last executing test programs: 14.511817433s ago: executing program 0 (id=340): socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="5c00000012003144c45a706639756bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182890a3925f928d612387c286c6d2e949a3651f60a84c9f4d493531699cc2eb4cfdf093628f69ec3a757385d39a9241e08fed80d335bce3f009570c5239cafe7db844bc17f32a2bd56d9ae57fa20971d3bfd5f3d9e72fd825b070b8978debc1e", 0xa4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x42, 0x0, "2431d053efa3641776f56c7556fd3733097bd0072677bc6fefff07c9e94e420b0ea4fbc5b04b46ddab72b1b8c5eaf216ad6db80d8dfe250000000000000000000000000000008000"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "aeb81f8ee3a82d77eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x48, 0x0, "9f49dd14fbfc83dbf55eb735635909c08a09bca3905a8f1d60afe042a06a9994f05e6a0cd8471a721dc085af197b661db4ea9f5561edabfe928ebc44441aa780260867153f6472a072107374cfc5bd5f"}, 0xd8) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x35, 0x94, 0x97, 0x40, 0x110a, 0x1450, 0xc2c6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xf6, 0xb9}}]}}]}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x40) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'veth0\x00', {0x1}}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000002c0)={0x0, 'bond_slave_0\x00'}) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000480)=""/219, 0xe1}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000006c0)=""/237, 0x12e}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x8}, 0x0) 14.127682728s ago: executing program 0 (id=342): syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015e5a5010203010902120001000000000904"], 0x0) syz_emit_vhci(&(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x9a) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x1, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xb}, 0x10}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xff, 0x1, 0xffffffff, 0xa41, r1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002420880b0000000000000021400086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x46, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24000041) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0xfe26, 0x0, 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f000001aa80)=""/102391, 0xfffffffffffffd2f}], 0x1, 0x8000000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12.459240728s ago: executing program 0 (id=350): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xac, "e6b4f37c72fdd711fce486ac6245520ab451abfa398e9ea2ce422b923920af0d77ffcdd42961732683dd94903c356cf0dfd9f2d8dc377e8033884da993c6b915cbb3bb4e119853ff98a6a55e80a25dec8b0ec03e2618950d5209b9ab1ae2fdf5f045f3e99cb6df559a75eceadeba3c64fc24f768110d070d4b4b2d5d55b8fd25a74f8d740a7506a12dfcd652942f93c1e413eed791bd53806da4d6329c4d67d48ba5e7d2b69afbcd5c962b03"}, &(0x7f0000000200)=0xb4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003680)={@ifindex, 0xffffffffffffffff, 0x2b}, 0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0)={r1, 0xa9, "af4a165e8173ca5eb607000000032be922c99beb2d1a39340f056476ac1b71bf9b9b9ea1d60efaa1c1ce08037d07c4a9c8062cc7e1a49baa4fa7ac7028cb09bd469016927053fd363d8d657eae20aa224fdcff525e15c02a864626439cbb987d8c47b4c0a679260379cbd5cc8f05849e9b732fb797e853e7d9c3733d0843fc46db6c1de8c8de0908fa46f372c8904e589ecd997235ec5ffa12144439d26d14050c012eb5da1838dff9"}, &(0x7f0000000280)=0xb1) syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xc2) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\t\n\v\xed\x14\x9e\xed\x04F\x05\x00\x00\x00\x00\x00\x00\x00C\xb6dd\x82\x85Y\xc3:B>$\xee\xdda\xae\x18\x02D\xd0H\x10\xf4L\xb2\f\xb0t\xe3j\x95\x96m+\x0f\x8c7P\x00?\x14q\x013\x90\xae\xbf\xc7\x00\x1c\xb6\xefi\xf8$k\xb4\xca\x1a\xe9\xac\xc4\x17\xd1\x86?\xf1\x7f=\xa4\f*\xfd\xe1\xe5\x98\x92q\x06\x1b^\xe1\x9ch:\xdcw9\r\xf2\xd1\x9b\xfb\xcb\xa9\x91s\xc6\xcd\x92\xd9\xc7\xd7\xd0@<\x12\xb5\xa8\x81\xf3u\x82\x15\xde\xfeP\xa1\x83l\x92\xaf\xf5\xf8\xb0U6\xf3q\x9b_\xdb\xa6d\xee\x1e\xd2\x1aa\xd1\xb0\x19\x93\xaa\xf55._\x04:\x86k\xe6\t/\x1e\xdf\xae\x1a\xad\xedJ\x14\xb8d\x8d\xb8\xe7H\xb3\xa4\xdcT\xcfF\xeb\"\x88@\x83MKT\x92Ub\x93\xf1?J\x9f\xee\xa5\xf5S\xc2\xec\xbe;m\x85\xc7\xfd!\x86\xfd.\xcf\x98\x888\xb8F-\xbf\xa59l\xc5\x1f\x00l\x0e\xe9\xd2o\x14G\x01\xa8X'}]}, 0x104) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 11.78075006s ago: executing program 0 (id=355): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x1, 0xffffffffffffffff}}, 0x28) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x9, 0x6, 0xfffffffa, 0x5, 0x6]}, &(0x7f00000001c0)=0x54) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00?']) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x5, 0x4) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0x9, @sliced}) 10.799150041s ago: executing program 0 (id=359): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES16=r2]) (fail_nth: 5) 10.378757146s ago: executing program 0 (id=364): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) io_uring_setup(0xc8e, &(0x7f0000000040)) r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="05003901"], 0x44}}, 0x0) signalfd(r1, &(0x7f0000000140)={[0x4]}, 0x8) 8.567951879s ago: executing program 3 (id=374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x7}, 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x48) (rerun: 64) r2 = dup3(r0, r1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x801, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async, rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xfffffffd, 0x0) (async) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0xfffffea9) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) (async) accept4(r5, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2000000, 0x12, r4, 0x0) (async) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000500)={{0xa, 0x4e1a, 0x1, @private1, 0x1}, {0xa, 0x0, 0xfffffe5d, @ipv4={'\x00', '\xff\xff', @remote}}, 0x0, {[0x8, 0x0, 0x8, 0x0, 0x0, 0x10000004]}}, 0x5c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) shutdown(r5, 0x1) (rerun: 32) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x80, &(0x7f00000005c0), 0x1000000000000005, 0x0, 0x0, 0x11000000}, 0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000080)=0x372b, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) 8.312868317s ago: executing program 3 (id=376): r0 = socket(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000011c0)={0x0, 0x0, 0x0, {0x0, @vbi}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2, 0x8010, r1, 0x83000000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001", @ANYRES16=r0], 0x7c}}, 0x4004004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a547884a5095cf5e2050600000000000000000100000008000a40000000000900020073797a32000000000000010073797a30000000000800054000000014140000110001000000000000"], 0x64}}, 0x4000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7.279635224s ago: executing program 3 (id=382): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00006b8000/0x2000)=nil, 0x2000, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x1f, &(0x7f0000000000), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a000207000040030000000000000005001a00ac1e0001000000000000ff0200000000000000000000000000010000a900000000000000b086ec801fc87f67e692547da015b5362283d50d1530d147150c7c437eeb0aa07032d676faa09505a4b2bf38c192460217ca50f1dd25a12100a8d4cd3847511da23dbc2eb93ad40f28fef077749db4bf"], 0x38}}, 0x0) 6.498089826s ago: executing program 3 (id=385): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000040), 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001000)={&(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x4103}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.299838914s ago: executing program 3 (id=386): socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, &(0x7f0000000080)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102503000000000000000109025c0002010000000904000001020d0041bc6baa872a7e731200000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050004"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "000000fd80"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x0, "6e306b3925024a000000004118f25b2040a2f0ffffff00000000000300", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x0, "ce0edfe3181085c23e75a96da420cfa0c88d3f4ecf5ebc10d54e511ebdb8b8f6", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"30263524476fc10251347f3066dc0e9b4ca4ea9f23df5151913b5724eee322d1", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000440)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="041817aaaaaaaaaa10eab040243e93590b3c644b8922069b8206"], 0x1a) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) 6.049814733s ago: executing program 1 (id=387): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) 4.916221316s ago: executing program 4 (id=391): r0 = socket(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000011c0)={0x0, 0x0, 0x0, {0x0, @vbi}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2, 0x8010, r1, 0x83000000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001", @ANYRES16=r0], 0x7c}}, 0x4004004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a547884a5095cf5e2050600000000000000000100000008000a40000000000900020073797a32000000000000010073797a30000000000800054000000014140000110001000000000000"], 0x64}}, 0x4000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.279626118s ago: executing program 3 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}}, 0x0) 3.928410231s ago: executing program 1 (id=394): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000180)) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902240001"], 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffff81f793350000000011424203"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) 3.925535089s ago: executing program 4 (id=396): ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d08, &(0x7f0000000280)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={r1, 0x0, 0x2000, 0x10000}) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x9, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000000000000000c00020074756e6c30000000000000000000000008000300"], 0x3c}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES8, @ANYRESHEX=r4, @ANYBLOB="ff7f000001f90000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x40004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000440)=0x1, 0x4) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000008, 0x4000053, r6, 0x180000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x7) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = dup2(r8, r9) sendmmsg$inet(r10, &(0x7f0000000dc0), 0x0, 0x8000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f00000002c0)={0x54, 0x9, 0x0, 0x5, 0x2, [0x0, 0x1, 0x2, 0x7]}) sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x348}}, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1}]}) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) 2.901169738s ago: executing program 4 (id=397): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x6752, &(0x7f0000000040)={0x0, 0xb01c, 0x400, 0x1, 0x129}, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000440)={0x3, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/224, 0xe0}], &(0x7f0000000400)=[0x6d]}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f0000000140), 0x5, 0x0) r3 = syz_open_dev$media(&(0x7f0000000b80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000c80)={0x80000000, 0x0, &(0x7f0000000c00)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000000c0)={r4, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000f80)={{}, {0x80000000, r5}}) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.767812635s ago: executing program 2 (id=398): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2c42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0xc216ff28c1bcdef5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0xffe) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.671210563s ago: executing program 4 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000240)={0x0, 0x4, 0x80, 0x10000000}, &(0x7f00000001c0), &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xd) syz_emit_vhci(0x0, 0xe) syz_emit_vhci(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) pipe(0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04140602c90004990b"], 0x9) r2 = geteuid() quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0442029c00000046f372aa55f3f069afcbad2d92689801cb"], 0xa) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$sequencer(r3, &(0x7f0000000140)=ANY=[@ANYRES8=r3], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001240)="e1559a5e60105410b305c60625655dff", 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3f, 0x1}]}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000400)=0x4, 0x8) add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000300)="5ea6a58c52f8ac1df9ea63ac32004673c8c51bde6722e926c732a44ade2c4c153562a0fb8fa191dbc1281c98cd6db089948928dd54ca34205bf05e988aaf8bca87b56c1e3907e8dfa10077ed7bd211e3be5e42d5e1", 0x55, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x2}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 2.510676468s ago: executing program 2 (id=400): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x16, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x16, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3}, &(0x7f00000001c0)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) (async) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000c0e6462000000900000003824be39dbe78d2c00000000e2daf1d73d1491be0d2245afa100479009db22e93d59d7ae57b1073e20974072519d70e61906f34b6cb7d6922ec24ab75e185bb770964f476060796af7639402ecb69acccda2a7a8a9234c0875cd9f0a9440a369614d2f5e785cdc8dd479254f8829ff92f6c1773ae5111ed1436a55c0f71343b1eaa2cf1213f526636907ec8fedc893666c6dccad2feac1dc4c576e9ad15a9a1d672759960a7ef3dca58a4e0f80847ccc681168d36464073740cd985d4b8ecac731ef5c9c1eec73f3d3ce5939b45e4bba7923ee327d50698fbcba"], 0xfec0) (async) write$sequencer(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000c0e6462000000900000003824be39dbe78d2c00000000e2daf1d73d1491be0d2245afa100479009db22e93d59d7ae57b1073e20974072519d70e61906f34b6cb7d6922ec24ab75e185bb770964f476060796af7639402ecb69acccda2a7a8a9234c0875cd9f0a9440a369614d2f5e785cdc8dd479254f8829ff92f6c1773ae5111ed1436a55c0f71343b1eaa2cf1213f526636907ec8fedc893666c6dccad2feac1dc4c576e9ad15a9a1d672759960a7ef3dca58a4e0f80847ccc681168d36464073740cd985d4b8ecac731ef5c9c1eec73f3d3ce5939b45e4bba7923ee327d50698fbcba"], 0xfec0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @ptr=0x20001100}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @ptr=0x20001100}}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r11, &(0x7f0000001ec0)=ANY=[@ANYRES8=r0, @ANYRES32=r11, @ANYRESDEC=r9, @ANYRES32=r8, @ANYRES32, @ANYBLOB="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"], 0x118) (async) write$UHID_CREATE2(r11, &(0x7f0000001ec0)=ANY=[@ANYRES8=r0, @ANYRES32=r11, @ANYRESDEC=r9, @ANYRES32=r8, @ANYRES32, @ANYBLOB="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"], 0x118) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.216066401s ago: executing program 2 (id=401): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (fail_nth: 1) 1.814444532s ago: executing program 1 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}}, 0x0) 1.782701517s ago: executing program 2 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.metadata\x00', &(0x7f0000000180)=""/86, 0x56) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000180), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x10, {0x0, "3ff2a0163ce2", @short="2ae612e08360dbd2"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}]]}, 0x64}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@updsa={0x100, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x0, 0x6c}, @in6=@private1, {0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8, 0x16, 0xe}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x100}}, 0x0) 1.661740773s ago: executing program 4 (id=404): r0 = socket(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000011c0)={0x0, 0x0, 0x0, {0x0, @vbi}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2, 0x8010, r1, 0x83000000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001", @ANYRES16=r0], 0x7c}}, 0x4004004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a547884a5095cf5e2050600000000000000000100000008000a40000000000900020073797a32000000000000010073797a30000000000800054000000014140000110001000000000000"], 0x64}}, 0x4000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.61985437s ago: executing program 1 (id=405): futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, &(0x7f00000003c0), 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=[{'SYNTH', @val={' \'', 'Master Capture Switch'}}], 0x33) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000080), 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x0, &(0x7f0000000180)) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, 0x0, 0x0, 0x10002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="057a695e23a2594b02", 0x9, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x5522, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x1f6, &(0x7f0000010140)=ANY=[@ANYBLOB="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"], 0x0) 1.363822285s ago: executing program 2 (id=406): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdd, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xa452, 0x0, 0xffffffffffffffff, 0x240, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfffffffffffeffff, 0x80000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = userfaultfd(0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7d}) read(r3, 0x0, 0x0) 1.312850718s ago: executing program 1 (id=407): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) io_uring_setup(0x51c2, &(0x7f0000000200)) syz_io_uring_setup(0x6865, &(0x7f0000000280), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@local, 0x2}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x1010002) socket$tipc(0x1e, 0x2, 0x0) 751.372773ms ago: executing program 4 (id=408): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xfff, @mcast2, 0x1}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x3, @empty, 0x6}]}, &(0x7f0000000100)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000200016801c00018018000c801400010000000081"], 0x48}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @private2, 0x101}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000440)="530e5059d98fa81270826aa0b03cc0ad985e112d32ad160f5153e9e73563f31ebb02ceeaba42d20fec613130545aeeab4c0b5a8df00382cb866cc1ed9354dfd200fdd2d36a22ab9dcc386f3b2d143146c290f884dc42d84a", 0x58}, {&(0x7f0000000740)="a3445f6fcd7cf8ef7977b52bc737633601fc7bb4e09479e41f46f7a7cc2502f6ce8911b82b347b446232f522a187f0def8f181d28c1a1cc69934c54a61157f8be7eecc20ee88d30146a160dde1144492a5a54c", 0x53}, {&(0x7f0000000300)="1b053acdbc6e63788c6d3a9de7", 0xd}], 0x3, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}, r3}}}], 0x28}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000840)="e1e79abe4d9757a9bfb1a20d641ac7c7f84069a88be1d15f4299d70b9ea1175594cc058573dc9db8f32fc253da775d57de35e0bfddefaa6879f9d2eb6e3d2ad648c8f72598b6cbe31c9ddf17f184a130d9a8a503c4f5afe9859e9218183917c577c2f986bb838201595de3c450719c2cfa903eded74c9a4462369e6537ac3c50418ad4e04d000409f3736378e6c2", 0x8e}, {&(0x7f0000000900)="1bf943e541752fe81663bd4c5f107810c301a051445f8120fd6aa917e1efe610560119ee27ce0705e73fd89eaee7bf2779289636547715dd77ba3622cdb27047b95e8901aa22be138cdb6db3e67c077bb0fedcb00dd95f578bbe349b37121296df5bf30ecfcab0ba192c7aa64524906e7567b5306e337ff66baf2bf443f3a57fd771320508cf092a3cf61e931bdc8f22f88dc4200cb8f61de20c58bb4a35977842e66856defb4cdc7104ea6c111985508ef198e6e626155de3d2fdc5152aab4c769e6bee33", 0xc5}, {&(0x7f0000000a00)="40bbb2fdd8ca07abca59c3a847c724a6d2eb2fae36da61fb12f2387bc650277802ab2f3e23273c810bcf67637c7a4ae9c194051b695f85e0156917514c39eee0745e2e5181fa7cf171f63242ff28df5a7d05d29378827560afc43ceb42124ac29c6aee81c226ec4c73eba853e2e09e0d505a71ead85c5d12cfb56a81cabf562b8609dde8603c9d27bd2ac368f3d405738335f7a74184df233487f6157c3353c16662efa9a9665a3fdf16918953b61a4291e7ee5b32e7b0e86949f9f280a94d87cb78d002e1f6436b607975ec0c9da12b50eada5f40c4be6126e5e93b8797efb66cdfb5c752eb4d6c0e1053dc416b", 0xee}], 0x3, &(0x7f0000000b40)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x2e, 0x5, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff9}}, @tclass={{0x14, 0x29, 0x43, 0xb73}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x1, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3b, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5f}, @ra={0x5, 0x2, 0x16e5}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x32}}}, @rthdr={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x1, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0xff}, @jumbo={0xc2, 0x4, 0x10}]}}}], 0x168}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x8a, &(0x7f00000000c0)=""/138, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xb, 0x6, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x1, 0x2, 0xe, 0x5}], 0x10, 0x3}, 0x90) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x0, 0x4, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000001240)={{r5}, "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"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 291.852627ms ago: executing program 2 (id=409): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x0, [], 0x0, 0x0, 0x0}, 0x108) (fail_nth: 1) 0s ago: executing program 1 (id=410): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000180)) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902240001"], 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffff81f793350000000011424203"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) kernel console output (not intermixed with test programs): 106.100857][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.119484][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.129341][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 106.144073][ T25] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 106.154739][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.171105][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.190759][ T25] usb 3-1: config 0 descriptor?? [ 106.200937][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.256618][ T6052] team0: Port device team_slave_0 added [ 106.306132][ T6052] team0: Port device team_slave_1 added [ 106.365889][ T5926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.440048][ T5926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.448505][ T5236] Bluetooth: hci1: command tx timeout [ 106.454232][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.488343][ T5926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.495620][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.539729][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.546722][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.596358][ T6052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.616136][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.635822][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.664062][ T6052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.689313][ T5926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.931859][ T6052] hsr_slave_0: entered promiscuous mode [ 106.953078][ T6052] hsr_slave_1: entered promiscuous mode [ 107.390482][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.586622][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.681197][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.688513][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.791197][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.798447][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.989696][ T6136] netlink: 'syz.3.170': attribute type 3 has an invalid length. [ 108.013646][ T6136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.170'. [ 108.027606][ T5288] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 108.049813][ T6136] netlink: 'syz.3.170': attribute type 3 has an invalid length. [ 108.087679][ T6136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.170'. [ 108.126180][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 108.147508][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 108.160014][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.167608][ T6052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.183635][ T25] usb 3-1: USB disconnect, device number 16 [ 108.194291][ T6052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.237896][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 108.259284][ T5288] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice= 8.55 [ 108.274917][ T6052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.282047][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.303223][ T6052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.312689][ T5288] usb 2-1: Product: syz [ 108.319133][ T5288] usb 2-1: Manufacturer: syz [ 108.324369][ T5288] usb 2-1: SerialNumber: syz [ 108.356622][ T5288] usb 2-1: config 0 descriptor?? [ 108.389017][ T5288] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 108.441846][ T5926] veth0_vlan: entered promiscuous mode [ 108.496741][ T5926] veth1_vlan: entered promiscuous mode [ 108.538136][ T5236] Bluetooth: hci1: command tx timeout [ 108.578354][ T5926] veth0_macvtap: entered promiscuous mode [ 108.605558][ T5288] usb 2-1: qt2_attach - failed to power on unit: -71 [ 108.615429][ T5926] veth1_macvtap: entered promiscuous mode [ 108.621681][ T5288] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 108.649980][ T5288] usb 2-1: USB disconnect, device number 15 [ 108.681456][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.738423][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.749923][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.782752][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.803056][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.823930][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.848634][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.878284][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.918946][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.954605][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.961830][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.005995][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.024510][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.035904][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.048322][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.058916][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.080372][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.106452][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.129899][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.137534][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.149349][ T5926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.158658][ T5926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.177330][ T5926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186101][ T5926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.198556][ T5288] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 109.427631][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 109.449480][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 109.516490][ T5288] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 109.547401][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.581450][ T5288] usb 3-1: config 0 descriptor?? [ 109.648059][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.673341][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.704630][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.815492][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.843027][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.942578][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.942812][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.998308][ T6052] veth0_vlan: entered promiscuous mode [ 110.041378][ T6052] veth1_vlan: entered promiscuous mode [ 110.196040][ T6052] veth0_macvtap: entered promiscuous mode [ 110.253476][ T6052] veth1_macvtap: entered promiscuous mode [ 110.443246][ T25] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/1 [ 110.443789][ T25] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 110.458449][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.458505][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.458514][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.458526][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.458537][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.458548][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.458558][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.458571][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.460208][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.465414][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.465727][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.467698][ T5288] hid (null): invalid report_size 58537 [ 110.467731][ T5288] hid (null): unknown global tag 0xd [ 110.471779][ T5288] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 110.511356][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.677424][ T5236] Bluetooth: hci1: command tx timeout [ 110.691929][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.691945][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.691961][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.691979][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.691992][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.692009][ T6052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.692022][ T6052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.694106][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.701462][ T6052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.701497][ T6052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.701523][ T6052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.701547][ T6052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.708950][ T5288] hid-generic 0003:0158:0100.0005: unexpected long global item [ 110.839394][ T5288] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 110.954784][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.963651][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.046657][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 111.046675][ T29] audit: type=1326 audit(1722163397.964:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.177439][ T29] audit: type=1326 audit(1722163397.974:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.231312][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.251979][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.274611][ T29] audit: type=1326 audit(1722163397.974:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.336934][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.347479][ T29] audit: type=1326 audit(1722163397.974:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.371369][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.408075][ T29] audit: type=1326 audit(1722163397.974:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.442044][ T25] usb 3-1: USB disconnect, device number 17 [ 111.498944][ T29] audit: type=1326 audit(1722163398.244:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.550126][ T939] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 111.557977][ T29] audit: type=1326 audit(1722163398.244:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.777415][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 111.785402][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.802522][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.817950][ T939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.844582][ T29] audit: type=1326 audit(1722163398.764:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.848212][ T6197] FAULT_INJECTION: forcing a failure. [ 111.848212][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 111.867100][ T939] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.887119][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.4.179 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 111.899089][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 111.909179][ T6197] Call Trace: [ 111.912566][ T6197] [ 111.915513][ T6197] dump_stack_lvl+0x241/0x360 [ 111.920226][ T6197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.925460][ T6197] ? __pfx__printk+0x10/0x10 [ 111.930079][ T6197] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 111.935653][ T6197] ? __pfx___might_resched+0x10/0x10 [ 111.940973][ T6197] should_fail_ex+0x3b0/0x4e0 [ 111.945699][ T6197] ? audit_log_start+0x15e/0xa30 [ 111.950657][ T6197] should_failslab+0xac/0x100 [ 111.955365][ T6197] ? audit_log_start+0x15e/0xa30 [ 111.957394][ T29] audit: type=1326 audit(1722163398.764:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 111.960304][ T6197] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 111.987747][ T6197] audit_log_start+0x15e/0xa30 [ 111.989345][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.992526][ T6197] ? __pfx_audit_log_start+0x10/0x10 [ 112.005780][ T6197] ? migrate_enable+0x3b5/0x520 [ 112.010664][ T6197] ? __pfx_migrate_enable+0x10/0x10 [ 112.015886][ T6197] ? __pfx___cant_migrate+0x10/0x10 [ 112.021110][ T6197] audit_seccomp+0x63/0x1f0 [ 112.021145][ T939] usb 2-1: config 0 descriptor?? [ 112.025612][ T6197] ? migrate_disable+0xce/0x180 [ 112.035408][ T6197] __seccomp_filter+0xb38/0x1fe0 [ 112.040374][ T6197] ? vfs_write+0x7c4/0xc90 [ 112.044824][ T6197] ? __pfx___seccomp_filter+0x10/0x10 [ 112.045539][ T29] audit: type=1326 audit(1722163398.764:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 112.050198][ T6197] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.050226][ T6197] ? __fget_files+0x3f6/0x470 [ 112.050266][ T6197] ? __secure_computing+0x125/0x370 [ 112.050290][ T6197] syscall_trace_enter+0xa8/0x150 [ 112.050311][ T6197] do_syscall_64+0xcc/0x230 [ 112.050331][ T6197] ? clear_bhb_loop+0x35/0x90 [ 112.050356][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.050378][ T6197] RIP: 0033:0x7fa120377299 [ 112.050395][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.050409][ T6197] RSP: 002b:00007fa1211fe048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.050428][ T6197] RAX: ffffffffffffffda RBX: 00007fa120505f80 RCX: 00007fa120377299 [ 112.050442][ T6197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 112.050454][ T6197] RBP: 00007fa1211fe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.050467][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.050478][ T6197] R13: 000000000000000b R14: 00007fa120505f80 R15: 00007fa12062fa38 [ 112.050503][ T6197] [ 112.050594][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.387550][ T5284] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.515316][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.522808][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.523925][ T6243] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 112.534608][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.546147][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.567534][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.574808][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.597601][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 112.619242][ T5289] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.619811][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.653699][ T5284] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice= 8.55 [ 112.668408][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.676697][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.684641][ T5284] usb 1-1: Product: syz [ 112.693629][ T5284] usb 1-1: Manufacturer: syz [ 112.698989][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.707669][ T5284] usb 1-1: SerialNumber: syz [ 112.714924][ T939] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 112.722960][ T5284] usb 1-1: config 0 descriptor?? [ 112.734151][ T5284] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 112.785767][ T939] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input10 [ 112.804263][ T6246] kvm: emulating exchange as write [ 112.809818][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 112.814026][ T939] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 112.826942][ T5289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.826992][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.827019][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.827041][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.827064][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.830358][ T5289] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.934081][ T5289] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.948163][ T5289] usb 4-1: Manufacturer: syz [ 112.961419][ T5284] usb 1-1: qt2_attach - failed to power on unit: -71 [ 112.982841][ T5284] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 113.004905][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 113.010213][ T5284] usb 1-1: USB disconnect, device number 6 [ 113.072607][ T5289] usb 4-1: config 0 descriptor?? [ 113.178307][ T5283] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 113.193091][ T939] usb 2-1: USB disconnect, device number 16 [ 113.377476][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 113.397649][ T5289] rc_core: IR keymap rc-hauppauge not found [ 113.403588][ T5289] Registered IR keymap rc-empty [ 113.414473][ T5283] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 113.416973][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.450208][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.463109][ T5283] usb 3-1: Product: syz [ 113.467832][ T5283] usb 3-1: Manufacturer: syz [ 113.467867][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.481916][ T5283] usb 3-1: SerialNumber: syz [ 113.515413][ T5283] usb 3-1: config 0 descriptor?? [ 113.515794][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 113.530116][ T5289] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 113.560782][ T6231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.185'. [ 113.564215][ T5283] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 113.579845][ T5289] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 113.673477][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.747051][ T6273] FAULT_INJECTION: forcing a failure. [ 113.747051][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 113.768011][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.793223][ T6273] CPU: 1 UID: 0 PID: 6273 Comm: syz.0.189 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 113.803511][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 113.813585][ T6273] Call Trace: [ 113.816877][ T6273] [ 113.819824][ T6273] dump_stack_lvl+0x241/0x360 [ 113.824533][ T6273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.829761][ T6273] ? __pfx__printk+0x10/0x10 [ 113.834371][ T6273] ? __kmalloc_node_noprof+0xb7/0x440 [ 113.839775][ T6273] ? __pfx___might_resched+0x10/0x10 [ 113.845093][ T6273] should_fail_ex+0x3b0/0x4e0 [ 113.849802][ T6273] should_failslab+0xac/0x100 [ 113.854498][ T6273] __kmalloc_node_noprof+0xdf/0x440 [ 113.859713][ T6273] ? __kvmalloc_node_noprof+0x72/0x190 [ 113.865204][ T6273] __kvmalloc_node_noprof+0x72/0x190 [ 113.866340][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.870488][ T6273] io_futex_cache_init+0x38/0x110 [ 113.870513][ T6273] io_ring_ctx_alloc+0x12ed/0x1aa0 [ 113.870540][ T6273] ? __mutex_unlock_slowpath+0x21d/0x750 [ 113.870567][ T6273] io_uring_create+0x2c0/0x12e0 [ 113.898248][ T6273] __se_sys_io_uring_setup+0x2ba/0x330 [ 113.903747][ T6273] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 113.909769][ T6273] ? do_syscall_64+0x100/0x230 [ 113.914556][ T6273] ? do_syscall_64+0xb6/0x230 [ 113.919255][ T6273] do_syscall_64+0xf3/0x230 [ 113.923784][ T6273] ? clear_bhb_loop+0x35/0x90 [ 113.928486][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.934399][ T6273] RIP: 0033:0x7f74e7977299 [ 113.938827][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.949083][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.958425][ T6273] RSP: 002b:00007f74e8803fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 113.958451][ T6273] RAX: ffffffffffffffda RBX: 00007f74e7b05f80 RCX: 00007f74e7977299 [ 113.958465][ T6273] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000002a37 [ 113.958477][ T6273] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 113.958489][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.958501][ T6273] R13: 0000000000000000 R14: 0000000000002a37 R15: 0000000000000000 [ 114.002862][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.005826][ T6273] [ 114.027524][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.077569][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.127983][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.167459][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.177813][ T939] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 114.216522][ T5289] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.259465][ T5289] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 114.277641][ T5289] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 114.309542][ T5289] usb 4-1: USB disconnect, device number 2 [ 114.367457][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 114.376212][ T939] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 114.387789][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.401632][ T939] usb 2-1: config 0 descriptor?? [ 114.467532][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.643294][ T5283] gspca_ov534_9: reg_w failed -71 [ 114.663700][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 114.684870][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 114.718348][ T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 114.746125][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.771786][ T9] usb 1-1: config 0 descriptor?? [ 115.037394][ T5283] gspca_ov534_9: Unknown sensor 0000 [ 115.037505][ T5283] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 115.048117][ T5283] usb 3-1: USB disconnect, device number 18 [ 115.091223][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.107547][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.158346][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.338498][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 115.362528][ T46] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.371114][ T6288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.386745][ T6288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.395751][ T46] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.399312][ T9] hid (null): invalid report_size 58537 [ 115.421142][ T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.433043][ T9] hid (null): unknown global tag 0xd [ 115.457190][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.472223][ T9] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 115.475437][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.493438][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.498265][ T9] hid-generic 0003:0158:0100.0007: unexpected long global item [ 115.512718][ T46] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.515356][ T9] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 115.550818][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.571183][ T46] usb 4-1: config 0 descriptor?? [ 115.635750][ T6288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.668740][ T6288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.680629][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.690370][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.804111][ T46] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.831212][ T9] usb 1-1: USB disconnect, device number 7 [ 115.838834][ T46] usb 4-1: USB disconnect, device number 3 [ 115.856947][ T46] usblp0: removed [ 116.041521][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 116.105254][ T6339] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 116.239139][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 116.239158][ T29] audit: type=1326 audit(1722163403.164:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.275175][ T29] audit: type=1326 audit(1722163403.164:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.306427][ T29] audit: type=1326 audit(1722163403.194:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.329487][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.357836][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.359263][ T29] audit: type=1326 audit(1722163403.194:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.391778][ T29] audit: type=1326 audit(1722163403.194:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.415142][ T29] audit: type=1326 audit(1722163403.194:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.447063][ T939] pegasus 2-1:0.0: can't locate MII phy, using default [ 116.474004][ T29] audit: type=1326 audit(1722163403.194:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.504190][ T939] pegasus 2-1:0.0: eth1, D-Link DSB-650TX, 06:15:50:d4:03:97 [ 116.521098][ T939] usb 2-1: USB disconnect, device number 17 [ 116.530649][ T29] audit: type=1326 audit(1722163403.194:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120377299 code=0x7ffc0000 [ 116.556250][ T29] audit: type=1326 audit(1722163403.194:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa120375cd0 code=0x7ffc0000 [ 116.563006][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.591659][ T29] audit: type=1326 audit(1722163403.194:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa120376e9b code=0x7ffc0000 [ 116.676760][ T6354] FAULT_INJECTION: forcing a failure. [ 116.676760][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.696754][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.2.209 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 116.707008][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 116.717060][ T6354] Call Trace: [ 116.720336][ T6354] [ 116.723266][ T6354] dump_stack_lvl+0x241/0x360 [ 116.727940][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.733128][ T6354] ? __pfx__printk+0x10/0x10 [ 116.737719][ T6354] ? __pfx_lock_release+0x10/0x10 [ 116.742769][ T6354] should_fail_ex+0x3b0/0x4e0 [ 116.747483][ T6354] _copy_from_user+0x2f/0xe0 [ 116.752092][ T6354] copy_msghdr_from_user+0xae/0x680 [ 116.757295][ T6354] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 116.763114][ T6354] __sys_sendmsg+0x23d/0x3a0 [ 116.767704][ T6354] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.772810][ T6354] ? vfs_write+0x7c4/0xc90 [ 116.777252][ T6354] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.783586][ T6354] ? do_syscall_64+0x100/0x230 [ 116.788348][ T6354] ? do_syscall_64+0xb6/0x230 [ 116.793020][ T6354] do_syscall_64+0xf3/0x230 [ 116.797544][ T6354] ? clear_bhb_loop+0x35/0x90 [ 116.802219][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.808111][ T6354] RIP: 0033:0x7fa5db977299 [ 116.812523][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.832118][ T6354] RSP: 002b:00007fa5dc831048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.840531][ T6354] RAX: ffffffffffffffda RBX: 00007fa5dbb05f80 RCX: 00007fa5db977299 [ 116.848495][ T6354] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 116.856464][ T6354] RBP: 00007fa5dc8310a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.864432][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.872395][ T6354] R13: 000000000000000b R14: 00007fa5dbb05f80 R15: 00007fa5dbc2fa38 [ 116.880368][ T6354] [ 116.883521][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.941417][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.960841][ T9] usb 5-1: config 0 has no interfaces? [ 116.966516][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 116.981738][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.048594][ T9] usb 5-1: config 0 descriptor?? [ 117.257601][ T5289] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 117.490372][ T5289] usb 3-1: descriptor type invalid, skip [ 117.496121][ T5289] usb 3-1: No LPM exit latency info found, disabling LPM. [ 117.514742][ T5289] usb 3-1: string descriptor 0 read error: -22 [ 117.524949][ T5289] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 117.554964][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.563385][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.578833][ T5289] usb 3-1: config 0 descriptor?? [ 117.695943][ T5283] usb 5-1: USB disconnect, device number 7 [ 117.757676][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 117.773006][ T9] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 117.782799][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.801494][ T9] usb 1-1: Product: syz [ 117.805725][ T9] usb 1-1: Manufacturer: syz [ 117.837885][ T9] usb 1-1: SerialNumber: syz [ 117.843253][ T6373] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 117.866667][ T9] usb 1-1: config 0 descriptor?? [ 117.892383][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 117.919531][ T6373] xt_ipcomp: unknown flags 12 [ 118.576215][ T5289] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 118.675775][ T5289] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 118.704706][ T5289] dib0700: firmware download failed at 7 with -22 [ 118.755456][ T5289] usb 3-1: USB disconnect, device number 19 [ 118.902658][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.002317][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.124759][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.128294][ T9] gspca_ov534_9: reg_w failed -71 [ 119.330097][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.457354][ T5282] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 119.597457][ T9] gspca_ov534_9: Unknown sensor 0000 [ 119.597549][ T9] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 119.611253][ T11] bridge_slave_1: left allmulticast mode [ 119.611443][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.622343][ T6387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.630047][ T9] usb 1-1: USB disconnect, device number 8 [ 119.643847][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.646956][ T11] bridge_slave_1: left promiscuous mode [ 119.658437][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.671371][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.680765][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.689366][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.697705][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.705202][ T5282] usb 2-1: config index 0 descriptor too short (expected 27271, got 36) [ 119.710723][ T6387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.719238][ T11] bridge_slave_0: left allmulticast mode [ 119.727171][ T11] bridge_slave_0: left promiscuous mode [ 119.738018][ T5282] usb 2-1: config 18 has too many interfaces: 94, using maximum allowed: 32 [ 119.747223][ T5282] usb 2-1: config 18 has an invalid descriptor of length 61, skipping remainder of the config [ 119.758324][ T5282] usb 2-1: config 18 has 0 interfaces, different from the descriptor's value: 94 [ 119.780981][ T6391] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 119.796343][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.799299][ T5282] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 119.823467][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.774367][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.816188][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.863829][ T11] bond0 (unregistering): Released all slaves [ 121.077502][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 121.330798][ T9] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 121.377750][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.411174][ T9] usb 3-1: config 0 descriptor?? [ 121.684148][ T11] hsr_slave_0: left promiscuous mode [ 121.700328][ T11] hsr_slave_1: left promiscuous mode [ 121.710844][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.722201][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.752106][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.807417][ T5238] Bluetooth: hci0: command tx timeout [ 121.818004][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.930988][ T11] veth1_macvtap: left promiscuous mode [ 121.941992][ C0] hrtimer: interrupt took 208511 ns [ 121.954954][ T11] veth0_macvtap: left promiscuous mode [ 121.982941][ T11] veth1_vlan: left promiscuous mode [ 122.012349][ T11] veth0_vlan: left promiscuous mode [ 122.193402][ T5282] usb 2-1: string descriptor 0 read error: -71 [ 122.239909][ T5282] usb 2-1: USB disconnect, device number 18 [ 122.962915][ T11] team0 (unregistering): Port device team_slave_1 removed [ 123.013117][ T11] team0 (unregistering): Port device team_slave_0 removed [ 123.402056][ T6426] ip6gretap0: entered promiscuous mode [ 123.414377][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 123.438278][ T6426] vlan2: entered promiscuous mode [ 123.438871][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 123.457394][ T6426] vlan2: entered allmulticast mode [ 123.462548][ T6426] ip6gretap0: entered allmulticast mode [ 123.487732][ T9] usb 3-1: USB disconnect, device number 20 [ 123.500805][ T6426] ip6gretap0: left allmulticast mode [ 123.509786][ T6426] ip6gretap0: left promiscuous mode [ 123.612847][ T6392] chnl_net:caif_netlink_parms(): no params data found [ 123.623855][ C0] eth0: bad gso: type: 1, size: 1408 [ 123.888209][ T5238] Bluetooth: hci0: command tx timeout [ 123.935672][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.971459][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.997868][ T6392] bridge_slave_0: entered allmulticast mode [ 124.005160][ T6392] bridge_slave_0: entered promiscuous mode [ 124.028387][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.035552][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.046203][ T6392] bridge_slave_1: entered allmulticast mode [ 124.057458][ T939] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.058746][ T6392] bridge_slave_1: entered promiscuous mode [ 124.081333][ T6454] syz.2.237 uses obsolete (PF_INET,SOCK_PACKET) [ 124.117703][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.158206][ T6392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.180243][ T6392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.246587][ T6446] program syz.1.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.272539][ T939] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 124.294275][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.315571][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.327491][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 124.334723][ T939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 124.355658][ T939] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 124.365321][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 124.365740][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.382300][ T6392] team0: Port device team_slave_0 added [ 124.402408][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.404284][ T939] usb 1-1: config 0 descriptor?? [ 124.424649][ T6392] team0: Port device team_slave_1 added [ 124.442697][ T9] usb 5-1: Product: syz [ 124.446918][ T9] usb 5-1: Manufacturer: syz [ 124.470859][ T9] usb 5-1: SerialNumber: syz [ 124.495718][ T9] usb 5-1: config 0 descriptor?? [ 124.523375][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 124.545524][ T6468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.238'. [ 124.565714][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.586853][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.614098][ T6392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.626192][ T6468] tipc: Enabling of bearer rejected, media not registered [ 124.642390][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.643378][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 124.659841][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.693516][ T6392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.956634][ T9] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 124.987525][ T9] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 125.008659][ T9] usb 5-1: USB disconnect, device number 8 [ 125.024652][ T6392] hsr_slave_0: entered promiscuous mode [ 125.051749][ T6392] hsr_slave_1: entered promiscuous mode [ 125.061282][ T6392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.076262][ T6392] Cannot create hsr debugfs directory [ 125.227641][ T5283] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 125.429322][ T5283] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 125.452534][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.479751][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.491120][ T939] usbhid 1-1:0.0: can't add hid device: -71 [ 125.504749][ T939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 125.516282][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 125.551679][ T939] usb 1-1: USB disconnect, device number 9 [ 125.570819][ T5283] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 125.591506][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.621456][ T5283] usb 3-1: config 0 descriptor?? [ 125.967612][ T5238] Bluetooth: hci0: command tx timeout [ 126.046752][ T6392] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.108348][ T6392] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.159733][ T6392] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.215046][ T6392] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.348358][ T6505] capability: warning: `syz.0.245' uses 32-bit capabilities (legacy support in use) [ 126.402027][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.566171][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.750187][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.963872][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.231206][ T5283] usbhid 3-1:0.0: can't add hid device: -71 [ 127.253092][ T5283] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 127.302406][ T5283] usb 3-1: USB disconnect, device number 21 [ 127.322878][ T6392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.453133][ T6392] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.535155][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.543868][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.551108][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.561793][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.578080][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.592310][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.602366][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 127.614725][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.648114][ T11] bridge_slave_1: left allmulticast mode [ 127.681045][ T11] bridge_slave_1: left promiscuous mode [ 127.696295][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.726830][ T11] bridge_slave_0: left allmulticast mode [ 127.732843][ T11] bridge_slave_0: left promiscuous mode [ 127.746425][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.052992][ T5238] Bluetooth: hci0: command tx timeout [ 128.070157][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.237787][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 128.247072][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 128.256250][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 128.267747][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 128.268133][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 128.286506][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.299424][ T9] usb 1-1: config 0 descriptor?? [ 128.409050][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.425860][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.444083][ T11] bond0 (unregistering): Released all slaves [ 128.463245][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.470444][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.495208][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.508161][ T6543] batadv_slave_0: entered allmulticast mode [ 128.759048][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.791134][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.894622][ T9] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 128.937136][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 128.988944][ T9] usb 1-1: USB disconnect, device number 10 [ 129.114990][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 129.179965][ T11] hsr_slave_0: left promiscuous mode [ 129.194963][ T11] hsr_slave_1: left promiscuous mode [ 129.213489][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.237390][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.281978][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.304727][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.361796][ T11] veth1_macvtap: left promiscuous mode [ 129.384668][ T11] veth0_macvtap: left promiscuous mode [ 129.397766][ T11] veth0_vlan: left promiscuous mode [ 129.647693][ T5238] Bluetooth: hci2: command tx timeout [ 130.282949][ T11] team0 (unregistering): Port device team_slave_1 removed [ 130.354408][ T11] team0 (unregistering): Port device team_slave_0 removed [ 131.596678][ T6392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.729316][ T5238] Bluetooth: hci2: command tx timeout [ 131.759397][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 131.857393][ T46] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 131.964280][ T6392] veth0_vlan: entered promiscuous mode [ 132.043646][ T6392] veth1_vlan: entered promiscuous mode [ 132.067326][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 132.080199][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 132.117555][ T46] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 132.139242][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.152543][ T46] usb 3-1: Product: syz [ 132.156742][ T46] usb 3-1: Manufacturer: syz [ 132.177356][ T46] usb 3-1: SerialNumber: syz [ 132.189646][ T46] usb 3-1: config 0 descriptor?? [ 132.216043][ T46] hub 3-1:0.0: bad descriptor, ignoring hub [ 132.234904][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.246748][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.263491][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.271007][ T46] hub 3-1:0.0: probe with driver hub failed with error -5 [ 132.284567][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.293574][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.304468][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.314352][ T46] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 132.330653][ T46] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 132.366910][ T46] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 132.383103][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.429920][ T46] usb 3-1: USB disconnect, device number 22 [ 132.575657][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.620795][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.628323][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.635618][ T6530] bridge_slave_0: entered allmulticast mode [ 132.643848][ T6530] bridge_slave_0: entered promiscuous mode [ 132.705017][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.723320][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.730816][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.741265][ T6530] bridge_slave_1: entered allmulticast mode [ 132.750120][ T6530] bridge_slave_1: entered promiscuous mode [ 132.810816][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.853545][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.866149][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.022225][ T6392] veth0_macvtap: entered promiscuous mode [ 133.065411][ T6392] veth1_macvtap: entered promiscuous mode [ 133.096296][ T6530] team0: Port device team_slave_0 added [ 133.120448][ T6530] team0: Port device team_slave_1 added [ 133.171499][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.179104][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.451377][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.538124][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.585017][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.728772][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.741328][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.750351][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.781179][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.803348][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.803699][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.816164][ T5241] Bluetooth: hci2: command tx timeout [ 133.837745][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.846215][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 133.854926][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.942227][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 133.979223][ T11] bridge_slave_1: left allmulticast mode [ 133.984891][ T11] bridge_slave_1: left promiscuous mode [ 134.003174][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.019673][ T11] bridge_slave_0: left allmulticast mode [ 134.025333][ T11] bridge_slave_0: left promiscuous mode [ 134.036054][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.369630][ T5236] Bluetooth: hci4: command tx timeout [ 134.471757][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.493073][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.505113][ T11] bond0 (unregistering): Released all slaves [ 134.560058][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.585110][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.597685][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.611206][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.641943][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.709870][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.720682][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.731818][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.745039][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.756248][ T6392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.769733][ T6392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.804384][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.832561][ T6530] hsr_slave_0: entered promiscuous mode [ 134.841503][ T6530] hsr_slave_1: entered promiscuous mode [ 134.851508][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.860278][ T6530] Cannot create hsr debugfs directory [ 134.939257][ T6392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.948632][ T6392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.960914][ T6392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.970811][ T6392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.305171][ T6680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.386799][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.404461][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.413942][ T6642] bridge_slave_0: entered allmulticast mode [ 135.422052][ T6642] bridge_slave_0: entered promiscuous mode [ 135.473109][ T11] hsr_slave_0: left promiscuous mode [ 135.480593][ T11] hsr_slave_1: left promiscuous mode [ 135.488430][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.495978][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.504983][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.514217][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.536435][ T11] veth1_macvtap: left promiscuous mode [ 135.559728][ T11] veth0_macvtap: left promiscuous mode [ 135.565458][ T11] veth1_vlan: left promiscuous mode [ 135.572252][ T11] veth0_vlan: left promiscuous mode [ 135.617510][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 135.770989][ T25] usb 3-1: device descriptor read/64, error -71 [ 135.903193][ T5238] Bluetooth: hci2: command tx timeout [ 135.911390][ T5236] Bluetooth: hci1: command tx timeout [ 136.026456][ T11] team0 (unregistering): Port device team_slave_1 removed [ 136.061493][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 136.074269][ T11] team0 (unregistering): Port device team_slave_0 removed [ 136.217566][ T25] usb 3-1: device descriptor read/64, error -71 [ 136.339174][ T25] usb usb3-port1: attempt power cycle [ 136.395187][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.402489][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.410252][ T6642] bridge_slave_1: entered allmulticast mode [ 136.416994][ T6642] bridge_slave_1: entered promiscuous mode [ 136.448394][ T5236] Bluetooth: hci4: command tx timeout [ 136.488016][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.556613][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.601930][ T6642] team0: Port device team_slave_0 added [ 136.631707][ T6642] team0: Port device team_slave_1 added [ 136.706413][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.713951][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.740247][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.757814][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 136.795683][ T25] usb 3-1: device descriptor read/8, error -71 [ 136.804483][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.817924][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.844524][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.936874][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.945592][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.030581][ T6642] hsr_slave_0: entered promiscuous mode [ 137.045813][ T6642] hsr_slave_1: entered promiscuous mode [ 137.052532][ T6642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.066354][ T6642] Cannot create hsr debugfs directory [ 137.072107][ T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 137.108414][ T25] usb 3-1: device descriptor read/8, error -71 [ 137.234753][ T25] usb usb3-port1: unable to enumerate USB device [ 137.361927][ T6666] chnl_net:caif_netlink_parms(): no params data found [ 137.385323][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.410187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.501853][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.581675][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.646419][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.653824][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.661957][ T6666] bridge_slave_0: entered allmulticast mode [ 137.670459][ T6666] bridge_slave_0: entered promiscuous mode [ 137.710674][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.724462][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.732216][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.740512][ T6666] bridge_slave_1: entered allmulticast mode [ 137.747820][ T6666] bridge_slave_1: entered promiscuous mode [ 137.785436][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.814226][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.836133][ T6530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.886091][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.903107][ T6530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.927468][ T6530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.950359][ T6530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.968557][ T5236] Bluetooth: hci1: command tx timeout [ 137.997913][ T5288] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.042824][ T6666] team0: Port device team_slave_0 added [ 138.061627][ T6666] team0: Port device team_slave_1 added [ 138.171459][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.178682][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.205062][ T6666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.213126][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 138.234420][ T5288] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 138.257158][ T5288] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.279290][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.287129][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.297956][ T5288] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.355925][ T6666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.386862][ T5288] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.403658][ T11] bridge_slave_1: left allmulticast mode [ 138.414637][ T11] bridge_slave_1: left promiscuous mode [ 138.417306][ T5288] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.435935][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.463336][ T5288] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.486216][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.507462][ T11] bridge_slave_0: left allmulticast mode [ 138.524595][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.537648][ T5236] Bluetooth: hci4: command tx timeout [ 138.727630][ T5288] usb 4-1: usb_control_msg returned -32 [ 138.737156][ T5288] usbtmc 4-1:16.0: can't read capabilities [ 138.987408][ T5283] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 139.112330][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.125278][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.140137][ T11] bond0 (unregistering): Released all slaves [ 139.191617][ T5283] usb 3-1: Using ep0 maxpacket: 8 [ 139.219299][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 139.249731][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 139.261414][ T5283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 139.271432][ T5283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 23 [ 139.281922][ T6666] hsr_slave_0: entered promiscuous mode [ 139.284516][ T5283] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 139.296812][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.309726][ T5283] usb 3-1: Product: syz [ 139.314389][ T6666] hsr_slave_1: entered promiscuous mode [ 139.314896][ T5283] usb 3-1: Manufacturer: syz [ 139.324785][ T5283] usb 3-1: SerialNumber: syz [ 139.333406][ T6666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.335593][ T5283] usb 3-1: config 0 descriptor?? [ 139.342234][ T6666] Cannot create hsr debugfs directory [ 139.352252][ T6728] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.370476][ T5283] kvaser_usb 3-1:0.0: Cannot get software info, error -71 [ 139.378587][ T5283] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -71 [ 139.442698][ T6715] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 139.599750][ T5283] usb 3-1: USB disconnect, device number 27 [ 139.643998][ T9] usb 4-1: USB disconnect, device number 4 [ 139.662760][ T6642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.709002][ T6642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.722363][ T6642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.732554][ T6642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.774565][ T11] hsr_slave_0: left promiscuous mode [ 139.781338][ T11] hsr_slave_1: left promiscuous mode [ 139.791354][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.802715][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.816977][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.824594][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.844612][ T11] veth1_macvtap: left promiscuous mode [ 139.850380][ T11] veth0_macvtap: left promiscuous mode [ 139.855931][ T11] veth1_vlan: left promiscuous mode [ 139.862140][ T11] veth0_vlan: left promiscuous mode [ 140.049879][ T5236] Bluetooth: hci1: command tx timeout [ 140.331964][ T11] team0 (unregistering): Port device team_slave_1 removed [ 140.374266][ T11] team0 (unregistering): Port device team_slave_0 removed [ 140.617502][ T5236] Bluetooth: hci4: command tx timeout [ 140.734855][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.880894][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.905404][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.912539][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.952225][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.959429][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.099896][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.272243][ T6530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.319481][ T6642] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.352933][ T6666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.389502][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.396671][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.444051][ T6666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.470001][ T6666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.506815][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.514049][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.558440][ T6666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.590074][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.651241][ T5282] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.876502][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 141.926920][ T5282] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.986334][ T5282] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 141.992516][ T6530] veth0_vlan: entered promiscuous mode [ 142.002259][ T5282] usb 4-1: can't read configurations, error -71 [ 142.066681][ T6530] veth1_vlan: entered promiscuous mode [ 142.127973][ T5236] Bluetooth: hci1: command tx timeout [ 142.183696][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.265196][ T6666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.332908][ T6530] veth0_macvtap: entered promiscuous mode [ 142.399111][ T6530] veth1_macvtap: entered promiscuous mode [ 142.410571][ T6666] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.454075][ T6642] veth0_vlan: entered promiscuous mode [ 142.499841][ T6642] veth1_vlan: entered promiscuous mode [ 142.522868][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.530089][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.563981][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.572244][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.637473][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 142.642079][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.668204][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.685825][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.751849][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.772887][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.784981][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.804930][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.816453][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.831415][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 142.865055][ T6642] veth0_macvtap: entered promiscuous mode [ 142.868475][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.881538][ T6530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.899107][ T6530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.907293][ T9] usb 3-1: config 0 has no interface number 0 [ 142.914791][ T6530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.925030][ T6530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.931059][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 142.959188][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.982340][ T6642] veth1_macvtap: entered promiscuous mode [ 142.998548][ T9] usb 3-1: Product: syz [ 143.017967][ T9] usb 3-1: Manufacturer: syz [ 143.039710][ T9] usb 3-1: SerialNumber: syz [ 143.063588][ T9] usb 3-1: config 0 descriptor?? [ 143.077149][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.092908][ T9] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 143.096280][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.110779][ T9] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 143.117079][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.137554][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.153455][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.194200][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.256007][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.284227][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.306548][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.333549][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.343891][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.356569][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.372867][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.526244][ T6642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.544354][ T6642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.553710][ T6642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.563358][ T6642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.770949][ T6666] veth0_vlan: entered promiscuous mode [ 143.816264][ T6666] veth1_vlan: entered promiscuous mode [ 143.937031][ T6666] veth0_macvtap: entered promiscuous mode [ 143.978541][ T6666] veth1_macvtap: entered promiscuous mode [ 143.993267][ T6802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.032115][ T6802] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 144.075443][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.123396][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.157606][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.204685][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.240179][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.255423][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.294201][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.426186][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.474168][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.494742][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.515617][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.544290][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.555262][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.571441][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.583613][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.620286][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.663936][ T6802] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.689904][ T6802] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 144.708446][ T6666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.717207][ T6666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.738506][ T6666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.748763][ T6666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.766688][ T6802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.787489][ T6802] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 144.823252][ T6802] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.837157][ T6802] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 144.892533][ T6802] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.904225][ T6802] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 145.122902][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.141223][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.213564][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.240407][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.350383][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.365401][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.397120][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.431541][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.475166][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.518906][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.577465][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.600565][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.608673][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.634170][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.980197][ T6852] FAULT_INJECTION: forcing a failure. [ 145.980197][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.018559][ T6852] CPU: 1 UID: 0 PID: 6852 Comm: syz.4.265 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 146.028831][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 146.038897][ T6852] Call Trace: [ 146.042207][ T6852] [ 146.045129][ T6852] dump_stack_lvl+0x241/0x360 [ 146.049807][ T6852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.054999][ T6852] ? __pfx__printk+0x10/0x10 [ 146.059590][ T6852] should_fail_ex+0x3b0/0x4e0 [ 146.064268][ T6852] strncpy_from_user+0x36/0x2e0 [ 146.069117][ T6852] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 146.074750][ T6852] getname_flags+0xf1/0x540 [ 146.079252][ T6852] __x64_sys_mkdirat+0x7a/0xa0 [ 146.084011][ T6852] do_syscall_64+0xf3/0x230 [ 146.088507][ T6852] ? clear_bhb_loop+0x35/0x90 [ 146.093186][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.099070][ T6852] RIP: 0033:0x7fcb6f177299 [ 146.103489][ T6852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.123090][ T6852] RSP: 002b:00007fcb6ff4a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 146.131521][ T6852] RAX: ffffffffffffffda RBX: 00007fcb6f306058 RCX: 00007fcb6f177299 [ 146.139487][ T6852] RDX: 00000000000001ff RSI: 0000000020000000 RDI: ffffffffffffff9c [ 146.147531][ T6852] RBP: 00007fcb6ff4a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.155495][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.163470][ T6852] R13: 000000000000006e R14: 00007fcb6f306058 R15: 00007fcb6f42fa38 [ 146.171446][ T6852] [ 146.259359][ T5282] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.277429][ T939] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.314395][ T5287] usb 3-1: USB disconnect, device number 28 [ 146.471237][ T939] usb 4-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 146.506967][ T939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.509021][ T5282] usb 1-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 146.562845][ T5282] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.591811][ T939] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.595248][ T5282] usb 1-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 146.634374][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 146.646179][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.673053][ T939] usb 4-1: SerialNumber: syz [ 146.717433][ T5282] usb 1-1: SerialNumber: syz [ 146.744184][ T5282] usb 1-1: config 0 descriptor?? [ 146.915289][ T939] usb 4-1: 0:2 : does not exist [ 146.936180][ T6873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.287'. [ 146.955844][ T939] usb 4-1: unit 5: unexpected type 0x0b [ 147.135275][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.157626][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.565519][ T6892] netlink: 320 bytes leftover after parsing attributes in process `syz.1.289'. [ 147.718759][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'. [ 147.904435][ T6895] @ÿ: renamed from veth0_vlan (while UP) [ 148.286850][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 148.366658][ T5284] usb 4-1: USB disconnect, device number 7 [ 148.627443][ T5287] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 148.787157][ T6937] netlink: 64 bytes leftover after parsing attributes in process `syz.4.297'. [ 148.856137][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.892767][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.939578][ T5287] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 148.971698][ T5282] usb 1-1: USB disconnect, device number 11 [ 148.977382][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.028901][ T5287] usb 2-1: config 0 descriptor?? [ 149.049255][ T6941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.298'. [ 149.078033][ T5284] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.107930][ T5283] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 149.297584][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 149.324700][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.340394][ T5283] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 149.366039][ T5283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.377698][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.401598][ T5283] usb 4-1: config 0 has no interface number 0 [ 149.411093][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.437963][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.456615][ T5283] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 149.479044][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.503719][ T5284] usb 5-1: config 0 descriptor?? [ 149.515135][ T5283] usb 4-1: Product: syz [ 149.524364][ T5283] usb 4-1: Manufacturer: syz [ 149.532094][ T5284] hub 5-1:0.0: USB hub found [ 149.537192][ T5283] usb 4-1: SerialNumber: syz [ 149.562410][ T5283] usb 4-1: config 0 descriptor?? [ 149.590269][ T5283] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 149.620940][ T5283] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 149.629331][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 149.629346][ T29] audit: type=1326 audit(1722163436.544:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 149.687486][ T29] audit: type=1326 audit(1722163436.544:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 149.752522][ T29] audit: type=1326 audit(1722163436.554:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 149.800617][ T5284] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 149.838418][ T29] audit: type=1326 audit(1722163436.554:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 149.956486][ T29] audit: type=1326 audit(1722163436.554:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 150.031716][ T5284] hid-generic 0003:046D:C31C.0008: item fetching failed at offset 0/1 [ 150.059773][ T5284] hid-generic 0003:046D:C31C.0008: probe with driver hid-generic failed with error -22 [ 150.321792][ T46] usb 4-1: USB disconnect, device number 8 [ 150.723785][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 150.878796][ T5282] usb 5-1: USB disconnect, device number 9 [ 150.987411][ T942] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 151.166684][ T5287] usbhid 2-1:0.0: can't add hid device: -71 [ 151.180983][ T5287] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 151.209635][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.217426][ T5287] usb 2-1: USB disconnect, device number 19 [ 151.258890][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.305484][ T942] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.344749][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.389121][ T942] usb 3-1: config 0 descriptor?? [ 151.421747][ T942] hub 3-1:0.0: USB hub found [ 151.635886][ T942] hub 3-1:0.0: 1 port detected [ 151.705330][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.310'. [ 151.883763][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.913603][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.045861][ T942] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 152.078137][ T942] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 152.132478][ T942] usbhid 3-1:0.0: can't add hid device: -71 [ 152.173330][ T942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 152.284793][ T942] usb 3-1: USB disconnect, device number 29 [ 152.442258][ T7041] FAULT_INJECTION: forcing a failure. [ 152.442258][ T7041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.496799][ T7041] CPU: 0 UID: 0 PID: 7041 Comm: syz.3.317 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 152.507073][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 152.517126][ T7041] Call Trace: [ 152.520405][ T7041] [ 152.523325][ T7041] dump_stack_lvl+0x241/0x360 [ 152.527998][ T7041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.533186][ T7041] ? __pfx__printk+0x10/0x10 [ 152.537762][ T7041] ? __pfx_lock_release+0x10/0x10 [ 152.542793][ T7041] should_fail_ex+0x3b0/0x4e0 [ 152.547465][ T7041] _copy_from_iter+0x1f6/0x1960 [ 152.552302][ T7041] ? __virt_addr_valid+0x183/0x530 [ 152.557424][ T7041] ? __pfx_lock_release+0x10/0x10 [ 152.562439][ T7041] ? __alloc_skb+0x28f/0x440 [ 152.567015][ T7041] ? __pfx__copy_from_iter+0x10/0x10 [ 152.572288][ T7041] ? __virt_addr_valid+0x183/0x530 [ 152.577383][ T7041] ? __virt_addr_valid+0x183/0x530 [ 152.582476][ T7041] ? __virt_addr_valid+0x45f/0x530 [ 152.587574][ T7041] ? __check_object_size+0x49c/0x900 [ 152.592847][ T7041] netlink_sendmsg+0x73d/0xcb0 [ 152.597607][ T7041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.602877][ T7041] ? __import_iovec+0x536/0x820 [ 152.607717][ T7041] ? aa_sock_msg_perm+0x91/0x160 [ 152.612639][ T7041] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 152.617911][ T7041] ? security_socket_sendmsg+0x87/0xb0 [ 152.623357][ T7041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.628633][ T7041] __sock_sendmsg+0x221/0x270 [ 152.633298][ T7041] ____sys_sendmsg+0x525/0x7d0 [ 152.638070][ T7041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.643348][ T7041] __sys_sendmsg+0x2b0/0x3a0 [ 152.647933][ T7041] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.653059][ T7041] ? vfs_write+0x7c4/0xc90 [ 152.657487][ T7041] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.663804][ T7041] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 152.670033][ T7041] ? syscall_user_dispatch+0x4e/0x90 [ 152.675304][ T7041] do_syscall_64+0xf3/0x230 [ 152.679793][ T7041] ? clear_bhb_loop+0x35/0x90 [ 152.684454][ T7041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.690340][ T7041] RIP: 0033:0x7fe892577299 [ 152.694768][ T7041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.714361][ T7041] RSP: 002b:00007fe893433048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.722765][ T7041] RAX: ffffffffffffffda RBX: 00007fe892705f80 RCX: 00007fe892577299 [ 152.730720][ T7041] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 152.738673][ T7041] RBP: 00007fe8934330a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.746624][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.754579][ T7041] R13: 000000000000000b R14: 00007fe892705f80 R15: 00007fe89282fa38 [ 152.762545][ T7041] [ 152.968641][ T7053] FAULT_INJECTION: forcing a failure. [ 152.968641][ T7053] name failslab, interval 1, probability 0, space 0, times 0 [ 152.997050][ T7042] netlink: 'syz.4.316': attribute type 4 has an invalid length. [ 153.026925][ T7053] CPU: 0 UID: 0 PID: 7053 Comm: syz.0.318 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 153.037201][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 153.047284][ T7053] Call Trace: [ 153.050579][ T7053] [ 153.053526][ T7053] dump_stack_lvl+0x241/0x360 [ 153.058568][ T7053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.063762][ T7053] ? __pfx__printk+0x10/0x10 [ 153.068347][ T7053] ? __kmalloc_noprof+0xb0/0x400 [ 153.073270][ T7053] ? __pfx___might_resched+0x10/0x10 [ 153.078552][ T7053] should_fail_ex+0x3b0/0x4e0 [ 153.083217][ T7053] ? sock_kmalloc+0xd7/0x160 [ 153.087813][ T7053] should_failslab+0xac/0x100 [ 153.092503][ T7053] ? sock_kmalloc+0xd7/0x160 [ 153.097114][ T7053] __kmalloc_noprof+0xd8/0x400 [ 153.101900][ T7053] ? do_raw_spin_unlock+0x13c/0x8b0 [ 153.107126][ T7053] sock_kmalloc+0xd7/0x160 [ 153.111565][ T7053] hash_sendmsg+0x80a/0x1110 [ 153.116206][ T7053] ? __pfx_hash_sendmsg+0x10/0x10 [ 153.121265][ T7053] __sock_sendmsg+0x221/0x270 [ 153.126408][ T7053] ____sys_sendmsg+0x525/0x7d0 [ 153.131309][ T7053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.136670][ T7053] __sys_sendmmsg+0x3b2/0x740 [ 153.141385][ T7053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.146651][ T7053] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 153.152576][ T7053] ? ksys_write+0x23e/0x2c0 [ 153.157110][ T7053] ? __pfx_lock_release+0x10/0x10 [ 153.162167][ T7053] ? vfs_write+0x7c4/0xc90 [ 153.166616][ T7053] ? __mutex_unlock_slowpath+0x21d/0x750 [ 153.172459][ T7053] ? __pfx_vfs_write+0x10/0x10 [ 153.177269][ T7053] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.183451][ T7053] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.189810][ T7053] ? do_syscall_64+0x100/0x230 [ 153.194601][ T7053] __x64_sys_sendmmsg+0xa0/0xb0 [ 153.199488][ T7053] do_syscall_64+0xf3/0x230 [ 153.204014][ T7053] ? clear_bhb_loop+0x35/0x90 [ 153.208713][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.214976][ T7053] RIP: 0033:0x7fa56bf77299 [ 153.219425][ T7053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.239138][ T7053] RSP: 002b:00007fa56ce26048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.247551][ T7053] RAX: ffffffffffffffda RBX: 00007fa56c105f80 RCX: 00007fa56bf77299 [ 153.255513][ T7053] RDX: 0000000000000001 RSI: 0000000020003100 RDI: 0000000000000004 [ 153.263486][ T7053] RBP: 00007fa56ce260a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.271450][ T7053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.279412][ T7053] R13: 000000000000000b R14: 00007fa56c105f80 R15: 00007fa56c22fa38 [ 153.287389][ T7053] [ 153.339658][ T7049] netlink: 'syz.4.316': attribute type 4 has an invalid length. [ 153.403960][ T7063] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.654547][ T7074] netlink: 368 bytes leftover after parsing attributes in process `syz.0.325'. [ 154.003141][ T7089] FAULT_INJECTION: forcing a failure. [ 154.003141][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 154.016115][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.2.330 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 154.026377][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 154.036423][ T7089] Call Trace: [ 154.039691][ T7089] [ 154.042610][ T7089] dump_stack_lvl+0x241/0x360 [ 154.047293][ T7089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.052485][ T7089] ? __pfx__printk+0x10/0x10 [ 154.057112][ T7089] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 154.063360][ T7089] ? __pfx___might_resched+0x10/0x10 [ 154.068655][ T7089] should_fail_ex+0x3b0/0x4e0 [ 154.073431][ T7089] should_failslab+0xac/0x100 [ 154.078093][ T7089] ? __alloc_skb+0x1c3/0x440 [ 154.082673][ T7089] kmem_cache_alloc_node_noprof+0x71/0x320 [ 154.088471][ T7089] __alloc_skb+0x1c3/0x440 [ 154.092878][ T7089] ? __pfx___alloc_skb+0x10/0x10 [ 154.097837][ T7089] ? netlink_autobind+0xd6/0x2f0 [ 154.102762][ T7089] ? netlink_autobind+0x2b0/0x2f0 [ 154.107806][ T7089] netlink_sendmsg+0x638/0xcb0 [ 154.112568][ T7089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.117855][ T7089] ? aa_sock_msg_perm+0x91/0x160 [ 154.122812][ T7089] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 154.128113][ T7089] ? security_socket_sendmsg+0x87/0xb0 [ 154.133570][ T7089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.138849][ T7089] __sock_sendmsg+0x221/0x270 [ 154.143520][ T7089] sock_write_iter+0x2dd/0x400 [ 154.148277][ T7089] ? __pfx_sock_write_iter+0x10/0x10 [ 154.153560][ T7089] ? bpf_lsm_file_permission+0x9/0x10 [ 154.158929][ T7089] ? security_file_permission+0x7f/0xa0 [ 154.164494][ T7089] vfs_write+0xa72/0xc90 [ 154.168837][ T7089] ? __pfx_sock_write_iter+0x10/0x10 [ 154.174139][ T7089] ? __pfx_vfs_write+0x10/0x10 [ 154.178941][ T7089] ksys_write+0x1a0/0x2c0 [ 154.183281][ T7089] ? __pfx_ksys_write+0x10/0x10 [ 154.188127][ T7089] ? do_syscall_64+0x100/0x230 [ 154.192883][ T7089] ? do_syscall_64+0xb6/0x230 [ 154.197552][ T7089] do_syscall_64+0xf3/0x230 [ 154.202048][ T7089] ? clear_bhb_loop+0x35/0x90 [ 154.206722][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.212628][ T7089] RIP: 0033:0x7fa5db977299 [ 154.217041][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.236658][ T7089] RSP: 002b:00007fa5dc831048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.245071][ T7089] RAX: ffffffffffffffda RBX: 00007fa5dbb05f80 RCX: 00007fa5db977299 [ 154.253036][ T7089] RDX: 0000000000000024 RSI: 0000000020000040 RDI: 0000000000000003 [ 154.261006][ T7089] RBP: 00007fa5dc8310a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.268972][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.276932][ T7089] R13: 000000000000000b R14: 00007fa5dbb05f80 R15: 00007fa5dbc2fa38 [ 154.284925][ T7089] [ 154.291422][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.530469][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.543433][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.553565][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.576087][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.596295][ T9] usb 1-1: config 0 descriptor?? [ 154.757969][ T5284] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 154.769075][ T7097] input: syz0 as /devices/virtual/input/input13 [ 154.847523][ T939] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.958018][ T5284] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 154.973581][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.999150][ T5284] usb 3-1: config 0 descriptor?? [ 155.079105][ T939] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 155.085494][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 155.100509][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.120181][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.130848][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 155.144954][ T939] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 155.156136][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.176421][ T46] usb 1-1: USB disconnect, device number 12 [ 155.185590][ T939] usb 4-1: config 0 descriptor?? [ 155.232019][ T5284] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 155.260843][ T5284] asix 3-1:0.0: probe with driver asix failed with error -71 [ 155.297605][ T5284] usb 3-1: USB disconnect, device number 30 [ 155.637404][ T5287] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 155.820632][ T7120] netlink: 60 bytes leftover after parsing attributes in process `syz.0.340'. [ 155.839477][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 155.847357][ T5287] usb 5-1: config 0 has no interfaces? [ 155.856773][ T5287] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 155.870423][ T5287] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 155.881378][ T5287] usb 5-1: Product: syz [ 155.885632][ T5287] usb 5-1: Manufacturer: syz [ 155.909625][ T5287] usb 5-1: SerialNumber: syz [ 155.936337][ T5287] usb 5-1: config 0 descriptor?? [ 156.517427][ T942] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.709606][ T939] usbhid 4-1:0.0: can't add hid device: -71 [ 156.717517][ T942] usb 1-1: Using ep0 maxpacket: 32 [ 156.723211][ T939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 156.735978][ T942] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=a5.e5 [ 156.753886][ T939] usb 4-1: USB disconnect, device number 9 [ 156.786478][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.833245][ T5287] usb 5-1: USB disconnect, device number 10 [ 156.863882][ T942] usb 1-1: Product: syz [ 156.882058][ T942] usb 1-1: Manufacturer: syz [ 156.899712][ T942] usb 1-1: SerialNumber: syz [ 156.924313][ T942] usb 1-1: config 0 descriptor?? [ 156.940142][ T942] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 157.217006][ T942] gspca_ov534_9: reg_w failed -71 [ 157.314490][ T29] audit: type=1326 audit(1722163444.234:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.371644][ T29] audit: type=1326 audit(1722163444.234:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.409368][ T29] audit: type=1326 audit(1722163444.234:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.434134][ T29] audit: type=1326 audit(1722163444.234:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.463600][ T29] audit: type=1326 audit(1722163444.234:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.486576][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.507676][ T29] audit: type=1326 audit(1722163444.234:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.600500][ T29] audit: type=1326 audit(1722163444.234:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.647785][ T29] audit: type=1326 audit(1722163444.234:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.681220][ T29] audit: type=1326 audit(1722163444.234:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.705337][ T7149] input: syz0 as /devices/virtual/input/input14 [ 157.736106][ T29] audit: type=1326 audit(1722163444.234:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff658b77299 code=0x7ffc0000 [ 157.807403][ T942] gspca_ov534_9: Unknown sensor 0000 [ 157.807482][ T942] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 157.875311][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 157.896599][ T942] usb 1-1: USB disconnect, device number 13 [ 157.962743][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.069413][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.252315][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.260566][ T7161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.315648][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.322803][ T7161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.407384][ T5282] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.617362][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 158.635211][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.646576][ T7180] program syz.0.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.670948][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.683483][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.705596][ T5282] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.722038][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.753702][ T5282] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.765589][ T5282] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.783135][ T5282] usb 4-1: Manufacturer: syz [ 158.806825][ T5282] usb 4-1: config 0 descriptor?? [ 159.147825][ T5282] rc_core: IR keymap rc-hauppauge not found [ 159.156090][ T5282] Registered IR keymap rc-empty [ 159.164845][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.207601][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.302651][ T5282] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 159.306658][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.323351][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.370771][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 159.386170][ T5282] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 159.465947][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.508119][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.557425][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.659282][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.717666][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.846694][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.907641][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 159.939226][ T7200] loop0: detected capacity change from 0 to 7 [ 159.985719][ T7200] Dev loop0: unable to read RDB block 7 [ 159.997683][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 160.023627][ T7200] loop0: AHDI p1 p4 [ 160.059282][ T7200] loop0: partition table partially beyond EOD, truncated [ 160.067930][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 160.073884][ T1112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.167929][ T5282] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 160.246698][ T5282] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 160.268636][ T5282] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 160.401079][ T1112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.487533][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 160.681953][ T1112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.774863][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 161.022054][ T1112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.137487][ T5287] usb 4-1: USB disconnect, device number 10 [ 161.438719][ T1112] bridge_slave_1: left allmulticast mode [ 161.480187][ T1112] bridge_slave_1: left promiscuous mode [ 161.521329][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.530036][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.540618][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.549463][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.559751][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.569990][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.579767][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.605773][ T1112] bridge_slave_0: left allmulticast mode [ 161.681249][ T1112] bridge_slave_0: left promiscuous mode [ 161.694475][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.209063][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 162.430276][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.464506][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.487885][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.499181][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.544659][ T9] usb 2-1: config 0 descriptor?? [ 162.655082][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.672522][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.685821][ T1112] bond0 (unregistering): Released all slaves [ 163.203314][ T942] usb 2-1: USB disconnect, device number 20 [ 163.301525][ T939] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 163.429271][ T1112] hsr_slave_0: left promiscuous mode [ 163.447657][ T1112] hsr_slave_1: left promiscuous mode [ 163.470901][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.483463][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.495086][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.499341][ T939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.516186][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.547434][ T939] usb 3-1: config 0 has no interfaces? [ 163.550675][ T1112] veth1_macvtap: left promiscuous mode [ 163.567430][ T1112] veth0_macvtap: left promiscuous mode [ 163.573275][ T939] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 163.573422][ T1112] veth1_vlan: left promiscuous mode [ 163.593854][ T1112] veth0_vlan: left promiscuous mode [ 163.599314][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.641166][ T939] usb 3-1: config 0 descriptor?? [ 163.648389][ T5236] Bluetooth: hci1: command tx timeout [ 163.918862][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.957538][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.077881][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.099213][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.218431][ T939] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 164.316419][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 164.316526][ T29] audit: type=1326 audit(1722163451.234:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.4.388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f177299 code=0x0 [ 164.445146][ T9] usb 3-1: USB disconnect, device number 31 [ 164.833565][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 164.900304][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 165.732956][ T5236] Bluetooth: hci1: command tx timeout [ 165.804710][ T7304] vlan2: entered promiscuous mode [ 165.822534][ T7304] bond0: entered promiscuous mode [ 165.833736][ T7304] bond_slave_0: entered promiscuous mode [ 165.846990][ T7304] bond_slave_1: entered promiscuous mode [ 165.860996][ T7304] vlan2: entered allmulticast mode [ 165.869820][ T7304] bond0: entered allmulticast mode [ 165.883972][ T7304] bond_slave_0: entered allmulticast mode [ 165.892439][ T7304] bond_slave_1: entered allmulticast mode [ 165.910323][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 166.401813][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.429026][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.452993][ T7228] bridge_slave_0: entered allmulticast mode [ 166.476636][ T7228] bridge_slave_0: entered promiscuous mode [ 166.514970][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.556385][ T29] audit: type=1326 audit(1722163453.474:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.4.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f177299 code=0x0 [ 166.559950][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.645187][ T7228] bridge_slave_1: entered allmulticast mode [ 166.675320][ T7228] bridge_slave_1: entered promiscuous mode [ 166.677954][ T942] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 166.889397][ T942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.905890][ T942] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.921046][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.927375][ T942] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.961955][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.973244][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.992245][ T942] usb 2-1: config 0 descriptor?? [ 167.119692][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.134679][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.146002][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.157859][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.165931][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.174133][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.243292][ T1112] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.328643][ T7228] team0: Port device team_slave_0 added [ 167.394053][ T7228] team0: Port device team_slave_1 added [ 167.511193][ T1112] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.562443][ T942] usb 2-1: USB disconnect, device number 22 [ 167.584793][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.615660][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.652245][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.663853][ T29] audit: type=1326 audit(1722163454.584:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.4.399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f177299 code=0x0 [ 167.685497][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.703742][ T1112] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.722094][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.729676][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.759027][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.823589][ T5238] Bluetooth: hci1: command tx timeout [ 167.841975][ T1112] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.045217][ T7373] FAULT_INJECTION: forcing a failure. [ 168.045217][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.067035][ T7373] CPU: 1 UID: 0 PID: 7373 Comm: syz.2.401 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 168.077335][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 168.087417][ T7373] Call Trace: [ 168.090729][ T7373] [ 168.093680][ T7373] dump_stack_lvl+0x241/0x360 [ 168.098391][ T7373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.103624][ T7373] ? __pfx__printk+0x10/0x10 [ 168.108243][ T7373] ? __pfx_lock_release+0x10/0x10 [ 168.113309][ T7373] should_fail_ex+0x3b0/0x4e0 [ 168.118025][ T7373] _copy_from_user+0x2f/0xe0 [ 168.122646][ T7373] do_replace+0xe8/0x5b0 [ 168.126905][ T7373] ? __pfx_aa_get_newest_label+0x10/0x10 [ 168.132539][ T7373] ? __pfx_do_replace+0x10/0x10 [ 168.137438][ T7373] ? bpf_lsm_capable+0x9/0x10 [ 168.142134][ T7373] ? security_capable+0x90/0xb0 [ 168.146992][ T7373] do_ebt_set_ctl+0x2d5/0x17d0 [ 168.151756][ T7373] ? release_sock+0x30/0x1f0 [ 168.156347][ T7373] ? __lock_acquire+0x137a/0x2040 [ 168.161374][ T7373] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 168.166595][ T7373] ? __pfx___might_resched+0x10/0x10 [ 168.171889][ T7373] ? nf_setsockopt+0x240/0x2c0 [ 168.176650][ T7373] ? __pfx_lock_release+0x10/0x10 [ 168.181689][ T7373] ? rcu_is_watching+0x15/0xb0 [ 168.186458][ T7373] ? trace_contention_end+0x3c/0x120 [ 168.191734][ T7373] ? __mutex_lock+0x2ef/0xd70 [ 168.196411][ T7373] ? __mutex_unlock_slowpath+0x21d/0x750 [ 168.202044][ T7373] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 168.207413][ T7373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.213391][ T7373] ? __pfx___mutex_lock+0x10/0x10 [ 168.218413][ T7373] nf_setsockopt+0x295/0x2c0 [ 168.223005][ T7373] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.228910][ T7373] smc_setsockopt+0x275/0xe50 [ 168.233614][ T7373] ? __pfx_smc_setsockopt+0x10/0x10 [ 168.238811][ T7373] ? aa_sock_opt_perm+0x79/0x120 [ 168.243748][ T7373] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 168.249301][ T7373] ? security_socket_setsockopt+0x87/0xb0 [ 168.255022][ T7373] ? __pfx_smc_setsockopt+0x10/0x10 [ 168.260224][ T7373] do_sock_setsockopt+0x3af/0x720 [ 168.265255][ T7373] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 168.270808][ T7373] ? __fget_files+0x29/0x470 [ 168.275469][ T7373] ? __fget_files+0x3f6/0x470 [ 168.280175][ T7373] __sys_setsockopt+0x1ae/0x250 [ 168.285043][ T7373] __x64_sys_setsockopt+0xb5/0xd0 [ 168.290071][ T7373] do_syscall_64+0xf3/0x230 [ 168.294578][ T7373] ? clear_bhb_loop+0x35/0x90 [ 168.299432][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.305329][ T7373] RIP: 0033:0x7fa5db977299 [ 168.309737][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.329430][ T7373] RSP: 002b:00007fa5dc831048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.337847][ T7373] RAX: ffffffffffffffda RBX: 00007fa5dbb05f80 RCX: 00007fa5db977299 [ 168.345820][ T7373] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 168.353874][ T7373] RBP: 00007fa5dc8310a0 R08: 0000000000000108 R09: 0000000000000000 [ 168.361844][ T7373] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 168.369829][ T7373] R13: 000000000000000b R14: 00007fa5dbb05f80 R15: 00007fa5dbc2fa38 [ 168.377828][ T7373] [ 168.411939][ T7228] hsr_slave_0: entered promiscuous mode [ 168.432480][ T7228] hsr_slave_1: entered promiscuous mode [ 169.068690][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 169.137996][ T1112] bridge_slave_1: left allmulticast mode [ 169.154629][ T1112] bridge_slave_1: left promiscuous mode [ 169.172744][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.215859][ T1112] bridge_slave_0: left allmulticast mode [ 169.221848][ T1112] bridge_slave_0: left promiscuous mode [ 169.228151][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.247843][ T5238] Bluetooth: hci0: command tx timeout [ 169.887544][ T5238] Bluetooth: hci1: command tx timeout [ 169.985936][ T7410] FAULT_INJECTION: forcing a failure. [ 169.985936][ T7410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.017331][ T7410] CPU: 0 UID: 0 PID: 7410 Comm: syz.2.409 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 170.027629][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 170.037799][ T7410] Call Trace: [ 170.041097][ T7410] [ 170.044044][ T7410] dump_stack_lvl+0x241/0x360 [ 170.048753][ T7410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.054066][ T7410] ? __pfx__printk+0x10/0x10 [ 170.058682][ T7410] ? __pfx_lock_release+0x10/0x10 [ 170.063741][ T7410] should_fail_ex+0x3b0/0x4e0 [ 170.068453][ T7410] _copy_from_user+0x2f/0xe0 [ 170.073072][ T7410] do_replace+0xe8/0x5b0 [ 170.077431][ T7410] ? __pfx_aa_get_newest_label+0x10/0x10 [ 170.083085][ T7410] ? __pfx_do_replace+0x10/0x10 [ 170.087981][ T7410] ? bpf_lsm_capable+0x9/0x10 [ 170.092656][ T7410] ? security_capable+0x90/0xb0 [ 170.097516][ T7410] do_ebt_set_ctl+0x2d5/0x17d0 [ 170.102306][ T7410] ? release_sock+0x30/0x1f0 [ 170.106924][ T7410] ? __lock_acquire+0x137a/0x2040 [ 170.111964][ T7410] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 170.117184][ T7410] ? __pfx___might_resched+0x10/0x10 [ 170.122464][ T7410] ? nf_setsockopt+0x240/0x2c0 [ 170.127219][ T7410] ? __pfx_lock_release+0x10/0x10 [ 170.132247][ T7410] ? rcu_is_watching+0x15/0xb0 [ 170.137008][ T7410] ? trace_contention_end+0x3c/0x120 [ 170.142285][ T7410] ? __mutex_lock+0x2ef/0xd70 [ 170.146957][ T7410] ? __mutex_unlock_slowpath+0x21d/0x750 [ 170.152583][ T7410] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 170.157950][ T7410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.163935][ T7410] ? __pfx___mutex_lock+0x10/0x10 [ 170.168956][ T7410] nf_setsockopt+0x295/0x2c0 [ 170.173540][ T7410] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 170.179430][ T7410] smc_setsockopt+0x275/0xe50 [ 170.184105][ T7410] ? __pfx_smc_setsockopt+0x10/0x10 [ 170.189298][ T7410] ? aa_sock_opt_perm+0x79/0x120 [ 170.194231][ T7410] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 170.199771][ T7410] ? security_socket_setsockopt+0x87/0xb0 [ 170.205485][ T7410] ? __pfx_smc_setsockopt+0x10/0x10 [ 170.210678][ T7410] do_sock_setsockopt+0x3af/0x720 [ 170.215712][ T7410] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 170.221251][ T7410] ? __fget_files+0x29/0x470 [ 170.225837][ T7410] ? __fget_files+0x3f6/0x470 [ 170.230515][ T7410] __sys_setsockopt+0x1ae/0x250 [ 170.235361][ T7410] __x64_sys_setsockopt+0xb5/0xd0 [ 170.240382][ T7410] do_syscall_64+0xf3/0x230 [ 170.244878][ T7410] ? clear_bhb_loop+0x35/0x90 [ 170.249555][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.255447][ T7410] RIP: 0033:0x7fa5db977299 [ 170.259852][ T7410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.279450][ T7410] RSP: 002b:00007fa5dc831048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.287864][ T7410] RAX: ffffffffffffffda RBX: 00007fa5dbb05f80 RCX: 00007fa5db977299 [ 170.295842][ T7410] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 170.303811][ T7410] RBP: 00007fa5dc8310a0 R08: 0000000000000108 R09: 0000000000000000 [ 170.311776][ T7410] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 170.319739][ T7410] R13: 000000000000000b R14: 00007fa5dbb05f80 R15: 00007fa5dbc2fa38 [ 170.327715][ T7410] [ 170.330821][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.331897][ T7412] ------------[ cut here ]------------ [ 170.342713][ T7412] platform vkms: [drm] vblank wait timed out on crtc 0 [ 170.350237][ T7412] WARNING: CPU: 1 PID: 7412 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x976/0x9f0 [ 170.361175][ T7412] Modules linked in: [ 170.365584][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.1.410 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 170.376297][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 170.386746][ T7412] RIP: 0010:drm_wait_one_vblank+0x976/0x9f0 [ 170.393022][ T7412] Code: 80 3c 08 00 74 08 4c 89 ff e8 76 0a 9c fc 49 8b 1f 48 c7 c7 e0 f4 72 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 0b e1 f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 170.413013][ T7412] RSP: 0018:ffffc90003f87ac0 EFLAGS: 00010246 [ 170.419349][ T7412] RAX: 1af066dba6c5c900 RBX: 0000000000000000 RCX: 0000000000040000 [ 170.427520][ T7412] RDX: ffffc900041f9000 RSI: 0000000000031631 RDI: 0000000000031632 [ 170.435538][ T7412] RBP: ffffc90003f87c00 R08: ffffffff815592f2 R09: fffffbfff1cf9f80 [ 170.443684][ T7412] R10: dffffc0000000000 R11: fffffbfff1cf9f80 R12: 1ffff920007f0f64 [ 170.452111][ T7412] R13: 0000000000002635 R14: ffffffff8c861520 R15: ffff888020618010 [ 170.460284][ T7412] FS: 00007ff6598ef6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 170.469396][ T7412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.476016][ T7412] CR2: 00007ff6598ced58 CR3: 000000004b096000 CR4: 00000000003506f0 [ 170.484115][ T7412] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.492348][ T7412] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.500480][ T7412] Call Trace: [ 170.503790][ T7412] [ 170.506746][ T7412] ? __warn+0x163/0x4e0 [ 170.511034][ T7412] ? drm_wait_one_vblank+0x976/0x9f0 [ 170.516370][ T7412] ? report_bug+0x2b3/0x500 [ 170.520979][ T7412] ? drm_wait_one_vblank+0x976/0x9f0 [ 170.526308][ T7412] ? handle_bug+0x3e/0x70 [ 170.530989][ T7412] ? exc_invalid_op+0x1a/0x50 [ 170.535705][ T7412] ? asm_exc_invalid_op+0x1a/0x20 [ 170.540859][ T7412] ? __warn_printk+0x292/0x360 [ 170.545748][ T7412] ? drm_wait_one_vblank+0x976/0x9f0 [ 170.551162][ T7412] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 170.556909][ T7412] ? __pfx_autoremove_wake_function+0x10/0x10 [ 170.563160][ T7412] ? drm_vblank_get+0x171/0x270 [ 170.568133][ T7412] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 170.573803][ T7412] drm_fb_helper_ioctl+0x114/0x140 [ 170.579026][ T7412] do_fb_ioctl+0x40a/0x7b0 [ 170.583503][ T7412] ? __pfx_do_fb_ioctl+0x10/0x10 [ 170.588639][ T7412] ? __fget_files+0x29/0x470 [ 170.593259][ T7412] ? bpf_lsm_file_ioctl+0x9/0x10 [ 170.598279][ T7412] ? security_file_ioctl+0x87/0xb0 [ 170.603417][ T7412] ? __pfx_fb_ioctl+0x10/0x10 [ 170.608267][ T7412] __se_sys_ioctl+0xfc/0x170 [ 170.612898][ T7412] do_syscall_64+0xf3/0x230 [ 170.617490][ T7412] ? clear_bhb_loop+0x35/0x90 [ 170.622210][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.628271][ T7412] RIP: 0033:0x7ff658b77299 [ 170.632694][ T7412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.652495][ T7412] RSP: 002b:00007ff6598ef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.661113][ T7412] RAX: ffffffffffffffda RBX: 00007ff658d05f80 RCX: 00007ff658b77299 [ 170.669182][ T7412] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 170.677196][ T7412] RBP: 00007ff658be48e6 R08: 0000000000000000 R09: 0000000000000000 [ 170.685260][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.693331][ T7412] R13: 000000000000000b R14: 00007ff658d05f80 R15: 00007ff658e2fa38 [ 170.697482][ T942] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 170.701384][ T7412] [ 170.701412][ T7412] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.701424][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.1.410 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 170.701446][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 170.701457][ T7412] Call Trace: [ 170.701466][ T7412] [ 170.701474][ T7412] dump_stack_lvl+0x241/0x360 [ 170.701503][ T7412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.701524][ T7412] ? __pfx__printk+0x10/0x10 [ 170.701550][ T7412] ? vscnprintf+0x5d/0x90 [ 170.701575][ T7412] panic+0x349/0x860 [ 170.701596][ T7412] ? __warn+0x172/0x4e0 [ 170.701615][ T7412] ? __pfx_panic+0x10/0x10 [ 170.701653][ T7412] __warn+0x346/0x4e0 [ 170.701670][ T7412] ? drm_wait_one_vblank+0x976/0x9f0 [ 170.701695][ T7412] report_bug+0x2b3/0x500 [ 170.701713][ T7412] ? drm_wait_one_vblank+0x976/0x9f0 [ 170.701737][ T7412] handle_bug+0x3e/0x70 [ 170.701757][ T7412] exc_invalid_op+0x1a/0x50 [ 170.701779][ T7412] asm_exc_invalid_op+0x1a/0x20 [ 170.701802][ T7412] RIP: 0010:drm_wait_one_vblank+0x976/0x9f0 [ 170.701822][ T7412] Code: 80 3c 08 00 74 08 4c 89 ff e8 76 0a 9c fc 49 8b 1f 48 c7 c7 e0 f4 72 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 0b e1 f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 170.701838][ T7412] RSP: 0018:ffffc90003f87ac0 EFLAGS: 00010246 [ 170.701855][ T7412] RAX: 1af066dba6c5c900 RBX: 0000000000000000 RCX: 0000000000040000 [ 170.701869][ T7412] RDX: ffffc900041f9000 RSI: 0000000000031631 RDI: 0000000000031632 [ 170.701882][ T7412] RBP: ffffc90003f87c00 R08: ffffffff815592f2 R09: fffffbfff1cf9f80 [ 170.701896][ T7412] R10: dffffc0000000000 R11: fffffbfff1cf9f80 R12: 1ffff920007f0f64 [ 170.701910][ T7412] R13: 0000000000002635 R14: ffffffff8c861520 R15: ffff888020618010 [ 170.701930][ T7412] ? __warn_printk+0x292/0x360 [ 170.701965][ T7412] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 170.701985][ T7412] ? __pfx_autoremove_wake_function+0x10/0x10 [ 170.702016][ T7412] ? drm_vblank_get+0x171/0x270 [ 170.702036][ T7412] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 170.702058][ T7412] drm_fb_helper_ioctl+0x114/0x140 [ 170.702083][ T7412] do_fb_ioctl+0x40a/0x7b0 [ 170.702109][ T7412] ? __pfx_do_fb_ioctl+0x10/0x10 [ 170.702165][ T7412] ? __fget_files+0x29/0x470 [ 170.702200][ T7412] ? bpf_lsm_file_ioctl+0x9/0x10 [ 170.702216][ T7412] ? security_file_ioctl+0x87/0xb0 [ 170.702239][ T7412] ? __pfx_fb_ioctl+0x10/0x10 [ 170.702263][ T7412] __se_sys_ioctl+0xfc/0x170 [ 170.702287][ T7412] do_syscall_64+0xf3/0x230 [ 170.702307][ T7412] ? clear_bhb_loop+0x35/0x90 [ 170.702332][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.702359][ T7412] RIP: 0033:0x7ff658b77299 [ 170.702375][ T7412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.702389][ T7412] RSP: 002b:00007ff6598ef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.702408][ T7412] RAX: ffffffffffffffda RBX: 00007ff658d05f80 RCX: 00007ff658b77299 [ 170.702422][ T7412] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 170.702434][ T7412] RBP: 00007ff658be48e6 R08: 0000000000000000 R09: 0000000000000000 [ 170.702446][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.702458][ T7412] R13: 000000000000000b R14: 00007ff658d05f80 R15: 00007ff658e2fa38 [ 170.702485][ T7412] [ 170.709179][ T7412] Kernel Offset: disabled