last executing test programs: 9.223781862s ago: executing program 1 (id=946): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062bfcf16d80f935c598bd22b726964676500"], 0x4c}}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, &(0x7f00000000c0)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200fcff0000000000000000ffff00000000140006000600000095"], 0x40}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fcffffffe0000001000000000000000000000000ac1414140000000000000000000000004e200000000000000a0030"], 0xb8}}, 0x0) 9.214531831s ago: executing program 2 (id=947): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x164, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r6 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}], 0x2, 0x0, 0x1}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 9.209524547s ago: executing program 1 (id=948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000201fda2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000010850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) read(r5, &(0x7f0000000240)=""/235, 0xeb) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r7], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0xa040c4, &(0x7f00000003c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a90000709ffbe0083"], 0x0}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r9, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001c80)={0x0, 0x7}, &(0x7f0000004880)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@remote, 0x0, 0x0, 0x10, 0x0, [{@broadcast}]}}) fsopen(&(0x7f0000000040)='befs\x00', 0x1) 8.274029306s ago: executing program 3 (id=952): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000010c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101090, 0x0) r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) recvfrom(r9, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendto$inet(r9, &(0x7f0000000540)="e885", 0x2, 0x80, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') recvmmsg(r1, &(0x7f0000004dc0)=[{{&(0x7f00000048c0)=@hci, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=""/166, 0xa6}, 0x2}, {{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000001380)=""/255, 0xff}], 0x4, &(0x7f0000004980)=""/104, 0x68}, 0x7}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000001500)=""/190, 0xbe}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/231, 0xe7}], 0x7, &(0x7f0000004840)=""/88, 0x58}, 0xba62}, {{&(0x7f0000004c40)=@isdn, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004cc0)=""/163, 0xa3}], 0x1}, 0x7}], 0x4, 0x103, &(0x7f0000004ec0)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c000280040001"], 0x68}}, 0x0) 8.118239129s ago: executing program 0 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x2c}}, 0x0) 7.966858408s ago: executing program 0 (id=955): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x86783, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) 7.879354384s ago: executing program 2 (id=956): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000400, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x3, 0x104d, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x9a, 0x86, 0x11, 0x40, 0x856, 0xac26, 0x9b86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103b, 0x4, 0x6, 0x3, 0x20, 0xe6, [{{0x9, 0x4, 0x6f, 0x81, 0x7, 0x65, 0x4a, 0x5a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "21ce"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0xffff, 0x10, 0x75}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xc}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4, 0x24, 0x2, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x96}, @mdlm_detail={0x8, 0x24, 0x13, 0x3, "0d750e0a"}, @obex={0x5, 0x24, 0x15, 0x4e}]}], [{{0x9, 0x5, 0xd, 0x1d, 0x200, 0x40, 0xf4, 0xa8, [@generic={0xda, 0x8, "47e771d8171a8384f867ace7f2e8e80d851a9d461ca6ac4961bb9a366a9a81ec7b33c9cfaa006b4c16e141f49975567bcdbc2d812cf13d1ac8c82d9a48c4918bd07fcdee557de7523c6b485d9c926df21a81de9f923b5cb982c0695e97cda53d16730a0027246063abf8265f392c7f57def6b1a2a295dc3204153949ff2b8b7438f99ba3c4b7a7172b798b5adf69eb1979e4ffa91b7b55b928a827c20e517f7bfa6b71617ca30cc07ef3ead8c7c797f3e7d140b20270fa873b07b6ebac10e8f542f96c8ed51b25eb07828dd0c406730473942dc3166958bc"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xf9, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x8, 0x80, 0x80, [@generic={0xfc, 0x22, "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"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0xac, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xa}, @generic={0x56, 0xa, "9b128a84b2c46db2079bc5b909bd787cf572152aeeab417cfae6cbcc8578d35c1051e706cad76fb4a3824ccde43919e1fb3dc6bdfef18ad5f98a1198a935cd2efeb0ce9285be75bc933a9864070a214ee851a68c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x81, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x0, 0xfff}]}}, {{0x9, 0x5, 0x6, 0x9, 0x0, 0x1, 0x6, 0x2, [@generic={0xf9, 0x3, "b8e7bca764701a4801fb9b625e953f421d22fc336d1d5c94782c5eea99705ae1bc59548e24752a14d05e21b8a14c29dcae44d0f18193d55f81bb74ddddd4c0e501b77832556a08204a7c848439c7474cd88aa6a122149f060c33f189199279d42a836bce1cfc9ef2a8a93d06a208e3bdd65850c23029d6bb8ee9230fcb781b38fa45950a2b2b4e7bb6bb0a2721852c2d788223742146c83b7c212720aa8efe54dca9f49116ab568d25b5877528ad234419bd42a147e8c0577584cdb6203361b49f6ab06cc8cabc419c0a59e75d1489e4f4054db182348e8ca073e550e20f139b23fe3cf02ba508f30857ecae9b8c49577c0d8759cdc9f5"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x6, 0xf8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7}, @generic={0x99, 0x21, "66a3d25d01656227029f7b5c811110ab49c225b7916ca0a18c7dd9a20a7df7f4b15b9b056c9af2303c3cb676c1c2404d45a855f861c67d27fff7438859cfc9094c7ba392f5f731ef98fb0da9afd2f4a4262ffb3fe3ea0945a5240fe6ce4d3c19762378019489fb64cc1e2db9a48bf8cdcbaa022d28846ac0587cbc5852bf2fe695d2b12ac30de5666d0d0b1d6cb71460c8f22394ef119e"}]}}]}}, {{0x9, 0x4, 0xc8, 0x2, 0xa, 0xe5, 0x41, 0x92, 0x51, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x4d0, 0x5, '2Z\rv'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2b, 0x1, 0x92, 0x9, "89048785271b"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x10, 0x0, 'v'}]}, @hid_hid={0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x819}}], [{{0x9, 0x5, 0x2d16fe7dd703eadc, 0x0, 0x3f7, 0x25, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x1, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xd}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0xd, 0x26, 0xfa, [@generic={0xe8, 0xd, "e884181da0125c61a8bd617e4646dde90bca2754f4bd1f0a95a11d640794540d71b9f5e63dcd2488dff21eef757372bc653b2592cc4d5317e99508c3705b591cf82d2b0f6deb92ffe19daf768373e0e1852ce8f63f3366eecec1721f009d1241d330dd1057eafe80b57c6394401d4c43a1ff712ce0ac7fe88196fd4b6849e304fc50c184095ee0092d9737aad203c0ea96739d7c0b33fd8b834d2778a19458751ad7e9b1764e5f8f6aa63389b93d6f6b2aea438eca46789fdb05eb5f7f7375934f50f9f57c3e6970ace810446f55245d8b521583db2a0326f575932e8ffd34a3b9417e863611"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0xd2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x77, 0xab, 0x2, [@generic={0x14, 0x4, "de80562c312b13ff9e727ae67d42914b60eb"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x8, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8}, @generic={0x11, 0x3, "76e1b855f9cbf44a6116ee571d30d6"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x6, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x2, 0x1d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8}, @generic={0x100, 0x30, "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"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x6, 0x7, 0x13, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x46, 0x9}, @generic={0xd2, 0x20, "416ac0a46f4ed620dd3514dc5bf96041819b49cf0a7534a719ad1710be09a500bda28f4270dda45b4c7090f79bcc98927c3a226430fcffbd71e7524844032f5f66b23bb8d04a9d4f994ee0b22da9ab855487992a45d0f8b4c19e87b6ec8dbe1cf66f7ad6e30364a583ed6b2096fbe5f36fb95edd118dd813045a1e9f6781a42681606033498f01771ce8f8b655f574d63704fef116053b5df4726b7ff2888c9b362708bcb3f49261372eb78dc6ef4d974c22305a9bb229fb0cfb561c9f4b483ef6b203f2ea62caddee60646694865c54"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x0, 0xfb, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x92}]}}]}}, {{0x9, 0x4, 0xfb, 0x6, 0xe, 0x18, 0x76, 0x70, 0x1, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d872e550a6"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x3, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0xd8, 0x4, 0x800}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x9}, @dmm={0x7, 0x24, 0x14, 0x6, 0x4}, @acm={0x4, 0x24, 0x2, 0x6}]}], [{{0x9, 0x5, 0x2, 0xc, 0x10, 0x5, 0x9, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}, @generic={0xc9, 0x0, "ab88f57bcc8c587f67ee5d8d63cc332186f27ce3eae70171ae5ef98efa982002312d23d6f910c06747caed705d67c430f9f7ad12cc5c99b9db3d85f526e3f9b36867870e718d0bc0b8856beebb69427d4176dd710dbe63805fc2e83fafc9b53aa276d87a8c80b1311caa459d9f200988cb07e8f39677a9e3af291f3fcfdff30f7ad0783801360d1103a89e8d9d42bd35beaf914b2ce56d68f52d19366a1f939e9a6714800783105e4e7a74e0d4557de50157b79c42eb97d6970f359c82fbc573838f76c7f4955b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x2, 0x1, 0x5, [@generic={0xc3, 0x11, "4fe96890001247a7845fbf201aaec339cd1d8e07da4f7c35dbc53e890dc3389940e31de055121ff85fff108ea6115c5134298de443505af23d7d61f6b9ceea6617314b65ae909306f5a1e782b40a9e997b4c250b10c4e869577b580e4516ec9b30f8267eab7bd96e89a06c85ff8793471eadf8d76daef1ce18779de62dc1b3f5e197f0a0cd75b903d1ef9809d52733da2d28a69cb93e6b52c7c2baebe581da74c19e8983a664654f638c77611e53523e41488f26be617b1b6c5633d5ca96212c79"}, @generic={0x6e, 0xdd7f8654b08ed2f0, "8f21d90f604cf3240eb588edf2ae3cbf8b712771ea2ec8909e65eb640b71d43859d3368c64b886d8f5320a8a1482a8478873972a618abceee43decd5db5d200609550479df855295141d9e3d5419b4e7791d6731985c8b5f9e6a4b768ef744ca40e11664960c4f84531545f8"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x3e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x22, 0x200}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x8, 0x34, [@generic={0x51, 0x4, "53db25eb39ee78ea30f5c5911a968f7aa41a9903037e6f654974d486487f3bb5b24694b0679f17ceb7ea9be8ee2a140bc4ad364b8f00dfbc914ac840942d1781ee6208d41e8852b9b4679c668f117e"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x8f, 0x7f, 0x6, [@generic={0x45, 0x7, "d2b867f619bfc40fcef2b21cfd7456f56ffcba6e1dd50cfdefe3a11089fe7392d2ffb53e30b9a91c2f33236ed306ce72546bc759b7a80bfaf2e2fcae4200822fddc3bb"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x2, 0x7, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0x41, 0x8, [@generic={0x78, 0x4, "2f0ac7ca26a9c8ece7c6e0a2821a9d351a6caed8c53f2b410ea16f24709b70827232b8bc84a3f980cff7332f30f6014723f918de03d54ad78c24a94c70728dc3ebab3875f00c65794ffdcb815f4b40c209d41644404b20a94ee4dc7f332a8b15b00bd110ba7e0948ed24be29ee895b31fa6c7b415247"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xcf, 0x8f, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x8}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x2, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x6, 0xfc, 0x40, [@generic={0x55, 0x23, "fbabbf0835dd6bb1ed7f5ca46b849d49e3b93882c705208b5d82f3787da8aef2182845c9f98f8c8eb7fe2534a876d43eca3cc4c2c2bc1a6fde8a081d3e90c6d278f48bd4df99729f08a7ca7b78bb1baaf4a8ea"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x55, 0xd, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x3}, @generic={0x1c, 0x31, "7b10c0979597a6c8077f8d0a4b6cee619ae7bd401b65ee8fc521"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0xfe, 0x12, 0x3, [@generic={0xc, 0xa, "1c8c2443a52f92b7cd5a"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x1, 0x62, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x94, 0x3}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x8d, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}]}}, {{0x9, 0x4, 0x40, 0x4, 0x9, 0x26, 0x78, 0x54, 0xd, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x6, "", "e037"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x0, 0x3, "ad63eb3b"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "5736b625fe3c"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x101, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x14efd426b418935b}, @dmm={0x7, 0x24, 0x14, 0xdb, 0xd787}, @mdlm={0x15, 0x24, 0x12, 0x9b6}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @obex={0x5, 0x24, 0x15, 0x61b9}]}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc9, 0x7}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x48, 0x96, 0x3, [@generic={0x6, 0x11, "1bfb9076"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x7, 0x0, 0x8c, [@generic={0xb7, 0x7, "486a8570779a23a2b1fef97287c20651226f81cc4a66f11ec4dd6cc6679da2a07250410a920d1d210a1800dd8ceef458bec2480bd02b42f9ded5c843e205a3e1c5fdda1eb478646e9c6374ea7eed25f43ea552e4b870eb52e6555184aed62e5caa0580a7d1dcd01dd84c7174e78b954529f14c76e0310cfb3fbbdbf4da39baacd91860794b4d7981963d79ce7c8f32801cce117783d759a5c912c2bc8a6d20e17e9b02890f6fc80114fd2b1b754cacdaa66e638743"}, @generic={0x53, 0x31, "ef13f2459e3b552bce9cd9c7973a1748b4d7d4a5c63f779984fb829e189341b1b6630f34354aa5014ccbcef66ce9101053a769eb10ad809a4a67000782e01fe3cdb0e6d709d243456d5960a10124294d35"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2d, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x10}]}}, {{0x9, 0x5, 0x15c9b9b565de41b9, 0x10, 0x8, 0xd, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xd, 0x4, 0xe2, [@generic={0x27, 0x31, "19f82a37e4eeb92e87c857153374643d93a2576d896a82b4800f37fa6ae475bae0738f0fa6"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x3, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x64}, @generic={0xaf, 0xd, "6dd97074bf442ba10d583bbcce69111813bbdb8fc009007c7d98b17db305da325e33deccccbda7a45b8a5c80e195ac389f02be458a1c27f69e4a0d01b7de8dc01d630de2873fe4183778d4e46e72ccc25a22059b0f393114d22af34e5c09552b77135b40f6147703a8b35c48e420f5812cff179fe46c8ea3bb135a0a82605f1e532f45032486c4547bca89116d19ae6fff0d1e1926783e6f214cf9466b8ca756ef0e3b9bf4d031c4c5ec076bdd"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x40, 0x3, 0x6, [@generic={0x26, 0x1, "e2faf46a5937cd43ae32b751b3931127e1d23b86c4cdf0ac0a6a68feb47ee971529281b8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0xa0, 0x6, [@generic={0xb2, 0xb, "c1fc6c2d016ca46744e257b556584318c5316f8623794551cbe32e606ae550e85611ee6bb416df513aeccd8d3bf7063807f1f277edc88c0e5b68ca0dea091f04fc0529babb77440f08c77c663d115d5a6107f86a830782bd7952116667b6442ca7ae7738d8222f824b21b2a7254de2e201dbc1c1609f3976f3a5883396eb8df681fc8ea646f42abb2594ac2fd6230120f8ea398a01746109b43691c84ff228c3b18c04defb6df1e40a74bf88ca4e218c"}]}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x9, 0xd, 0x80, 0xff, 0x4}, 0xf3, &(0x7f0000000140)={0x5, 0xf, 0xf3, 0x6, [@generic={0x26, 0x10, 0x1, "693ac463e6b1d484a40eec35f4b1db923702abd0dee7060278ccb336b4f1b0ccdf6552"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0xbfe4, 0xf00, 0x0, [0x0, 0xffc0ff, 0xff00c0, 0xe7, 0x3f3f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0xe8, 0x5}, @generic={0x98, 0x10, 0x2, "7687ddc7f5d1760ed4e9fff1ee1de42214a3f459f1dc9fc6a40871c569ae9fcb8fc5828b3abc5d52046e106088757e194d0302e1969aa13961eb1d28fc04913aa3d15ffb28648916904076df69ad4323b4a7debaa5c8093e3ed57d54f388c43bb6e80537d5af43ba1a1f65f28d7532f7152a16b549b1ab8404ea4702d8aeb1a0d99c76067dedfb1ab123e882ac7aa0427944a620c6"}, @ptm_cap={0x3}]}, 0x4, [{0x8d, &(0x7f0000000240)=@string={0x8d, 0x3, "caf89e73b37ba398a13635e293e8d3061ba95265681f5a8a71436d29c964c364c934d43a2299ad95b356530d629aa925b5af05c41fb78ac374f7b2b1a56fe36fadd595ba5397a335ca844c722085ca412cfcbbbfa40e7219927f00c998109b745e22bf4d59916dcdc6639adb4456bc9d1614192c2d75de3e21f39d7fee46ad0b2e733a3f97c939f1d73bf2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0x96, &(0x7f0000001440)=@string={0x96, 0x3, "81bbb8ecf94b633b1bad0a2a49242703018e85dac462607f31b03a2302f3c387bedaf18ef58bad67c3732202ab7ef5ff461162904fa420d8c47a1365377dce46ca9da244b1cb38db6288a90f81b8508e0a8acb2b1485905b86d7b78e2ea4ff15a48c115eade8bc54254b54fb1a47869c1bc25c2d9b97410c343362d79a2c771d464522188799ae9953acfd364607608dea10205f"}}]}) syz_usb_disconnect(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) 7.828514765s ago: executing program 0 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0xae) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c47000"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) dup3(r5, r6, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001340)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@x86={0xc, 0x3, 0x7, 0x0, 0x19aa, 0x6, 0xa, 0x45, 0x0, 0x8, 0xff, 0x0, 0x0, 0x8, 0x7, 0x7, 0xfe, 0x8, 0xad, '\x00', 0x1, 0x5}) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000300)) 6.37795423s ago: executing program 3 (id=959): pipe2$9p(0x0, 0x88000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VT_DISALLOCATE(r1, 0x5608) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='dU|\xcbM\xe6\x91q\xe0\x05\xbes\xc0\xd2\xdb0}\xa6\xc4tly\xe0+\xb8~\xd9ymx\xa1\x06\xb4F\xf3Q:\xfem\xea\xed\xfc\x04\xf88\xe0\xa1&\xa8\xff\x10\xb3\xb2\x92N\f\x00!\xdbV\xc3\xca\r\x8c\xfb\x8esJ\xb3\x1bf\xce\v\x0e\xe3\xd5', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000001b1401000000000000000000080010"], 0x18}}, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) getitimer(0x0, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) 6.020383264s ago: executing program 0 (id=962): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) writev(r0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e21, 0x7ff, @private2, 0x2003}, 0x1c) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.440134832s ago: executing program 3 (id=963): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000886739cf44094938c91b0e168fdbf89f2f2fc0dfb70734caaa8dc0cb9c88e01ce5ef8610ffe4b63c9caf293f52c8e16bcabaff24c3596121d5de8c0c8438cf54427734b7e2d782c0c9cf9c0cde4b5a82fd0f9291a5dd5e72ad448138910fc7a19878e51cf1a3959081b14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000001c0)=0xb0000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x520, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x8, 0x6500, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x800000000000000, 0x9}) 5.183896162s ago: executing program 4 (id=964): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x164, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r6 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}], 0x2, 0x0, 0x1}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 4.196358872s ago: executing program 3 (id=965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup3(r3, r4, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000067000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="19df7ba2d7319f11a4c8cbc5"], 0x24}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000050, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x445c01) keyctl$chown(0x4, 0x0, 0x0, 0x0) setgroups(0x0, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0xaa481, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) kexec_load(0x6, 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000100)) 4.146827235s ago: executing program 1 (id=966): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x164, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r6 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}], 0x2, 0x0, 0x1}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 3.883992937s ago: executing program 2 (id=967): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x86783, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) 3.201795345s ago: executing program 2 (id=968): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x12, 0x2, 0x1, "b43d00", 0x30314142}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) unshare(0x400) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f00000000c0)={0x3, 0xffffbfff, @name="9f828ee4a7e433f6024003517b1d2027eb17ece5c6a5b77084bc240a80e027cd"}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) fcntl$setlease(r2, 0x400, 0x1) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)="b6ef4de066bedc882a0fd334195750decaeb73d2dff39eada3588e2d094d83b6a78f0597c9ea69e18ee7d02dff2f858e6c9564a0108c49b261720b", 0x3b}, {&(0x7f0000000480)="86f121cd1736e57c04bd9e49d727ab7ece5e4038e484546c0b72eafabee3645685b3becc291fce38732b25bde69d3d3f4bc2c808a34b3210d26864673a98d877b45c1ce9e89be2e78d186c7dc5aad5f130ee47d64ef80138d8edaa684fa5e92fd58f79d52a9704da055f3b8b380755e8ea48601ca60f894eba9006bcfc51fa55a19b6bbb93d9cc8e9085751a2d5304fbfd9a8e5325565442588914becfd6614a47ed7962c26a401b8f5c3bff9e3b163fb56c7795ed20953b8d7724cf660381", 0xbf}, {&(0x7f0000000340)="670480dc9b466bf3f8b1d1051809dea87b51639b9d3da6f32803054ebfd021ec4f1fafa446ed8a91cbfebff453a1b770cee31a712f3601e1b6ebb9a04fc557", 0x3f}], 0x3, 0x0, 0x0, 0x40085}, 0x4) gettid() link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2.931595049s ago: executing program 3 (id=970): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000012300)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) accept4$alg(r0, 0x0, 0x0, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) statx(r4, 0x0, 0x1000, 0x6000, &(0x7f0000000440)) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000080)={0x2, 0x8a26, 0x1}) readv(r5, &(0x7f00000000c0), 0x0) 2.621604146s ago: executing program 0 (id=971): syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') r4 = socket$inet(0x2, 0x1, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.615720775s ago: executing program 4 (id=972): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x6, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x0, @empty}}, 0xf4010000, 0x0, 0x0, 0x3, 0x51}, 0x9c) 2.491920164s ago: executing program 4 (id=973): r0 = openat$fb0(0xffffff9c, 0x0, 0x80080, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000380)={0x30, 0x140, 0x80, 0x78, 0xfffffff8, 0x0, 0x1, 0x1, {0x3}, {0x4, 0x6, 0x1}, {0x1, 0xcd3, 0x1}, {0xa}, 0x1, 0x10, 0x4, 0x2, 0x1, 0xffffff81, 0x81, 0x0, 0x7, 0xffd7, 0xb, 0x10001, 0x10, 0x100, 0x0, 0x6}) socket$netlink(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x8, 0x8, 0x34324152, 0x0, 0x1, [{0x0, 0x2fd5}, {0x10}, {}, {}, {0x0, 0x8}, {}, {0xfffffffd}, {0x400000}], 0x0, 0x4, 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x7d}, 0xffffffffffffffff, "e2410fc7932741e6b70674a7718a57756107b3972fd02b2504ecf28f14ee12cc", 0x192, 0x0, 0x2, 0x7}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000006440)={0x18, 0x14, 0x1, 0x70bd28, 0x0, "", [@typed={0x8, 0x11c, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0d", 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01"]) 1.884862332s ago: executing program 1 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e", 0x11}, {0x0}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r9, 0xc0bc5310, &(0x7f0000000280)) 1.884438724s ago: executing program 2 (id=975): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x8, 0x0, 0x216}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2102}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000380)={0x6, [[0x8, 0x0, 0x80800], [0x2], [0xfb, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x1]], '\x00', [{0xfffffffe, 0x401}, {}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {}, {}, {0x8001}]}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1.733414256s ago: executing program 3 (id=976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0xc1000004, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250200000000000000010902"], 0x0) syz_open_procfs(r1, &(0x7f0000000180)='maps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.678719711s ago: executing program 0 (id=977): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x40}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4}) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6881c1, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x100, r8}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) 1.395965858s ago: executing program 2 (id=978): pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000c543, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x509340, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) keyctl$update(0x2, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0x67) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x8000000000000001, 0x400400) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ef, 0xb}) 868.903451ms ago: executing program 4 (id=979): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x164, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r6 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}], 0x2, 0x0, 0x1}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 205.503845ms ago: executing program 1 (id=980): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000400, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 0s ago: executing program 4 (id=981): r0 = userfaultfd(0x801) (async, rerun: 32) unshare(0x22020400) (async, rerun: 32) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) (async) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/75, 0x4b}], 0x1) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x9}) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800010400000000000000029078ac1e0001ac1414bb1600907800000000"], 0x0) (rerun: 32) kernel console output (not intermixed with test programs): nlock+0x13c/0x8b0 [ 247.179786][ T5828] ? device_add+0x3e7/0xbf0 [ 247.184320][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 247.189271][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 247.194156][ T5828] ? get_device_parent+0x165/0x410 [ 247.199288][ T5828] device_add+0x4e5/0xbf0 [ 247.203633][ T5828] hci_conn_add_sysfs+0xe8/0x200 [ 247.208586][ T5828] le_conn_complete_evt+0xc9f/0x12e0 [ 247.213892][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 247.219625][ T5828] ? __mutex_unlock_slowpath+0x21e/0x790 [ 247.225268][ T5828] ? __pfx___mutex_lock+0x10/0x10 [ 247.230300][ T5828] ? skb_pull_data+0x112/0x230 [ 247.235073][ T5828] hci_le_enh_conn_complete_evt+0x185/0x420 [ 247.241001][ T5828] hci_event_packet+0xa55/0x1540 [ 247.245963][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 247.251275][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 247.256750][ T5828] ? do_raw_spin_unlock+0x13c/0x8b0 [ 247.261971][ T5828] ? rcu_is_watching+0x15/0xb0 [ 247.266838][ T5828] ? hci_send_to_monitor+0xd8/0x7f0 [ 247.272054][ T5828] ? kcov_remote_start+0x97/0x7d0 [ 247.277124][ T5828] hci_rx_work+0x3f3/0xdb0 [ 247.281554][ T5828] ? process_scheduled_works+0x976/0x1840 [ 247.287297][ T5828] process_scheduled_works+0xa66/0x1840 [ 247.292887][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 247.298893][ T5828] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 247.304451][ T5828] ? assign_work+0x364/0x3d0 [ 247.309097][ T5828] worker_thread+0x870/0xd30 [ 247.313727][ T5828] ? __kthread_parkme+0x169/0x1d0 [ 247.318773][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 247.323899][ T5828] kthread+0x2f0/0x390 [ 247.327983][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 247.333279][ T5828] ? __pfx_kthread+0x10/0x10 [ 247.337902][ T5828] ret_from_fork+0x4b/0x80 [ 247.342340][ T5828] ? __pfx_kthread+0x10/0x10 [ 247.346957][ T5828] ret_from_fork_asm+0x1a/0x30 [ 247.351772][ T5828] [ 247.355405][ T5828] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.369660][ T5828] Bluetooth: hci0: failed to register connection device [ 248.773086][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.144447][ T5899] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 249.182595][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.217692][ T5899] usb 1-1: Product: syz [ 249.395726][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 249.690179][ T5899] usb 1-1: config 0 descriptor?? [ 249.700861][ T5899] usb 1-1: can't set config #0, error -71 [ 249.713500][ T5899] usb 1-1: USB disconnect, device number 13 [ 250.463847][ T7879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.525438][ T7879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.860623][ T7879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.897381][ T7879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.914491][ T7879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.923566][ T7879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.948295][ T7879] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.981465][ T7879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.994557][ T7879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 252.006146][ T7879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 252.014499][ T7879] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.130732][ T7905] block nbd2: shutting down sockets [ 252.206569][ T7911] Process accounting resumed [ 252.642254][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 252.702318][ T5869] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 252.937678][ T5869] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 252.937894][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.938024][ T5869] usb 2-1: Product: syz [ 252.938172][ T5869] usb 2-1: Manufacturer: syz [ 252.938319][ T5869] usb 2-1: SerialNumber: syz [ 252.981367][ T5868] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 253.073683][ T5869] usb 2-1: config 0 descriptor?? [ 253.289970][ T7920] libceph: resolve '..0' (ret=-3): failed [ 253.311379][ T5869] usb 2-1: USB disconnect, device number 8 [ 253.409436][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 253.429154][ T5868] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.448528][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.465281][ T5868] usb 5-1: Product: syz [ 253.471826][ T5868] usb 5-1: Manufacturer: syz [ 253.476667][ T5868] usb 5-1: SerialNumber: syz [ 253.485618][ T5868] r8152-cfgselector 5-1: Unknown version 0x0000 [ 253.499142][ T5868] r8152-cfgselector 5-1: config 0 descriptor?? [ 253.947591][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 253.954024][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 254.017434][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 254.023831][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 254.474760][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 254.706891][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 255.484800][ T5869] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 255.534369][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.540462][ T5870] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.540836][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.564565][ T7939] binder: 7938:7939 ioctl c018620c 20000740 returned -22 [ 256.520325][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 256.526428][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 256.532852][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 256.539305][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 257.207833][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 257.390616][ T7965] block nbd4: shutting down sockets [ 258.482586][ T7973] bond0: (slave bond_slave_0): Releasing backup interface [ 258.519811][ T7978] FAULT_INJECTION: forcing a failure. [ 258.519811][ T7978] name failslab, interval 1, probability 0, space 0, times 0 [ 258.598676][ T7978] CPU: 1 UID: 0 PID: 7978 Comm: syz.4.550 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 258.609027][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 258.619114][ T7978] Call Trace: [ 258.622426][ T7978] [ 258.625381][ T7978] dump_stack_lvl+0x241/0x360 [ 258.630093][ T7978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.635334][ T7978] ? __pfx__printk+0x10/0x10 [ 258.639958][ T7978] ? __asan_memcpy+0x40/0x70 [ 258.644583][ T7978] ? __pfx___might_resched+0x10/0x10 [ 258.649889][ T7978] ? dynamic_dname+0x141/0x1b0 [ 258.654689][ T7978] should_fail_ex+0x3b0/0x4e0 [ 258.659405][ T7978] should_failslab+0xac/0x100 [ 258.664098][ T7978] __kmalloc_noprof+0xdd/0x4c0 [ 258.668882][ T7978] ? tomoyo_encode+0x26f/0x540 [ 258.673647][ T7978] tomoyo_encode+0x26f/0x540 [ 258.678240][ T7978] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 258.683804][ T7978] tomoyo_realpath_from_path+0x59e/0x5e0 [ 258.689447][ T7978] tomoyo_path_number_perm+0x236/0x860 [ 258.694922][ T7978] ? tomoyo_path_number_perm+0x206/0x860 [ 258.700592][ T7978] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 258.706326][ T7978] ? trace_contention_end+0x3c/0x120 [ 258.711626][ T7978] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.717618][ T7978] ? preempt_count_add+0x93/0x190 [ 258.722669][ T7978] ? fput+0x21b/0x290 [ 258.726673][ T7978] ? __fget_files+0x2a/0x410 [ 258.731280][ T7978] ? __fget_files+0x2a/0x410 [ 258.735882][ T7978] security_file_ioctl+0xc6/0x2a0 [ 258.740919][ T7978] __se_sys_ioctl+0x46/0x170 [ 258.745521][ T7978] do_syscall_64+0xf3/0x230 [ 258.750039][ T7978] ? clear_bhb_loop+0x35/0x90 [ 258.754730][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.760630][ T7978] RIP: 0033:0x7fe423185d29 [ 258.765057][ T7978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.784682][ T7978] RSP: 002b:00007fe423f75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.793130][ T7978] RAX: ffffffffffffffda RBX: 00007fe423375fa0 RCX: 00007fe423185d29 [ 258.801104][ T7978] RDX: 0000000020000040 RSI: 000000004020aeb2 RDI: 0000000000000004 [ 258.809078][ T7978] RBP: 00007fe423f75090 R08: 0000000000000000 R09: 0000000000000000 [ 258.817050][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.825022][ T7978] R13: 0000000000000000 R14: 00007fe423375fa0 R15: 00007fff90758c18 [ 258.833039][ T7978] [ 258.843272][ T7978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.314445][ T7973] bond0: (slave bond_slave_1): Releasing backup interface [ 259.351753][ T7973] team0: Port device team_slave_0 removed [ 259.381537][ T7973] team0: Port device team_slave_1 removed [ 259.400546][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.408579][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.586626][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.266819][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.371830][ T7982] netlink: 136 bytes leftover after parsing attributes in process `syz.0.551'. [ 260.394259][ T7982] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 261.414925][ T8019] FAULT_INJECTION: forcing a failure. [ 261.414925][ T8019] name failslab, interval 1, probability 0, space 0, times 0 [ 261.427921][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.3.558 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 261.438187][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.448257][ T8019] Call Trace: [ 261.451551][ T8019] [ 261.454496][ T8019] dump_stack_lvl+0x241/0x360 [ 261.459205][ T8019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.464426][ T8019] ? __pfx__printk+0x10/0x10 [ 261.469041][ T8019] ? __pfx___might_resched+0x10/0x10 [ 261.474350][ T8019] should_fail_ex+0x3b0/0x4e0 [ 261.479064][ T8019] should_failslab+0xac/0x100 [ 261.483768][ T8019] __kmalloc_noprof+0xdd/0x4c0 [ 261.488550][ T8019] ? tomoyo_encode+0x26f/0x540 [ 261.493330][ T8019] tomoyo_encode+0x26f/0x540 [ 261.498033][ T8019] tomoyo_realpath_from_path+0x59e/0x5e0 [ 261.503694][ T8019] tomoyo_mount_permission+0x3bf/0xb80 [ 261.509194][ T8019] ? stack_depot_save_flags+0x34b/0x940 [ 261.514763][ T8019] ? tomoyo_mount_permission+0x298/0xb80 [ 261.520422][ T8019] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 261.526464][ T8019] ? hook_sb_mount+0x10b/0x420 [ 261.531423][ T8019] ? security_sb_mount+0x22/0x2f0 [ 261.536467][ T8019] security_sb_mount+0xe0/0x2f0 [ 261.541434][ T8019] path_mount+0xb9/0xfa0 [ 261.545712][ T8019] ? kmem_cache_free+0x195/0x410 [ 261.550671][ T8019] ? user_path_at+0x44/0x60 [ 261.555204][ T8019] __se_sys_mount+0x2d6/0x3c0 [ 261.559904][ T8019] ? __pfx___se_sys_mount+0x10/0x10 [ 261.565129][ T8019] ? rcu_is_watching+0x15/0xb0 [ 261.569933][ T8019] ? rcu_is_watching+0x15/0xb0 [ 261.574720][ T8019] ? __x64_sys_mount+0x20/0xc0 [ 261.579512][ T8019] do_syscall_64+0xf3/0x230 [ 261.584048][ T8019] ? clear_bhb_loop+0x35/0x90 [ 261.588759][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.594679][ T8019] RIP: 0033:0x7f236d185d29 [ 261.599115][ T8019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.618755][ T8019] RSP: 002b:00007f236df1b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.627219][ T8019] RAX: ffffffffffffffda RBX: 00007f236d376160 RCX: 00007f236d185d29 [ 261.635215][ T8019] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000040 [ 261.643216][ T8019] RBP: 00007f236df1b090 R08: 0000000020000140 R09: 0000000000000000 [ 261.651212][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.659197][ T8019] R13: 0000000000000000 R14: 00007f236d376160 R15: 00007ffcf5d387a8 [ 261.667182][ T8019] [ 261.670586][ T8019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.796982][ T8026] block nbd2: shutting down sockets [ 262.000213][ T8034] netlink: 216 bytes leftover after parsing attributes in process `syz.4.563'. [ 262.125839][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 262.271936][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.563'. [ 262.804537][ T5899] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 262.978372][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.997314][ T5899] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 263.008778][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.017347][ T5899] usb 4-1: Product: syz [ 263.021706][ T5899] usb 4-1: Manufacturer: syz [ 263.028778][ T5899] usb 4-1: SerialNumber: syz [ 263.036385][ T5899] usb 4-1: config 0 descriptor?? [ 263.049435][ T5899] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 263.057425][ T5899] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 263.114156][ T5869] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 263.170793][ T8057] syz.0.571 (8057) used greatest stack depth: 18736 bytes left [ 263.274867][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.296985][ T5869] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.319007][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.360317][ T5869] usb 2-1: config 0 descriptor?? [ 263.564125][ T1206] usb 4-1: USB disconnect, device number 15 [ 263.586503][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 263.606897][ T5869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.630853][ T5869] usb 2-1: USB disconnect, device number 10 [ 263.838500][ T8065] kvm: pic: non byte write [ 263.844322][ T8065] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1848658612 (3697317224 ns) > initial count (4324882 ns). Using initial count to start timer. [ 264.076451][ T29] audit: type=1326 audit(1737446545.888:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29f85d29 code=0x7fc00000 [ 264.109525][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 264.221759][ T5870] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.341839][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 264.350829][ T5869] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.361389][ T8079] block nbd0: shutting down sockets [ 264.364372][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.374361][ T5869] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 264.386268][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.829744][ T5869] usb 2-1: config 0 descriptor?? [ 266.007284][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 266.013793][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.024917][ T5869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 266.049840][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 266.156672][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.578'. [ 266.172412][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 266.320057][ T5870] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 266.504366][ T5869] usb 2-1: USB disconnect, device number 11 [ 266.527038][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.556965][ T5870] usb 3-1: config 0 descriptor?? [ 266.877677][ T5913] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 266.938473][ C1] blk_print_req_error: 271 callbacks suppressed [ 266.938497][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.938641][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.944812][ C1] buffer_io_error: 270 callbacks suppressed [ 266.944825][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 266.953983][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 266.955048][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.994131][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 267.002066][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.011258][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 267.019182][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.028464][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 267.036337][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.045538][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 267.053445][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.062652][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 267.070533][ C0] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.079681][ C0] Buffer I/O error on dev loop6, logical block 7, async page read [ 267.090164][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.099414][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.107347][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.116517][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 267.131576][ T8100] ldm_validate_partition_table(): Disk read failed. [ 267.140723][ T8100] Dev loop6: unable to read RDB block 0 [ 267.150469][ T8100] loop6: unable to read partition table [ 267.156429][ T8100] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 267.177761][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 267.186367][ T5913] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.196520][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.204674][ T5913] usb 5-1: Product: syz [ 267.208932][ T5913] usb 5-1: Manufacturer: syz [ 267.213587][ T5913] usb 5-1: SerialNumber: syz [ 267.221295][ T5913] r8152-cfgselector 5-1: Unknown version 0x0000 [ 267.227744][ T5913] r8152-cfgselector 5-1: config 0 descriptor?? [ 267.472156][ T5870] Bluetooth: Can't get version to change to load ram patch err [ 267.481433][ T5870] Bluetooth: Loading sysconfig file failed [ 267.488869][ T5870] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 267.497824][ T5870] usb 3-1: USB disconnect, device number 9 [ 267.640194][ T5913] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 267.685292][ T1206] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 267.700616][ T5195] ldm_validate_partition_table(): Disk read failed. [ 267.710196][ T5195] Dev loop6: unable to read RDB block 0 [ 267.719510][ T5195] loop6: unable to read partition table [ 267.839999][ T1206] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 267.851378][ T1206] usb 2-1: config 0 has no interface number 0 [ 267.861882][ T1206] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 267.879796][ T1206] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 267.880260][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 267.889257][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.901129][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.586'. [ 268.349600][ T1206] usb 2-1: Product: syz [ 268.353837][ T1206] usb 2-1: Manufacturer: syz [ 268.358546][ T1206] usb 2-1: SerialNumber: syz [ 268.431307][ T1206] usb 2-1: config 0 descriptor?? [ 268.665670][ T5913] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 268.687398][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 268.915842][ T8133] affs: No valid root block on device nbd2 [ 269.722320][ T8134] 9pnet_fd: Insufficient options for proto=fd [ 269.733899][ T8136] block nbd4: shutting down sockets [ 269.741643][ T1206] esd_usb 2-1:0.45: sending version message failed [ 269.749370][ T1206] esd_usb 2-1:0.45: probe with driver esd_usb failed with error -8 [ 269.763048][ T1206] usb 2-1: USB disconnect, device number 12 [ 270.701590][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 270.754814][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.791851][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 270.821767][ T5870] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 270.846830][ T5913] usb 1-1: config 1 has an invalid interface number: 2 but max is 0 [ 271.231333][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.281804][ T5913] usb 1-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 271.801205][ T5870] usb 4-1: Product: syz [ 271.805458][ T5913] usb 1-1: config 1 has no interface number 0 [ 271.831144][ T5870] usb 4-1: Manufacturer: syz [ 271.835816][ T5870] usb 4-1: SerialNumber: syz [ 271.861135][ T5913] usb 1-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.902221][ T5870] usb 4-1: config 0 descriptor?? [ 271.907389][ T5913] usb 1-1: config 1 interface 2 has no altsetting 0 [ 271.916618][ T5870] usb 4-1: can't set config #0, error -71 [ 271.951051][ T5913] usb 1-1: string descriptor 0 read error: -71 [ 271.970478][ T5870] usb 4-1: USB disconnect, device number 16 [ 272.127881][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 272.145929][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.172534][ T5913] usb 1-1: can't set config #1, error -71 [ 272.179258][ T5913] usb 1-1: USB disconnect, device number 14 [ 272.279703][ C1] blk_print_req_error: 271 callbacks suppressed [ 272.279725][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.290738][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.295233][ C1] buffer_io_error: 270 callbacks suppressed [ 272.295248][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.304439][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 272.326114][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.335341][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 272.343244][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.352448][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 272.360332][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.369575][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 272.377488][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.386698][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 272.394598][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.403818][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 272.411736][ C0] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.421028][ C0] Buffer I/O error on dev loop6, logical block 7, async page read [ 272.429457][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.438716][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.446669][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.455852][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 272.913477][ T8170] ldm_validate_partition_table(): Disk read failed. [ 273.035867][ T8170] Dev loop6: unable to read RDB block 0 [ 273.060028][ T8170] loop6: unable to read partition table [ 273.097071][ T8188] netlink: 676 bytes leftover after parsing attributes in process `syz.4.601'. [ 273.106239][ T8188] netlink: 676 bytes leftover after parsing attributes in process `syz.4.601'. [ 273.108018][ T8170] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 273.175238][ T5195] ldm_validate_partition_table(): Disk read failed. [ 273.185079][ T5195] Dev loop6: unable to read RDB block 0 [ 273.204723][ T5195] loop6: unable to read partition table [ 274.268733][ T5870] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 274.420922][ T8202] netlink: 136 bytes leftover after parsing attributes in process `syz.0.606'. [ 274.430077][ T8202] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 274.528486][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 274.535653][ T5870] usb 4-1: config 1 interface 0 altsetting 253 bulk endpoint 0x82 has invalid maxpacket 8 [ 274.625292][ T5870] usb 4-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1023 [ 274.635686][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 274.647156][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.664822][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.682946][ T5870] usb 4-1: Product: syz [ 274.687185][ T5870] usb 4-1: Manufacturer: syz [ 274.692913][ T5870] usb 4-1: SerialNumber: syz [ 274.692979][ T8217] vlan0: entered promiscuous mode [ 274.703664][ T8192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.707564][ T8217] team0: Port device vlan0 added [ 274.713670][ T8192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.798400][ T5868] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 274.806280][ T5869] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 274.983351][ T5868] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 275.023580][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.109142][ T5868] usb 2-1: config 0 has no interface number 0 [ 275.143800][ T8222] IPVS: length: 4096 != 8 [ 275.189718][ T5869] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 275.201896][ T5870] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 275.207881][ T5868] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.210529][ T8222] netlink: 2104 bytes leftover after parsing attributes in process `syz.2.611'. [ 275.224508][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.234205][ T5870] usb 4-1: USB disconnect, device number 17 [ 275.241480][ T5868] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.255451][ T5869] usb 5-1: Product: syz [ 275.267926][ T5868] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 275.279599][ T5869] usb 5-1: Manufacturer: syz [ 275.284281][ T5869] usb 5-1: SerialNumber: syz [ 275.295342][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.305852][ T5869] usb 5-1: config 0 descriptor?? [ 275.314592][ T5869] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 275.321534][ T5869] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 275.330661][ T5868] usb 2-1: config 0 descriptor?? [ 275.482030][ T8225] mmap: syz.0.612 (8225): VmData 37597184 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 275.979241][ T5868] uclogic 0003:256C:006D.0008: No inputs registered, leaving [ 275.998160][ T5868] uclogic 0003:256C:006D.0008: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 276.026521][ T8232] ldm_validate_partition_table(): Disk read failed. [ 276.046685][ T8232] Dev loop6: unable to read RDB block 0 [ 276.068989][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.095985][ T8213] batadv_slave_1: entered promiscuous mode [ 276.104443][ T8232] loop6: unable to read partition table [ 276.113020][ T5870] usb 2-1: USB disconnect, device number 13 [ 276.122633][ T8232] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 276.223319][ T1206] usb 5-1: USB disconnect, device number 17 [ 276.425106][ T5195] ldm_validate_partition_table(): Disk read failed. [ 276.435718][ T5195] Dev loop6: unable to read RDB block 0 [ 276.445660][ T5195] loop6: unable to read partition table [ 276.617125][ T5868] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 276.826964][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 276.935066][ T5868] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 277.080945][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.092581][ T5868] usb 3-1: Product: syz [ 277.099719][ T5868] usb 3-1: Manufacturer: syz [ 277.104588][ T5868] usb 3-1: SerialNumber: syz [ 277.121612][ T5868] r8152-cfgselector 3-1: Unknown version 0x0000 [ 277.139016][ T5868] r8152-cfgselector 3-1: config 0 descriptor?? [ 277.259796][ T8246] binder: BINDER_SET_CONTEXT_MGR already set [ 277.265923][ T8246] binder: 8245:8246 ioctl 40046207 0 returned -16 [ 277.639796][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 277.658349][ T8258] netlink: 136 bytes leftover after parsing attributes in process `syz.3.621'. [ 277.679643][ T8258] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 277.864943][ T8] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 277.878242][ T8] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 16 [ 277.890924][ T8] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 32 [ 277.903323][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 277.916538][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.926666][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.934976][ T8] usb 1-1: Product: syz [ 277.939984][ T8] usb 1-1: Manufacturer: syz [ 277.944845][ T8] usb 1-1: SerialNumber: syz [ 277.959409][ T8248] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 277.968125][ T8248] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 278.195756][ T8] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 278.217741][ T8] usb 1-1: USB disconnect, device number 15 [ 278.786753][ T5830] Bluetooth: hci0: unexpected event for opcode 0x2036 [ 278.959331][ T8266] sp0: Synchronizing with TNC [ 279.188220][ C0] blk_print_req_error: 552 callbacks suppressed [ 279.188244][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.188335][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.194588][ C0] buffer_io_error: 550 callbacks suppressed [ 279.194603][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.203748][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 279.215631][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.244028][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 279.251902][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.261102][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 279.268979][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.278259][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 279.286240][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.295418][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 279.303270][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.312469][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 279.320409][ C0] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.329621][ C0] Buffer I/O error on dev loop6, logical block 7, async page read [ 279.358441][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.367641][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.375591][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.384784][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 279.398274][ T5870] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 279.478972][ T8275] ldm_validate_partition_table(): Disk read failed. [ 279.494986][ T8275] Dev loop6: unable to read RDB block 0 [ 279.497999][ T8275] loop6: unable to read partition table [ 279.498127][ T8275] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 279.541497][ T1206] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 279.672290][ T1206] usb 4-1: device descriptor read/64, error -71 [ 280.013087][ T5195] ldm_validate_partition_table(): Disk read failed. [ 280.023134][ T5195] Dev loop6: unable to read RDB block 0 [ 280.036274][ T5195] loop6: unable to read partition table [ 280.124446][ T5899] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 280.181987][ T1206] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 280.501935][ T8299] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 280.511609][ T8299] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 280.636560][ T1206] usb 4-1: device descriptor read/64, error -71 [ 280.805628][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 280.809076][ T5899] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 280.809108][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.809129][ T5899] usb 1-1: Product: syz [ 280.809143][ T5899] usb 1-1: Manufacturer: syz [ 280.809158][ T5899] usb 1-1: SerialNumber: syz [ 280.814672][ T1206] usb usb4-port1: attempt power cycle [ 280.992859][ T5899] r8152-cfgselector 1-1: Unknown version 0x0000 [ 281.009115][ T8306] netlink: 136 bytes leftover after parsing attributes in process `syz.2.635'. [ 281.022566][ T5899] r8152-cfgselector 1-1: config 0 descriptor?? [ 281.033738][ T8306] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 281.163867][ T1206] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 281.307290][ T1206] usb 4-1: device descriptor read/8, error -71 [ 281.663331][ T1206] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.773967][ T1206] usb 4-1: device descriptor read/8, error -71 [ 281.883504][ T1206] usb usb4-port1: unable to enumerate USB device [ 281.917069][ T8329] ldm_validate_partition_table(): Disk read failed. [ 281.928842][ T1206] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 281.938703][ T8329] Dev loop6: unable to read RDB block 0 [ 281.950571][ T8329] loop6: unable to read partition table [ 281.956599][ T8329] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 282.043101][ T5869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 282.193146][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 282.199729][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.210926][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.221353][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.234601][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 282.244734][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.345072][ T5869] usb 2-1: config 0 descriptor?? [ 282.884380][ T5195] ldm_validate_partition_table(): Disk read failed. [ 282.917595][ T5195] Dev loop6: unable to read RDB block 0 [ 282.931759][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.950647][ T5195] loop6: unable to read partition table [ 282.958311][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.976878][ T8347] FAULT_INJECTION: forcing a failure. [ 282.976878][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 282.991978][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.008060][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.018020][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.025787][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.033545][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.040862][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: syz.0.648 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 283.051142][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 283.061230][ T8347] Call Trace: [ 283.064536][ T8347] [ 283.067492][ T8347] dump_stack_lvl+0x241/0x360 [ 283.072214][ T8347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.077451][ T8347] ? __pfx__printk+0x10/0x10 [ 283.082100][ T8347] ? __pfx___might_resched+0x10/0x10 [ 283.087425][ T8347] should_fail_ex+0x3b0/0x4e0 [ 283.092144][ T8347] should_failslab+0xac/0x100 [ 283.096861][ T8347] __kmalloc_noprof+0xdd/0x4c0 [ 283.101660][ T8347] ? kstrtouint_from_user+0x128/0x190 [ 283.107085][ T8347] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 283.112843][ T8347] tomoyo_realpath_from_path+0xcf/0x5e0 [ 283.118431][ T8347] tomoyo_path_number_perm+0x236/0x860 [ 283.123933][ T8347] ? tomoyo_path_number_perm+0x206/0x860 [ 283.129602][ T8347] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 283.135278][ T8347] ? trace_contention_end+0x3c/0x120 [ 283.140605][ T8347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 283.146637][ T8347] ? preempt_count_add+0x93/0x190 [ 283.151731][ T8347] ? fput+0x21b/0x290 [ 283.155734][ T8347] ? __fget_files+0x2a/0x410 [ 283.160337][ T8347] ? __fget_files+0x2a/0x410 [ 283.165026][ T8347] security_file_ioctl+0xc6/0x2a0 [ 283.170064][ T8347] __se_sys_ioctl+0x46/0x170 [ 283.174676][ T8347] do_syscall_64+0xf3/0x230 [ 283.179205][ T8347] ? clear_bhb_loop+0x35/0x90 [ 283.183939][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.189867][ T8347] RIP: 0033:0x7fcb29f85d29 [ 283.194295][ T8347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.213916][ T8347] RSP: 002b:00007fcb2ae71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.222347][ T8347] RAX: ffffffffffffffda RBX: 00007fcb2a175fa0 RCX: 00007fcb29f85d29 [ 283.230327][ T8347] RDX: 0000000020001900 RSI: 000000000000541c RDI: 0000000000000004 [ 283.238299][ T8347] RBP: 00007fcb2ae71090 R08: 0000000000000000 R09: 0000000000000000 [ 283.246275][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.254251][ T8347] R13: 0000000000000000 R14: 00007fcb2a175fa0 R15: 00007ffded983be8 [ 283.262237][ T8347] [ 283.266661][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.274422][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.282017][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.289491][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.296813][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.304128][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.311373][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.328329][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.349568][ T5869] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 283.368620][ T8347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.386517][ T5869] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 283.410019][ T5869] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 283.432542][ T5899] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 283.445016][ T5869] microsoft 0003:045E:07DA.0009: no inputs found [ 283.479714][ T5869] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 283.502644][ T5869] usb 2-1: USB disconnect, device number 14 [ 283.565290][ T8360] FAULT_INJECTION: forcing a failure. [ 283.565290][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 283.592628][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.0.653 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 283.602941][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 283.613031][ T8360] Call Trace: [ 283.616338][ T8360] [ 283.619289][ T8360] dump_stack_lvl+0x241/0x360 [ 283.624011][ T8360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.629246][ T8360] ? __pfx__printk+0x10/0x10 [ 283.633869][ T8360] ? format_decode+0x1c3/0xca0 [ 283.638669][ T8360] ? __ip_dev_find+0x497/0x570 [ 283.643463][ T8360] should_fail_ex+0x3b0/0x4e0 [ 283.648178][ T8360] should_failslab+0xac/0x100 [ 283.652883][ T8360] ? dst_alloc+0x12b/0x190 [ 283.657597][ T8360] kmem_cache_alloc_noprof+0x70/0x380 [ 283.663005][ T8360] dst_alloc+0x12b/0x190 [ 283.667281][ T8360] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 283.673389][ T8360] ip_route_output_key_hash+0x193/0x2b0 [ 283.678952][ T8360] ? ip_route_output_key_hash+0xdf/0x2b0 [ 283.684604][ T8360] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 283.690681][ T8360] ? lock_release+0xbf/0xa30 [ 283.695279][ T8360] ? ip_cmsg_send+0x9cd/0xa80 [ 283.699972][ T8360] ip_route_output_flow+0x29/0x140 [ 283.705098][ T8360] udp_sendmsg+0x1732/0x2a50 [ 283.709708][ T8360] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 283.715283][ T8360] ? __pfx_udp_sendmsg+0x10/0x10 [ 283.720241][ T8360] ? rcu_is_watching+0x15/0xb0 [ 283.725017][ T8360] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.731351][ T8360] ? lock_release+0xbf/0xa30 [ 283.735949][ T8360] ? rcu_is_watching+0x15/0xb0 [ 283.740739][ T8360] ? inet_sendmsg+0x16b/0x390 [ 283.745429][ T8360] ? do_raw_spin_unlock+0x13c/0x8b0 [ 283.750644][ T8360] ? inet_sendmsg+0x2ba/0x390 [ 283.755333][ T8360] __sock_sendmsg+0x1a6/0x270 [ 283.760020][ T8360] ____sys_sendmsg+0x52a/0x7e0 [ 283.764803][ T8360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.770102][ T8360] ? __fget_files+0x2a/0x410 [ 283.774696][ T8360] ? __fget_files+0x2a/0x410 [ 283.779289][ T8360] __sys_sendmmsg+0x36a/0x720 [ 283.783985][ T8360] ? __pfx___might_resched+0x10/0x10 [ 283.789277][ T8360] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.794484][ T8360] ? rcu_is_watching+0x15/0xb0 [ 283.799262][ T8360] ? __pfx_lock_release+0x10/0x10 [ 283.804289][ T8360] ? kstrtouint_from_user+0x128/0x190 [ 283.809675][ T8360] ? rcu_is_watching+0x15/0xb0 [ 283.814463][ T8360] ? lock_release+0xbf/0xa30 [ 283.819059][ T8360] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 283.824700][ T8360] ? trace_contention_end+0x3c/0x120 [ 283.829994][ T8360] ? __pfx_lock_release+0x10/0x10 [ 283.835025][ T8360] ? preempt_count_add+0x93/0x190 [ 283.840060][ T8360] ? sb_end_write+0xe9/0x1c0 [ 283.844664][ T8360] ? vfs_write+0x730/0xd30 [ 283.849090][ T8360] ? __mutex_unlock_slowpath+0x21e/0x790 [ 283.854739][ T8360] ? ksys_write+0x251/0x2b0 [ 283.859249][ T8360] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.865586][ T8360] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.871918][ T8360] ? rcu_is_watching+0x15/0xb0 [ 283.876698][ T8360] __x64_sys_sendmmsg+0xa0/0xb0 [ 283.881565][ T8360] do_syscall_64+0xf3/0x230 [ 283.886078][ T8360] ? clear_bhb_loop+0x35/0x90 [ 283.890769][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.896673][ T8360] RIP: 0033:0x7fcb29f85d29 [ 283.901087][ T8360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.920697][ T8360] RSP: 002b:00007fcb2ae71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 283.929128][ T8360] RAX: ffffffffffffffda RBX: 00007fcb2a175fa0 RCX: 00007fcb29f85d29 [ 283.937104][ T8360] RDX: 0000000000000002 RSI: 0000000020000e00 RDI: 0000000000000003 [ 283.945095][ T8360] RBP: 00007fcb2ae71090 R08: 0000000000000000 R09: 0000000000000000 [ 283.953131][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.961116][ T8360] R13: 0000000000000000 R14: 00007fcb2a175fa0 R15: 00007ffded983be8 [ 283.969096][ T8360] [ 283.972250][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.003715][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 284.012863][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.026297][ T5899] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.097932][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 284.582268][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.599240][ T5899] usb 5-1: config 0 descriptor?? [ 284.818005][ T5899] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 284.882497][ C0] blk_print_req_error: 552 callbacks suppressed [ 284.882519][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.898186][ C0] buffer_io_error: 550 callbacks suppressed [ 284.898203][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.912124][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.921347][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 284.929292][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.938534][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 284.946513][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.955820][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 284.963746][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.972991][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 284.980893][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.990154][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 284.998088][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.007344][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 285.015274][ C0] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.024592][ C0] Buffer I/O error on dev loop6, logical block 7, async page read [ 285.033204][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.042583][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.050620][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.055519][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 285.059844][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 285.087211][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 285.096530][ T8384] ldm_validate_partition_table(): Disk read failed. [ 285.111642][ T8384] Dev loop6: unable to read RDB block 0 [ 285.130426][ T8384] loop6: unable to read partition table [ 285.136498][ T8384] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 285.157385][ T8] usb 5-1: USB disconnect, device number 18 [ 285.745471][ T5195] ldm_validate_partition_table(): Disk read failed. [ 285.923493][ T5195] Dev loop6: unable to read RDB block 0 [ 285.988477][ T5195] loop6: unable to read partition table [ 286.030955][ T8413] futex_wake_op: syz.0.661 tries to shift op by -1; fix this program [ 286.099754][ T8425] FAULT_INJECTION: forcing a failure. [ 286.099754][ T8425] name failslab, interval 1, probability 0, space 0, times 0 [ 286.159435][ T8413] futex_wake_op: syz.0.661 tries to shift op by -1; fix this program [ 286.180273][ T8425] CPU: 1 UID: 0 PID: 8425 Comm: syz.2.665 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 286.190579][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 286.200670][ T8425] Call Trace: [ 286.203999][ T8425] [ 286.206957][ T8425] dump_stack_lvl+0x241/0x360 [ 286.211676][ T8425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.216991][ T8425] ? __pfx__printk+0x10/0x10 [ 286.221634][ T8425] ? lock_release+0xbf/0xa30 [ 286.226277][ T8425] should_fail_ex+0x3b0/0x4e0 [ 286.231000][ T8425] should_failslab+0xac/0x100 [ 286.235710][ T8425] ? skb_clone+0x20c/0x390 [ 286.240158][ T8425] kmem_cache_alloc_noprof+0x70/0x380 [ 286.245566][ T8425] skb_clone+0x20c/0x390 [ 286.249853][ T8425] __netlink_deliver_tap+0x3cc/0x7f0 [ 286.255201][ T8425] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.260440][ T8425] netlink_deliver_tap+0x19d/0x1b0 [ 286.265573][ T8425] netlink_unicast+0x7c4/0x990 [ 286.270354][ T8425] ? __pfx_netlink_unicast+0x10/0x10 [ 286.275649][ T8425] ? __virt_addr_valid+0x45f/0x530 [ 286.280774][ T8425] ? __phys_addr_symbol+0x2f/0x70 [ 286.285828][ T8425] ? __check_object_size+0x47a/0x730 [ 286.291143][ T8425] netlink_sendmsg+0x8e4/0xcb0 [ 286.295936][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.301234][ T8425] ? lock_release+0xbf/0xa30 [ 286.305831][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.311157][ T8425] __sock_sendmsg+0x221/0x270 [ 286.315937][ T8425] ____sys_sendmsg+0x52a/0x7e0 [ 286.320715][ T8425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.326009][ T8425] ? __fget_files+0x2a/0x410 [ 286.330605][ T8425] ? __fget_files+0x2a/0x410 [ 286.335205][ T8425] __sys_sendmsg+0x269/0x350 [ 286.339812][ T8425] ? __pfx_lock_release+0x10/0x10 [ 286.344847][ T8425] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.349975][ T8425] ? __pfx_vfs_write+0x10/0x10 [ 286.354762][ T8425] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.361095][ T8425] ? rcu_is_watching+0x15/0xb0 [ 286.365870][ T8425] ? rcu_is_watching+0x15/0xb0 [ 286.370652][ T8425] do_syscall_64+0xf3/0x230 [ 286.375166][ T8425] ? clear_bhb_loop+0x35/0x90 [ 286.379850][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.385759][ T8425] RIP: 0033:0x7f6f92985d29 [ 286.390180][ T8425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.410053][ T8425] RSP: 002b:00007f6f93837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.418475][ T8425] RAX: ffffffffffffffda RBX: 00007f6f92b75fa0 RCX: 00007f6f92985d29 [ 286.426450][ T8425] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 286.434455][ T8425] RBP: 00007f6f93837090 R08: 0000000000000000 R09: 0000000000000000 [ 286.442429][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.450400][ T8425] R13: 0000000000000000 R14: 00007f6f92b75fa0 R15: 00007fff228748d8 [ 286.458380][ T8425] [ 286.531037][ T5899] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 286.694162][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 286.703037][ T5899] usb 4-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.722775][ T5899] usb 4-1: config 1 interface 0 has no altsetting 0 [ 287.308862][ T5899] usb 4-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.40 [ 287.330698][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 287.342390][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.352637][ T5899] usb 4-1: Product: Б [ 287.360898][ T5899] usb 4-1: Manufacturer: 詭챽清풑⚅䮔䯿⣞밙ﲬ踶軓ૼáˆì‰¸ [ 287.421137][ T5899] usb 4-1: SerialNumber: syz [ 287.829269][ T5913] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 287.840879][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.849026][ T5913] usb 3-1: Product: syz [ 287.870798][ T5913] usb 3-1: Manufacturer: syz [ 287.875477][ T5913] usb 3-1: SerialNumber: syz [ 287.892111][ T5913] usb 3-1: config 0 descriptor?? [ 287.903204][ T5913] ch341 3-1:0.0: ch341-uart converter detected [ 289.157205][ T8475] input: syz1 as /devices/virtual/input/input14 [ 289.643362][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.855356][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.885765][ T5913] usb 3-1: failed to send control message: -71 [ 289.895017][ T5913] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 289.912466][ C1] blk_print_req_error: 271 callbacks suppressed [ 289.912489][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.923121][ T5913] usb 3-1: USB disconnect, device number 11 [ 289.928174][ C1] buffer_io_error: 270 callbacks suppressed [ 289.928193][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 289.947918][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.957162][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 289.965104][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.974343][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 289.982287][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.984714][ T5913] ch341 3-1:0.0: device disconnected [ 289.991621][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 289.991681][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.991704][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 289.991740][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.031109][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 290.038983][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.048190][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 290.056108][ C1] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.065308][ C1] Buffer I/O error on dev loop6, logical block 7, async page read [ 290.117104][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.126410][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.134312][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.143489][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 290.230811][ T8492] ldm_validate_partition_table(): Disk read failed. [ 290.266491][ T5899] usbhid 4-1:1.0: can't add hid device: -71 [ 290.274268][ T5899] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 290.283974][ T5899] usb 4-1: USB disconnect, device number 22 [ 290.300454][ T8492] Dev loop6: unable to read RDB block 0 [ 290.339151][ T8492] loop6: unable to read partition table [ 290.406399][ T8492] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 290.437054][ T8524] block nbd2: shutting down sockets [ 291.074300][ T5195] ldm_validate_partition_table(): Disk read failed. [ 291.155096][ T5913] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 291.321696][ T5195] Dev loop6: unable to read RDB block 0 [ 291.381263][ T5195] loop6: unable to read partition table [ 291.562256][ T5913] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.572975][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.586187][ T5913] usb 1-1: Product: syz [ 291.590445][ T5913] usb 1-1: Manufacturer: syz [ 291.595055][ T5913] usb 1-1: SerialNumber: syz [ 291.658701][ T8538] overlayfs: failed to resolve './file1': -2 [ 292.175804][ T5913] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 292.863686][ T5899] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.880513][ T8550] ip6gretap0: entered promiscuous mode [ 292.923835][ T8550] batadv_slave_0: entered promiscuous mode [ 293.108732][ T5907] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 293.284561][ T1206] usb 1-1: USB disconnect, device number 17 [ 293.302198][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 293.422552][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 293.598231][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 293.619904][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 293.636438][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.672113][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.683790][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 293.702146][ T5907] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 293.715631][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.725537][ T5907] usb 2-1: Product: syz [ 293.730198][ T5907] usb 2-1: Manufacturer: syz [ 293.734896][ T5907] usb 2-1: SerialNumber: syz [ 293.816959][ T5907] usb 2-1: config 0 descriptor?? [ 294.043778][ T5907] usb 2-1: USB disconnect, device number 15 [ 294.112537][ T5899] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 294.120076][ T5899] ath9k_htc: Failed to initialize the device [ 294.130907][ T1206] usb 1-1: ath9k_htc: USB layer deinitialized [ 295.276643][ C0] blk_print_req_error: 271 callbacks suppressed [ 295.276671][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.292189][ C0] buffer_io_error: 270 callbacks suppressed [ 295.292208][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.306079][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.316755][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 295.328085][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.338059][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 295.348068][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.358043][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 295.368085][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.378055][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 295.394339][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.404935][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 295.413666][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.422875][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 295.430807][ C0] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.440028][ C0] Buffer I/O error on dev loop6, logical block 7, async page read [ 296.048995][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.058282][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.066174][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.075516][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 297.061526][ T5195] ldm_validate_partition_table(): Disk read failed. [ 297.151341][ T5195] Dev loop6: unable to read RDB block 0 [ 297.181904][ T5195] loop6: unable to read partition table [ 299.244515][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 299.817237][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 299.870563][ T8623] netlink: 'syz.4.708': attribute type 21 has an invalid length. [ 299.880611][ T5870] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.899834][ T8623] netlink: 128 bytes leftover after parsing attributes in process `syz.4.708'. [ 299.991665][ T5870] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.003681][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 300.476161][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.524327][ T8623] netlink: 3 bytes leftover after parsing attributes in process `syz.4.708'. [ 300.579916][ T5870] usb 2-1: can't set config #4, error -71 [ 300.590138][ T5870] usb 2-1: USB disconnect, device number 16 [ 300.740100][ C1] blk_print_req_error: 135 callbacks suppressed [ 300.740126][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.755666][ C1] buffer_io_error: 134 callbacks suppressed [ 300.755685][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.769548][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.778738][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 300.786607][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.795800][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 300.803727][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.812994][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 300.820909][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.830169][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 300.838103][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.847264][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 300.855128][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.864276][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 300.872158][ C1] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.881307][ C1] Buffer I/O error on dev loop6, logical block 7, async page read [ 300.920981][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.930197][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.947154][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.956432][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 300.997665][ T8649] ldm_validate_partition_table(): Disk read failed. [ 301.018889][ T8649] Dev loop6: unable to read RDB block 0 [ 301.061041][ T8649] loop6: unable to read partition table [ 301.114405][ T8649] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 301.403614][ T5195] ldm_validate_partition_table(): Disk read failed. [ 301.435844][ T5195] Dev loop6: unable to read RDB block 0 [ 301.460198][ T5195] loop6: unable to read partition table [ 302.776750][ T5870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 303.669097][ T5870] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 303.677280][ T5870] usb 3-1: config 0 has no interface number 0 [ 303.684055][ T5870] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 303.717818][ T5870] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.731188][ T5870] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 303.750394][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.764603][ T8691] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 303.776399][ T5870] usb 3-1: Product: syz [ 303.781906][ T5870] usb 3-1: Manufacturer: syz [ 303.805736][ T5870] usb 3-1: SerialNumber: syz [ 303.979427][ T5870] usb 3-1: config 0 descriptor?? [ 303.984959][ T8670] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.183464][ T5870] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 304.199116][ T5870] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 304.940523][ T5899] usb 3-1: USB disconnect, device number 12 [ 304.948835][ T5899] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 304.997909][ T5899] cyberjack 3-1:0.69: device disconnected [ 305.456662][ T8704] netlink: 'syz.3.728': attribute type 21 has an invalid length. [ 305.464510][ T8704] netlink: 128 bytes leftover after parsing attributes in process `syz.3.728'. [ 305.473546][ T8704] netlink: 3 bytes leftover after parsing attributes in process `syz.3.728'. [ 305.929116][ T8713] netlink: 136 bytes leftover after parsing attributes in process `syz.1.729'. [ 305.938259][ T8713] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 308.826246][ T8754] Bluetooth: hci5: Frame reassembly failed (-84) [ 308.999283][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 309.139961][ T8759] input: syz1 as /devices/virtual/input/input15 [ 310.205039][ T8769] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 310.213014][ T8769] netlink: 128 bytes leftover after parsing attributes in process `syz.3.741'. [ 310.222168][ T8769] netlink: 3 bytes leftover after parsing attributes in process `syz.3.741'. [ 310.845960][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 310.967010][ T8786] FAULT_INJECTION: forcing a failure. [ 310.967010][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 310.979793][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.2.744 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 310.990060][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 311.000220][ T8786] Call Trace: [ 311.003514][ T8786] [ 311.006475][ T8786] dump_stack_lvl+0x241/0x360 [ 311.011181][ T8786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.016407][ T8786] ? __pfx__printk+0x10/0x10 [ 311.021021][ T8786] ? __pfx___might_resched+0x10/0x10 [ 311.026334][ T8786] ? rcu_is_watching+0x15/0xb0 [ 311.031224][ T8786] should_fail_ex+0x3b0/0x4e0 [ 311.035934][ T8786] should_failslab+0xac/0x100 [ 311.040628][ T8786] __kmalloc_cache_noprof+0x70/0x390 [ 311.045934][ T8786] ? afs_get_tree+0xc2/0x11f0 [ 311.050633][ T8786] afs_get_tree+0xc2/0x11f0 [ 311.055219][ T8786] ? cap_capable+0x1b4/0x250 [ 311.059839][ T8786] ? safesetid_security_capable+0xb2/0x1d0 [ 311.065677][ T8786] vfs_get_tree+0x90/0x2b0 [ 311.070137][ T8786] do_new_mount+0x2be/0xb40 [ 311.074693][ T8786] ? __pfx_do_new_mount+0x10/0x10 [ 311.079751][ T8786] __se_sys_mount+0x2d6/0x3c0 [ 311.084467][ T8786] ? __pfx___se_sys_mount+0x10/0x10 [ 311.089687][ T8786] ? rcu_is_watching+0x15/0xb0 [ 311.094481][ T8786] ? rcu_is_watching+0x15/0xb0 [ 311.099272][ T8786] ? __x64_sys_mount+0x20/0xc0 [ 311.104066][ T8786] do_syscall_64+0xf3/0x230 [ 311.108593][ T8786] ? clear_bhb_loop+0x35/0x90 [ 311.113293][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.119233][ T8786] RIP: 0033:0x7f6f92985d29 [ 311.123666][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.143301][ T8786] RSP: 002b:00007f6f937f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.151748][ T8786] RAX: ffffffffffffffda RBX: 00007f6f92b76160 RCX: 00007f6f92985d29 [ 311.159770][ T8786] RDX: 0000000020002880 RSI: 0000000020002840 RDI: 0000000000000000 [ 311.167780][ T8786] RBP: 00007f6f937f5090 R08: 0000000020000000 R09: 0000000000000000 [ 311.175789][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.183791][ T8786] R13: 0000000000000000 R14: 00007f6f92b76160 R15: 00007fff228748d8 [ 311.191781][ T8786] [ 312.521978][ T8795] binder: 8794:8795 ioctl 4018620d 0 returned -22 [ 312.561196][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 312.754905][ T8805] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.749'. [ 312.871348][ T8800] binder: 8794:8800 ioctl c0306201 0 returned -14 [ 312.932885][ T8811] netlink: 136 bytes leftover after parsing attributes in process `syz.3.752'. [ 312.955728][ T8811] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 313.254630][ T8810] netlink: 'syz.1.753': attribute type 21 has an invalid length. [ 313.262653][ T8810] netlink: 128 bytes leftover after parsing attributes in process `syz.1.753'. [ 313.271655][ T8810] netlink: 3 bytes leftover after parsing attributes in process `syz.1.753'. [ 313.338547][ T8815] syz_tun: entered allmulticast mode [ 313.729661][ T8821] FAULT_INJECTION: forcing a failure. [ 313.729661][ T8821] name failslab, interval 1, probability 0, space 0, times 0 [ 313.742592][ T8821] CPU: 0 UID: 0 PID: 8821 Comm: syz.1.756 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 313.752877][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 313.762973][ T8821] Call Trace: [ 313.766281][ T8821] [ 313.769250][ T8821] dump_stack_lvl+0x241/0x360 [ 313.773965][ T8821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.779196][ T8821] ? __pfx__printk+0x10/0x10 [ 313.783805][ T8821] ? __pfx___might_resched+0x10/0x10 [ 313.789098][ T8821] should_fail_ex+0x3b0/0x4e0 [ 313.793788][ T8821] should_failslab+0xac/0x100 [ 313.798482][ T8821] __kmalloc_noprof+0xdd/0x4c0 [ 313.803251][ T8821] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 313.808979][ T8821] tomoyo_realpath_from_path+0xcf/0x5e0 [ 313.814530][ T8821] tomoyo_path_number_perm+0x236/0x860 [ 313.820028][ T8821] ? tomoyo_path_number_perm+0x206/0x860 [ 313.825670][ T8821] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.831659][ T8821] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 313.838602][ T8821] ? rcu_is_watching+0x15/0xb0 [ 313.843375][ T8821] ? trace_irq_disable+0x3b/0x120 [ 313.848407][ T8821] ? rcu_read_unlock_special+0x497/0x570 [ 313.854159][ T8821] ? __rcu_read_unlock+0xa1/0x110 [ 313.859192][ T8821] ? __fget_files+0x2a/0x410 [ 313.863794][ T8821] ? __fget_files+0x2a/0x410 [ 313.868400][ T8821] security_file_ioctl+0xc6/0x2a0 [ 313.873455][ T8821] __se_sys_ioctl+0x46/0x170 [ 313.878060][ T8821] do_syscall_64+0xf3/0x230 [ 313.882572][ T8821] ? clear_bhb_loop+0x35/0x90 [ 313.887264][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.893166][ T8821] RIP: 0033:0x7fb918385d29 [ 313.897586][ T8821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.917285][ T8821] RSP: 002b:00007fb91914a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.925711][ T8821] RAX: ffffffffffffffda RBX: 00007fb918576080 RCX: 00007fb918385d29 [ 313.933690][ T8821] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000005 [ 313.941662][ T8821] RBP: 00007fb91914a090 R08: 0000000000000000 R09: 0000000000000000 [ 313.949632][ T8821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.957604][ T8821] R13: 0000000000000000 R14: 00007fb918576080 R15: 00007ffe80484c38 [ 313.965585][ T8821] [ 313.979528][ T8821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.162641][ T8814] syz_tun: left allmulticast mode [ 314.341661][ T8825] syz_tun: entered allmulticast mode [ 315.674463][ T8824] syz_tun: left allmulticast mode [ 317.005861][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.012662][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.511509][ T8851] netlink: 'syz.3.766': attribute type 21 has an invalid length. [ 317.519575][ T8851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.766'. [ 317.528644][ T8851] netlink: 3 bytes leftover after parsing attributes in process `syz.3.766'. [ 317.814148][ T8862] FAULT_INJECTION: forcing a failure. [ 317.814148][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 318.207077][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.2.769 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 318.207111][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.207126][ T8862] Call Trace: [ 318.207134][ T8862] [ 318.207143][ T8862] dump_stack_lvl+0x241/0x360 [ 318.207179][ T8862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.207207][ T8862] ? __pfx__printk+0x10/0x10 [ 318.207234][ T8862] ? __pfx_lock_release+0x10/0x10 [ 318.207260][ T8862] ? __pfx___might_resched+0x10/0x10 [ 318.207281][ T8862] ? __pfx___might_resched+0x10/0x10 [ 318.207302][ T8862] should_fail_ex+0x3b0/0x4e0 [ 318.207333][ T8862] should_failslab+0xac/0x100 [ 318.207355][ T8862] ? __kernfs_new_node+0xd8/0x870 [ 318.207387][ T8862] kmem_cache_alloc_noprof+0x70/0x380 [ 318.207413][ T8862] __kernfs_new_node+0xd8/0x870 [ 318.207448][ T8862] ? lock_acquire+0xe3/0x550 [ 318.207471][ T8862] ? __pfx___kernfs_new_node+0x10/0x10 [ 318.207505][ T8862] ? __pfx_lock_acquire+0x10/0x10 [ 318.207531][ T8862] ? __pfx___might_resched+0x10/0x10 [ 318.207551][ T8862] ? sysfs_create_dir_ns+0x189/0x3a0 [ 318.207578][ T8862] ? sysfs_create_dir_ns+0x1cf/0x3a0 [ 318.207630][ T8862] kernfs_new_node+0x137/0x240 [ 318.207665][ T8862] __kernfs_create_file+0x49/0x2e0 [ 318.207691][ T8862] sysfs_add_file_mode_ns+0x24a/0x310 [ 318.207721][ T8862] sysfs_create_file_ns+0x197/0x2a0 [ 318.207747][ T8862] ? __pfx_acpi_bind_one+0x10/0x10 [ 318.207777][ T8862] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 318.207805][ T8862] ? __dev_fwnode+0x50/0x80 [ 318.207832][ T8862] ? device_create_file+0xf2/0x1c0 [ 318.207862][ T8862] device_add+0x522/0xbf0 [ 318.207890][ T8862] ? __raw_spin_lock_init+0x45/0x100 [ 318.207931][ T8862] input_register_device+0xa53/0x1110 [ 318.207959][ T8862] uinput_create_device+0x40e/0x630 [ 318.207995][ T8862] uinput_ioctl_handler+0x488/0x1770 [ 318.208028][ T8862] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 318.208069][ T8862] ? __pfx_uinput_ioctl+0x10/0x10 [ 318.208099][ T8862] __se_sys_ioctl+0xf5/0x170 [ 318.208128][ T8862] do_syscall_64+0xf3/0x230 [ 318.208155][ T8862] ? clear_bhb_loop+0x35/0x90 [ 318.208185][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.208213][ T8862] RIP: 0033:0x7f6f92985d29 [ 318.208232][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.208250][ T8862] RSP: 002b:00007f6f93837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.208276][ T8862] RAX: ffffffffffffffda RBX: 00007f6f92b75fa0 RCX: 00007f6f92985d29 [ 318.208292][ T8862] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 318.208306][ T8862] RBP: 00007f6f93837090 R08: 0000000000000000 R09: 0000000000000000 [ 318.208320][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.208333][ T8862] R13: 0000000000000000 R14: 00007f6f92b75fa0 R15: 00007fff228748d8 [ 318.208357][ T8862] [ 319.428298][ T5830] Bluetooth: hci3: unexpected cc 0x100c length: 65 > 3 [ 319.672503][ T5830] Bluetooth: hci3: unexpected event for opcode 0x100c [ 319.928006][ T8885] netlink: 'syz.3.777': attribute type 21 has an invalid length. [ 319.935871][ T8885] netlink: 128 bytes leftover after parsing attributes in process `syz.3.777'. [ 319.944857][ T8885] netlink: 3 bytes leftover after parsing attributes in process `syz.3.777'. [ 319.959045][ T8890] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 320.482949][ T8897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.991993][ T8920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.120764][ T8935] input: syz1 as /devices/virtual/input/input17 [ 322.170907][ T8937] netlink: 'syz.2.789': attribute type 21 has an invalid length. [ 322.179188][ T8937] netlink: 128 bytes leftover after parsing attributes in process `syz.2.789'. [ 322.188242][ T8937] netlink: 3 bytes leftover after parsing attributes in process `syz.2.789'. [ 322.508676][ T8942] netlink: 76 bytes leftover after parsing attributes in process `syz.0.790'. [ 323.327602][ T8948] mmap: syz.0.790 (8948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 323.388291][ T8953] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 323.428505][ T8953] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 323.455151][ T8953] overlayfs: missing 'lowerdir' [ 324.673770][ T8974] input: syz1 as /devices/virtual/input/input18 [ 324.723665][ T8978] netlink: 'syz.4.801': attribute type 21 has an invalid length. [ 324.731559][ T8978] netlink: 128 bytes leftover after parsing attributes in process `syz.4.801'. [ 324.740625][ T8978] netlink: 3 bytes leftover after parsing attributes in process `syz.4.801'. [ 324.800987][ T8981] syz_tun: entered allmulticast mode [ 325.978485][ T8979] syz_tun: left allmulticast mode [ 327.107442][ T9018] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 327.314001][ T9033] 9pnet_fd: Insufficient options for proto=fd [ 327.353141][ T9035] input: syz1 as /devices/virtual/input/input19 [ 327.622771][ T5907] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 327.650602][ T9030] Process accounting resumed [ 328.131814][ T9044] netlink: 676 bytes leftover after parsing attributes in process `syz.2.816'. [ 328.140998][ T9044] netlink: 676 bytes leftover after parsing attributes in process `syz.2.816'. [ 328.276362][ T5907] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 329.269847][ T5907] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 329.284875][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 329.293975][ T5907] usb 5-1: config 1 has no interface number 0 [ 329.300178][ T5907] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 329.311408][ T5907] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 329.756288][ T5907] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 329.782642][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.834885][ T5870] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 329.920345][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 330.116192][ T9047] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 330.140261][ T9047] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 330.148609][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 330.177470][ T5870] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.191572][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.221362][ T5870] usb 2-1: Product: syz [ 330.229399][ T5870] usb 2-1: Manufacturer: syz [ 330.239320][ T5870] usb 2-1: SerialNumber: syz [ 330.254517][ T5870] r8152-cfgselector 2-1: Unknown version 0x0000 [ 330.275050][ T5870] r8152-cfgselector 2-1: config 0 descriptor?? [ 330.483080][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 330.544899][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 330.817723][ T5907] usb 5-1: USB disconnect, device number 19 [ 330.880875][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 331.046069][ T5870] r8152-cfgselector 2-1: USB disconnect, device number 17 [ 331.347249][ T9090] input: syz1 as /devices/virtual/input/input20 [ 331.911185][ T9100] netlink: 676 bytes leftover after parsing attributes in process `syz.4.829'. [ 331.920422][ T9100] netlink: 676 bytes leftover after parsing attributes in process `syz.4.829'. [ 334.726247][ T9131] input: syz1 as /devices/virtual/input/input23 [ 335.295145][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 335.474763][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 335.481620][ T9140] serio: Serial port ptm1 [ 335.492633][ T5899] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.524933][ T5899] usb 5-1: config 0 has no interface number 0 [ 335.549459][ T5899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.580110][ T5899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.604788][ T5899] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 335.636692][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.709617][ T5899] usb 5-1: config 0 descriptor?? [ 336.627630][ T5899] uclogic 0003:28BD:0094.000A: pen parameters not found [ 336.634924][ T5899] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 336.814092][ T9157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.845'. [ 336.833684][ T5868] usb 5-1: USB disconnect, device number 20 [ 336.849391][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.845'. [ 336.944794][ T1206] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 337.099463][ T9172] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 337.109868][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.122475][ T1206] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 337.132551][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.135791][ T5899] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 337.161425][ T1206] usb 1-1: config 0 descriptor?? [ 337.175985][ T9176] FAULT_INJECTION: forcing a failure. [ 337.175985][ T9176] name failslab, interval 1, probability 0, space 0, times 0 [ 337.201992][ T9176] CPU: 0 UID: 0 PID: 9176 Comm: syz.2.850 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 337.212351][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 337.222460][ T9176] Call Trace: [ 337.225774][ T9176] [ 337.228767][ T9176] dump_stack_lvl+0x241/0x360 [ 337.233491][ T9176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.238733][ T9176] ? __pfx__printk+0x10/0x10 [ 337.243371][ T9176] ? __pfx___might_resched+0x10/0x10 [ 337.248699][ T9176] should_fail_ex+0x3b0/0x4e0 [ 337.253418][ T9176] should_failslab+0xac/0x100 [ 337.258139][ T9176] __kmalloc_noprof+0xdd/0x4c0 [ 337.262942][ T9176] ? tomoyo_encode+0x26f/0x540 [ 337.267746][ T9176] ? copy_from_kernel_nofault_allowed+0xa9/0x130 [ 337.274137][ T9176] tomoyo_encode+0x26f/0x540 [ 337.278764][ T9176] ? __pfx_simple_dname+0x10/0x10 [ 337.283833][ T9176] tomoyo_realpath_from_path+0x59e/0x5e0 [ 337.289607][ T9176] tomoyo_path_perm+0x2b7/0x740 [ 337.294518][ T9176] ? rcu_is_watching+0x15/0xb0 [ 337.299314][ T9176] ? tomoyo_path_perm+0x287/0x740 [ 337.304404][ T9176] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 337.309801][ T9176] ? rcu_is_watching+0x15/0xb0 [ 337.314597][ T9176] ? __pfx___might_resched+0x10/0x10 [ 337.319900][ T9176] ? rcu_is_watching+0x15/0xb0 [ 337.324684][ T9176] ? rcu_is_watching+0x15/0xb0 [ 337.329476][ T9176] ? lock_release+0xbf/0xa30 [ 337.334080][ T9176] ? __pfx_lock_acquire+0x10/0x10 [ 337.339149][ T9176] security_file_truncate+0xac/0x250 [ 337.344451][ T9176] do_ftruncate+0x293/0x580 [ 337.348972][ T9176] ? __pfx_do_ftruncate+0x10/0x10 [ 337.354012][ T9176] ? __fget_files+0x2a/0x410 [ 337.358693][ T9176] ? __fget_files+0x395/0x410 [ 337.363376][ T9176] ? __fget_files+0x2a/0x410 [ 337.367986][ T9176] __x64_sys_ftruncate+0x94/0xf0 [ 337.372938][ T9176] do_syscall_64+0xf3/0x230 [ 337.377450][ T9176] ? clear_bhb_loop+0x35/0x90 [ 337.382151][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.388054][ T9176] RIP: 0033:0x7f6f92985d29 [ 337.392484][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.412104][ T9176] RSP: 002b:00007f6f93837038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 337.420549][ T9176] RAX: ffffffffffffffda RBX: 00007f6f92b75fa0 RCX: 00007f6f92985d29 [ 337.428537][ T9176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 337.436517][ T9176] RBP: 00007f6f93837090 R08: 0000000000000000 R09: 0000000000000000 [ 337.444594][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.452575][ T9176] R13: 0000000000000000 R14: 00007f6f92b75fa0 R15: 00007fff228748d8 [ 337.460560][ T9176] [ 337.463709][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.475633][ T9176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.483843][ T1206] usbhid 1-1:0.0: can't add hid device: -71 [ 337.494801][ T1206] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 337.524262][ T1206] usb 1-1: USB disconnect, device number 18 [ 337.658556][ T5899] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 337.668377][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.741017][ T5899] usb 2-1: config 0 descriptor?? [ 338.004847][ T1206] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 338.694759][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 338.730775][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.844854][ T1206] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 338.853951][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.881233][ T1206] usb 1-1: config 0 descriptor?? [ 338.897408][ T1206] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 338.909818][ T1206] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 338.946250][ T9193] FAULT_INJECTION: forcing a failure. [ 338.946250][ T9193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.040564][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.2.856 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 339.050875][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 339.060962][ T9193] Call Trace: [ 339.064274][ T9193] [ 339.067276][ T9193] dump_stack_lvl+0x241/0x360 [ 339.072001][ T9193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.077241][ T9193] ? __pfx__printk+0x10/0x10 [ 339.081875][ T9193] ? __pfx_lock_release+0x10/0x10 [ 339.086932][ T9193] ? rcu_is_watching+0x15/0xb0 [ 339.091733][ T9193] ? lock_release+0xbf/0xa30 [ 339.096356][ T9193] should_fail_ex+0x3b0/0x4e0 [ 339.101096][ T9193] _copy_from_user+0x2d/0xb0 [ 339.105738][ T9193] copy_msghdr_from_user+0xae/0x680 [ 339.110974][ T9193] ? rcu_is_watching+0x15/0xb0 [ 339.115781][ T9193] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 339.121623][ T9193] ? __fget_files+0x2a/0x410 [ 339.126253][ T9193] ? __fget_files+0x2a/0x410 [ 339.130878][ T9193] __sys_sendmsg+0x209/0x350 [ 339.135506][ T9193] ? __pfx_lock_release+0x10/0x10 [ 339.140654][ T9193] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.145826][ T9193] ? __pfx_vfs_write+0x10/0x10 [ 339.150648][ T9193] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.157190][ T9193] ? rcu_is_watching+0x15/0xb0 [ 339.161991][ T9193] ? rcu_is_watching+0x15/0xb0 [ 339.166801][ T9193] do_syscall_64+0xf3/0x230 [ 339.171352][ T9193] ? clear_bhb_loop+0x35/0x90 [ 339.176069][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.182010][ T9193] RIP: 0033:0x7f6f92985d29 [ 339.186464][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.206121][ T9193] RSP: 002b:00007f6f93837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.214574][ T9193] RAX: ffffffffffffffda RBX: 00007f6f92b75fa0 RCX: 00007f6f92985d29 [ 339.222580][ T9193] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 339.230585][ T9193] RBP: 00007f6f93837090 R08: 0000000000000000 R09: 0000000000000000 [ 339.238601][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.246619][ T9193] R13: 0000000000000000 R14: 00007f6f92b75fa0 R15: 00007fff228748d8 [ 339.254631][ T9193] [ 339.257841][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.793332][ T5913] usb 1-1: USB disconnect, device number 19 [ 339.810087][ T5913] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 339.984324][ T5899] [drm:udl_init] *ERROR* Selecting channel failed [ 340.024435][ T5899] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 340.041646][ T5899] [drm] Initialized udl on minor 2 [ 340.072384][ T5899] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.092571][ T5899] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 340.105219][ T5870] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.118007][ T5870] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 340.347153][ T5868] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 340.349649][ T5899] usb 2-1: USB disconnect, device number 18 [ 340.408615][ T9209] sp0: Synchronizing with TNC [ 340.552386][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.618720][ T5868] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.648408][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.727205][ T5868] usb 5-1: config 0 descriptor?? [ 341.491259][ T5868] usbhid 5-1:0.0: can't add hid device: -71 [ 341.522467][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 341.550662][ T5868] usb 5-1: USB disconnect, device number 21 [ 341.784720][ T5870] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 341.924634][ T47] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 341.955931][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 341.982346][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 341.998107][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 342.010906][ T5870] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 342.026713][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.037050][ T5870] usb 1-1: Product: syz [ 342.041278][ T5870] usb 1-1: Manufacturer: syz [ 342.047358][ T5870] usb 1-1: SerialNumber: syz [ 342.065543][ T5870] usb 1-1: config 0 descriptor?? [ 342.074742][ T5868] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 342.077574][ T9224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.087258][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.092200][ T5870] usb 1-1: ucan: probing device on interface #0 [ 342.107720][ T9235] netlink: 136 bytes leftover after parsing attributes in process `syz.1.866'. [ 342.117079][ T9235] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 342.134741][ T5870] usb 1-1: ucan: invalid endpoint configuration [ 342.143827][ T5870] usb 1-1: ucan: probe failed; try to update the device firmware [ 342.157153][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 342.327254][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 342.494640][ T47] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 342.526153][ T47] usb 4-1: config 0 has no interface number 0 [ 342.533305][ T47] usb 4-1: config 0 interface 215 has no altsetting 0 [ 342.542815][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.557542][ T5868] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 342.568112][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.577736][ T47] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=b7.bd [ 342.589152][ T5868] usb 5-1: config 0 descriptor?? [ 342.594775][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.603052][ T47] usb 4-1: Product: syz [ 342.611600][ T5868] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 342.628081][ T47] usb 4-1: Manufacturer: syz [ 342.633341][ T5868] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 342.671235][ T47] usb 4-1: SerialNumber: syz [ 342.681644][ T47] usb 4-1: config 0 descriptor?? [ 342.897776][ T47] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 342.907269][ T47] gspca_m5602: Failed to find a sensor [ 342.912786][ T47] ALi m5602 4-1:0.215: ALi m5602 webcam failed [ 342.934892][ T47] usb 4-1: USB disconnect, device number 23 [ 342.980589][ T5899] usb 1-1: USB disconnect, device number 20 [ 343.158494][ T5870] usb 5-1: USB disconnect, device number 22 [ 343.169048][ T5870] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 343.367463][ T9253] netlink: 676 bytes leftover after parsing attributes in process `syz.0.870'. [ 343.376548][ T9253] netlink: 676 bytes leftover after parsing attributes in process `syz.0.870'. [ 343.979671][ T9254] VFS: unable to find oldfs superblock on device nullb0 [ 345.025171][ T5899] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 345.115459][ T9278] netlink: 136 bytes leftover after parsing attributes in process `syz.1.877'. [ 345.124930][ T9278] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 345.219165][ T5899] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 345.231523][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.286102][ T5899] usb 5-1: Product: syz [ 345.290923][ T5899] usb 5-1: Manufacturer: syz [ 345.311292][ T5899] usb 5-1: SerialNumber: syz [ 345.332553][ T5899] usb 5-1: config 0 descriptor?? [ 345.375818][ T5899] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 345.427655][ T5899] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 345.447058][ T29] audit: type=1326 audit(1737446627.265:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 345.482738][ T5899] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 345.494264][ T29] audit: type=1326 audit(1737446627.265:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 345.520132][ T29] audit: type=1326 audit(1737446627.305:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 345.557368][ T29] audit: type=1326 audit(1737446627.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 345.592096][ T29] audit: type=1326 audit(1737446627.305:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 345.597286][ T47] usb 5-1: USB disconnect, device number 23 [ 345.619715][ T29] audit: type=1326 audit(1737446627.305:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 346.167282][ T29] audit: type=1326 audit(1737446627.305:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 346.216434][ T29] audit: type=1326 audit(1737446627.305:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 346.240568][ T29] audit: type=1326 audit(1737446627.305:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 346.280789][ T29] audit: type=1326 audit(1737446627.305:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236d185d29 code=0x7ffc0000 [ 346.311596][ T5868] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 347.399980][ T5868] usb 4-1: config 0 has an invalid interface number: 140 but max is 0 [ 347.408846][ T5868] usb 4-1: config 0 has no interface number 0 [ 347.428798][ T5868] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 347.440864][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.484542][ T5868] usb 4-1: Product: syz [ 347.494908][ T5868] usb 4-1: Manufacturer: syz [ 347.503817][ T5868] usb 4-1: SerialNumber: syz [ 347.536417][ T5868] usb 4-1: config 0 descriptor?? [ 347.604713][ T5907] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 347.638875][ T9303] syz_tun: entered promiscuous mode [ 347.663622][ T9303] syz_tun: left promiscuous mode [ 347.683196][ T9306] FAULT_INJECTION: forcing a failure. [ 347.683196][ T9306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.697518][ T9306] CPU: 1 UID: 0 PID: 9306 Comm: syz.2.884 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 347.707808][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 347.717877][ T9306] Call Trace: [ 347.721158][ T9306] [ 347.724096][ T9306] dump_stack_lvl+0x241/0x360 [ 347.728812][ T9306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.734045][ T9306] ? __pfx__printk+0x10/0x10 [ 347.738648][ T9306] ? snprintf+0xda/0x120 [ 347.742896][ T9306] should_fail_ex+0x3b0/0x4e0 [ 347.747586][ T9306] _copy_to_user+0x31/0xb0 [ 347.752028][ T9306] simple_read_from_buffer+0xca/0x150 [ 347.757453][ T9306] proc_fail_nth_read+0x1e9/0x250 [ 347.762520][ T9306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.768083][ T9306] ? trace_contention_end+0x3c/0x120 [ 347.773415][ T9306] ? bpf_lsm_file_permission+0x9/0x10 [ 347.778796][ T9306] ? security_file_permission+0x74/0x280 [ 347.784490][ T9306] ? rw_verify_area+0x55e/0x6f0 [ 347.789364][ T9306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.794932][ T9306] vfs_read+0x1fc/0xb70 [ 347.799114][ T9306] ? __pfx___mutex_lock+0x10/0x10 [ 347.804157][ T9306] ? __pfx_vfs_read+0x10/0x10 [ 347.808858][ T9306] ? __fget_files+0x2a/0x410 [ 347.813453][ T9306] ? __fget_files+0x395/0x410 [ 347.818137][ T9306] ? __fget_files+0x2a/0x410 [ 347.822733][ T9306] ksys_read+0x18f/0x2b0 [ 347.826997][ T9306] ? __pfx_ksys_read+0x10/0x10 [ 347.831772][ T9306] ? rcu_is_watching+0x15/0xb0 [ 347.836561][ T9306] ? rcu_is_watching+0x15/0xb0 [ 347.841362][ T9306] do_syscall_64+0xf3/0x230 [ 347.845948][ T9306] ? clear_bhb_loop+0x35/0x90 [ 347.850691][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.856604][ T9306] RIP: 0033:0x7f6f9298473c [ 347.861040][ T9306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 347.880659][ T9306] RSP: 002b:00007f6f93837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.889104][ T9306] RAX: ffffffffffffffda RBX: 00007f6f92b75fa0 RCX: 00007f6f9298473c [ 347.896607][ T5870] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 347.897157][ T9306] RDX: 000000000000000f RSI: 00007f6f938370a0 RDI: 0000000000000003 [ 347.912865][ T9306] RBP: 00007f6f93837090 R08: 0000000000000000 R09: 0000000000000000 [ 347.920854][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.928866][ T9306] R13: 0000000000000001 R14: 00007f6f92b75fa0 R15: 00007fff228748d8 [ 347.936855][ T9306] [ 347.953870][ T5868] as10x_usb: device has been detected [ 347.960235][ T5868] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 347.977262][ T5868] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 348.065525][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 348.086385][ T5870] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.142647][ T5868] as10x_usb: error during firmware upload part1 [ 348.149596][ T5868] Registered device Elgato EyeTV DTT Deluxe [ 348.151596][ T5868] usb 4-1: USB disconnect, device number 24 [ 348.163746][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 348.170952][ T5907] usb 1-1: config 1 has an invalid interface number: 126 but max is 0 [ 348.650683][ T5868] Unregistered device Elgato EyeTV DTT Deluxe [ 348.650843][ T5907] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 348.672186][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.676683][ T5868] as10x_usb: device has been disconnected [ 348.681294][ T5870] usb 5-1: Product: syz [ 348.690666][ T5870] usb 5-1: Manufacturer: syz [ 348.695763][ T5870] usb 5-1: SerialNumber: syz [ 348.698207][ T5907] usb 1-1: config 1 has no interface number 0 [ 348.708398][ T5907] usb 1-1: config 1 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.757470][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 348.811866][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.882635][ T5907] usb 1-1: SerialNumber: syz [ 349.319743][ T5870] usb 5-1: config 0 descriptor?? [ 349.364986][ T5907] usb 1-1: can't set config #1, error -71 [ 349.385406][ T5907] usb 1-1: USB disconnect, device number 21 [ 349.577127][ T9328] netlink: 136 bytes leftover after parsing attributes in process `syz.0.889'. [ 349.675207][ T9327] block nbd1: shutting down sockets [ 349.694592][ T9328] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 350.346845][ T9303] syz_tun: entered promiscuous mode [ 350.811264][ T9303] syz_tun: left promiscuous mode [ 351.786291][ T1206] usb 5-1: USB disconnect, device number 24 [ 351.854493][ T5870] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 352.024776][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 352.066187][ T5870] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 352.098765][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.157986][ T5870] usb 3-1: Product: syz [ 352.182708][ T5870] usb 3-1: Manufacturer: syz [ 352.202925][ T5870] usb 3-1: SerialNumber: syz [ 352.225495][ T5870] r8152-cfgselector 3-1: Unknown version 0x0000 [ 352.246651][ T5870] r8152-cfgselector 3-1: config 0 descriptor?? [ 352.984674][ T1206] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 353.140224][ T5907] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 353.244494][ T1206] usb 5-1: Using ep0 maxpacket: 8 [ 353.251357][ T1206] usb 5-1: config 1 has an invalid interface number: 126 but max is 0 [ 353.268796][ T1206] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 353.286775][ T1206] usb 5-1: config 1 has no interface number 0 [ 353.292944][ T1206] usb 5-1: config 1 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.335609][ T1206] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 353.346643][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.498030][ T1206] usb 5-1: SerialNumber: syz [ 354.315478][ T5870] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 354.482757][ T9388] netlink: 136 bytes leftover after parsing attributes in process `syz.2.906'. [ 354.577942][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.756351][ T9388] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 354.985876][ T9386] netlink: 'syz.1.905': attribute type 21 has an invalid length. [ 354.994015][ T9386] netlink: 128 bytes leftover after parsing attributes in process `syz.1.905'. [ 355.003880][ T9386] netlink: 3 bytes leftover after parsing attributes in process `syz.1.905'. [ 355.077196][ T5870] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 355.110688][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.119766][ T5870] usb 1-1: Product: syz [ 355.130297][ T5870] usb 1-1: Manufacturer: syz [ 355.136407][ T5870] usb 1-1: SerialNumber: syz [ 355.148465][ T5870] usb 1-1: config 0 descriptor?? [ 355.160533][ T5870] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 355.168397][ T5870] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 355.644597][ T1206] usb-storage 5-1:1.126: USB Mass Storage device detected [ 355.735977][ T1206] usb-storage 5-1:1.126: Quirks match for vid 0525 pid a4a5: 10000 [ 355.824556][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 355.824576][ T29] audit: type=1326 audit(1737446637.615:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 355.867467][ T1206] usb 5-1: USB disconnect, device number 25 [ 355.999279][ T29] audit: type=1326 audit(1737446637.615:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.094542][ T29] audit: type=1326 audit(1737446637.615:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.116361][ T29] audit: type=1326 audit(1737446637.615:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.138052][ T29] audit: type=1326 audit(1737446637.615:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.159362][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.166190][ T29] audit: type=1326 audit(1737446637.625:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.187579][ T29] audit: type=1326 audit(1737446637.625:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.208963][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.264087][ T29] audit: type=1326 audit(1737446637.625:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.312248][ T29] audit: type=1326 audit(1737446637.625:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.343206][ T5870] usb 1-1: USB disconnect, device number 22 [ 356.351860][ T29] audit: type=1326 audit(1737446637.625:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe423185d29 code=0x7ffc0000 [ 356.395371][ T1206] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 356.585922][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.613667][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.653621][ T1206] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 356.665758][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.698021][ T1206] usb 5-1: config 0 descriptor?? [ 357.125288][ T9425] lo speed is unknown, defaulting to 1000 [ 357.131845][ T9425] lo speed is unknown, defaulting to 1000 [ 357.140939][ T9425] lo speed is unknown, defaulting to 1000 [ 357.189816][ T9425] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 357.299568][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.914'. [ 357.327369][ T9425] lo speed is unknown, defaulting to 1000 [ 357.338749][ T9425] lo speed is unknown, defaulting to 1000 [ 357.351770][ T9425] lo speed is unknown, defaulting to 1000 [ 357.360763][ T9425] lo speed is unknown, defaulting to 1000 [ 357.367532][ T9425] lo speed is unknown, defaulting to 1000 [ 357.399165][ T9423] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 357.407055][ T9423] 9pnet: Unknown protocol version 9p200 [ 358.132554][ T1206] usbhid 5-1:0.0: can't add hid device: -71 [ 358.167003][ T1206] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 358.629386][ T1206] usb 5-1: USB disconnect, device number 26 [ 359.177259][ T9443] FAULT_INJECTION: forcing a failure. [ 359.177259][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 359.203909][ T9436] netlink: 'syz.2.919': attribute type 21 has an invalid length. [ 359.211713][ T9436] netlink: 128 bytes leftover after parsing attributes in process `syz.2.919'. [ 359.220771][ T9436] netlink: 3 bytes leftover after parsing attributes in process `syz.2.919'. [ 359.233681][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.0.920 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 359.243985][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 359.254081][ T9443] Call Trace: [ 359.257412][ T9443] [ 359.260342][ T9443] dump_stack_lvl+0x241/0x360 [ 359.265038][ T9443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.270313][ T9443] ? __pfx__printk+0x10/0x10 [ 359.274911][ T9443] ? __pfx___might_resched+0x10/0x10 [ 359.280210][ T9443] should_fail_ex+0x3b0/0x4e0 [ 359.284918][ T9443] should_failslab+0xac/0x100 [ 359.289595][ T9443] __kmalloc_noprof+0xdd/0x4c0 [ 359.294357][ T9443] ? tomoyo_encode+0x26f/0x540 [ 359.299139][ T9443] tomoyo_encode+0x26f/0x540 [ 359.303744][ T9443] tomoyo_realpath_from_path+0x59e/0x5e0 [ 359.309399][ T9443] tomoyo_path_number_perm+0x236/0x860 [ 359.314894][ T9443] ? tomoyo_path_number_perm+0x206/0x860 [ 359.320529][ T9443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 359.326167][ T9443] ? trace_contention_end+0x3c/0x120 [ 359.331463][ T9443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 359.337446][ T9443] ? preempt_count_add+0x93/0x190 [ 359.342485][ T9443] ? fput+0x21b/0x290 [ 359.346468][ T9443] ? __fget_files+0x2a/0x410 [ 359.351051][ T9443] ? __fget_files+0x2a/0x410 [ 359.355638][ T9443] security_file_ioctl+0xc6/0x2a0 [ 359.360664][ T9443] __se_sys_ioctl+0x46/0x170 [ 359.365254][ T9443] do_syscall_64+0xf3/0x230 [ 359.369756][ T9443] ? clear_bhb_loop+0x35/0x90 [ 359.374539][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.380467][ T9443] RIP: 0033:0x7fcb29f85d29 [ 359.384880][ T9443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.404512][ T9443] RSP: 002b:00007fcb2ae71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.412948][ T9443] RAX: ffffffffffffffda RBX: 00007fcb2a175fa0 RCX: 00007fcb29f85d29 [ 359.420940][ T9443] RDX: 0000000020000bc0 RSI: 00000000000007ac RDI: 0000000000000003 [ 359.428909][ T9443] RBP: 00007fcb2ae71090 R08: 0000000000000000 R09: 0000000000000000 [ 359.436882][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.444861][ T9443] R13: 0000000000000000 R14: 00007fcb2a175fa0 R15: 00007ffded983be8 [ 359.452835][ T9443] [ 359.459710][ T9443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.480609][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 359.757480][ T9441] netlink: 136 bytes leftover after parsing attributes in process `syz.3.918'. [ 359.820792][ T9441] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 359.904461][ T5870] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 360.380199][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 360.415286][ T5870] usb 5-1: config 1 has an invalid interface number: 126 but max is 0 [ 360.423595][ T5870] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 361.085597][ T5870] usb 5-1: config 1 has no interface number 0 [ 361.091743][ T5870] usb 5-1: config 1 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.106187][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 361.118996][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 361.129747][ T5870] usb 5-1: SerialNumber: syz [ 361.142076][ T9459] netlink: 676 bytes leftover after parsing attributes in process `syz.3.924'. [ 361.151180][ T9459] netlink: 676 bytes leftover after parsing attributes in process `syz.3.924'. [ 361.248612][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 362.673852][ T5870] usb-storage 5-1:1.126: USB Mass Storage device detected [ 362.687327][ T5870] usb-storage 5-1:1.126: Quirks match for vid 0525 pid a4a5: 10000 [ 362.753899][ T5870] usb 5-1: USB disconnect, device number 27 [ 362.807279][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 363.063457][ T9487] netlink: 76 bytes leftover after parsing attributes in process `syz.4.931'. [ 363.502852][ T9492] netlink: 'syz.3.933': attribute type 21 has an invalid length. [ 363.510720][ T9492] netlink: 128 bytes leftover after parsing attributes in process `syz.3.933'. [ 363.519873][ T9492] netlink: 3 bytes leftover after parsing attributes in process `syz.3.933'. [ 363.534960][ T9501] capability: warning: `syz.1.934' uses 32-bit capabilities (legacy support in use) [ 364.109959][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 364.507574][ T5907] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 364.515423][ T1206] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 364.843661][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.023087][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.064609][ T5869] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 365.171255][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.189651][ T5907] usb 1-1: Product: syz [ 365.193897][ T5907] usb 1-1: Manufacturer: syz [ 365.215480][ T5907] usb 1-1: SerialNumber: syz [ 365.226583][ T5907] usb 1-1: config 0 descriptor?? [ 365.264888][ T5907] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 365.308726][ T7766] udevd[7766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.336211][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 365.349821][ T5869] usb 4-1: config 1 has an invalid interface number: 126 but max is 0 [ 365.359050][ T5869] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 365.369730][ T5869] usb 4-1: config 1 has no interface number 0 [ 365.376126][ T5869] usb 4-1: config 1 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.393528][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 365.403754][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 365.411942][ T5869] usb 4-1: SerialNumber: syz [ 365.475399][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.545200][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.555411][ T5870] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 365.609164][ T5913] usb 1-1: USB disconnect, device number 23 [ 365.772193][ T5870] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 365.781531][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.794291][ T5870] usb 2-1: config 0 has no interface number 0 [ 365.801394][ T5870] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 365.816009][ T5870] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 365.825709][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.887867][ T5870] usb 2-1: config 0 descriptor?? [ 365.926717][ T5870] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 366.137392][ T11] usb 2-1: Failed to submit usb control message: -71 [ 366.137964][ T5870] usb 2-1: USB disconnect, device number 19 [ 366.147878][ T11] usb 2-1: unable to send the bmi data to the device: -71 [ 366.158494][ T11] usb 2-1: unable to get target info from device [ 366.165655][ T11] usb 2-1: could not get target info (-71) [ 366.165695][ T11] usb 2-1: could not probe fw (-71) [ 367.039872][ T9558] netlink: 'syz.2.947': attribute type 21 has an invalid length. [ 367.048176][ T9558] netlink: 128 bytes leftover after parsing attributes in process `syz.2.947'. [ 367.059121][ T9558] netlink: 3 bytes leftover after parsing attributes in process `syz.2.947'. [ 367.068705][ T5899] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 367.244498][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 367.572830][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.628391][ T5869] usb-storage 4-1:1.126: USB Mass Storage device detected [ 367.763464][ T5869] usb-storage 4-1:1.126: Quirks match for vid 0525 pid a4a5: 10000 [ 367.763792][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.823481][ T5869] usb 4-1: USB disconnect, device number 25 [ 367.922832][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 367.938014][ T5899] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 367.947493][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.982862][ T5899] usb 2-1: config 0 descriptor?? [ 368.121242][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.952'. [ 368.131313][ T9573] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 368.814123][ T9591] FAULT_INJECTION: forcing a failure. [ 368.814123][ T9591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.827444][ T9591] CPU: 1 UID: 0 PID: 9591 Comm: syz.4.958 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 368.837713][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.847794][ T9591] Call Trace: [ 368.851094][ T9591] [ 368.854046][ T9591] dump_stack_lvl+0x241/0x360 [ 368.858775][ T9591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.864006][ T9591] ? __pfx__printk+0x10/0x10 [ 368.868626][ T9591] ? __pfx_lock_release+0x10/0x10 [ 368.873745][ T9591] should_fail_ex+0x3b0/0x4e0 [ 368.878458][ T9591] _copy_from_user+0x2d/0xb0 [ 368.883076][ T9591] ptp_ioctl+0x98e/0x3320 [ 368.887441][ T9591] ? __pfx_ptp_ioctl+0x10/0x10 [ 368.892240][ T9591] ? rcu_is_watching+0x15/0xb0 [ 368.897043][ T9591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.903052][ T9591] ? __pfx_smack_log+0x10/0x10 [ 368.907852][ T9591] ? smack_file_ioctl+0x2f7/0x3a0 [ 368.912917][ T9591] ? __fget_files+0x2a/0x410 [ 368.917541][ T9591] ? __pfx_ptp_ioctl+0x10/0x10 [ 368.922338][ T9591] posix_clock_ioctl+0x100/0x140 [ 368.927387][ T9591] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 368.932865][ T9591] __se_sys_ioctl+0xf5/0x170 [ 368.937486][ T9591] do_syscall_64+0xf3/0x230 [ 368.942049][ T9591] ? clear_bhb_loop+0x35/0x90 [ 368.946751][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.952670][ T9591] RIP: 0033:0x7fe423185d29 [ 368.957103][ T9591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.976741][ T9591] RSP: 002b:00007fe423f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.985185][ T9591] RAX: ffffffffffffffda RBX: 00007fe423376160 RCX: 00007fe423185d29 [ 368.993175][ T9591] RDX: 0000000020000300 RSI: 00000000c0603d06 RDI: 0000000000000009 [ 369.001166][ T9591] RBP: 00007fe423f33090 R08: 0000000000000000 R09: 0000000000000000 [ 369.009166][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.017159][ T9591] R13: 0000000000000000 R14: 00007fe423376160 R15: 00007fff90758c18 [ 369.025172][ T9591] [ 369.557585][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.582025][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.589936][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.600281][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.615208][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.622526][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.637335][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.650775][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.660615][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.668445][ T5899] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 369.692356][ T5899] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 369.727901][ T5899] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 369.739721][ T5870] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 369.749783][ T5899] microsoft 0003:045E:07DA.000B: no inputs found [ 369.757405][ T5899] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 369.911997][ T5870] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 369.912034][ T5870] usb 3-1: can't read configurations, error -22 [ 370.594584][ T5870] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 371.759967][ T5913] usb 2-1: USB disconnect, device number 20 [ 371.838906][ T5870] usb 3-1: device descriptor read/all, error -71 [ 371.969489][ T5870] usb usb3-port1: attempt power cycle [ 372.768168][ T9624] netlink: 'syz.1.966': attribute type 21 has an invalid length. [ 372.775963][ T9624] netlink: 128 bytes leftover after parsing attributes in process `syz.1.966'. [ 372.784995][ T9624] netlink: 3 bytes leftover after parsing attributes in process `syz.1.966'. [ 373.254722][ T9614] netlink: 'syz.4.964': attribute type 21 has an invalid length. [ 373.262499][ T9614] netlink: 128 bytes leftover after parsing attributes in process `syz.4.964'. [ 373.271583][ T9614] netlink: 3 bytes leftover after parsing attributes in process `syz.4.964'. [ 373.358205][ T9632] netlink: 136 bytes leftover after parsing attributes in process `syz.1.969'. [ 373.369587][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 373.370879][ T9632] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 373.609785][ T9646] affs: No valid root block on device nbd0 [ 374.160274][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 375.523875][ T9667] netlink: 'syz.4.979': attribute type 21 has an invalid length. [ 375.533014][ T9667] netlink: 128 bytes leftover after parsing attributes in process `syz.4.979'. [ 375.542767][ T9667] netlink: 3 bytes leftover after parsing attributes in process `syz.4.979'. [ 481.024355][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 481.031371][ C1] rcu: 0-...0: (1 GPs behind) idle=5ac4/1/0x4000000000000000 softirq=29170/29171 fqs=2100 [ 481.041382][ C1] rcu: hardirqs softirqs csw/system [ 481.047801][ C1] rcu: number: 0 0 0 [ 481.054223][ C1] rcu: cputime: 0 0 0 ==> 52550(ms) [ 481.062035][ C1] rcu: (detected by 1, t=10506 jiffies, g=26969, q=102 ncpus=2) [ 481.069775][ C1] Sending NMI from CPU 1 to CPUs 0: [ 481.069810][ C0] NMI backtrace for cpu 0 [ 481.069826][ C0] CPU: 0 UID: 0 PID: 9676 Comm: syz.4.981 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 481.069845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 481.069856][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 481.069884][ C0] Code: cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 c0 d4 03 00 65 8b 05 00 5d 64 7e 25 00 01 ff 00 74 [ 481.069900][ C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000046 [ 481.069917][ C0] RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffffffff818d029d [ 481.069929][ C0] RDX: ffff888025c03c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 481.069941][ C0] RBP: 0000000000000001 R08: ffffffff818d02c3 R09: 1ffffffff2031a9e [ 481.069952][ C0] R10: dffffc0000000000 R11: fffffbfff2031a9f R12: 1ffff110170c593b [ 481.069966][ C0] R13: dffffc0000000000 R14: ffff88805ed75340 R15: ffff8880b862c980 [ 481.069979][ C0] FS: 00007fe423f546c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 481.069994][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.070005][ C0] CR2: 0000000020003c80 CR3: 0000000035d1e000 CR4: 00000000003526f0 [ 481.070020][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 481.070030][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 481.070041][ C0] Call Trace: [ 481.070049][ C0] [ 481.070058][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 481.070095][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 481.070124][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 481.070171][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 481.070205][ C0] ? nmi_handle+0x14f/0x5a0 [ 481.070233][ C0] ? nmi_handle+0x2a/0x5a0 [ 481.070261][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 481.070288][ C0] ? default_do_nmi+0x63/0x160 [ 481.070323][ C0] ? exc_nmi+0x123/0x1f0 [ 481.070356][ C0] ? end_repeat_nmi+0xf/0x53 [ 481.070390][ C0] ? debug_deactivate+0x83/0x220 [ 481.070423][ C0] ? debug_deactivate+0x5d/0x220 [ 481.070457][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 481.070485][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 481.070513][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 481.070540][ C0] [ 481.070549][ C0] [ 481.070558][ C0] debug_deactivate+0x83/0x220 [ 481.070591][ C0] __hrtimer_run_queues+0x305/0xd30 [ 481.070635][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 481.070681][ C0] ? sched_clock+0x4a/0x70 [ 481.070705][ C0] ? rcu_is_watching+0x15/0xb0 [ 481.070729][ C0] hrtimer_interrupt+0x403/0xa40 [ 481.070779][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 481.070800][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 481.070820][ C0] [ 481.070825][ C0] [ 481.070831][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.070854][ C0] RIP: 0010:xas_find_marked+0x33a/0x10e0 [ 481.070878][ C0] Code: 41 00 00 00 89 de e8 e5 1f df f5 80 fb 40 0f 87 44 09 00 00 e8 d7 1c df f5 48 8d 5c dd 28 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 dc fc 42 f6 48 8b 2b e8 74 ce 01 00 89 c3 31 ff [ 481.070892][ C0] RSP: 0018:ffffc9000c70f970 EFLAGS: 00000246 [ 481.070907][ C0] RAX: 1ffff110046834d6 RBX: ffff88802341a6b0 RCX: ffff888025c03c00 [ 481.070921][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000041 [ 481.070931][ C0] RBP: ffff88802341a680 R08: ffffffff8bc057cb R09: 0000000000000000 [ 481.070943][ C0] R10: ffffc9000c70fa80 R11: fffff520018e1f53 R12: ffffffff8ea803a0 [ 481.070956][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920018e1f4d [ 481.070971][ C0] ? xas_find_marked+0x31b/0x10e0 [ 481.071000][ C0] __xa_alloc+0x209/0x3f0 [ 481.071025][ C0] ? __pfx___xa_alloc+0x10/0x10 [ 481.071050][ C0] ? rcu_is_watching+0x15/0xb0 [ 481.071073][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 481.071090][ C0] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 481.071109][ C0] alloc_vfsmnt+0x63/0x490 [ 481.071133][ C0] clone_mnt+0x6b/0xc90 [ 481.071155][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 481.071181][ C0] ? attach_mnt+0x4ed/0x600 [ 481.071204][ C0] copy_tree+0x482/0x940 [ 481.071229][ C0] ? copy_mnt_ns+0x185/0x960 [ 481.071246][ C0] copy_mnt_ns+0x185/0x960 [ 481.071260][ C0] ? rcu_is_watching+0x15/0xb0 [ 481.071283][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 481.071298][ C0] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 481.071318][ C0] create_new_namespaces+0xd3/0x7b0 [ 481.071344][ C0] ? safesetid_security_capable+0xb2/0x1d0 [ 481.071369][ C0] ? bpf_lsm_capable+0x9/0x10 [ 481.071386][ C0] ? security_capable+0x7e/0x2d0 [ 481.071405][ C0] unshare_nsproxy_namespaces+0x124/0x180 [ 481.071433][ C0] ksys_unshare+0x57d/0xa70 [ 481.071454][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 481.071471][ C0] ? rcu_is_watching+0x15/0xb0 [ 481.071493][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 481.071512][ C0] ? rcu_is_watching+0x15/0xb0 [ 481.071537][ C0] __x64_sys_unshare+0x38/0x40 [ 481.071554][ C0] do_syscall_64+0xf3/0x230 [ 481.071575][ C0] ? clear_bhb_loop+0x35/0x90 [ 481.071598][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.071619][ C0] RIP: 0033:0x7fe423185d29 [ 481.071634][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.071649][ C0] RSP: 002b:00007fe423f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 481.071672][ C0] RAX: ffffffffffffffda RBX: 00007fe423376080 RCX: 00007fe423185d29 [ 481.071684][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 481.071694][ C0] RBP: 00007fe423201b08 R08: 0000000000000000 R09: 0000000000000000 [ 481.071705][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.071715][ C0] R13: 0000000000000001 R14: 00007fe423376080 R15: 00007fff90758c18 [ 481.071733][ C0]