", @ANYRESDEC=r2], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() r5 = accept(r4, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x80) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "34f9d2122ecbe7ed", "c613c4c55ccd713109722bc3189359aa", "0c68dbf6", "9097a1b115c89132"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='\x04\x00\x00\x00@\x80\x00\x00\x00\x00\x00', &(0x7f00000202c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 3.097062288s ago: executing program 2 (id=510): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)=0x14) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000080)=0x2) r3 = socket$inet6(0xa, 0x806, 0x0) listen(r3, 0x3) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x42180, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) io_uring_setup(0x807f7d, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0xd, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xb5, &(0x7f0000000400)=""/181, 0x41000, 0x7, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 2.49947203s ago: executing program 5 (id=511): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a0000c4050001000700000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240fe"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040601020000000200000000000000000500010007"], 0x1c}}, 0x0) 2.255908124s ago: executing program 4 (id=512): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) 2.229852932s ago: executing program 6 (id=513): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000653000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x10, 0x0, &(0x7f00000001c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) prctl$PR_MCE_KILL(0x35, 0x1, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.182601783s ago: executing program 4 (id=514): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0x14) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x2) r2 = socket$inet6(0xa, 0x806, 0x0) listen(r2, 0x3) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x42180, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xb5, &(0x7f0000000400)=""/181, 0x41000, 0x7, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.024885493s ago: executing program 6 (id=515): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/184, 0xb8}, {0x0}], 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fchown(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2022, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000240)) gettid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0xffffffff, 'geneve0\x00', 'wlan1\x00', {0xff}, {}, 0x5c, 0x2, 0x33}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x3]}}}, @common=@unspec=@devgroup={{0x38}, {0xb1, 0x9, 0x3, 0x0, 0x4000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) 640.755938ms ago: executing program 6 (id=516): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a31000000000500010007000000090002"], 0x5c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0x4e1ee79f, 0x0, 0xf0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r8, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) dup(r7) mmap$binder(&(0x7f00005d9000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xae) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x91, 0x0, 0xc322c29cdd165c51, 0xa, 0x4, "b0f6aa6be427872c2359a7f756f15c146eeede76d67ce94aef55b5a326ce77fefdab86184176881df8aefea854953e071cce4f8daba8c896b35d51a7c7c4ab17", "60504f5a8acf001661c3ef0ba82c098ed04c53b28ed67c7b3ac1e0bc4b29f0b37b00245fc18d4494eeebe32a42aee1af7ec8f77fe0bba0615e78b01ea919c649", "76b6a8d5974e0a8a4bf232361d132be0eaaabd246fa395adf04a00e52506c9e8", [0x0, 0xe00]}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 622.690624ms ago: executing program 7 (id=517): r0 = gettid() waitid(0x2, r0, 0xfffffffffffffffd, 0x8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800210a000000000000000002180000000300080000000008000100ac1414"], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000b40)=[{{&(0x7f0000000240)=@file={0x1, './file0/file0/file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000005c0)="d93e4055dc291aa2d82446d3e3fd6c293b405869503225134a2b3aec51e1571461294dacd85baae0bcccf542ef8bc9b183e8d8baaeeaa7b88b375ffda59436e8b25bae0baee05033f51d196aa41b5cada1a1d309e1fc5c1f986480488ecaf708c74cd5c07d24db5555382e47698443cb4efb1ce5052ae717260c200531138fe1de1e28a486fd828567f3e9438843fa3f2e", 0x91}], 0x1, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)="dd255aa4c1a8da9ffb80bb89fda91aea28dad40b1d", 0x15}, {&(0x7f0000000980)="3366d572cd6998794912aca82aed21df29e2616528ca85f1dfdda70f44650ba2164f15388a848fb67d53eeb275301cbe3520c11c4d19a2273e0dd0729b2eea9becba20e00d9eee0d18cddea162e289277d52871fa41f99d922ec39ecb147537bbed169dd1fd13f4d6d5a0e3cf4419c9d273f8e3e6158ba03d0b87c175f5e0d03a6c7751093211df076f63eaf30b4d1eabf6e05e5fe8f870ab9a43ec3f1683b058f37c816c947c525363a46f91cf91e2beedc047d6a90b6a981b47098d2351ee115cf020a68f403", 0xc7}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000007858344b70061f983c31735a042f8fe8b090dc7eb53a12077e991624fa04638d4860000e49fb5849301890972d85c4aeaf8f74d40bac80529f14b908f44727b50fa9bd138af6262cceeff032c9e3b8fdfc375d4392f9c2d9fb61af25261ca59353ada0745a47aedba65069fcc278e9a9dac7dc7445f55feef72bd5", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2], 0xfffffffffffffef4, 0x20000080}}], 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x89901) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/file0\x00', 0x0, 0x100) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000000000a483000000000000000000000000ae793121097f0c793df11a96037f868bef6f5847f1fc13d1a7e5177c32e50da714a5756d3c7789c5a587723237d7c181000657f1196774f4e027693ff8c288e6bc3e4203bee350409a262a79bf4d6e7eede85601ec8dcff2d2bc0a3bd309d9fe6d7fe56a2828c400000000000000005fd07bd0fe9eb17391b853e422285893efa195415690310c01bf1a840f2b61", @ANYRESOCT=r10, @ANYRES16=r2, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000ff80d89c47a00000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa2000000000900000000000000ffffb703000008000000b70000000000850000000300000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12, 0x0, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r13 = getuid() setresuid(r13, r13, r13) 619.842322ms ago: executing program 2 (id=518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x258, 0x2e8, 0x2e8, 0x258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @private1, [0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xff000000], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x6, 0x7, 0x38}, 0x0, 0xd0, 0x108, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x7}, {0x1, 0x5, 0x2}, 0x3, 0xc}}}, {{@ipv6={@empty, @mcast2, [0xff], [], 'macvtap0\x00', 'pim6reg0\x00', {}, {0xff}, 0x0, 0x6, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x4, 0x3}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mmap(&(0x7f0000769000/0x3000)=nil, 0x3000, 0xb635773f06ebbee7, 0x10, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000), 0x8) socket$unix(0x1, 0x5, 0x0) listen(r4, 0xf2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 495.59497ms ago: executing program 2 (id=519): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x21, 0xd9, {0xd9, 0x21, "72f30e6c896bc7e3f54658d44e7577826d2c4248b8dcf32183a64f2461a28a95ce04b38b32367cc505667f5c6108527d6ce96d38ae35030c4c051c24ebe12cf8119e76cf89b3e6dba3cbfad96d77e006e3cf0170a0ddb4cb677a448da7be8489016ad2d2fc1d00d3b97ec29bafacb77e5d6289c9a2dab58c1d0eab9bedacb40e1c1282e83f2996a79c13cc4e0be2137609fbe2bc855b888d2675cb9e4ebc85545d7b1f66217add60bfba2c653f80dcfe29a4207098784ac01849d70a00f9cf503f25f7154b09ec3b2deaa9b160c3fcca6b34f1cb2ec6bc"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x20, 0xc, 0xcd, "e7576690a6932b733e0e4c00e73f7b19db3e83b6f539d6095083527e1965ddcc808b4cb61e66476549c89e26899ae642c820c1bac280614899af6c715f04b53c751ed82d447bd43e3c088e4190c9e4aeca744d52f4390b94d5801d17736017e0024a25369e4d3837241839fb7aa3420262df77d97e68f50124e2db16daa56418734b56582d26b136bbedfdc1d8f72f3b99988ac78e9808e23eb0c2cdcca7f20e654edeca1100c48b296afed3816639d052123fcd6643dba30b11b1358b36f7a438ca438a3d3579dc641753cbde"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}}) 236.355606ms ago: executing program 6 (id=520): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0xc000, 0x3, &(0x7f0000171000/0xc000)=nil) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x18, 0x2}) r0 = socket(0x15, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540)=[{{&(0x7f0000000240)=@tipc=@name, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)=""/18, 0x12}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f00000006c0)=""/91, 0x5b}], 0x6, &(0x7f00000007c0)=""/242, 0xf2}, 0xfffffff4}], 0x1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40032143, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000008c0)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000), 0x4) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x40, 0x40009975, r5, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) msgsnd(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0xfd1, 0x800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x2, 0x81, @SEQ_CONTROLLER=0xfe, 0x4, 0xf6, 0x7}) 0s ago: executing program 4 (id=521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1000, 0xc4) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4ba8, &(0x7f0000000380)={0x0, 0xfde6, 0x13290, 0x0, 0x1}, &(0x7f0000000a80), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000000)={0x0, 0x3e6b, 0x10, 0x3, 0x1a, 0x0, r4}, 0x1) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0x2, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket(0x2a, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x1d, &(0x7f0000000080)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x2]}}, 0x0, 0x3e, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) syz_open_dev$video(&(0x7f00000004c0), 0x7, 0x40) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000150081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): v_slave_1 [ 115.784132][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.820645][ T29] audit: type=1400 audit(1739846461.821:382): avc: denied { setopt } for pid=6549 comm="syz.2.166" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.825698][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.872909][ T29] audit: type=1400 audit(1739846461.821:383): avc: denied { write } for pid=6549 comm="syz.2.166" path="socket:[11582]" dev="sockfs" ino=11582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.897197][ T5820] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.943406][ T6488] usb 6-1: Using ep0 maxpacket: 32 [ 115.950261][ T6488] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.039076][ T6488] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.044895][ T29] audit: type=1400 audit(1739846461.821:384): avc: denied { read } for pid=6549 comm="syz.2.166" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.063895][ T6488] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.618780][ T6488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.628995][ T53] Bluetooth: hci6: command tx timeout [ 116.643416][ T6488] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.653228][ T6488] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.662415][ T6515] hsr_slave_0: entered promiscuous mode [ 116.666482][ T6488] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.681479][ T6488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.690276][ T29] audit: type=1400 audit(1739846461.821:385): avc: denied { open } for pid=6549 comm="syz.2.166" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.714037][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 116.759843][ T5820] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 116.771766][ T6515] hsr_slave_1: entered promiscuous mode [ 116.773943][ T6488] usb 6-1: config 0 descriptor?? [ 116.779060][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.789972][ T6515] Cannot create hsr debugfs directory [ 116.793674][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.817541][ T5820] usb 2-1: config 0 descriptor?? [ 116.966288][ T5820] gspca_main: sunplus-2.14.0 probing 041e:400b [ 117.008477][ T6488] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.075365][ T6576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.172'. [ 117.197397][ T29] audit: type=1400 audit(1739846463.411:386): avc: denied { nlmsg_write } for pid=6573 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.583201][ T5820] gspca_sunplus: reg_w_riv err -110 [ 117.588538][ T5820] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 117.870502][ T6488] usb 6-1: USB disconnect, device number 3 [ 117.878410][ T6488] usblp0: removed [ 117.925539][ T6515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.941357][ T6515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.950290][ T6515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.975917][ T6515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.141104][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.337740][ T6583] SELinux: syz.2.174 (6583) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.687010][ T53] Bluetooth: hci6: command tx timeout [ 118.733823][ T6583] bridge1: entered promiscuous mode [ 118.740886][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.796822][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.803988][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.824248][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.831312][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.912223][ T6515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.928715][ T6515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.128379][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.288174][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 119.288188][ T29] audit: type=1400 audit(1739846465.621:389): avc: denied { ioctl } for pid=6589 comm="syz.5.177" path="socket:[12645]" dev="sockfs" ino=12645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.324966][ T29] audit: type=1400 audit(1739846465.651:390): avc: denied { bind } for pid=6589 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.382237][ T29] audit: type=1400 audit(1739846465.651:391): avc: denied { connect } for pid=6589 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.402923][ T29] audit: type=1400 audit(1739846465.651:392): avc: denied { write } for pid=6589 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.290987][ T6515] veth0_vlan: entered promiscuous mode [ 120.356194][ T6515] veth1_vlan: entered promiscuous mode [ 120.365394][ T29] audit: type=1400 audit(1739846466.701:393): avc: denied { bind } for pid=6609 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.391770][ T6515] veth0_macvtap: entered promiscuous mode [ 120.446053][ T6515] veth1_macvtap: entered promiscuous mode [ 120.478174][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.498663][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.519900][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.520204][ T5903] usb 2-1: USB disconnect, device number 10 [ 120.536303][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.556902][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.572444][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034f2a000: rx timeout, send abort [ 120.600775][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.639752][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.656057][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.699842][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.722966][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.744672][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.755075][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.765831][ T53] Bluetooth: hci6: command tx timeout [ 120.771326][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.782007][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.792752][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.817918][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.829046][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.846045][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.865425][ T6515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.874722][ T6515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.884214][ T6515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.906303][ T6515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.081686][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034f2a000: abort rx timeout. Force session deactivation [ 121.083416][ T6590] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 121.345144][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.361860][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.410028][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.422879][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.528225][ T29] audit: type=1400 audit(1739846467.861:394): avc: denied { write } for pid=6609 comm="syz.4.179" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.553689][ T6619] trusted_key: encrypted_key: insufficient parameters specified [ 121.637710][ T6623] FAULT_INJECTION: forcing a failure. [ 121.637710][ T6623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.656421][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.6.182 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 121.656447][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.656457][ T6623] Call Trace: [ 121.656462][ T6623] [ 121.656469][ T6623] dump_stack_lvl+0x16c/0x1f0 [ 121.656493][ T6623] should_fail_ex+0x50a/0x650 [ 121.656521][ T6623] _copy_from_user+0x2e/0xd0 [ 121.656538][ T6623] sk_setsockopt+0x731/0x3c00 [ 121.656565][ T6623] ? __sk_flush_backlog+0xa0/0xc0 [ 121.656587][ T6623] ? __pfx_sk_setsockopt+0x10/0x10 [ 121.656614][ T6623] ? find_held_lock+0x59/0x110 [ 121.656632][ T6623] ? find_held_lock+0x2d/0x110 [ 121.656652][ T6623] ? vsock_connectible_setsockopt+0x82d/0xa30 [ 121.656671][ T6623] ? __pfx_lock_release+0x10/0x10 [ 121.656693][ T6623] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.656709][ T6623] ? lock_acquire+0x2f/0xb0 [ 121.656737][ T6623] vsock_connectible_setsockopt+0x852/0xa30 [ 121.656756][ T6623] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 121.656785][ T6623] ? selinux_socket_setsockopt+0x6a/0x80 [ 121.656807][ T6623] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 121.656825][ T6623] do_sock_setsockopt+0x222/0x480 [ 121.656848][ T6623] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 121.656874][ T6623] ? lock_acquire+0x2f/0xb0 [ 121.656915][ T6623] __sys_setsockopt+0x1a0/0x230 [ 121.656940][ T6623] __x64_sys_setsockopt+0xbd/0x160 [ 121.656960][ T6623] ? do_syscall_64+0x91/0x250 [ 121.656979][ T6623] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.656996][ T6623] do_syscall_64+0xcd/0x250 [ 121.657016][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.657039][ T6623] RIP: 0033:0x7f1da2f8cde9 [ 121.657052][ T6623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.657068][ T6623] RSP: 002b:00007f1da3e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.657084][ T6623] RAX: ffffffffffffffda RBX: 00007f1da31a5fa0 RCX: 00007f1da2f8cde9 [ 121.657095][ T6623] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000003 [ 121.657104][ T6623] RBP: 00007f1da3e45090 R08: 0000000000000004 R09: 0000000000000000 [ 121.657113][ T6623] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001 [ 121.657123][ T6623] R13: 0000000000000000 R14: 00007f1da31a5fa0 R15: 00007ffcf9833bb8 [ 121.657143][ T6623] [ 122.170774][ T29] audit: type=1400 audit(1739846468.501:395): avc: denied { create } for pid=6626 comm="syz.6.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.198359][ T29] audit: type=1400 audit(1739846468.531:396): avc: denied { open } for pid=6626 comm="syz.6.185" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 122.300264][ T6631] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 122.514025][ T29] audit: type=1400 audit(1739846468.841:397): avc: denied { write } for pid=6635 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.969678][ T6647] SELinux: syz.4.189 (6647) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 123.501741][ T6647] bridge1: entered promiscuous mode [ 123.773189][ T5903] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.252034][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 124.273402][ T5903] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.281967][ T5903] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.290809][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.301062][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.313069][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.355182][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.393533][ T5903] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.409018][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.434351][ T5903] usb 3-1: config 0 descriptor?? [ 124.523664][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 124.656270][ T5903] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.712971][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 124.790887][ T29] audit: type=1400 audit(1739846471.121:398): avc: denied { shutdown } for pid=6666 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.802944][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 124.819193][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 124.832690][ T45] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.841805][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.851538][ T45] usb 6-1: Product: syz [ 124.860547][ T45] usb 6-1: Manufacturer: syz [ 124.860995][ T5866] usb 3-1: USB disconnect, device number 10 [ 124.865177][ T45] usb 6-1: SerialNumber: syz [ 124.884697][ T6673] can0: slcan on ttyS3. [ 124.891946][ T6673] FAULT_INJECTION: forcing a failure. [ 124.891946][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 124.892175][ T45] usb 6-1: config 0 descriptor?? [ 124.904646][ T6673] CPU: 0 UID: 0 PID: 6673 Comm: syz.6.198 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 124.904673][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.904683][ T6673] Call Trace: [ 124.904688][ T6673] [ 124.904694][ T6673] dump_stack_lvl+0x16c/0x1f0 [ 124.904718][ T6673] should_fail_ex+0x50a/0x650 [ 124.904745][ T6673] should_failslab+0xc2/0x120 [ 124.904763][ T6673] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 124.904779][ T6673] ? skb_clone+0x190/0x3f0 [ 124.904800][ T6673] skb_clone+0x190/0x3f0 [ 124.904820][ T6673] netlink_deliver_tap+0xabd/0xd30 [ 124.904842][ T6673] netlink_unicast+0x5e1/0x7f0 [ 124.904863][ T6673] ? __pfx_netlink_unicast+0x10/0x10 [ 124.904884][ T6673] netlink_sendmsg+0x8b8/0xd70 [ 124.904904][ T6673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.904928][ T6673] ____sys_sendmsg+0xaaf/0xc90 [ 124.904942][ T6673] ? copy_msghdr_from_user+0x10b/0x160 [ 124.904960][ T6673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.904983][ T6673] ___sys_sendmsg+0x135/0x1e0 [ 124.905003][ T6673] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.905029][ T6673] ? __pfx_lock_release+0x10/0x10 [ 124.905049][ T6673] ? trace_lock_acquire+0x14e/0x1f0 [ 124.905071][ T6673] ? __fget_files+0x206/0x3a0 [ 124.905096][ T6673] __sys_sendmsg+0x16e/0x220 [ 124.905114][ T6673] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.905146][ T6673] do_syscall_64+0xcd/0x250 [ 124.905164][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.905183][ T6673] RIP: 0033:0x7f1da2f8cde9 [ 124.905195][ T6673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.905207][ T6673] RSP: 002b:00007f1da3e24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.905221][ T6673] RAX: ffffffffffffffda RBX: 00007f1da31a6080 RCX: 00007f1da2f8cde9 [ 124.905230][ T6673] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000007 [ 124.905238][ T6673] RBP: 00007f1da3e24090 R08: 0000000000000000 R09: 0000000000000000 [ 124.905246][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.905254][ T6673] R13: 0000000000000000 R14: 00007f1da31a6080 R15: 00007ffcf9833bb8 [ 124.905273][ T6673] [ 124.908941][ T5866] usblp0: removed [ 125.605062][ T6668] can0 (unregistered): slcan off ttyS3. [ 125.931853][ T29] audit: type=1400 audit(1739846471.761:399): avc: denied { name_connect } for pid=6674 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 126.164930][ T6657] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 126.337637][ T29] audit: type=1400 audit(1739846471.771:400): avc: denied { setopt } for pid=6674 comm="syz.4.199" lport=34561 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 126.396312][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a772000: rx timeout, send abort [ 126.511193][ T29] audit: type=1400 audit(1739846472.841:401): avc: denied { getopt } for pid=6690 comm="syz.6.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.904605][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a772000: abort rx timeout. Force session deactivation [ 126.924724][ T45] usb 6-1: USB disconnect, device number 4 [ 127.075409][ T29] audit: type=1400 audit(1739846472.941:402): avc: denied { mount } for pid=6686 comm="syz.1.203" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.243227][ T29] audit: type=1400 audit(1739846473.571:403): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.466758][ T29] audit: type=1400 audit(1739846473.571:404): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.978104][ T29] audit: type=1400 audit(1739846473.721:405): avc: denied { connect } for pid=6697 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.072849][ T29] audit: type=1400 audit(1739846474.301:406): avc: denied { connect } for pid=6694 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.308172][ T29] audit: type=1400 audit(1739846474.311:407): avc: denied { connect } for pid=6694 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.501131][ T3551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.914954][ T3551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.067997][ T3551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.191112][ T3551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.263508][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.298885][ T6727] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 129.326369][ T970] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.540212][ T45] usb 5-1: device descriptor read/64, error -71 [ 129.942296][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.954072][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.977785][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.023038][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.032552][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.039993][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.098411][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 130.109108][ T970] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.123363][ T970] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.133368][ T970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.154069][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.163798][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.173401][ T970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.212353][ T970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.320133][ T970] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.329349][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.373599][ T45] usb 5-1: device descriptor read/64, error -71 [ 130.481689][ T6738] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 131.096285][ T45] usb usb5-port1: attempt power cycle [ 131.151017][ T970] usb 3-1: config 0 descriptor?? [ 131.484152][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.491883][ T6729] chnl_net:caif_netlink_parms(): no params data found [ 131.555396][ T45] usb 5-1: device descriptor read/8, error -71 [ 131.562004][ T970] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.813716][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 131.860465][ T45] usb 5-1: device descriptor read/8, error -71 [ 131.895004][ T5820] usb 3-1: USB disconnect, device number 11 [ 131.911319][ T5820] usblp0: removed [ 131.997172][ T45] usb usb5-port1: unable to enumerate USB device [ 132.124416][ T5826] Bluetooth: hci4: command tx timeout [ 132.362467][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 132.362505][ T29] audit: type=1400 audit(1739846478.601:411): avc: denied { create } for pid=6755 comm="syz.6.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.393585][ T29] audit: type=1400 audit(1739846478.611:412): avc: denied { connect } for pid=6755 comm="syz.6.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.414299][ T29] audit: type=1400 audit(1739846478.621:413): avc: denied { setopt } for pid=6755 comm="syz.6.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.433697][ T29] audit: type=1400 audit(1739846478.621:414): avc: denied { bind } for pid=6755 comm="syz.6.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.566663][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.573502][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.581749][ T29] audit: type=1400 audit(1739846478.621:415): avc: denied { write } for pid=6755 comm="syz.6.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.962606][ T29] audit: type=1400 audit(1739846479.291:416): avc: denied { read } for pid=6763 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.988307][ T29] audit: type=1400 audit(1739846479.291:417): avc: denied { ioctl } for pid=6763 comm="syz.2.225" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.018530][ T970] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.038217][ T29] audit: type=1400 audit(1739846479.301:418): avc: denied { read } for pid=6763 comm="syz.2.225" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 133.219122][ T29] audit: type=1400 audit(1739846479.301:419): avc: denied { open } for pid=6763 comm="syz.2.225" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 133.243985][ T29] audit: type=1400 audit(1739846479.301:420): avc: denied { ioctl } for pid=6763 comm="syz.2.225" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 134.135299][ T3551] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 134.203485][ T5826] Bluetooth: hci4: command tx timeout [ 134.214195][ T970] usb 6-1: Using ep0 maxpacket: 16 [ 134.220814][ T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 134.233739][ T970] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.242823][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.252002][ T970] usb 6-1: Product: syz [ 134.256398][ T970] usb 6-1: Manufacturer: syz [ 134.260992][ T970] usb 6-1: SerialNumber: syz [ 134.261291][ T3551] bond0 (unregistering): Released all slaves [ 134.266958][ T970] usb 6-1: config 0 descriptor?? [ 134.319824][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.327043][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.345304][ T6729] bridge_slave_0: entered allmulticast mode [ 134.359630][ T6729] bridge_slave_0: entered promiscuous mode [ 134.368247][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.410475][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.443980][ T6729] bridge_slave_1: entered allmulticast mode [ 134.450906][ T6729] bridge_slave_1: entered promiscuous mode [ 134.558227][ T6781] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 134.641385][ T6759] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 135.287206][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.310714][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.335564][ T3551] debugfs: Directory 'netdev:phy10-monitor' with parent 'phy10' already present! [ 135.451092][ T6787] syz_tun: entered allmulticast mode [ 135.480222][ T6785] syz_tun: left allmulticast mode [ 135.536106][ T6729] team0: Port device team_slave_0 added [ 135.560988][ T6729] team0: Port device team_slave_1 added [ 135.626741][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.641308][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.667643][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.828885][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.836933][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.862895][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.879539][ T3551] hsr_slave_0: left promiscuous mode [ 135.884896][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880316b3c00: rx timeout, send abort [ 135.896809][ T3551] hsr_slave_1: left promiscuous mode [ 135.914807][ T3551] veth1_macvtap: left promiscuous mode [ 135.920837][ T3551] veth0_macvtap: left promiscuous mode [ 135.926584][ T3551] veth1_vlan: left promiscuous mode [ 135.932026][ T3551] veth0_vlan: left promiscuous mode [ 135.963443][ T5903] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.151186][ T5903] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.175793][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.185704][ T5903] usb 3-1: Product: syz [ 136.202428][ T5903] usb 3-1: Manufacturer: syz [ 136.215079][ T5903] usb 3-1: SerialNumber: syz [ 136.247768][ T5903] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.268086][ T5866] usb 6-1: USB disconnect, device number 5 [ 136.275080][ T970] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 136.283494][ T5826] Bluetooth: hci4: command tx timeout [ 137.190257][ T6809] random: crng reseeded on system resumption [ 137.674150][ T970] usb 3-1: Service connection timeout for: 256 [ 137.692176][ T970] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 137.725516][ T970] ath9k_htc: Failed to initialize the device [ 137.789513][ T970] usb 3-1: ath9k_htc: USB layer deinitialized [ 137.791134][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.905252][ T6817] Cannot find set identified by id 0 to match [ 137.947061][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.274591][ T5866] usb 3-1: USB disconnect, device number 12 [ 138.302133][ T6729] hsr_slave_0: entered promiscuous mode [ 138.324256][ T6729] hsr_slave_1: entered promiscuous mode [ 138.330846][ T6729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.338551][ T6729] Cannot create hsr debugfs directory [ 138.363620][ T5826] Bluetooth: hci4: command tx timeout [ 138.581304][ T6729] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 138.614404][ T6729] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 138.630913][ T6729] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 138.655982][ T6729] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 138.680919][ T6827] syz_tun: entered allmulticast mode [ 138.696769][ T6825] syz_tun: left allmulticast mode [ 138.807798][ T6828] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 139.312764][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 139.312782][ T29] audit: type=1400 audit(1739846485.641:424): avc: denied { ioctl } for pid=6830 comm="syz.6.244" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.388455][ T29] audit: type=1400 audit(1739846485.711:425): avc: denied { create } for pid=6830 comm="syz.6.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 139.447387][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.569849][ T6729] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.595552][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.602623][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.738878][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.746004][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.694205][ T5826] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 140.704109][ T5826] Bluetooth: hci6: Injecting HCI hardware error event [ 140.726242][ T5826] Bluetooth: hci6: hardware error 0x00 [ 140.885260][ T6729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.303466][ T6488] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 141.338888][ T6860] syz.5.251: attempt to access beyond end of device [ 141.338888][ T6860] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 141.352102][ T6860] syz.5.251: attempt to access beyond end of device [ 141.352102][ T6860] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 141.365047][ T6860] Mount JFS Failure: -5 [ 141.553387][ T6488] usb 7-1: Using ep0 maxpacket: 32 [ 141.792651][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.805837][ T6488] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 141.814530][ T6488] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 141.835383][ T6488] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 141.844812][ T6488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.855082][ T6488] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.865995][ T6488] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.905624][ T6488] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 142.014234][ T6488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.057160][ T6488] usb 7-1: config 0 descriptor?? [ 142.128116][ T6869] syz_tun: entered allmulticast mode [ 142.156626][ T6868] syz_tun: left allmulticast mode [ 142.289169][ T6488] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 142.340108][ T6488] usb 7-1: USB disconnect, device number 2 [ 142.461840][ T6488] usblp0: removed [ 142.479256][ T6729] veth0_vlan: entered promiscuous mode [ 142.514258][ T6729] veth1_vlan: entered promiscuous mode [ 142.553168][ T6729] veth0_macvtap: entered promiscuous mode [ 142.572054][ T6729] veth1_macvtap: entered promiscuous mode [ 142.626831][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.637632][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.648821][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.659755][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.672561][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.683208][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.693677][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.704342][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.714500][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.725288][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.748388][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.758394][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.770499][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.781434][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.792449][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.802604][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.813168][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.823474][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.834310][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.844826][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.857227][ T5826] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 142.863859][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.874928][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.891854][ T6729] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.901487][ T6729] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.911258][ T6729] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.926981][ T6729] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.973734][ T6488] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.064307][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.076432][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.133455][ T6488] usb 5-1: Using ep0 maxpacket: 8 [ 143.160257][ T6488] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 143.171318][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.180205][ T6488] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.199219][ T6488] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 143.218744][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.227286][ T6488] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.329611][ T6488] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 143.350819][ T6488] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.399473][ T6488] usb 5-1: string descriptor 0 read error: -22 [ 143.406279][ T6488] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 143.432208][ T6488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.707966][ T6488] adutux 5-1:168.0: interrupt endpoints not found [ 144.208021][ T6488] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 145.374020][ T6488] usb 8-1: Using ep0 maxpacket: 32 [ 145.398848][ T6488] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 145.414609][ T6488] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 145.424780][ T6488] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 145.438108][ T6488] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.448926][ T6488] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.459231][ T6488] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.474022][ T6488] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 145.483570][ T6488] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.493897][ T6488] usb 8-1: config 0 descriptor?? [ 145.574306][ T6909] syz_tun: entered allmulticast mode [ 145.589362][ T6907] syz_tun: left allmulticast mode [ 145.594849][ T5867] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 145.755123][ T6488] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 145.833526][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 145.844294][ T5867] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.875447][ T5867] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.887637][ T5867] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 145.896920][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.912792][ T6488] usb 8-1: USB disconnect, device number 2 [ 145.925920][ T6488] usblp0: removed [ 145.933363][ T45] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 146.328861][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.262'. [ 146.386020][ T6916] netlink: 32 bytes leftover after parsing attributes in process `syz.5.262'. [ 146.421874][ T5834] usb 5-1: USB disconnect, device number 17 [ 146.447382][ T29] audit: type=1400 audit(1739846492.781:426): avc: denied { read } for pid=6902 comm="syz.5.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.493729][ T5867] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 146.505204][ T5867] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 146.512271][ T5867] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 146.523033][ T5867] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 146.539810][ T5867] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 146.549951][ T5867] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 146.560320][ T5867] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 146.573015][ T5867] hid-rmi 0003:06CB:81A7.0003: hidraw0: USB HID v0.05 Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 146.709416][ T5903] usb 6-1: USB disconnect, device number 6 [ 146.913529][ T5834] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 147.063537][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 147.079032][ T5834] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.102144][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.124556][ T5834] usb 5-1: Product: syz [ 147.128742][ T5834] usb 5-1: Manufacturer: syz [ 147.150228][ T5834] usb 5-1: SerialNumber: syz [ 147.157941][ T5834] usb 5-1: config 0 descriptor?? [ 147.253343][ T5867] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 147.268613][ T6928] syz.7.268: attempt to access beyond end of device [ 147.268613][ T6928] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 147.383746][ T5834] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.385457][ T6928] syz.7.268: attempt to access beyond end of device [ 147.385457][ T6928] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 147.435978][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.467052][ T5867] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 147.473424][ T6928] Mount JFS Failure: -5 [ 147.530602][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.552800][ T5867] usb 3-1: config 0 descriptor?? [ 147.567978][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 147.951501][ T5867] pwc: send_video_command error -71 [ 147.966389][ T5867] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 147.989920][ T5867] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 148.023448][ T5867] usb 3-1: USB disconnect, device number 13 [ 148.401007][ T5834] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 148.443540][ T5903] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 148.618780][ T5903] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.642558][ T5903] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 148.658588][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.675925][ T5903] usb 8-1: config 0 descriptor?? [ 148.693652][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 149.095811][ T29] audit: type=1326 audit(1739846495.431:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac898cde9 code=0x7ffc0000 [ 149.109946][ T6938] bridge_slave_0: left allmulticast mode [ 149.144626][ T29] audit: type=1326 audit(1739846495.431:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac898cde9 code=0x7ffc0000 [ 149.170631][ T29] audit: type=1326 audit(1739846495.451:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffac898cde9 code=0x7ffc0000 [ 149.184141][ T6938] bridge_slave_0: left promiscuous mode [ 149.216789][ T6949] netlink: 'syz.7.273': attribute type 10 has an invalid length. [ 149.243954][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.255694][ T29] audit: type=1400 audit(1739846495.451:430): avc: denied { ioctl } for pid=6943 comm="syz.2.275" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.281635][ T45] usb 7-1: unable to get BOS descriptor or descriptor too short [ 149.285074][ T6938] bridge_slave_1: left allmulticast mode [ 149.297109][ T29] audit: type=1326 audit(1739846495.451:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac898cde9 code=0x7ffc0000 [ 149.321936][ T6938] bridge_slave_1: left promiscuous mode [ 149.328217][ T45] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 149.338258][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.345715][ T45] usb 7-1: can't read configurations, error -71 [ 149.358946][ T29] audit: type=1326 audit(1739846495.451:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac898cde9 code=0x7ffc0000 [ 149.391465][ T29] audit: type=1326 audit(1739846495.451:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffac898b750 code=0x7ffc0000 [ 149.425502][ T6938] bond0: (slave bond_slave_0): Releasing backup interface [ 149.441683][ T6938] bond0: (slave bond_slave_1): Releasing backup interface [ 149.470180][ T6938] team0: Port device team_slave_0 removed [ 149.488031][ T6938] team0: Port device team_slave_1 removed [ 149.501449][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.518152][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.518701][ T6488] usb 5-1: USB disconnect, device number 18 [ 149.527753][ T29] audit: type=1326 audit(1739846495.451:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac898cde9 code=0x7ffc0000 [ 149.561804][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.566158][ T29] audit: type=1326 audit(1739846495.451:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffac898cde9 code=0x7ffc0000 [ 149.581006][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.781574][ T6949] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.842435][ T6955] syz_tun: entered allmulticast mode [ 149.853671][ T6962] : entered promiscuous mode [ 149.870938][ T6951] syz_tun: left allmulticast mode [ 149.976927][ T5903] pwc: recv_control_msg error -71 req 02 val 2b00 [ 149.990278][ T5903] pwc: recv_control_msg error -71 req 02 val 2700 [ 150.004339][ T5903] pwc: recv_control_msg error -71 req 02 val 2c00 [ 150.070311][ T6967] SELinux: security_context_str_to_sid () failed with errno=-22 [ 150.388024][ T5903] pwc: recv_control_msg error -71 req 04 val 1000 [ 150.511526][ T5903] pwc: recv_control_msg error -71 req 04 val 1300 [ 150.590551][ T5903] pwc: recv_control_msg error -71 req 04 val 1400 [ 150.605489][ T5903] pwc: recv_control_msg error -71 req 02 val 2000 [ 150.613915][ T5903] pwc: recv_control_msg error -71 req 02 val 2100 [ 150.620707][ T5903] pwc: recv_control_msg error -71 req 04 val 1500 [ 150.691389][ T5903] pwc: recv_control_msg error -71 req 02 val 2500 [ 150.701648][ T5903] pwc: recv_control_msg error -71 req 02 val 2400 [ 150.713943][ T5903] pwc: recv_control_msg error -71 req 02 val 2600 [ 150.720640][ T5903] pwc: recv_control_msg error -71 req 02 val 2900 [ 150.730729][ T5903] pwc: recv_control_msg error -71 req 02 val 2800 [ 150.739080][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 150.745852][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 150.754877][ T5903] pwc: Registered as video103. [ 150.761144][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input6 [ 150.893608][ T5903] usb 8-1: USB disconnect, device number 3 [ 151.589457][ T5867] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 151.784750][ T6985] Cannot find set identified by id 0 to match [ 151.963484][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 151.973106][ T5867] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.983141][ T5867] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 152.023519][ T5867] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 152.181763][ T6988] bridge2: entered promiscuous mode [ 152.278643][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.306276][ T5867] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.330453][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.344776][ T5867] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.361321][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.372616][ T5867] usb 7-1: config 0 descriptor?? [ 152.707291][ T5867] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.898080][ T5903] usb 7-1: USB disconnect, device number 5 [ 152.911845][ T5903] usblp0: removed [ 152.978574][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 153.162276][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 153.162292][ T29] audit: type=1400 audit(1739846499.491:440): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.193658][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 153.209753][ T25] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.219064][ T25] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.250088][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.259157][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.268839][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.280135][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.293114][ T25] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 153.343455][ T5867] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 153.478882][ T7007] bridge2: entered promiscuous mode [ 153.613389][ T5867] usb 8-1: Using ep0 maxpacket: 8 [ 153.672060][ T5867] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 153.719095][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.797234][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.818803][ T25] usb 6-1: config 0 descriptor?? [ 153.828826][ T5867] usb 8-1: Product: syz [ 153.836744][ T5867] usb 8-1: Manufacturer: syz [ 153.842162][ T5867] usb 8-1: SerialNumber: syz [ 153.849564][ T5867] usb 8-1: config 0 descriptor?? [ 153.864727][ T5903] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.872825][ T7009] syz_tun: entered allmulticast mode [ 153.886754][ T7008] syz_tun: left allmulticast mode [ 154.039278][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 154.053480][ T25] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.072842][ T7014] netlink: 116 bytes leftover after parsing attributes in process `syz.6.293'. [ 154.083112][ T5867] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 154.087734][ T5903] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 154.101718][ T29] audit: type=1400 audit(1739846500.431:441): avc: denied { name_bind } for pid=7013 comm="syz.6.293" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 154.129751][ T25] usb 6-1: USB disconnect, device number 7 [ 154.135915][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.146767][ T25] usblp0: removed [ 154.151100][ T5903] usb 3-1: Product: syz [ 154.176455][ T5903] usb 3-1: Manufacturer: syz [ 154.181188][ T5903] usb 3-1: SerialNumber: syz [ 154.222012][ T7018] netlink: 116 bytes leftover after parsing attributes in process `syz.6.295'. [ 154.264795][ T5903] usb 3-1: config 0 descriptor?? [ 154.493757][ T7022] SELinux: l%6 |OΏ (7022) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 154.514176][ T7022] bridge3: entered promiscuous mode [ 155.021002][ T5903] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.665612][ T5867] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 156.221381][ T6488] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 156.377700][ T5903] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 156.413339][ T6488] usb 5-1: Using ep0 maxpacket: 32 [ 156.420525][ T6488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.438983][ T6488] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 156.463307][ T6488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.471702][ T6488] usb 5-1: Product: syz [ 156.476041][ T6488] usb 5-1: Manufacturer: syz [ 156.480623][ T6488] usb 5-1: SerialNumber: syz [ 156.491601][ T6488] usb 5-1: config 0 descriptor?? [ 156.496660][ T5867] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 156.653446][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 156.664234][ T5867] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 156.672614][ T5867] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 156.685488][ T5867] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 156.694631][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.704387][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.714137][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.729170][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 156.739122][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.752654][ T5867] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 156.762994][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.898046][ T5867] usb 6-1: config 0 descriptor?? [ 157.080460][ T6488] gs_usb 5-1:0.0: Configuring for 142 interfaces [ 157.087401][ T6488] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 157.097906][ T6488] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 157.198956][ T9] usb 8-1: USB disconnect, device number 4 [ 157.230516][ T5867] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 157.266065][ T6488] usb 5-1: USB disconnect, device number 19 [ 157.407369][ T9] usb 3-1: USB disconnect, device number 14 [ 157.493443][ T45] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 157.565319][ T7053] SELinux: syz.7.303 (7053) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 157.631059][ T5903] usb 6-1: USB disconnect, device number 8 [ 157.787137][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.909795][ T5903] usblp0: removed [ 157.949530][ T45] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 158.082075][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.091902][ T45] usb 7-1: config 0 descriptor?? [ 158.100382][ T45] pwc: Askey VC010 type 2 USB webcam detected. [ 158.463414][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 158.561532][ T7047] bridge_slave_0: left allmulticast mode [ 158.571331][ T7047] bridge_slave_0: left promiscuous mode [ 158.584129][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.631706][ T7047] bridge_slave_1: left allmulticast mode [ 158.644452][ T7047] bridge_slave_1: left promiscuous mode [ 158.650854][ T7063] netlink: 'syz.6.302': attribute type 10 has an invalid length. [ 158.671897][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.773223][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.782381][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.791145][ T9] usb 8-1: Product: syz [ 158.852914][ T9] usb 8-1: Manufacturer: syz [ 158.857738][ T9] usb 8-1: SerialNumber: syz [ 158.872595][ T7047] bond0: (slave bond_slave_0): Releasing backup interface [ 158.880447][ T9] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 158.901314][ T6488] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.922699][ T7047] bond0: (slave bond_slave_1): Releasing backup interface [ 158.959731][ T7047] team0: Port device team_slave_0 removed [ 158.978622][ T7047] team0: Port device team_slave_1 removed [ 158.991827][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.999517][ T5903] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 159.021368][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.090177][ T29] audit: type=1400 audit(1739846505.421:442): avc: denied { mount } for pid=7068 comm="syz.2.308" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 159.112230][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.173434][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 159.187424][ T5903] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.217467][ T5903] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.293807][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.357016][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.402730][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.420912][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.608227][ T5903] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.618064][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.631234][ T5903] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.640396][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.790327][ T7076] SELinux: syz.4.309 (7076) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 160.374706][ T5903] usb 6-1: config 0 descriptor?? [ 160.450000][ T6488] usb 8-1: Service connection timeout for: 256 [ 160.474848][ T7063] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.509765][ T45] pwc: recv_control_msg error -71 req 02 val 2b00 [ 160.543357][ T6488] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 160.581360][ T6488] ath9k_htc: Failed to initialize the device [ 160.604542][ T6488] usb 8-1: ath9k_htc: USB layer deinitialized [ 160.613973][ T5903] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 160.633673][ T45] pwc: recv_control_msg error -71 req 02 val 2700 [ 160.643550][ T7078] random: crng reseeded on system resumption [ 160.663315][ T45] pwc: recv_control_msg error -71 req 02 val 2c00 [ 160.690864][ T45] pwc: recv_control_msg error -71 req 04 val 1000 [ 160.717021][ T45] pwc: recv_control_msg error -71 req 04 val 1300 [ 160.737051][ T45] pwc: recv_control_msg error -71 req 04 val 1400 [ 160.748392][ T45] pwc: recv_control_msg error -71 req 02 val 2000 [ 160.757851][ T45] pwc: recv_control_msg error -71 req 02 val 2100 [ 160.768745][ T45] pwc: recv_control_msg error -71 req 04 val 1500 [ 160.778678][ T45] pwc: recv_control_msg error -71 req 02 val 2500 [ 160.792504][ T45] pwc: recv_control_msg error -71 req 02 val 2400 [ 160.801079][ T45] pwc: recv_control_msg error -71 req 02 val 2600 [ 160.830691][ T5903] usb 6-1: USB disconnect, device number 9 [ 160.843423][ T45] pwc: recv_control_msg error -71 req 02 val 2900 [ 160.856833][ T5903] usblp0: removed [ 160.864949][ T45] pwc: recv_control_msg error -71 req 02 val 2800 [ 160.895340][ T45] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.952420][ T45] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.974740][ T45] pwc: Registered as video103. [ 161.177290][ T7091] SELinux: syz.6.311 (7091) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 161.463849][ T45] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 161.475752][ T45] usb 7-1: USB disconnect, device number 6 [ 161.641809][ T5903] usb 8-1: USB disconnect, device number 5 [ 161.904343][ T5867] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.033492][ T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 162.083448][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 162.137426][ T5867] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.190205][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.198375][ T5867] usb 3-1: Product: syz [ 162.203167][ T5867] usb 3-1: Manufacturer: syz [ 162.208287][ T5867] usb 3-1: SerialNumber: syz [ 162.208290][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 162.212311][ T45] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.229011][ T5867] usb 3-1: config 0 descriptor?? [ 162.232266][ T45] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 162.242631][ T45] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 162.268209][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.393528][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.403958][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.414459][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.430142][ T45] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.439284][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.449235][ T45] usb 7-1: config 0 descriptor?? [ 162.455818][ T5867] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 162.534731][ T7105] SELinux: security_context_str_to_sid () failed with errno=-22 [ 163.546883][ T7115] SELinux: syz.7.317 (7115) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 163.704482][ T7120] SELinux: syz.5.319 (7120) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 164.243741][ T5867] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 164.725925][ T7128] SELinux: syz.4.320 (7128) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 164.765220][ T7128] bridge4: entered promiscuous mode [ 165.087622][ T970] usb 7-1: USB disconnect, device number 7 [ 165.213558][ T7130] FAULT_INJECTION: forcing a failure. [ 165.213558][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.227129][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.5.321 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 165.227150][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.227160][ T7130] Call Trace: [ 165.227165][ T7130] [ 165.227171][ T7130] dump_stack_lvl+0x16c/0x1f0 [ 165.227192][ T7130] should_fail_ex+0x50a/0x650 [ 165.227214][ T7130] _copy_from_user+0x2e/0xd0 [ 165.227227][ T7130] map_update_elem+0x58b/0x8f0 [ 165.227248][ T7130] ? __pfx_map_update_elem+0x10/0x10 [ 165.227264][ T7130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.227285][ T7130] ? selinux_bpf+0xee/0x130 [ 165.227299][ T7130] __sys_bpf+0x14bb/0x49c0 [ 165.227311][ T7130] ? __pfx_lock_release+0x10/0x10 [ 165.227330][ T7130] ? __pfx___sys_bpf+0x10/0x10 [ 165.227341][ T7130] ? vfs_write+0x306/0x1150 [ 165.227364][ T7130] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 165.227389][ T7130] ? fput+0x67/0x440 [ 165.227403][ T7130] ? ksys_write+0x1ba/0x250 [ 165.227421][ T7130] ? __pfx_ksys_write+0x10/0x10 [ 165.227442][ T7130] __x64_sys_bpf+0x78/0xc0 [ 165.227455][ T7130] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.227469][ T7130] do_syscall_64+0xcd/0x250 [ 165.227484][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.227501][ T7130] RIP: 0033:0x7f2084b8cde9 [ 165.227511][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.227524][ T7130] RSP: 002b:00007f2085953038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.227536][ T7130] RAX: ffffffffffffffda RBX: 00007f2084da6080 RCX: 00007f2084b8cde9 [ 165.227544][ T7130] RDX: 0000000000000020 RSI: 0000400000000500 RDI: 0000000000000002 [ 165.227552][ T7130] RBP: 00007f2085953090 R08: 0000000000000000 R09: 0000000000000000 [ 165.227559][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.227567][ T7130] R13: 0000000000000000 R14: 00007f2084da6080 R15: 00007fff75db9008 [ 165.227583][ T7130] [ 165.746772][ T5867] usb 3-1: USB disconnect, device number 15 [ 165.791800][ T7139] random: crng reseeded on system resumption [ 165.983524][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 166.113365][ T5867] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 166.143465][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 166.251582][ T7146] Cannot find set identified by id 0 to match [ 166.273709][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 166.301457][ T45] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.310604][ T45] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.319695][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 166.477625][ T5867] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.486090][ T5867] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.498049][ T5867] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.498345][ T45] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.530073][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.539161][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.555333][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 166.565672][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.575612][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.629623][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.643184][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.651807][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.651844][ T45] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.651865][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.653172][ T45] usb 7-1: config 0 descriptor?? [ 166.669575][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.704253][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.719920][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.730234][ T5867] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.745672][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.755576][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.774687][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.941932][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.945245][ T45] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.093817][ T5867] usb 3-1: config 0 descriptor?? [ 167.104909][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.132321][ T9] usb 6-1: config 0 descriptor?? [ 167.165440][ T45] usb 7-1: USB disconnect, device number 8 [ 167.188737][ T45] usblp0: removed [ 167.308757][ T5867] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.351643][ T9] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.514466][ T7154] syz.7.329: attempt to access beyond end of device [ 167.514466][ T7154] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 167.527461][ T7154] syz.7.329: attempt to access beyond end of device [ 167.527461][ T7154] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 167.540710][ T7154] Mount JFS Failure: -5 [ 167.610157][ T5867] usb 6-1: USB disconnect, device number 10 [ 167.639161][ T5867] usblp1: removed [ 167.653926][ T9] usb 3-1: USB disconnect, device number 16 [ 167.679175][ T9] usblp0: removed [ 167.920668][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 167.929755][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 169.103453][ T5866] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 169.297146][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.308026][ T5866] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 169.317258][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.326891][ T5866] usb 6-1: config 0 descriptor?? [ 169.334333][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 169.673094][ T5867] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 169.843562][ T5867] usb 8-1: Using ep0 maxpacket: 8 [ 169.883670][ T7187] SELinux: syz.4.337 (7187) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 170.237143][ T5867] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.266291][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.276594][ T5867] usb 8-1: Product: syz [ 170.280820][ T5867] usb 8-1: Manufacturer: syz [ 170.287069][ T5867] usb 8-1: SerialNumber: syz [ 170.293012][ T7170] bridge_slave_0: left allmulticast mode [ 170.297439][ T5867] usb 8-1: config 0 descriptor?? [ 170.321736][ T7189] netlink: 'syz.5.333': attribute type 10 has an invalid length. [ 170.330214][ T7170] bridge_slave_0: left promiscuous mode [ 170.339329][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.356056][ T7170] bridge_slave_1: left allmulticast mode [ 170.361809][ T7170] bridge_slave_1: left promiscuous mode [ 170.367655][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.392248][ T7170] bond0: (slave bond_slave_0): Releasing backup interface [ 170.425138][ T7170] bond0: (slave bond_slave_1): Releasing backup interface [ 170.512875][ T5867] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 170.531168][ T7170] team0: Port device team_slave_0 removed [ 170.604186][ T7170] team0: Port device team_slave_1 removed [ 170.622790][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.631331][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.680207][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.691240][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.826325][ T7189] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.891033][ T5866] pwc: recv_control_msg error -71 req 02 val 2b00 [ 170.999572][ T7200] SELinux: syz.4.339 (7200) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 171.454310][ T7200] bridge5: entered promiscuous mode [ 171.474672][ T5866] pwc: recv_control_msg error -71 req 02 val 2700 [ 171.492290][ T5866] pwc: recv_control_msg error -71 req 02 val 2c00 [ 171.500860][ T5866] pwc: recv_control_msg error -71 req 04 val 1000 [ 171.512913][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 171.565845][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 171.573477][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 172.024278][ T5867] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 172.034471][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 172.153390][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 172.204378][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 172.222552][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 172.235375][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 172.259818][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 172.276656][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 172.301187][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 172.313384][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 172.330138][ T5866] pwc: Registered as video103. [ 172.340903][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 172.371014][ T5866] usb 6-1: USB disconnect, device number 11 [ 172.708647][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.717505][ T5903] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 172.884079][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 172.894652][ T5903] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 172.908678][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.918098][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.932847][ T5903] usb 5-1: Product: syz [ 172.937286][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.946117][ T5903] usb 5-1: Manufacturer: syz [ 172.957835][ T5903] usb 5-1: SerialNumber: syz [ 172.966148][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.978402][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.989082][ T5903] usb 5-1: config 0 descriptor?? [ 172.999829][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.011515][ T5903] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 173.018650][ T5834] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 173.052439][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.055117][ T5866] usb 8-1: USB disconnect, device number 6 [ 173.079184][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 173.090186][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.241724][ T7230] SELinux: syz.5.346 (7230) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 173.272895][ T7230] bridge1: entered promiscuous mode [ 173.736510][ T5903] gspca_sunplus: reg_r err -110 [ 173.741450][ T5903] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 173.763931][ T45] usb 3-1: config 0 descriptor?? [ 173.826067][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 173.895304][ T5834] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 173.944364][ T5834] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 173.973442][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 173.990928][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.001920][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.012569][ T5834] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.032750][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.045929][ T5834] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.055281][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.119274][ T5834] usb 7-1: config 0 descriptor?? [ 174.309027][ T5866] usb 3-1: USB disconnect, device number 17 [ 174.316130][ T29] audit: type=1400 audit(1739846520.641:443): avc: denied { map } for pid=7233 comm="syz.5.348" path="socket:[17471]" dev="sockfs" ino=17471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 174.340662][ T5866] usblp0: removed [ 174.373120][ T5834] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.397376][ T5834] usb 7-1: USB disconnect, device number 9 [ 174.410366][ T5834] usblp0: removed [ 174.726976][ T7246] SELinux: syz.5.349 (7246) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.418866][ T7248] Cannot find set identified by id 0 to match [ 175.437254][ T5903] usb 5-1: USB disconnect, device number 20 [ 176.194289][ T5903] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 176.343355][ T5866] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 176.495865][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.533631][ T5866] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.542881][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.624044][ T7263] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 176.644142][ T5902] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 176.653127][ T7263] VFS: Can't find a romfs filesystem on dev nullb0. [ 176.653127][ T7263] [ 176.722374][ T5866] usb 6-1: config 0 descriptor?? [ 176.730024][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 176.741481][ T7263] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 176.808381][ T7263] CIFS mount error: No usable UNC path provided in device string! [ 176.808381][ T7263] [ 176.820636][ T7263] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 176.903978][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 176.987285][ T5902] usb 7-1: config 0 interface 0 has no altsetting 0 [ 177.037821][ T5902] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 177.073849][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.082615][ T5902] usb 7-1: Product: syz [ 177.087960][ T5902] usb 7-1: Manufacturer: syz [ 177.093616][ T5902] usb 7-1: SerialNumber: syz [ 177.124567][ T5902] usb 7-1: config 0 descriptor?? [ 177.300184][ T7251] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 177.439037][ T7251] netlink: 'syz.5.352': attribute type 10 has an invalid length. [ 177.466741][ T7272] bond0: (slave wlan1): Releasing backup interface [ 177.583360][ T7251] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 177.603424][ T5902] gs_usb 7-1:0.0: Configuring for 142 interfaces [ 177.660051][ T5902] gs_usb 7-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 177.661001][ T7251] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.705955][ T5902] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 177.798720][ T5902] usb 7-1: USB disconnect, device number 10 [ 177.835474][ T5866] pwc: recv_control_msg error -71 req 02 val 2b00 [ 177.844144][ T5866] pwc: recv_control_msg error -71 req 02 val 2700 [ 177.863669][ T5866] pwc: recv_control_msg error -71 req 02 val 2c00 [ 177.879562][ T5866] pwc: recv_control_msg error -71 req 04 val 1000 [ 177.887295][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 177.897201][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 177.906594][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 177.930049][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 177.942693][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 177.964060][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 177.987517][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 178.007646][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 178.014431][ T5820] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 178.033020][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 178.052439][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 178.077225][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 178.094482][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 178.101738][ T5866] pwc: Registered as video103. [ 178.114040][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 178.148230][ T5866] usb 6-1: USB disconnect, device number 12 [ 178.173409][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 178.189819][ T5820] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 178.208574][ T5820] usb 3-1: config 0 has no interface number 0 [ 178.225627][ T5820] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.254425][ T5820] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 178.282410][ T5820] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.313322][ T5820] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.334736][ T5820] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.375878][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.401485][ T5820] usb 3-1: config 0 descriptor?? [ 178.421484][ T5820] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 178.794418][ T7284] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 178.802446][ T7284] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 179.155903][ T29] audit: type=1400 audit(1739846525.301:444): avc: denied { create } for pid=7276 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.259167][ T5820] usb 3-1: USB disconnect, device number 18 [ 179.265498][ T29] audit: type=1400 audit(1739846525.321:445): avc: denied { write } for pid=7276 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 179.271878][ T5820] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 179.785278][ T7299] SELinux: l%6 |OΏ (7299) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 180.211859][ T5903] usb 8-1: unable to get BOS descriptor or descriptor too short [ 180.228287][ T5903] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 180.248388][ T5903] usb 8-1: can't read configurations, error -71 [ 180.303384][ T5866] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 180.488290][ T29] audit: type=1400 audit(1739846526.771:446): avc: denied { setopt } for pid=7300 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 180.497984][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 180.535638][ T5866] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.549980][ T5866] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.558883][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.787308][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 180.793346][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 180.799345][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 180.822250][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.833455][ T5866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.953802][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.043143][ T7307] FAULT_INJECTION: forcing a failure. [ 181.043143][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 181.056321][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.6.367 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 181.056342][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.056353][ T7307] Call Trace: [ 181.056358][ T7307] [ 181.056364][ T7307] dump_stack_lvl+0x16c/0x1f0 [ 181.056388][ T7307] should_fail_ex+0x50a/0x650 [ 181.056412][ T7307] ? fs_reclaim_acquire+0xae/0x150 [ 181.056437][ T7307] should_failslab+0xc2/0x120 [ 181.056456][ T7307] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 181.056474][ T7307] ? irqentry_exit+0x3b/0x90 [ 181.056492][ T7307] ? getname_flags.part.0+0x4c/0x550 [ 181.056517][ T7307] getname_flags.part.0+0x4c/0x550 [ 181.056541][ T7307] getname_flags+0x93/0xf0 [ 181.056566][ T7307] user_path_at+0x24/0x60 [ 181.056581][ T7307] __x64_sys_mount+0x1fd/0x310 [ 181.056601][ T7307] ? __pfx___x64_sys_mount+0x10/0x10 [ 181.056626][ T7307] do_syscall_64+0xcd/0x250 [ 181.056653][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.056676][ T7307] RIP: 0033:0x7f1da2f8cde9 [ 181.056689][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.056705][ T7307] RSP: 002b:00007f1da3e03038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.056722][ T7307] RAX: ffffffffffffffda RBX: 00007f1da31a6160 RCX: 00007f1da2f8cde9 [ 181.056732][ T7307] RDX: 00004000000000c0 RSI: 0000400000000000 RDI: 0000400000000100 [ 181.056742][ T7307] RBP: 00007f1da3e03090 R08: 0000000000000000 R09: 0000000000000000 [ 181.056752][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.056762][ T7307] R13: 0000000000000000 R14: 00007f1da31a6160 R15: 00007ffcf9833bb8 [ 181.056783][ T7307] [ 181.240674][ T5866] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.250028][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.262985][ T5866] usb 5-1: config 0 descriptor?? [ 181.470947][ T5866] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.501971][ T29] audit: type=1400 audit(1739846527.831:447): avc: denied { listen } for pid=7310 comm="syz.7.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.474125][ T5903] usb 5-1: USB disconnect, device number 21 [ 182.477301][ T29] audit: type=1400 audit(1739846528.761:448): avc: denied { accept } for pid=7310 comm="syz.7.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.882081][ T5903] usblp0: removed [ 183.348244][ T5866] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 183.446508][ T7330] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 183.454301][ T7330] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 183.751187][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.768294][ T5866] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 184.013343][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.035483][ T5866] usb 7-1: config 0 descriptor?? [ 184.049253][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 184.261827][ T7324] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 184.487767][ T7349] netlink: 'syz.6.371': attribute type 10 has an invalid length. [ 184.778872][ T7324] bond0: (slave wlan1): Releasing backup interface [ 184.990071][ T7353] SELinux: syz.7.380 (7353) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.258674][ T7349] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 185.879561][ T7349] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.901483][ T7353] bridge1: entered promiscuous mode [ 186.049702][ T5866] pwc: send_video_command error -71 [ 186.068186][ T5866] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 186.092907][ T5866] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 186.193439][ T5866] usb 7-1: USB disconnect, device number 11 [ 187.113403][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 187.499576][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 187.559520][ T9] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.574618][ T9] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 187.590644][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.614621][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.624902][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.762040][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.792952][ T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 188.354900][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.364605][ T9] usb 8-1: config 0 descriptor?? [ 188.598317][ T9] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 188.683275][ T7398] SELinux: security_context_str_to_sid () failed with errno=-22 [ 189.142718][ T9] usb 8-1: USB disconnect, device number 9 [ 189.150658][ T9] usblp0: removed [ 189.453204][ T5826] Bluetooth: hci4: link tx timeout [ 189.458756][ T5826] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 189.470925][ T5826] Bluetooth: hci4: link tx timeout [ 189.476196][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.484730][ T5826] Bluetooth: hci4: link tx timeout [ 189.489910][ T5826] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 189.497654][ T5826] Bluetooth: hci4: link tx timeout [ 189.502829][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.512701][ T5826] Bluetooth: hci4: link tx timeout [ 189.517944][ T5826] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 189.525716][ T5826] Bluetooth: hci4: link tx timeout [ 189.530877][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.538667][ T5826] Bluetooth: hci4: link tx timeout [ 189.545181][ T5826] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 189.606822][ T5826] Bluetooth: hci4: link tx timeout [ 189.648189][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.790886][ T7422] autofs: Unknown parameter 'keyring' [ 191.360420][ T29] audit: type=1400 audit(1739846537.131:449): avc: denied { write } for pid=7417 comm="syz.6.397" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.445198][ T29] audit: type=1326 audit(1739846537.771:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.7.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f774098cde9 code=0x0 [ 191.473351][ T5867] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 191.569393][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 192.136480][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.157943][ T5867] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.171570][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.202736][ T5867] usb 5-1: config 0 descriptor?? [ 192.223158][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 192.622702][ T7435] SELinux: l%6 |OΏ (7435) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 193.186539][ T7420] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 193.245127][ T7420] bridge_slave_0: left allmulticast mode [ 193.251946][ T7420] bridge_slave_0: left promiscuous mode [ 193.286655][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.311306][ T7420] bridge_slave_1: left allmulticast mode [ 193.333910][ T7420] bridge_slave_1: left promiscuous mode [ 193.369631][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.418451][ T7420] bond0: (slave bond_slave_0): Releasing backup interface [ 193.462817][ T7436] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 193.546299][ T7420] bond0: (slave bond_slave_1): Releasing backup interface [ 193.591933][ T7444] random: crng reseeded on system resumption [ 193.636872][ T7420] team0: Port device team_slave_0 removed [ 193.644517][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 193.696858][ T7420] team0: Port device team_slave_1 removed [ 193.703217][ T7420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.756104][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.799678][ T7420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.823904][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.897087][ T7436] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 193.936466][ T7436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 193.958024][ T5867] pwc: recv_control_msg error -71 req 02 val 2b00 [ 193.973624][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.979909][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.019265][ T5867] pwc: recv_control_msg error -71 req 02 val 2700 [ 194.040395][ T5867] pwc: recv_control_msg error -71 req 02 val 2c00 [ 194.062476][ T5867] pwc: recv_control_msg error -71 req 04 val 1000 [ 194.077329][ T5867] pwc: recv_control_msg error -71 req 04 val 1300 [ 194.102623][ T5867] pwc: recv_control_msg error -71 req 04 val 1400 [ 194.123552][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 194.138682][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 194.163568][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 194.193365][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 194.223183][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 194.239654][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 194.253564][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.266075][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.293609][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.307217][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.331956][ T5867] pwc: Registered as video103. [ 194.344121][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 194.363381][ T5820] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 194.379856][ T5867] usb 5-1: USB disconnect, device number 22 [ 194.533332][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 194.632011][ T7452] SELinux: l%6 |OΏ (7452) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 195.113793][ T5820] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 195.122175][ T5820] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 195.143411][ T5820] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 195.159637][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.228226][ T5820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.258905][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.376393][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 195.603567][ T5820] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 195.625517][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.680079][ T5820] usb 3-1: config 0 descriptor?? [ 196.062430][ T7464] program syz.6.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.072885][ T7464] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 196.335351][ T5820] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 196.416352][ T7465] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 196.424192][ T7465] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 196.710364][ T5820] usb 3-1: USB disconnect, device number 19 [ 196.742696][ T5820] usblp0: removed [ 196.980743][ T29] audit: type=1400 audit(1739846543.311:451): avc: denied { getopt } for pid=7472 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.085281][ T29] audit: type=1400 audit(1739846543.411:452): avc: denied { watch watch_reads } for pid=7472 comm="syz.4.412" path="/87" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 197.088853][ T7478] befs: (nullb0): No write support. Marking filesystem read-only [ 197.117948][ T7478] befs: (nullb0): invalid magic header [ 197.291466][ T29] audit: type=1400 audit(1739846543.621:453): avc: denied { bind } for pid=7466 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.256012][ T7491] random: crng reseeded on system resumption [ 199.288322][ T7504] fuse: Bad value for 'fd' [ 199.298411][ T7504] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 200.513489][ T5902] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 200.669156][ T7516] Cannot find set identified by id 0 to match [ 200.923677][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 200.952375][ T5902] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.960889][ T5902] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.008748][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.021450][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.031249][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.041827][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.056068][ T5902] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.172095][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.202347][ T5902] usb 5-1: config 0 descriptor?? [ 201.748369][ T5902] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.936383][ T5902] usb 5-1: USB disconnect, device number 23 [ 201.952063][ T5902] usblp0: removed [ 202.107148][ T7529] syz.6.428 uses obsolete (PF_INET,SOCK_PACKET) [ 202.157676][ T29] audit: type=1400 audit(1739846548.491:454): avc: denied { read } for pid=7528 comm="syz.6.428" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 202.192084][ T29] audit: type=1400 audit(1739846548.511:455): avc: denied { open } for pid=7528 comm="syz.6.428" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 202.247813][ T29] audit: type=1400 audit(1739846548.511:456): avc: denied { ioctl } for pid=7528 comm="syz.6.428" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 202.733444][ T5820] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 202.755601][ T7538] random: crng reseeded on system resumption [ 202.885139][ T7540] autofs: Unknown parameter 'keyring' [ 202.953516][ T29] audit: type=1400 audit(1739846549.231:457): avc: denied { ioctl } for pid=7535 comm="syz.4.431" path="socket:[18363]" dev="sockfs" ino=18363 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.341432][ T7544] autofs: Unknown parameter 'keyring' [ 204.155263][ T7552] fuse: Bad value for 'fd' [ 204.164640][ T7552] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 208.772291][ T5820] usb 7-1: unable to get BOS descriptor or descriptor too short [ 208.784219][ T5820] usb 7-1: unable to read config index 0 descriptor/start: -32 [ 208.791786][ T5820] usb 7-1: chopping to 0 config(s) [ 208.809120][ T5820] usb 7-1: can't read configurations, error -32 [ 208.914226][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 208.943918][ T5820] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 210.113711][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 210.135221][ T8] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 210.163588][ T8] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 210.207032][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 210.257233][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.313733][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.456304][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.469683][ T8] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 210.478867][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.488351][ T8] usb 6-1: config 0 descriptor?? [ 210.521256][ T7602] befs: (nullb0): No write support. Marking filesystem read-only [ 210.532479][ T7602] befs: (nullb0): invalid magic header [ 210.593587][ T7603] fuse: Bad value for 'fd' [ 210.601736][ T7603] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 210.806333][ T29] audit: type=1326 audit(1739846556.921:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.2.446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffac898cde9 code=0x0 [ 210.808220][ T8] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 210.887025][ T8] usb 6-1: USB disconnect, device number 13 [ 210.919128][ T8] usblp0: removed [ 211.503510][ T5820] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 211.523509][ T5834] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 211.753362][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 211.756654][ T5820] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.772739][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.783562][ T5834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 212.374952][ T5820] usb 7-1: Product: syz [ 212.384367][ T5820] usb 7-1: Manufacturer: syz [ 212.386616][ T5834] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 212.391191][ T5820] usb 7-1: SerialNumber: syz [ 212.398336][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.411182][ T5834] usb 8-1: Product: syz [ 212.422871][ T5820] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.423822][ T5834] usb 8-1: Manufacturer: syz [ 212.437908][ T5834] usb 8-1: SerialNumber: syz [ 212.445515][ T5834] usb 8-1: config 0 descriptor?? [ 212.452927][ T8] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.943749][ T5834] gs_usb 8-1:0.0: Couldn't get device config: (err=-71) [ 212.977597][ T5834] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 213.094526][ T5834] usb 8-1: USB disconnect, device number 10 [ 213.314206][ T7627] syz.5.454: attempt to access beyond end of device [ 213.314206][ T7627] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 213.343843][ T7627] syz.5.454: attempt to access beyond end of device [ 213.343843][ T7627] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 213.374369][ T7627] Mount JFS Failure: -5 [ 213.674044][ T7607] random: crng reseeded on system resumption [ 214.719063][ T8] usb 7-1: Service connection timeout for: 256 [ 214.725414][ T8] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 214.779852][ T8] ath9k_htc: Failed to initialize the device [ 214.795419][ T8] usb 7-1: ath9k_htc: USB layer deinitialized [ 215.326696][ T7649] fuse: Bad value for 'fd' [ 215.547902][ T5820] usb 7-1: USB disconnect, device number 14 [ 215.879119][ T29] audit: type=1400 audit(1739846562.211:459): avc: denied { create } for pid=7657 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.768169][ T7666] SELinux: syz.7.465 (7666) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 216.787407][ T7666] bridge2: entered promiscuous mode [ 216.910697][ T29] audit: type=1400 audit(1739846562.241:460): avc: denied { connect } for pid=7657 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.931686][ T29] audit: type=1400 audit(1739846562.241:461): avc: denied { setopt } for pid=7657 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.952646][ T29] audit: type=1400 audit(1739846562.241:462): avc: denied { bind } for pid=7657 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.196045][ T29] audit: type=1400 audit(1739846562.241:463): avc: denied { write } for pid=7657 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.398461][ T5820] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 217.653488][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 217.673982][ T5820] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 217.683378][ T5820] usb 7-1: can't read configurations, error -61 [ 217.883401][ T5820] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 218.643400][ T5867] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.663883][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 218.681458][ T5820] usb 7-1: device descriptor read/all, error -71 [ 218.693224][ T5820] usb usb7-port1: attempt power cycle [ 219.063189][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.077838][ T5867] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.451467][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.517162][ T5867] usb 5-1: config 0 descriptor?? [ 219.561028][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 219.964025][ T7676] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 219.994346][ T7676] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 220.002532][ T7676] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 220.941037][ T5867] pwc: recv_control_msg error -71 req 02 val 2b00 [ 220.973482][ T7710] SELinux: syz.6.479 (7710) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 221.002672][ T5867] pwc: recv_control_msg error -71 req 02 val 2700 [ 221.036583][ T5867] pwc: recv_control_msg error -71 req 02 val 2c00 [ 221.202328][ T7710] bridge1: entered promiscuous mode [ 221.272900][ T5867] pwc: recv_control_msg error -71 req 04 val 1000 [ 221.295930][ T5867] pwc: recv_control_msg error -71 req 04 val 1300 [ 221.309958][ T5867] pwc: recv_control_msg error -71 req 04 val 1400 [ 221.320012][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 221.332112][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 221.342083][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 221.353016][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 221.412439][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 221.419193][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 221.433955][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 221.441250][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.483341][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.500602][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 221.548479][ T5867] pwc: Registered as video103. [ 221.560217][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 221.631873][ T5867] usb 5-1: USB disconnect, device number 24 [ 221.743198][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.481'. [ 224.071902][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.7.488'. [ 224.073278][ T29] audit: type=1400 audit(1739846570.401:464): avc: denied { name_bind } for pid=7745 comm="syz.7.488" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 224.132413][ T29] audit: type=1400 audit(1739846570.461:465): avc: denied { read write } for pid=7745 comm="syz.7.488" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 224.191559][ T29] audit: type=1400 audit(1739846570.461:466): avc: denied { open } for pid=7745 comm="syz.7.488" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 224.222731][ T29] audit: type=1400 audit(1739846570.511:467): avc: denied { ioctl } for pid=7745 comm="syz.7.488" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 224.507433][ T7751] SELinux: l%6 |OΏ (7751) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 224.526767][ T7751] bridge2: entered promiscuous mode [ 225.353534][ T5834] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 225.608063][ T29] audit: type=1326 audit(1739846571.851:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.5.494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2084b8cde9 code=0x0 [ 225.608813][ T5834] usb 7-1: Using ep0 maxpacket: 8 [ 225.838930][ T5834] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 225.842601][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.495'. [ 225.867915][ T5834] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.899536][ T7770] FAULT_INJECTION: forcing a failure. [ 225.899536][ T7770] name failslab, interval 1, probability 0, space 0, times 0 [ 225.917625][ T7770] CPU: 1 UID: 0 PID: 7770 Comm: syz.2.495 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 225.917652][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 225.917663][ T7770] Call Trace: [ 225.917668][ T7770] [ 225.917674][ T7770] dump_stack_lvl+0x16c/0x1f0 [ 225.917699][ T7770] should_fail_ex+0x50a/0x650 [ 225.917732][ T7770] should_failslab+0xc2/0x120 [ 225.917751][ T7770] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 225.917771][ T7770] ? skb_clone+0x190/0x3f0 [ 225.917797][ T7770] skb_clone+0x190/0x3f0 [ 225.917821][ T7770] netlink_deliver_tap+0xabd/0xd30 [ 225.917846][ T7770] netlink_unicast+0x5e1/0x7f0 [ 225.917870][ T7770] ? __pfx_netlink_unicast+0x10/0x10 [ 225.917897][ T7770] netlink_sendmsg+0x8b8/0xd70 [ 225.917922][ T7770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.917952][ T7770] ____sys_sendmsg+0xaaf/0xc90 [ 225.917968][ T7770] ? copy_msghdr_from_user+0x10b/0x160 [ 225.917991][ T7770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.918020][ T7770] ___sys_sendmsg+0x135/0x1e0 [ 225.918044][ T7770] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.918076][ T7770] ? __pfx_lock_release+0x10/0x10 [ 225.918099][ T7770] ? trace_lock_acquire+0x14e/0x1f0 [ 225.918126][ T7770] ? __fget_files+0x206/0x3a0 [ 225.918150][ T7770] __sys_sendmsg+0x16e/0x220 [ 225.918172][ T7770] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.918211][ T7770] do_syscall_64+0xcd/0x250 [ 225.918233][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.918255][ T7770] RIP: 0033:0x7ffac898cde9 [ 225.918270][ T7770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.918286][ T7770] RSP: 002b:00007ffac98d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.918303][ T7770] RAX: ffffffffffffffda RBX: 00007ffac8ba5fa0 RCX: 00007ffac898cde9 [ 225.918313][ T7770] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 225.918323][ T7770] RBP: 00007ffac98d1090 R08: 0000000000000000 R09: 0000000000000000 [ 225.918333][ T7770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.918343][ T7770] R13: 0000000000000000 R14: 00007ffac8ba5fa0 R15: 00007ffc1fe434d8 [ 225.918366][ T7770] [ 225.919005][ T5834] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 226.160552][ T5834] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.196176][ T5834] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 226.215460][ T5834] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.235218][ T5834] usb 7-1: string descriptor 0 read error: -22 [ 226.241714][ T5834] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.275242][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.467438][ T5834] adutux 7-1:168.0: interrupt endpoints not found [ 226.495132][ T7773] tty tty30: ldisc open failed (-12), clearing slot 29 [ 226.785118][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 226.807449][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 227.833308][ T5834] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 227.963371][ T5834] usb 8-1: device descriptor read/64, error -71 [ 228.093379][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 228.359341][ T5834] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 228.363543][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 228.373587][ T8] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 228.382855][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.394754][ T8] usb 6-1: config 0 descriptor?? [ 228.407715][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 228.533317][ T5834] usb 8-1: device descriptor read/64, error -71 [ 228.643596][ T5834] usb usb8-port1: attempt power cycle [ 228.865825][ T45] usb 7-1: USB disconnect, device number 18 [ 229.013469][ T5834] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 229.083946][ T5834] usb 8-1: device descriptor read/8, error -71 [ 229.122674][ T29] audit: type=1400 audit(1739846575.451:469): avc: denied { read } for pid=7802 comm="syz.4.505" path="socket:[19456]" dev="sockfs" ino=19456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.333427][ T5834] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 229.354881][ T5834] usb 8-1: device descriptor read/8, error -71 [ 229.463546][ T45] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 229.475249][ T5834] usb usb8-port1: unable to enumerate USB device [ 229.668109][ T45] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.689612][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.697711][ T45] usb 7-1: Product: syz [ 229.701922][ T45] usb 7-1: Manufacturer: syz [ 229.706677][ T45] usb 7-1: SerialNumber: syz [ 229.715088][ T45] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 229.732723][ T5834] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 229.774947][ T8] gspca_sunplus: reg_w_riv err -110 [ 229.780512][ T8] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 230.071784][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.509'. [ 230.093516][ T29] audit: type=1400 audit(1739846576.421:470): avc: denied { accept } for pid=7813 comm="syz.7.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.239607][ T7805] random: crng reseeded on system resumption [ 230.403836][ T45] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 230.563367][ T8] usb 7-1: USB disconnect, device number 19 [ 230.566590][ T45] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 230.578570][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.593528][ T45] usb 8-1: config 0 descriptor?? [ 230.600522][ T45] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 230.777611][ T5902] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 230.870954][ T5867] usb 6-1: USB disconnect, device number 14 [ 230.963385][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 230.969903][ T5902] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 230.978543][ T5902] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 230.987444][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.000752][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.010497][ T5834] usb 7-1: Service connection timeout for: 256 [ 231.017835][ T5834] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 231.026628][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.037785][ T5834] ath9k_htc: Failed to initialize the device [ 231.044090][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.044115][ T8] usb 7-1: ath9k_htc: USB layer deinitialized [ 231.057264][ T5902] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.072380][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.095955][ T5902] usb 3-1: config 0 descriptor?? [ 231.233410][ T5867] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 231.305690][ T5902] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 231.393585][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 231.583071][ T5867] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 231.616573][ T5820] usb 3-1: USB disconnect, device number 20 [ 231.644797][ T5820] usblp0: removed [ 231.651999][ T5867] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.694084][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.725694][ T5867] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 231.767396][ T5867] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.773911][ T45] usb 8-1: USB disconnect, device number 15 [ 231.795093][ T5867] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 231.805904][ T5867] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.829256][ T5867] usb 6-1: string descriptor 0 read error: -22 [ 231.836032][ T5867] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.846279][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.856729][ T5867] adutux 6-1:168.0: interrupt endpoints not found [ 231.913380][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 231.920660][ T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.929824][ T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.938745][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.948204][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.958027][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.970634][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.983996][ T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.993200][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.003044][ T8] usb 5-1: config 0 descriptor?? [ 232.356808][ T8] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 232.369070][ T8] usb 5-1: USB disconnect, device number 25 [ 232.380228][ T8] usblp0: removed [ 232.844438][ T29] audit: type=1400 audit(1739846579.181:471): avc: denied { map } for pid=7842 comm="syz.2.518" path="socket:[20115]" dev="sockfs" ino=20115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 233.025616][ T29] audit: type=1400 audit(1739846579.201:472): avc: denied { listen } for pid=7842 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.045958][ T29] audit: type=1400 audit(1739846579.201:473): avc: denied { append } for pid=7842 comm="syz.2.518" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 233.193360][ T5867] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 233.323344][ T5867] usb 3-1: device descriptor read/64, error -71 [ 233.491049][ T29] audit: type=1400 audit(1739846579.821:474): avc: denied { read } for pid=7852 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 233.518965][ T29] audit: type=1400 audit(1739846579.851:475): avc: denied { create } for pid=7852 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 233.546820][ T29] audit: type=1400 audit(1739846579.881:476): avc: denied { nlmsg_write } for pid=7852 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 233.573781][ T5867] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 233.644569][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 233.652606][ T30] Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 233.668835][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.755626][ T30] task:kworker/u8:2 state:D stack:24416 pid:35 tgid:35 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 233.756699][ T5867] usb 3-1: device descriptor read/64, error -71 [ 233.767953][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 233.789303][ T30] Call Trace: [ 233.792636][ T30] [ 233.795720][ T30] __schedule+0xf43/0x5890 [ 233.800165][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 233.805954][ T30] ? hlock_class+0x4e/0x130 [ 233.810489][ T30] ? __pfx___schedule+0x10/0x10 [ 233.815393][ T30] ? schedule+0x298/0x350 [ 233.819746][ T30] ? __pfx_lock_release+0x10/0x10 [ 233.824793][ T30] ? __pfx_lock_release+0x10/0x10 [ 233.829827][ T30] ? lock_acquire+0x2f/0xb0 [ 233.836745][ T30] ? schedule+0x1fd/0x350 [ 233.841118][ T30] schedule+0xe7/0x350 [ 233.845277][ T30] bit_wait+0x15/0xe0 [ 233.849263][ T30] __wait_on_bit+0x62/0x180 [ 233.853911][ T30] ? __pfx_bit_wait+0x10/0x10 [ 233.858632][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 233.864780][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 233.871111][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 233.879662][ T30] netfs_retry_writes+0x2fa/0x1a00 [ 233.883722][ T5867] usb usb3-port1: attempt power cycle [ 233.887433][ T30] ? add_lock_to_list+0x17d/0x390 [ 233.898412][ T30] ? lockdep_unlock+0x11a/0x290 [ 233.903342][ T30] ? __lock_acquire+0x2077/0x3c40 [ 233.908389][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 233.917777][ T30] ? rcu_is_watching+0x12/0xc0 [ 233.924895][ T30] netfs_write_collection_worker+0x23de/0x37c0 [ 233.931127][ T30] process_one_work+0x9c5/0x1ba0 [ 233.939305][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 233.947537][ T30] ? __pfx_process_one_work+0x10/0x10 [ 233.953007][ T30] ? assign_work+0x1a0/0x250 [ 233.960396][ T30] worker_thread+0x6c8/0xf00 [ 233.969063][ T30] ? __pfx_worker_thread+0x10/0x10 [ 233.976755][ T8] usb 6-1: USB disconnect, device number 15 [ 233.988853][ T30] kthread+0x3af/0x750 [ 233.993346][ T30] ? __pfx_kthread+0x10/0x10 [ 233.997946][ T30] ? lock_acquire+0x2f/0xb0 [ 234.002439][ T30] ? __pfx_kthread+0x10/0x10 [ 234.007073][ T30] ret_from_fork+0x45/0x80 [ 234.011499][ T30] ? __pfx_kthread+0x10/0x10 [ 234.016188][ T30] ret_from_fork_asm+0x1a/0x30 [ 234.021064][ T30] [ 234.025244][ T30] [ 234.025244][ T30] Showing all locks held in the system: [ 234.033009][ T30] 3 locks held by kworker/0:0/8: [ 234.038315][ T30] #0: ffff888144ac6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 234.050108][ T30] #1: ffffc900000d7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 234.061339][ T30] #2: ffff888028c8d190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 234.070271][ T30] 1 lock held by khungtaskd/30: [ 234.075662][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 234.085555][ T30] 2 locks held by kworker/u8:2/35: [ 234.091715][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 234.102916][ T30] #1: ffffc90000ab7d18 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 234.116959][ T30] 3 locks held by kworker/u8:3/55: [ 234.122051][ T30] #0: ffff888140556148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 234.132748][ T30] #1: ffffc9000120fd18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 234.144348][ T30] #2: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 234.154435][ T30] 2 locks held by getty/5575: [ 234.159105][ T30] #0: ffff88803182d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 234.168850][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 234.179011][ T30] 6 locks held by kworker/0:5/5867: [ 234.184754][ T30] #0: ffff888144ac6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 234.196345][ T30] #1: ffffc9000456fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 234.207620][ T30] #2: ffff888145f4d190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 234.216528][ T30] #3: ffff888145f98510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x27ec/0x4e10 [ 234.226514][ T30] #4: ffff888145b42c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2815/0x4e10 [ 234.236267][ T30] #5: ffffffff8f4e8610 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1cd0 [ 234.246750][ T30] 5 locks held by kworker/u8:9/6097: [ 234.252024][ T30] 3 locks held by syz.0.82/6204: [ 234.253332][ T5867] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 234.256976][ T30] #0: ffff888062818420 (sb_writers#17){.+.+}-{0:0}, at: do_pwritev+0x1b1/0x270 [ 234.273787][ T30] #1: ffff888061f88148 (&sb->s_type->i_mutex_key#22){++++}-{4:4}, at: netfs_start_io_write+0x59/0x80 [ 234.284967][ T30] #2: ffff888061f88500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_begin_writethrough+0x64/0x1c0 [ 234.293721][ T5867] usb 3-1: device descriptor read/8, error -71 [ 234.296055][ T30] 2 locks held by syz.3.108/6311: [ 234.306648][ T30] #0: ffff8880628180e0 (&type->s_umount_key#75){++++}-{4:4}, at: super_lock+0x31a/0x3f0 [ 234.316545][ T30] #1: ffff888062818948 (&s->s_sync_lock){+.+.}-{4:4}, at: sync_inodes_sb+0x232/0xa50 [ 234.326242][ T30] 3 locks held by syz.6.520/7849: [ 234.331250][ T30] #0: ffff88807c26ee08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 234.341844][ T30] #1: ffff88807c58c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x5bf/0xd90 [ 234.351595][ T30] #2: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 234.364875][ T30] [ 234.367207][ T30] ============================================= [ 234.367207][ T30] [ 234.377744][ T30] NMI backtrace for cpu 1 [ 234.377756][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 234.377775][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 234.377785][ T30] Call Trace: [ 234.377791][ T30] [ 234.377797][ T30] dump_stack_lvl+0x116/0x1f0 [ 234.377820][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 234.377846][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 234.377868][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 234.377895][ T30] watchdog+0xf62/0x12b0 [ 234.377923][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.377946][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.377965][ T30] ? __kthread_parkme+0x148/0x220 [ 234.377983][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.378008][ T30] kthread+0x3af/0x750 [ 234.378027][ T30] ? __pfx_kthread+0x10/0x10 [ 234.378051][ T30] ? __pfx_kthread+0x10/0x10 [ 234.378071][ T30] ret_from_fork+0x45/0x80 [ 234.378092][ T30] ? __pfx_kthread+0x10/0x10 [ 234.378112][ T30] ret_from_fork_asm+0x1a/0x30 [ 234.378141][ T30] [ 234.378147][ T30] Sending NMI from CPU 1 to CPUs 0: [ 234.490894][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 234.492588][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 234.507560][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 234.518040][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 234.528083][ T30] Call Trace: [ 234.531351][ T30] [ 234.534266][ T30] dump_stack_lvl+0x3d/0x1f0 [ 234.538847][ T30] panic+0x71d/0x800 [ 234.542726][ T30] ? __pfx_panic+0x10/0x10 [ 234.547125][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 234.552485][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 234.558447][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 234.563804][ T30] ? watchdog+0xdcc/0x12b0 [ 234.568206][ T30] ? watchdog+0xdbf/0x12b0 [ 234.572609][ T30] watchdog+0xddd/0x12b0 [ 234.576842][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.581504][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.586686][ T30] ? __kthread_parkme+0x148/0x220 [ 234.591689][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.596354][ T30] kthread+0x3af/0x750 [ 234.600404][ T30] ? __pfx_kthread+0x10/0x10 [ 234.604979][ T30] ? __pfx_kthread+0x10/0x10 [ 234.609551][ T30] ret_from_fork+0x45/0x80 [ 234.613953][ T30] ? __pfx_kthread+0x10/0x10 [ 234.618524][ T30] ret_from_fork_asm+0x1a/0x30 [ 234.623277][ T30] [ 234.626471][ T30] Kernel Offset: disabled [ 234.630785][ T30] Rebooting in 86400 seconds..