last executing test programs: 2m33.311611705s ago: executing program 2 (id=222): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r0, 0xa2a0fac28710ecb5, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m32.729567026s ago: executing program 2 (id=225): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000) syz_usb_connect(0x3, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b58f55408205d5b9f773000000010902230001000000000904080001fff56a000800000000040e000905321a8f6cdb6a475ccc4eb7dd68840b02ff"], 0x0) 2m30.74253121s ago: executing program 2 (id=235): mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@dyn}, {}]}) 2m30.692974222s ago: executing program 2 (id=236): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r4, &(0x7f0000000040), 0x0, 0x4000, &(0x7f0000000100), 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @remote}, {0x20000010304}, 0x53848a4054cad0aa, {0x2, 0x1, @broadcast}}) 2m28.442889258s ago: executing program 2 (id=245): shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x1, 0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x10, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, &(0x7f0000000b00)={0x40, 0x4, 0x5f, {0x5f, 0x2, "07f4969057888fcd4107f8fcb917ae93232f74e3fa822d404f951f9cab5976701d23fbd614600b04ac356ab49d55dd26d66ca4082b371a80d7541ba62590ebe6573043b67cfca47929a3c9103530a45bfccdd52a2ac7e0bbf6a2cc2db5"}}, 0x0, &(0x7f0000000c00), &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x46, 0x1, {0x22, 0xc61}}}}, &(0x7f0000000f40)={0x2c, &(0x7f0000000cc0)={0x20, 0x7, 0x94, "d1d64381395e677d6096824bdf63b2223d9188be8177f699d8b61abe61bcc922a599b732ea61f54e6523a34c3d707e2afaacba468552ca73dacd7dcf279e2901e3d4afdbcebea53ea15afd1c364f29d766543a29e9047647c1f0a2d70d04caf97e0c71267bf44e870bca1484bb74a302a464c8a97c4a424c40c1e1195d85c43c44def3578a31e10b004ae7bbd85cda54d877e21c"}, 0x0, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0xce}, &(0x7f0000000e40), 0x0}) syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) 2m25.520067066s ago: executing program 2 (id=263): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000004c0)=""/148, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/215, 0xd7) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) (async) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000002080), &(0x7f00000020c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xf3b16000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xf3b16000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}}, 0x0) 2m9.372638116s ago: executing program 32 (id=263): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000004c0)=""/148, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/215, 0xd7) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) (async) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000002080), &(0x7f00000020c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xf3b16000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xf3b16000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}}, 0x0) 22.632964303s ago: executing program 1 (id=750): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x40, 0xfffffffd, 0x0, 0xd1, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a01010218000b8014"], 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) socket$nl_generic(0x10, 0x3, 0x10) 11.811935614s ago: executing program 1 (id=765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x44, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0xe435df462e414262}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x72f2, &(0x7f00000005c0)={0x0, 0x11e6, 0x200, 0xfffffffa, 0x320}, &(0x7f0000000540), &(0x7f00000000c0)) syz_io_uring_setup(0x2e3f, &(0x7f0000000840)={0x0, 0xd495, 0x186a, 0x0, 0x2cb, 0x0, r6}, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x39000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000200)=ANY=[], 0xfffffe3e) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x9, 0x101}, 0x14}}, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r11, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) 10.205927555s ago: executing program 1 (id=769): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000300)="7a50b0af6cee9830bf29623d99721d2756450fed1b5dbd372e297aa2e0eb33e2516464bf4926601b3803155595e8c73a06a568a7a752dab07c36015c71641ff3f4d3633112f6a24be2b8419c13718075bd6bb6908190e48a4ab3bc7417930252182c0dd243533a04fb5cc92bb434db2258b02e5a177cc074a8752c5b0439a8e3b9a1f87e3aeb1170fefe34c689dadf026f4d681c20d84ea7a31d147b86f74ed775b3ebac96c6fe658af8f63948b70014f06063d32e996b2e2f4af8cbb22cfbdbdcdca5da24a2847e25ec08d2aaeb521b0903c481a95f1817940308a40d4dce7e74554eb5319dd2cf68b7e4c8c95835", 0xef}], 0x1, 0xfffffffc, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r5, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) 10.010440206s ago: executing program 3 (id=771): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xca, 0x1a, 0x60, 0x40, 0x2304, 0x20f, 0x3bde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0xe1, 0x3, 0xb3}}]}}]}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x20000000, 0x0, 0x0, [0x0], [0x1, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0xb68a], [0x0, 0x2, 0x0, 0xcbb]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x12, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) r8 = userfaultfd(0x80001) readv(r8, &(0x7f0000002140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x16) fallocate(r0, 0x0, 0x0, 0x2000402) 6.652835561s ago: executing program 0 (id=784): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, &(0x7f0000000040), 0x0, 0x4000, &(0x7f0000000100), 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @remote}, {0x20000010304}, 0x53848a4054cad0aa, {0x2, 0x1, @broadcast}}) 6.632761521s ago: executing program 1 (id=785): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) dup3(r2, r2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r5, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000280)={r8, r9, r10, 0x2, 0x3000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x35eb6c72, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::/', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000840)) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$selinux_access(r11, 0x0, 0x24) 5.926446922s ago: executing program 3 (id=787): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000200)="5f93f47e5555a5", 0x7) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)=ANY=[], 0x9) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.597441231s ago: executing program 0 (id=789): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x5c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x5c}}, 0x0) (async) 4.575974212s ago: executing program 5 (id=790): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000006000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.573267599s ago: executing program 0 (id=791): r0 = syz_open_dev$ndb(&(0x7f0000000740), 0x0, 0x180) ioctl$BLKRRPART(r0, 0x125f, 0xfdfdffff) 4.522193398s ago: executing program 3 (id=792): syz_usb_connect(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x46, 0x36, 0x56, 0x8, 0x4b4, 0x8613, 0x958f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x6e, 0xa5}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) 4.1938831s ago: executing program 1 (id=793): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) readv(r1, &(0x7f0000002140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x16) fallocate(r0, 0x0, 0x2040002, 0x2000402) 4.092094688s ago: executing program 0 (id=794): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b942ee3, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3], 0x2c}}, 0x0) 4.091566718s ago: executing program 5 (id=795): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.623808053s ago: executing program 0 (id=797): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x3}}}}}]}}]}}, 0x0) r1 = epoll_create(0xeb5) r2 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9d1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x4e, &(0x7f00000001c0)=""/78, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000280)=[{0x1, 0x5, 0x0, 0x8}, {0x0, 0x4, 0xa, 0x2}], 0x10, 0x1, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x81, 0xc, 0x4, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0xc824be52, 0x7}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r4, 0x25, 0x0, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x7}, @global=@item_012={0x1, 0x1, 0x0, "c5"}]}}, 0x0}, 0x0) 3.585462456s ago: executing program 5 (id=798): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2b, 0x801, 0x0) splice(r1, 0x0, r0, 0x0, 0x39000, 0x9) mmap(&(0x7f0000f42000/0x3000)=nil, 0x3000, 0x300000e, 0x11, r0, 0x4002000) writev(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x100000, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x558}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.114018061s ago: executing program 1 (id=799): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40401, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0xfffffff7) sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000855) r7 = openat$cgroup(r1, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000600)='cpuset.effective_mems\x00', 0x0, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000580)={0x1, 0x7}, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.113397439s ago: executing program 5 (id=801): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0xa7d426cd0c3a1c83, 0x70bd21, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c880}, 0x8080) ioctl(r3, 0x5, &(0x7f0000000000)="992dac95a700a7e98764185a46eaead80a9da248a5a188") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) (async) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0xa7d426cd0c3a1c83, 0x70bd21, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c880}, 0x8080) (async) ioctl(r3, 0x5, &(0x7f0000000000)="992dac95a700a7e98764185a46eaead80a9da248a5a188") (async) 3.023129048s ago: executing program 5 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000340)='./file1\x00', 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) listen(r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) r6 = socket(0x10, 0x5, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) socket(0x18, 0x0, 0x8) 1.958423181s ago: executing program 5 (id=803): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x80044704, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = dup(r0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x65, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="20254000000040322657649857b73e995f32bb07b9d03ebab4d58607615e7f1baf94ac34468f44010000009088b08c8be52dd9adee5bd55687a6039475665dfc20d512001a6ba4996a7cc2c51cf1b7b35c566ccf653bbc64"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) fchmodat(r3, &(0x7f0000000000)='.\x00', 0xffffff0b) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x11, 0x0, 0x0, {[@generic={0x1, 0x2}, @exp_fastopen={0xfe, 0xd, 0xf989, "794300e0e648f5089b"}]}}}}}}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x1d, 0x3, 0xfffbffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x80ffff, 0x13, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1.752121433s ago: executing program 3 (id=805): r0 = syz_open_dev$ndb(&(0x7f0000000740), 0x0, 0x180) ioctl$BLKRRPART(r0, 0x125f, 0xfffff000) 1.745526354s ago: executing program 4 (id=806): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="3800000005"], 0x38) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000804000000950000100000000018000000000000000000000000000000950000000000000085eb6700fcfffff29500000000000000668276e817943c5aa8b2"], &(0x7f00000000c0)='GPL\x00', 0x9b2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x451b33ea0dced697, 0x5, 0x4) 1.712263021s ago: executing program 3 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x2, 0x80, 0x1c, @MIDI_NOTEON=@note=0x61, 0xf, 0x10}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000ddca00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='rxrpc_disconnect_call\x00'}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.587911361s ago: executing program 4 (id=808): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 995.456186ms ago: executing program 4 (id=809): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x22044}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x8810) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x5, 0x2, 0x3, 0x10001}, 0x10) sendto$phonet(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) 838.787112ms ago: executing program 4 (id=810): socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80044100, &(0x7f0000000080)) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='ns\x00') renameat2(r4, &(0x7f0000000040)='./mnt/file0\x00', r4, &(0x7f00000003c0)='./mnt\x00', 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0xf4, r6, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0xf4}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 420.952169ms ago: executing program 3 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x2, 0x80, 0x1c, @MIDI_NOTEON=@note=0x61, 0xf, 0x10}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000ddca00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='rxrpc_disconnect_call\x00'}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 359.869392ms ago: executing program 4 (id=812): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 250.640964ms ago: executing program 4 (id=813): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000130001040000000000"], 0x14}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x48044) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000014f000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000002c0)={0xdf, 0x0, 0x8000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000012400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setns(0xffffffffffffffff, 0x80) openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 0 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) listen(r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) r6 = socket(0x10, 0x5, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) socket(0x18, 0x0, 0x8) kernel console output (not intermixed with test programs): device number 39 [ 161.959767][ T2147] usb 4-1: config 1 interface 0 has no altsetting 0 [ 161.980516][ T2147] usb 4-1: string descriptor 0 read error: -22 [ 161.986994][ T2147] usb 4-1: New USB device found, idVendor=0525, idProduct=b4e7, bcdDevice=15.b1 [ 161.999807][ T118] usb 2-1: Using ep0 maxpacket: 8 [ 162.009730][ T2147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.026386][ T118] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 162.041670][ T7469] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 162.049136][ T7469] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 162.061952][ T2147] usb 4-1: bad CDC descriptors [ 162.066252][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.129363][ T118] usb 2-1: config 0 descriptor?? [ 162.265732][ T5912] usb 4-1: USB disconnect, device number 20 [ 162.341593][ T118] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 162.358755][ T118] asix 2-1:0.0: probe with driver asix failed with error -32 [ 162.409863][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 162.605084][ T7486] block device autoloading is deprecated and will be removed. [ 163.171370][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 163.171387][ T30] audit: type=1400 audit(1742411642.199:477): avc: denied { setopt } for pid=7487 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 163.180073][ T118] usb 2-1: USB disconnect, device number 20 [ 163.332091][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.367166][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 163.391300][ T9] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 163.669722][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.686251][ T9] usb 6-1: config 0 descriptor?? [ 163.757770][ T7481] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.815278][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 163.831800][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.380'. [ 164.491881][ T9] greenasia 0003:0E8F:0012.000A: unbalanced delimiter at end of report description [ 164.522537][ T9] greenasia 0003:0E8F:0012.000A: parse failed [ 164.528877][ T9] greenasia 0003:0E8F:0012.000A: probe with driver greenasia failed with error -22 [ 164.920262][ T7521] tipc: Started in network mode [ 164.925256][ T7521] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 164.936010][ T7521] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0101 [ 164.946095][ T7521] tipc: Enabled bearer , priority 10 [ 165.489103][ T7525] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 165.570057][ T9] usb 6-1: USB disconnect, device number 3 [ 165.580443][ T7525] overlayfs: missing 'lowerdir' [ 165.633334][ T7530] bridge_slave_0: left allmulticast mode [ 165.639200][ T7530] bridge_slave_0: left promiscuous mode [ 165.692019][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.717755][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 165.773133][ T30] audit: type=1400 audit(1742411644.789:478): avc: denied { bind } for pid=7526 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.829795][ T5912] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 165.837875][ T7530] bridge_slave_1: left allmulticast mode [ 165.859770][ T7530] bridge_slave_1: left promiscuous mode [ 165.866749][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.893998][ T7530] bond0: (slave bond_slave_0): Releasing backup interface [ 165.984785][ T7530] bond0: (slave bond_slave_1): Releasing backup interface [ 166.017515][ T7530] team0: Port device team_slave_0 removed [ 166.102645][ T26] tipc: Node number set to 1 [ 166.103187][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.388'. [ 166.149127][ T5912] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 166.157656][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.168433][ T5912] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 166.177531][ T5912] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 166.185561][ T5912] usb 1-1: Manufacturer: syz [ 166.200382][ T5912] usb 1-1: config 0 descriptor?? [ 166.735389][ T7530] team0: Port device team_slave_1 removed [ 166.754041][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.771559][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.773624][ T5912] rc_core: IR keymap rc-hauppauge not found [ 166.819773][ T5912] Registered IR keymap rc-empty [ 166.830623][ T5912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 166.920672][ T5912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 166.978862][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.020251][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.175557][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 236 [ 167.801504][ T7531] team0: Mode changed to "loadbalance" [ 167.903687][ T5912] usb 1-1: USB disconnect, device number 24 [ 167.915860][ T7538] hsr0: entered promiscuous mode [ 167.983694][ T7538] hsr0: left promiscuous mode [ 168.259830][ T5869] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 168.349779][ T26] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 168.389727][ T5912] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 168.421450][ T5869] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 168.429155][ T5869] usb 5-1: can't read configurations, error -61 [ 168.501346][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 168.509275][ T26] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.522344][ T2147] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 168.534051][ T26] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.543045][ T26] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40 [ 168.552308][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 168.561057][ T5912] usb 1-1: no configurations [ 168.569825][ T5912] usb 1-1: can't read configurations, error -22 [ 168.577742][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.589996][ T5869] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 168.590324][ T26] usb 4-1: Product: áµ’çˆê”¬ç¬ºîž¤æ¼¥æœ¨ê¾°îºï°žæ»‚ֵͮ뛴䟕䌶êŒãŸƒî†ºÜ¹ç›í•”ì®å¿’囫ɘ訮ã눇ᾩ寄ڒ [ 168.611269][ T26] usb 4-1: Manufacturer: Ðœ [ 168.615780][ T26] usb 4-1: SerialNumber: Ч [ 168.691207][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.702711][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.719765][ T2147] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 168.729032][ T5912] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 168.739324][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.751124][ T2147] usb 2-1: config 0 descriptor?? [ 168.757676][ T5869] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 168.779463][ T5869] usb 5-1: can't read configurations, error -61 [ 168.806205][ T5869] usb usb5-port1: attempt power cycle [ 168.835673][ T30] audit: type=1400 audit(1742411647.859:479): avc: denied { create } for pid=7568 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 168.889767][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 168.897575][ T5912] usb 1-1: no configurations [ 168.902215][ T5912] usb 1-1: can't read configurations, error -22 [ 168.928899][ T5912] usb usb1-port1: attempt power cycle [ 169.013760][ T2147] usbhid 2-1:0.0: can't add hid device: -71 [ 169.019790][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 169.021127][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 169.049885][ T2147] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 169.091001][ T2147] usb 2-1: USB disconnect, device number 21 [ 169.185745][ T5869] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 169.233474][ T5869] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 169.250993][ T5869] usb 5-1: can't read configurations, error -61 [ 169.260030][ T30] audit: type=1400 audit(1742411648.229:480): avc: denied { setopt } for pid=7585 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.289903][ T5912] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 169.333546][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 169.339425][ T5912] usb 1-1: no configurations [ 169.344547][ T5912] usb 1-1: can't read configurations, error -22 [ 169.384386][ T7589] kernel profiling enabled (shift: 63) [ 169.390226][ T7589] profiling shift: 63 too large [ 169.403699][ T26] usbhid 4-1:1.0: can't add hid device: -71 [ 169.409792][ T26] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 169.418793][ T5869] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 169.438026][ T26] usb 4-1: USB disconnect, device number 21 [ 169.481706][ T5912] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 169.493074][ T5869] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 169.506595][ T5869] usb 5-1: can't read configurations, error -61 [ 169.510393][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 169.522712][ T5869] usb usb5-port1: unable to enumerate USB device [ 169.550481][ T5912] usb 1-1: no configurations [ 169.555249][ T5912] usb 1-1: can't read configurations, error -22 [ 169.585685][ T5912] usb usb1-port1: unable to enumerate USB device [ 169.909778][ T26] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 169.959900][ T5912] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 170.067021][ T26] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.104236][ T26] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 170.114289][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.122485][ T26] usb 4-1: Product: syz [ 170.131427][ T26] usb 4-1: Manufacturer: syz [ 170.136067][ T26] usb 4-1: SerialNumber: syz [ 170.207284][ T26] usb 4-1: config 0 descriptor?? [ 170.239894][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 170.259584][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 170.312309][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.331744][ T5912] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 170.364489][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.375460][ T5912] usb 2-1: Product: syz [ 170.382806][ T5912] usb 2-1: Manufacturer: syz [ 170.387381][ T5912] usb 2-1: SerialNumber: syz [ 170.408084][ T5912] usb 2-1: config 0 descriptor?? [ 170.417106][ T26] usb 4-1: USB disconnect, device number 22 [ 170.429961][ T5912] usb 2-1: no audio or video endpoints found [ 170.684557][ T7598] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 170.774712][ T5869] usb 2-1: USB disconnect, device number 22 [ 170.909791][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 171.069848][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 171.092726][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.118784][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 171.142232][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.702674][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.733523][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.759430][ T9] usb 6-1: Product: syz [ 171.777672][ T9] usb 6-1: Manufacturer: syz [ 172.213440][ T9] usb 6-1: SerialNumber: syz [ 172.589725][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.411'. [ 172.788630][ T9] usb 6-1: USB disconnect, device number 4 [ 172.952834][ T30] audit: type=1400 audit(1742411651.949:481): avc: denied { bind } for pid=7630 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 173.458559][ T7630] delete_channel: no stack [ 173.546813][ T30] audit: type=1400 audit(1742411652.569:482): avc: denied { write } for pid=7640 comm="syz.1.420" name="usbmon6" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.615562][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.649884][ T26] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 173.654683][ T30] audit: type=1400 audit(1742411652.569:483): avc: denied { ioctl } for pid=7640 comm="syz.1.420" path="/dev/usbmon6" dev="devtmpfs" ino=738 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.878967][ T26] usb 4-1: device descriptor read/all, error -71 [ 173.895894][ T30] audit: type=1326 audit(1742411652.859:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218c38d169 code=0x7ffc0000 [ 173.967301][ T30] audit: type=1326 audit(1742411652.859:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218c38d169 code=0x7ffc0000 [ 174.025100][ T30] audit: type=1326 audit(1742411652.869:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f218c38d169 code=0x7ffc0000 [ 174.048325][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.071666][ T7641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.090411][ T30] audit: type=1326 audit(1742411652.869:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218c38d169 code=0x7ffc0000 [ 174.113639][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.126318][ T30] audit: type=1326 audit(1742411652.869:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f218c384127 code=0x7ffc0000 [ 174.149418][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.179620][ T30] audit: type=1326 audit(1742411652.879:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f218c329359 code=0x7ffc0000 [ 174.205776][ T30] audit: type=1326 audit(1742411652.879:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218c38d169 code=0x7ffc0000 [ 174.236904][ T30] audit: type=1326 audit(1742411652.879:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f218c384127 code=0x7ffc0000 [ 174.266279][ T30] audit: type=1326 audit(1742411652.879:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f218c329359 code=0x7ffc0000 [ 174.290027][ T30] audit: type=1326 audit(1742411652.879:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f218c38d169 code=0x7ffc0000 [ 174.695090][ T5912] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 174.729910][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 174.871580][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 175.039413][ T5912] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 175.074765][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.101129][ T5912] usb 1-1: config 0 descriptor?? [ 175.118128][ T7659] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.181250][ T9] usb 2-1: unable to get BOS descriptor set [ 175.260092][ T9] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 175.285311][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.303568][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.322827][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.337266][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.365522][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.383382][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.394324][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.405127][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.415911][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.426712][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.437989][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.448787][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.459991][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.477447][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.487838][ T9] usb 2-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 175.499187][ T9] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 175.518207][ T9] usb 2-1: New USB device found, idVendor=19d2, idProduct=1008, bcdDevice=9b.33 [ 175.527842][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=243 [ 175.536403][ T9] usb 2-1: Product: syz [ 175.540995][ T9] usb 2-1: Manufacturer: syz [ 175.545659][ T9] usb 2-1: SerialNumber: syz [ 175.742100][ T5912] usbhid 1-1:0.0: can't add hid device: -71 [ 175.748299][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 175.763957][ T5912] usb 1-1: USB disconnect, device number 29 [ 176.639093][ T9] usb 2-1: USB disconnect, device number 23 [ 176.664090][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.993518][ T7682] bridge_slave_1 (unregistering): left allmulticast mode [ 177.013588][ T7682] bridge_slave_1 (unregistering): left promiscuous mode [ 177.030135][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.261717][ T2147] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 177.439823][ T2147] usb 5-1: Using ep0 maxpacket: 16 [ 177.447350][ T2147] usb 5-1: no configurations [ 177.467758][ T2147] usb 5-1: can't read configurations, error -22 [ 177.634153][ T2147] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 177.756692][ T7714] delete_channel: no stack [ 177.790623][ T2147] usb 5-1: Using ep0 maxpacket: 16 [ 177.801540][ T5912] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 177.820343][ T2147] usb 5-1: no configurations [ 177.825575][ T2147] usb 5-1: can't read configurations, error -22 [ 177.841414][ T2147] usb usb5-port1: attempt power cycle [ 177.949854][ T5912] usb 1-1: device descriptor read/64, error -71 [ 178.209905][ T5912] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 178.240259][ T2147] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 178.341664][ T2147] usb 5-1: Using ep0 maxpacket: 16 [ 178.369781][ T2147] usb 5-1: no configurations [ 178.376714][ T2147] usb 5-1: can't read configurations, error -22 [ 178.409719][ T5912] usb 1-1: device descriptor read/64, error -71 [ 178.510534][ T2147] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 178.520909][ T5912] usb usb1-port1: attempt power cycle [ 178.550034][ T2147] usb 5-1: Using ep0 maxpacket: 16 [ 178.555840][ T2147] usb 5-1: no configurations [ 178.565716][ T2147] usb 5-1: can't read configurations, error -22 [ 178.575895][ T2147] usb usb5-port1: unable to enumerate USB device [ 178.622109][ T5869] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 178.663919][ T7729] input: syz0 as /devices/virtual/input/input21 [ 178.713382][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 178.805482][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.816533][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.827409][ T5869] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 178.836515][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.846176][ T5869] usb 2-1: config 0 descriptor?? [ 178.861837][ T5912] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 178.890268][ T5912] usb 1-1: device descriptor read/8, error -71 [ 178.899187][ T7735] SELinux: policydb string length 0 does not match expected length 8 [ 178.907546][ T7735] SELinux: failed to load policy [ 178.919187][ T7735] dvmrp0: entered allmulticast mode [ 178.927099][ T7735] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 178.945159][ T7735] veth0_vlan: left promiscuous mode [ 178.954674][ T7735] veth0_vlan: entered promiscuous mode [ 178.965076][ T7735] team0: Device veth0_vlan failed to register rx_handler [ 179.133158][ T5912] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 179.167085][ T5912] usb 1-1: device descriptor read/8, error -71 [ 179.280553][ T5912] usb usb1-port1: unable to enumerate USB device [ 179.370288][ T5869] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 179.377580][ T5869] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 179.384839][ T5869] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 179.393310][ T5869] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 179.400661][ T5869] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 179.456164][ T5869] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 179.668797][ T5869] lenovo 0003:17EF:6047.000B: Failed to switch middle button: -71 [ 179.676900][ T5869] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 179.684497][ T5869] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 179.693618][ T5869] usb 2-1: USB disconnect, device number 24 [ 179.759792][ T5912] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 179.831516][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 179.919779][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 179.925891][ T5912] usb 4-1: too many configurations: 107, using maximum allowed: 8 [ 179.934872][ T5912] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 179.942635][ T5912] usb 4-1: can't read configurations, error -61 [ 180.070258][ T5912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 180.270093][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 180.307736][ T5912] usb 4-1: too many configurations: 107, using maximum allowed: 8 [ 180.363201][ T5912] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 180.429131][ T5912] usb 4-1: can't read configurations, error -61 [ 180.446618][ T5912] usb usb4-port1: attempt power cycle [ 180.464700][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 180.464716][ T30] audit: type=1400 audit(1742411659.489:752): avc: denied { create } for pid=7751 comm="syz.4.451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.793419][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 180.815704][ T30] audit: type=1400 audit(1742411659.689:753): avc: denied { mounton } for pid=7751 comm="syz.4.451" path="/81/file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.860907][ T7754] block device autoloading is deprecated and will be removed. [ 180.869791][ T7756] overlayfs: missing 'lowerdir' [ 180.895981][ T7714] delete_channel: no stack [ 180.979450][ T30] audit: type=1400 audit(1742411659.759:754): avc: denied { write } for pid=7751 comm="syz.4.451" name="file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.002044][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 181.007499][ T30] audit: type=1400 audit(1742411659.769:755): avc: denied { open } for pid=7751 comm="syz.4.451" path="/81/file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.007723][ T5912] usb 4-1: too many configurations: 107, using maximum allowed: 8 [ 181.038603][ T7714] delete_channel: no stack [ 181.057732][ T7714] delete_channel: no stack [ 181.064172][ T5912] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 181.072263][ T5912] usb 4-1: can't read configurations, error -61 [ 181.481604][ T7761] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 182.109748][ T5912] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 182.130139][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 182.135759][ T5912] usb 4-1: too many configurations: 107, using maximum allowed: 8 [ 182.796406][ T5912] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.805304][ T5912] usb 4-1: can't read configurations, error -71 [ 182.819152][ T5912] usb usb4-port1: unable to enumerate USB device [ 182.862102][ T30] audit: type=1400 audit(1742411661.889:756): avc: denied { unlink } for pid=5830 comm="syz-executor" name="file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.948252][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 183.912789][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 184.039728][ T9] usb 6-1: device descriptor read/64, error -71 [ 184.106506][ T30] audit: type=1400 audit(1742411663.129:757): avc: denied { setopt } for pid=7783 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.156032][ T30] audit: type=1400 audit(1742411663.179:758): avc: denied { mount } for pid=7790 comm="syz.4.462" name="/" dev="autofs" ino=16189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 184.537161][ T30] audit: type=1400 audit(1742411663.559:759): avc: denied { read } for pid=7783 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.909494][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 185.059226][ T9] usb 6-1: device descriptor read/64, error -71 [ 185.093493][ T7801] input: syz1 as /devices/virtual/input/input22 [ 185.944527][ T30] audit: type=1400 audit(1742411664.969:760): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 185.968694][ T9] usb usb6-port1: attempt power cycle [ 185.993663][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 187.418759][ T7826] program syz.0.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.651163][ T5818] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 188.489721][ T5868] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 188.560381][ T30] audit: type=1400 audit(1742411667.589:761): avc: denied { create } for pid=7844 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 188.693986][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 188.701849][ T5868] usb 1-1: config 1 has an invalid interface number: 182 but max is 3 [ 188.710760][ T5868] usb 1-1: config 1 has an invalid interface number: 30 but max is 3 [ 189.027177][ T5868] usb 1-1: config 1 has an invalid interface number: 135 but max is 3 [ 189.038187][ T30] audit: type=1400 audit(1742411668.059:762): avc: denied { getopt } for pid=7844 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.073991][ T5868] usb 1-1: config 1 has an invalid interface number: 67 but max is 3 [ 189.090171][ T30] audit: type=1400 audit(1742411668.099:763): avc: denied { read } for pid=7844 comm="syz.5.476" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 189.119705][ T5868] usb 1-1: config 1 has no interface number 0 [ 189.129754][ T5868] usb 1-1: config 1 has no interface number 1 [ 189.148211][ T5868] usb 1-1: config 1 has no interface number 2 [ 189.162505][ T5868] usb 1-1: config 1 has no interface number 3 [ 189.170926][ T30] audit: type=1400 audit(1742411668.099:764): avc: denied { open } for pid=7844 comm="syz.5.476" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 189.205254][ T5868] usb 1-1: config 1 interface 182 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 189.231128][ T5868] usb 1-1: config 1 interface 182 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 189.262906][ T30] audit: type=1400 audit(1742411668.119:765): avc: denied { ioctl } for pid=7844 comm="syz.5.476" path="socket:[16721]" dev="sockfs" ino=16721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.287600][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.297467][ T5868] usb 1-1: config 1 interface 30 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 189.319884][ T5868] usb 1-1: config 1 interface 30 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 189.334689][ T5868] usb 1-1: config 1 interface 30 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 189.348167][ T5868] usb 1-1: config 1 interface 30 altsetting 64 endpoint 0x9 has an invalid bInterval 230, changing to 11 [ 189.373407][ T5868] usb 1-1: config 1 interface 30 altsetting 64 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 189.390109][ T30] audit: type=1400 audit(1742411668.419:766): avc: denied { bind } for pid=7862 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.049501][ T5868] usb 1-1: config 1 interface 30 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 190.062204][ T5868] usb 1-1: config 1 interface 30 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 190.073265][ T5868] usb 1-1: config 1 interface 135 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 190.093504][ T5868] usb 1-1: config 1 interface 135 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 190.150399][ T5868] usb 1-1: config 1 interface 135 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 190.281356][ T30] audit: type=1400 audit(1742411669.219:767): avc: denied { write } for pid=7863 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.547972][ T7880] 9pnet_fd: Insufficient options for proto=fd [ 190.554234][ T5868] usb 1-1: config 1 interface 135 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 190.554263][ T5868] usb 1-1: config 1 interface 135 altsetting 1 has an endpoint descriptor with address 0x3D, changing to 0xD [ 190.580256][ T5868] usb 1-1: config 1 interface 135 altsetting 1 endpoint 0xD has an invalid bInterval 195, changing to 11 [ 190.593485][ T5868] usb 1-1: config 1 interface 135 altsetting 1 endpoint 0xD has invalid maxpacket 24700, setting to 1024 [ 190.607175][ T5868] usb 1-1: config 1 interface 135 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 190.621142][ T5868] usb 1-1: config 1 interface 67 altsetting 164 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 190.639738][ T5868] usb 1-1: config 1 interface 182 has no altsetting 0 [ 190.646586][ T5868] usb 1-1: config 1 interface 30 has no altsetting 0 [ 190.653318][ T5868] usb 1-1: config 1 interface 135 has no altsetting 0 [ 191.012923][ T5868] usb 1-1: config 1 interface 67 has no altsetting 0 [ 191.040011][ T5868] usb 1-1: string descriptor 0 read error: -71 [ 191.047574][ T5868] usb 1-1: New USB device found, idVendor=19d2, idProduct=1145, bcdDevice=d2.2b [ 191.643553][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.685285][ T5868] usb 1-1: can't set config #1, error -71 [ 191.729701][ T30] audit: type=1400 audit(1742411670.729:768): avc: granted { setsecparam } for pid=7892 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 191.757609][ T7893] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.766773][ T7893] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.775708][ T7893] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.784545][ T7893] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.801511][ T5868] usb 1-1: USB disconnect, device number 34 [ 191.920909][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.487'. [ 192.078764][ T30] audit: type=1400 audit(1742411671.099:769): avc: denied { read write } for pid=7910 comm="syz.1.491" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.134479][ T30] audit: type=1400 audit(1742411671.129:770): avc: denied { open } for pid=7910 comm="syz.1.491" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.805313][ T30] audit: type=1400 audit(1742411672.829:771): avc: denied { map } for pid=7929 comm="syz.0.496" path="pipe:[16874]" dev="pipefs" ino=16874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.869309][ T30] audit: type=1326 audit(1742411672.849:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4f8d169 code=0x7ffc0000 [ 193.893527][ T30] audit: type=1326 audit(1742411672.859:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc7f4f8d169 code=0x7ffc0000 [ 193.942619][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.945623][ T7936] sp0: Synchronizing with TNC [ 193.949385][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.969323][ T30] audit: type=1326 audit(1742411672.859:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4f8d169 code=0x7ffc0000 [ 193.994158][ T30] audit: type=1326 audit(1742411672.859:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7f4f8f087 code=0x7ffc0000 [ 194.017585][ T30] audit: type=1326 audit(1742411672.859:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc7f4f8effc code=0x7ffc0000 [ 194.089738][ T26] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 194.093740][ T30] audit: type=1326 audit(1742411672.859:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc7f4f8ef34 code=0x7ffc0000 [ 194.144568][ T7944] netlink: 'syz.0.502': attribute type 11 has an invalid length. [ 194.229988][ T26] usb 5-1: device descriptor read/64, error -71 [ 194.469859][ T26] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 194.619760][ T26] usb 5-1: device descriptor read/64, error -71 [ 194.741120][ T26] usb usb5-port1: attempt power cycle [ 194.982054][ T7942] 9pnet_fd: p9_fd_create_tcp (7942): problem connecting socket to 127.0.0.1 [ 195.054927][ T7933] [U] .úíøà [ 195.329716][ T26] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 195.378010][ T26] usb 5-1: device descriptor read/8, error -71 [ 195.741605][ T7963] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.507' resets device [ 195.789606][ T26] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 196.197921][ T26] usb 5-1: device descriptor read/8, error -71 [ 196.310886][ T26] usb usb5-port1: unable to enumerate USB device [ 196.503408][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.510'. [ 196.512262][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.510'. [ 196.521303][ T7975] netlink: 'syz.5.510': attribute type 15 has an invalid length. [ 196.949805][ T5868] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 197.142964][ T5868] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 197.187969][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.196598][ T5868] usb 4-1: Product: syz [ 197.200798][ T5868] usb 4-1: Manufacturer: syz [ 197.205388][ T5868] usb 4-1: SerialNumber: syz [ 197.272203][ T5868] usb 4-1: config 0 descriptor?? [ 197.451228][ T5868] ldusb 4-1:0.0: Interrupt in endpoint not found [ 197.464371][ T9] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 197.629869][ T9] usb 5-1: device descriptor read/64, error -71 [ 198.578749][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 199.049697][ T9] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 199.182549][ T7992] FAULT_INJECTION: forcing a failure. [ 199.182549][ T7992] name failslab, interval 1, probability 0, space 0, times 1 [ 199.196595][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.0.515 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 199.196618][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.196627][ T7992] Call Trace: [ 199.196633][ T7992] [ 199.196639][ T7992] dump_stack_lvl+0x16c/0x1f0 [ 199.196665][ T7992] should_fail_ex+0x50a/0x650 [ 199.196687][ T7992] ? fs_reclaim_acquire+0xae/0x150 [ 199.196710][ T7992] ? tomoyo_encode2+0x100/0x3e0 [ 199.196730][ T7992] should_failslab+0xc2/0x120 [ 199.196747][ T7992] __kmalloc_noprof+0xcb/0x510 [ 199.196761][ T7992] ? __get_fs_type+0x21/0x170 [ 199.196782][ T7992] tomoyo_encode2+0x100/0x3e0 [ 199.196808][ T7992] tomoyo_encode+0x29/0x50 [ 199.196828][ T7992] tomoyo_mount_acl+0x314/0x880 [ 199.196848][ T7992] ? hlock_class+0x4e/0x130 [ 199.196865][ T7992] ? __lock_acquire+0x15a9/0x3c40 [ 199.196890][ T7992] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 199.196915][ T7992] ? __pfx___lock_acquire+0x10/0x10 [ 199.196936][ T7992] ? stack_trace_save+0x95/0xd0 [ 199.196955][ T7992] ? __pfx_lock_release+0x10/0x10 [ 199.196987][ T7992] ? trace_lock_acquire+0x14e/0x1f0 [ 199.197005][ T7992] ? tomoyo_mount_permission+0x149/0x420 [ 199.197027][ T7992] ? lock_acquire+0x2f/0xb0 [ 199.197047][ T7992] ? tomoyo_mount_permission+0x149/0x420 [ 199.197071][ T7992] tomoyo_mount_permission+0x16e/0x420 [ 199.197091][ T7992] ? tomoyo_mount_permission+0x149/0x420 [ 199.197114][ T7992] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 199.197145][ T7992] ? get_current_fs_domain+0x184/0x1f0 [ 199.197165][ T7992] security_sb_mount+0x9b/0x260 [ 199.197187][ T7992] path_mount+0x129/0x1f10 [ 199.197206][ T7992] ? kmem_cache_free+0x2e2/0x4d0 [ 199.197220][ T7992] ? __pfx_path_mount+0x10/0x10 [ 199.197241][ T7992] ? putname+0x13c/0x180 [ 199.197262][ T7992] __x64_sys_mount+0x28f/0x310 [ 199.197279][ T7992] ? __pfx___x64_sys_mount+0x10/0x10 [ 199.197303][ T7992] do_syscall_64+0xcd/0x250 [ 199.197326][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.197348][ T7992] RIP: 0033:0x7f5d50b8d169 [ 199.197361][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.197376][ T7992] RSP: 002b:00007f5d4e9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.197393][ T7992] RAX: ffffffffffffffda RBX: 00007f5d50da5fa0 RCX: 00007f5d50b8d169 [ 199.197403][ T7992] RDX: 00004000000000c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 199.197413][ T7992] RBP: 00007f5d4e9f6090 R08: 0000400000000100 R09: 0000000000000000 [ 199.197428][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.197437][ T7992] R13: 0000000000000000 R14: 00007f5d50da5fa0 R15: 00007ffd65b86708 [ 199.197461][ T7992] [ 199.519885][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 199.519904][ T30] audit: type=1400 audit(1742411678.529:788): avc: denied { name_bind } for pid=7995 comm="syz.5.516" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 199.558507][ T9] usb 5-1: device descriptor read/64, error -71 [ 199.608580][ T118] usb 4-1: USB disconnect, device number 29 [ 199.656555][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 199.702614][ T9] usb usb5-port1: attempt power cycle [ 199.737012][ T8009] sit1: entered allmulticast mode [ 199.845989][ T30] audit: type=1400 audit(1742411678.869:789): avc: denied { ioctl } for pid=8014 comm="syz.0.522" path="socket:[17728]" dev="sockfs" ino=17728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.069886][ T118] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 200.220159][ T9] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 200.227916][ T118] usb 4-1: device descriptor read/64, error -71 [ 200.369846][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 200.452227][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.525'. [ 200.509037][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.519488][ T118] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 200.548523][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 200.564926][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.580848][ T9] usb 5-1: Product: syz [ 200.585203][ T9] usb 5-1: Manufacturer: syz [ 200.599750][ T9] usb 5-1: SerialNumber: syz [ 200.613952][ T9] usb 5-1: config 0 descriptor?? [ 200.627985][ T9] ljca 5-1:0.0: bulk endpoints not found [ 200.670454][ T118] usb 4-1: device descriptor read/64, error -71 [ 200.785765][ T118] usb usb4-port1: attempt power cycle [ 200.867887][ T8019] input: syz1 as /devices/virtual/input/input23 [ 200.890740][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 200.951650][ T5953] usb 5-1: USB disconnect, device number 55 [ 201.072242][ T9] usb 6-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 201.091536][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.115370][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 201.129977][ T118] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 201.139673][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.159324][ T9] usb 6-1: config 0 descriptor?? [ 201.175170][ T118] usb 4-1: device descriptor read/8, error -71 [ 201.420070][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'. [ 201.479906][ T118] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 201.520645][ T118] usb 4-1: device descriptor read/8, error -71 [ 201.646368][ T8042] FAULT_INJECTION: forcing a failure. [ 201.646368][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 201.662185][ T118] usb usb4-port1: unable to enumerate USB device [ 201.675220][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.4.530 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 201.675249][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.675259][ T8042] Call Trace: [ 201.675265][ T8042] [ 201.675271][ T8042] dump_stack_lvl+0x16c/0x1f0 [ 201.675300][ T8042] should_fail_ex+0x50a/0x650 [ 201.675326][ T8042] ? fs_reclaim_acquire+0xae/0x150 [ 201.675352][ T8042] ? alloc_fs_context+0x57/0x9c0 [ 201.675370][ T8042] should_failslab+0xc2/0x120 [ 201.675389][ T8042] __kmalloc_cache_noprof+0x68/0x410 [ 201.675413][ T8042] ? __get_fs_type+0x21/0x170 [ 201.675437][ T8042] alloc_fs_context+0x57/0x9c0 [ 201.675464][ T8042] path_mount+0xb08/0x1f10 [ 201.675484][ T8042] ? kmem_cache_free+0x2e2/0x4d0 [ 201.675499][ T8042] ? __pfx_path_mount+0x10/0x10 [ 201.675521][ T8042] ? putname+0x13c/0x180 [ 201.675543][ T8042] __x64_sys_mount+0x28f/0x310 [ 201.675562][ T8042] ? __pfx___x64_sys_mount+0x10/0x10 [ 201.675587][ T8042] do_syscall_64+0xcd/0x250 [ 201.675612][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.675635][ T8042] RIP: 0033:0x7f218c38d169 [ 201.675650][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.675665][ T8042] RSP: 002b:00007f218d1f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.675684][ T8042] RAX: ffffffffffffffda RBX: 00007f218c5a5fa0 RCX: 00007f218c38d169 [ 201.675695][ T8042] RDX: 00004000000000c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 201.675705][ T8042] RBP: 00007f218d1f5090 R08: 0000400000000100 R09: 0000000000000000 [ 201.675716][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.675726][ T8042] R13: 0000000000000000 R14: 00007f218c5a5fa0 R15: 00007ffcc83205c8 [ 201.675748][ T8042] [ 201.678136][ T9] usb 6-1: string descriptor 0 read error: -71 [ 201.799005][ T30] audit: type=1400 audit(1742411680.819:790): avc: denied { map } for pid=8045 comm="syz.4.532" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.811931][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 201.847797][ T30] audit: type=1400 audit(1742411680.819:791): avc: denied { execute } for pid=8045 comm="syz.4.532" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.856261][ T9] usb 6-1: USB disconnect, device number 8 [ 201.877909][ T30] audit: type=1400 audit(1742411680.819:792): avc: denied { ioctl } for pid=8045 comm="syz.4.532" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.920727][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.957221][ T5912] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 202.099830][ T26] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 202.122317][ T5912] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 202.130632][ T5912] usb 1-1: config 0 has no interface number 1 [ 202.136882][ T5912] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 202.152100][ T5912] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 202.165516][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 202.172791][ T5912] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 202.182092][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.191329][ T5912] usb 1-1: config 0 descriptor?? [ 202.249817][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 202.256666][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.265417][ T26] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 202.276732][ T26] usb 2-1: config 1 interface 0 has no altsetting 0 [ 202.285059][ T26] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 202.295787][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.303910][ T26] usb 2-1: Product: syz [ 202.308086][ T26] usb 2-1: Manufacturer: syz [ 202.312772][ T26] usb 2-1: SerialNumber: syz [ 202.329806][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 202.399944][ T5953] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 202.417344][ T5912] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 202.433613][ T5912] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 202.491013][ T9] usb 6-1: config 0 has an invalid interface number: 159 but max is 0 [ 202.499214][ T9] usb 6-1: config 0 has no interface number 0 [ 202.519718][ T9] usb 6-1: config 0 interface 159 has no altsetting 0 [ 202.526572][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=937a, bcdDevice=f4.83 [ 202.534563][ T26] usbhid 2-1:1.0: can't add hid device: -71 [ 202.546876][ T26] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 202.549863][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.565416][ T26] usb 2-1: USB disconnect, device number 25 [ 202.574771][ T9] usb 6-1: config 0 descriptor?? [ 202.600425][ T5953] usb 5-1: no configurations [ 202.605077][ T5953] usb 5-1: can't read configurations, error -22 [ 202.749752][ T5953] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 202.898650][ T5912] usb 1-1: USB disconnect, device number 35 [ 202.905951][ T5912] qcserial 1-1:0.2: device disconnected [ 202.963988][ T9] usb 6-1: string descriptor 0 read error: -71 [ 202.971592][ T9] ftdi_sio 6-1:0.159: FTDI USB Serial Device converter detected [ 202.979512][ T9] ftdi_sio ttyUSB0: unknown device type: 0xf483 [ 202.987205][ T9] usb 6-1: USB disconnect, device number 9 [ 202.993645][ T9] ftdi_sio 6-1:0.159: device disconnected [ 203.060271][ T5953] usb 5-1: no configurations [ 203.064896][ T5953] usb 5-1: can't read configurations, error -22 [ 203.078131][ T5953] usb usb5-port1: attempt power cycle [ 203.219713][ T118] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 203.319923][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 203.386016][ T118] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 203.656891][ T5953] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 203.665367][ T118] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.676482][ T118] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.702921][ T5953] usb 5-1: no configurations [ 203.707556][ T5953] usb 5-1: can't read configurations, error -22 [ 203.722342][ T118] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.745451][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.910712][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.927287][ T118] usb 4-1: Product: syz [ 203.933097][ T118] usb 4-1: Manufacturer: syz [ 203.937701][ T118] usb 4-1: SerialNumber: syz [ 203.942408][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 203.952175][ T5953] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 203.986996][ T30] audit: type=1400 audit(1742411683.009:793): avc: denied { create } for pid=8075 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 204.022653][ T118] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 204.031307][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.040566][ T5953] usb 5-1: no configurations [ 204.045165][ T5953] usb 5-1: can't read configurations, error -22 [ 204.051529][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.059546][ T10] usb 2-1: Product: syz [ 204.063860][ T118] cdc_ncm 4-1:1.0: bind() failure [ 204.069958][ T5953] usb usb5-port1: unable to enumerate USB device [ 204.079022][ T10] usb 2-1: Manufacturer: syz [ 204.084047][ T10] usb 2-1: SerialNumber: syz [ 204.213956][ T30] audit: type=1400 audit(1742411683.239:794): avc: denied { map } for pid=8061 comm="syz.3.536" path="socket:[17837]" dev="sockfs" ino=17837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 204.218551][ T26] usb 4-1: USB disconnect, device number 34 [ 204.237799][ T30] audit: type=1400 audit(1742411683.239:795): avc: denied { ioctl } for pid=8061 comm="syz.3.536" path="socket:[17834]" dev="sockfs" ino=17834 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.292267][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.302972][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.319813][ T5912] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 204.321158][ T10] usb 2-1: USB disconnect, device number 26 [ 204.491384][ T5912] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.505893][ T5912] usb 1-1: config 0 has no interface number 0 [ 204.515368][ T5912] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 204.524692][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.534308][ T5912] usb 1-1: config 0 descriptor?? [ 204.542005][ T5912] usb 1-1: selecting invalid altsetting 1 [ 204.552600][ T5912] dvb_ttusb_budget: ttusb_init_controller: error [ 204.559756][ T5912] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 204.588320][ T5912] DVB: Unable to find symbol cx22700_attach() [ 204.649827][ T5912] DVB: Unable to find symbol tda10046_attach() [ 204.656047][ T5912] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 205.090311][ T30] audit: type=1326 audit(1742411684.109:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.5.546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f270158d169 code=0x0 [ 205.119745][ T5953] usb 1-1: USB disconnect, device number 36 [ 205.148506][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'. [ 205.157417][ T30] audit: type=1400 audit(1742411684.169:797): avc: denied { setopt } for pid=8095 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.214375][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.548'. [ 205.365752][ T30] audit: type=1400 audit(1742411684.389:798): avc: denied { ioctl } for pid=8102 comm="syz.0.547" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 205.589993][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 205.600719][ T5912] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 205.752962][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.791474][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.813849][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.849953][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 206.296534][ T5912] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 206.322903][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.338203][ T10] usb 4-1: config 0 descriptor?? [ 206.351651][ T5912] usb 1-1: config 0 has no interface number 0 [ 206.373468][ T5912] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.385593][ T5912] usb 1-1: config 0 interface 85 has no altsetting 0 [ 206.426415][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.455394][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.540724][ T5912] usb 1-1: Product: syz [ 206.544930][ T5912] usb 1-1: Manufacturer: syz [ 206.549759][ T5912] usb 1-1: SerialNumber: syz [ 206.565661][ T5912] usb 1-1: config 0 descriptor?? [ 206.669346][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 207.409594][ T5912] appletouch 1-1:0.85: Failed to read mode from device. [ 207.416994][ T5912] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 207.476368][ T8144] Bluetooth: MGMT ver 1.23 [ 207.485055][ T10] usb 4-1: string descriptor 0 read error: -22 [ 207.888892][ T10] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 207.909595][ T10] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 207.918001][ T10] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 207.930242][ T118] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 207.974800][ T10] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 207.995898][ T8156] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 208.003876][ T8156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.051088][ T10] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 208.117951][ T10] usb 4-1: USB disconnect, device number 35 [ 208.139853][ T118] usb 5-1: Using ep0 maxpacket: 8 [ 208.151276][ T118] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 208.162396][ T118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.172301][ T118] usb 5-1: Product: syz [ 208.176580][ T118] usb 5-1: Manufacturer: syz [ 208.181848][ T118] usb 5-1: SerialNumber: syz [ 208.198883][ T118] esd_usb 5-1:1.0: sending version message failed [ 208.206020][ T118] esd_usb 5-1:1.0: probe with driver esd_usb failed with error -22 [ 208.473354][ T10] usb 5-1: USB disconnect, device number 60 [ 208.843441][ T5912] usb 1-1: USB disconnect, device number 37 [ 209.067214][ T8162] bridge0: port 4(veth0_to_bridge) entered blocking state [ 209.112439][ T8162] bridge0: port 4(veth0_to_bridge) entered disabled state [ 209.138337][ T5824] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 209.150019][ T8162] veth0_to_bridge: entered allmulticast mode [ 209.180778][ T8162] veth0_to_bridge: entered promiscuous mode [ 209.190133][ T8162] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.299969][ T30] audit: type=1400 audit(1742411688.309:799): avc: denied { setopt } for pid=8173 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.330378][ T8162] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 209.391763][ T8162] bridge0: port 4(veth0_to_bridge) entered blocking state [ 209.400532][ T8162] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 210.367991][ T8185] syz.1.568 (8185): drop_caches: 3 [ 211.383416][ T52] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 211.559692][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 211.572571][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.612196][ T52] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 211.621631][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.630538][ T52] usb 5-1: Product: syz [ 211.755490][ T52] usb 5-1: Manufacturer: syz [ 211.760440][ T52] usb 5-1: SerialNumber: syz [ 211.768320][ T52] usb 5-1: config 0 descriptor?? [ 211.775838][ T52] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 211.913683][ T52] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 212.003107][ T8212] xt_connbytes: Forcing CT accounting to be enabled [ 212.010212][ T8212] xt_bpf: check failed: parse error [ 212.089194][ T8216] PKCS8: Unsupported PKCS#8 version [ 212.245233][ T52] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 212.304501][ T8217] netlink: 52 bytes leftover after parsing attributes in process `syz.0.577'. [ 212.696608][ T30] audit: type=1400 audit(1742411691.349:800): avc: denied { create } for pid=8214 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 212.832945][ T52] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 212.842326][ T52] em28xx 5-1:0.0: board has no eeprom [ 212.969945][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 213.003562][ T52] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 213.021222][ T52] em28xx 5-1:0.0: dvb set to bulk mode. [ 213.043909][ T5912] em28xx 5-1:0.0: Binding DVB extension [ 213.304252][ T52] usb 5-1: USB disconnect, device number 61 [ 213.334265][ T52] em28xx 5-1:0.0: Disconnecting em28xx [ 213.371149][ T9] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 213.388196][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.429721][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.430291][ T5912] em28xx 5-1:0.0: Registering input extension [ 213.448906][ T9] usb 4-1: config 1 has no interface number 1 [ 213.473343][ T52] em28xx 5-1:0.0: Closing input extension [ 213.498311][ T9] usb 4-1: string descriptor 0 read error: -22 [ 213.515610][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.534285][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.556215][ T52] em28xx 5-1:0.0: Freeing device [ 213.562086][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.573822][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 213.790400][ T52] usb 4-1: USB disconnect, device number 36 [ 214.859775][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 216.410822][ T30] audit: type=1400 audit(1742411695.439:801): avc: denied { accept } for pid=8257 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 216.488731][ T8264] netlink: 56 bytes leftover after parsing attributes in process `syz.0.586'. [ 216.524637][ T5901] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 217.389742][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.459108][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.469395][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.488649][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.498018][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.533163][ T5901] usb 5-1: Product: syz [ 217.538284][ T5901] usb 5-1: Manufacturer: syz [ 217.559842][ T5901] usb 5-1: SerialNumber: syz [ 217.572271][ T5901] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 217.579285][ T5901] cdc_ncm 5-1:1.0: bind() failure [ 217.590241][ T5912] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 217.595665][ T8277] ALSA: seq fatal error: cannot create timer (-22) [ 218.209685][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 218.230408][ T10] usb 5-1: USB disconnect, device number 62 [ 219.577314][ T5912] usb 4-1: device descriptor read/all, error -71 [ 219.973507][ T30] audit: type=1400 audit(1742411698.959:802): avc: denied { sqpoll } for pid=8286 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.179301][ T8318] : entered promiscuous mode [ 223.261981][ T8322] netlink: 40 bytes leftover after parsing attributes in process `syz.5.604'. [ 223.399819][ T5912] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 224.080491][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.361236][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.377326][ T5912] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 224.388163][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.473107][ T5912] usb 2-1: config 0 descriptor?? [ 224.513548][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.607'. [ 224.550812][ T8334] netlink: 28 bytes leftover after parsing attributes in process `syz.5.607'. [ 225.058710][ T5912] cp2112 0003:10C4:EA90.000D: item fetching failed at offset 5/7 [ 225.081165][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'. [ 225.087144][ T5912] cp2112 0003:10C4:EA90.000D: parse failed [ 225.142217][ T5912] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -22 [ 225.270583][ T9] usb 2-1: USB disconnect, device number 27 [ 225.358089][ T30] audit: type=1400 audit(1742411704.379:803): avc: denied { read } for pid=8349 comm="syz.0.613" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 225.419032][ T30] audit: type=1400 audit(1742411704.379:804): avc: denied { open } for pid=8349 comm="syz.0.613" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 225.511591][ T30] audit: type=1400 audit(1742411704.409:805): avc: denied { ioctl } for pid=8349 comm="syz.0.613" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 226.068633][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 226.079404][ T30] audit: type=1400 audit(1742411705.099:806): avc: denied { open } for pid=8368 comm="syz.3.620" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 226.102813][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.139990][ T30] audit: type=1400 audit(1742411705.149:807): avc: denied { ioctl } for pid=8368 comm="syz.3.620" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 226.164952][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.078769][ T8390] netlink: 'syz.5.626': attribute type 5 has an invalid length. [ 228.231899][ T9] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 228.564532][ T9] usb 4-1: device descriptor read/64, error -71 [ 228.899810][ T9] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 228.979906][ T5901] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 229.050170][ T9] usb 4-1: device descriptor read/64, error -71 [ 229.080081][ T5912] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 229.145788][ T5901] usb 2-1: config 3 has an invalid interface number: 168 but max is 0 [ 229.154794][ T5901] usb 2-1: config 3 has no interface number 0 [ 229.161856][ T5901] usb 2-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 229.178914][ T5901] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 229.209722][ T5901] usb 2-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 229.220698][ T5901] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 229.232007][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.250119][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 229.258927][ T5912] usb 1-1: no configurations [ 229.264260][ T5912] usb 1-1: can't read configurations, error -22 [ 229.273391][ T8417] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 229.282661][ T9] usb usb4-port1: attempt power cycle [ 229.409778][ T5912] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 229.486073][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.497707][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.510012][ T5901] usb 2-1: string descriptor 0 read error: -71 [ 229.516688][ T5901] keyspan 2-1:3.168: Keyspan 2 port adapter converter detected [ 229.524428][ T5901] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 1 [ 229.532891][ T5901] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 84 [ 229.541677][ T5901] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 2 [ 229.552459][ T5901] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 229.561071][ T5901] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 88 [ 229.568913][ T5901] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 6 [ 229.577465][ T5901] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 229.585514][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 229.591140][ T5912] usb 1-1: no configurations [ 229.595742][ T5912] usb 1-1: can't read configurations, error -22 [ 229.604119][ T5901] usb 2-1: USB disconnect, device number 28 [ 229.610368][ T5912] usb usb1-port1: attempt power cycle [ 229.617375][ T5901] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 229.629271][ T5901] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 229.639106][ T5901] keyspan 2-1:3.168: device disconnected [ 229.689963][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 229.720217][ T9] usb 4-1: device descriptor read/8, error -71 [ 229.959774][ T5912] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 229.969738][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 229.982530][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 229.988197][ T5912] usb 1-1: no configurations [ 229.992880][ T5912] usb 1-1: can't read configurations, error -22 [ 230.000311][ T9] usb 4-1: device descriptor read/8, error -71 [ 230.080777][ T30] audit: type=1400 audit(1742411709.109:808): avc: denied { ioctl } for pid=8433 comm="syz.1.637" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.106089][ T30] audit: type=1400 audit(1742411709.109:809): avc: denied { map } for pid=8433 comm="syz.1.637" path="/dev/ttyprintk" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 230.130443][ T5912] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 230.136245][ T9] usb usb4-port1: unable to enumerate USB device [ 230.150696][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 230.156296][ T5912] usb 1-1: no configurations [ 230.161083][ T5912] usb 1-1: can't read configurations, error -22 [ 230.167477][ T5912] usb usb1-port1: unable to enumerate USB device [ 230.577583][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 230.879786][ T5901] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 231.405787][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 231.433121][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 231.456330][ T5901] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 231.476968][ T5901] usb 2-1: config 1 interface 0 has no altsetting 0 [ 231.486293][ T5901] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 231.505059][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.514284][ T5901] usb 2-1: Product: syz [ 231.519017][ T5901] usb 2-1: Manufacturer: syz [ 231.524789][ T5901] usb 2-1: SerialNumber: syz [ 231.755255][ T5901] usbhid 2-1:1.0: can't add hid device: -71 [ 231.761391][ T5901] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 231.771253][ T5901] usb 2-1: USB disconnect, device number 29 [ 231.809884][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 231.969808][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 231.984773][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 232.010620][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.022655][ T9] usb 6-1: config 0 descriptor?? [ 232.035064][ T9] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 232.046463][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 232.057158][ T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 232.065182][ T9] usb 6-1: media controller created [ 232.088027][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.112802][ T9] usb 6-1: selecting invalid altsetting 1 [ 232.119191][ T9] set interface failed [ 232.122202][ T9] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 232.139314][ T9] error writing reg: 0xff, val: 0x00 [ 232.165064][ T9] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 232.669793][ T9] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 232.853221][ T5901] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 233.373402][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 233.390293][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 233.397254][ T5901] usb 5-1: config 0 has no interfaces? [ 233.427456][ T5901] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 233.437938][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.658'. [ 233.449763][ T5901] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 233.470709][ T5901] usb 5-1: Product: syz [ 233.475180][ T5901] usb 5-1: Manufacturer: syz [ 233.488652][ T5901] usb 5-1: SerialNumber: syz [ 233.497240][ T5901] usb 5-1: config 0 descriptor?? [ 233.529792][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 233.717235][ T2147] usb 5-1: USB disconnect, device number 63 [ 233.789823][ T5901] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 233.893641][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 233.899267][ T9] usb usb2-port1: attempt power cycle [ 233.962145][ T5901] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 233.962180][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 233.962204][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 233.962236][ T5901] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 233.962257][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.976091][ T5901] usb 1-1: config 0 descriptor?? [ 234.254890][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 234.281265][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 234.409830][ T5953] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 234.417528][ T9] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 234.429578][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.438749][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.447539][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 234.453195][ T9] usb usb2-port1: unable to enumerate USB device [ 234.679778][ T5953] usb 4-1: device descriptor read/64, error -71 [ 235.259485][ T5901] a4tech 0003:09DA:001A.000E: item fetching failed at offset 6/7 [ 235.267942][ T5901] a4tech 0003:09DA:001A.000E: parse failed [ 235.273939][ T5901] a4tech 0003:09DA:001A.000E: probe with driver a4tech failed with error -22 [ 235.310679][ T5901] usb 6-1: USB disconnect, device number 10 [ 235.339868][ T118] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 235.420309][ T5953] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 235.511419][ T118] usb 5-1: config 255 has an invalid interface number: 20 but max is 0 [ 235.530905][ T30] audit: type=1400 audit(1742411714.549:810): avc: denied { mount } for pid=8529 comm="syz.5.667" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 235.531551][ T118] usb 5-1: config 255 has no interface number 0 [ 235.560024][ T118] usb 5-1: config 255 interface 20 has no altsetting 0 [ 235.561690][ T118] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 235.561716][ T118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.561735][ T118] usb 5-1: Product: syz [ 235.561750][ T118] usb 5-1: Manufacturer: syz [ 235.561765][ T118] usb 5-1: SerialNumber: syz [ 235.580356][ T5953] usb 4-1: device descriptor read/64, error -71 [ 235.706320][ T30] audit: type=1400 audit(1742411714.699:811): avc: denied { watch } for pid=8529 comm="syz.5.667" path="/66/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 235.728533][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.736849][ T5953] usb usb4-port1: attempt power cycle [ 235.745114][ T8535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.668'. [ 235.838263][ T8524] netlink: 277 bytes leftover after parsing attributes in process `syz.4.665'. [ 235.868545][ T8524] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 235.999853][ T5901] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 236.023623][ T118] usb 5-1: USB disconnect, device number 64 [ 236.034790][ T8532] 9pnet: Could not find request transport: t [ 236.161031][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.172352][ T5901] usb 6-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 236.181475][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.191171][ T5901] usb 6-1: config 0 descriptor?? [ 236.350276][ T5953] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 236.358027][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 236.380896][ T5953] usb 4-1: device descriptor read/8, error -71 [ 236.519870][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 236.532508][ T10] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 236.546298][ T10] usb 2-1: config 8 has no interface number 0 [ 236.637225][ T5901] wacom 0003:056A:003F.000F: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.5-1/input0 [ 236.642023][ T118] usb 1-1: USB disconnect, device number 42 [ 236.661510][ T10] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 236.675597][ T10] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 236.960542][ T5901] usb 6-1: USB disconnect, device number 11 [ 237.209706][ T5953] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 237.222125][ T10] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 237.232678][ T10] usb 2-1: config 8 interface 39 has no altsetting 0 [ 237.241388][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 237.279677][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.287743][ T10] usb 2-1: Product: syz [ 237.359674][ T5953] usb 4-1: device descriptor read/8, error -71 [ 237.398854][ T10] usb 2-1: Manufacturer: syz [ 237.416595][ T10] usb 2-1: SerialNumber: syz [ 237.490042][ T5953] usb usb4-port1: unable to enumerate USB device [ 237.629011][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.639008][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.652765][ T10] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 237.660343][ T5868] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 237.671953][ T10] ipheth 2-1:8.39: probe with driver ipheth failed with error -71 [ 237.689321][ T10] usb 2-1: USB disconnect, device number 34 [ 237.799809][ T5953] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 237.843037][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.861172][ T5868] usb 5-1: config 0 has no interface number 0 [ 237.867672][ T5868] usb 5-1: too many endpoints for config 0 interface 1 altsetting 253: 140, using maximum allowed: 30 [ 237.881169][ T5868] usb 5-1: config 0 interface 1 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 237.896492][ T5868] usb 5-1: config 0 interface 1 has no altsetting 0 [ 237.908138][ T5868] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 237.918172][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.928098][ T5868] usb 5-1: config 0 descriptor?? [ 237.939922][ T5868] usb 5-1: bad CDC descriptors [ 237.955630][ T30] audit: type=1400 audit(1742411716.979:812): avc: denied { unmount } for pid=7215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 237.976339][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 237.993598][ T5953] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.005171][ T5953] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.018605][ T5953] usb 4-1: config 0 interface 0 has no altsetting 0 [ 238.025445][ T5953] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 238.034765][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.051462][ T5953] usb 4-1: config 0 descriptor?? [ 238.239946][ T5912] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 238.268920][ T8561] SELinux: policydb magic number 0x20 does not match expected magic number 0xf97cff8c [ 238.332879][ T8561] SELinux: failed to load policy [ 238.421687][ T5901] usb 5-1: USB disconnect, device number 65 [ 238.431153][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.470754][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.492439][ T5912] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 238.523093][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.530683][ T5953] hid (null): report_id 22504 is invalid [ 238.541993][ T5953] wacom 0003:056A:0094.0010: report_id 22504 is invalid [ 238.542367][ T5912] usb 6-1: config 0 descriptor?? [ 238.559678][ T5953] wacom 0003:056A:0094.0010: item 0 2 1 8 parsing failed [ 238.567438][ T5953] wacom 0003:056A:0094.0010: parse failed [ 238.579349][ T5953] wacom 0003:056A:0094.0010: probe with driver wacom failed with error -22 [ 238.690129][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.680'. [ 238.801813][ T5825] usb 4-1: USB disconnect, device number 47 [ 238.819651][ T30] audit: type=1400 audit(1742411717.819:813): avc: denied { connect } for pid=8568 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 239.009126][ T5912] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 239.137276][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.682'. [ 239.245680][ T5912] usb 6-1: USB disconnect, device number 12 [ 239.283099][ T30] audit: type=1400 audit(1742411718.309:814): avc: denied { write } for pid=8577 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 239.494143][ T8584] FAULT_INJECTION: forcing a failure. [ 239.494143][ T8584] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 239.519853][ T8584] CPU: 1 UID: 0 PID: 8584 Comm: syz.3.683 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 239.519879][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.519888][ T8584] Call Trace: [ 239.519893][ T8584] [ 239.519899][ T8584] dump_stack_lvl+0x16c/0x1f0 [ 239.519927][ T8584] should_fail_ex+0x50a/0x650 [ 239.519952][ T8584] ? __pfx___might_resched+0x10/0x10 [ 239.519980][ T8584] should_fail_alloc_page+0xe7/0x130 [ 239.520001][ T8584] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 239.520027][ T8584] ? hlock_class+0x4e/0x130 [ 239.520045][ T8584] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 239.520063][ T8584] ? __pfx_mark_lock+0x10/0x10 [ 239.520083][ T8584] ? register_lock_class+0xb1/0x1240 [ 239.520106][ T8584] ? hlock_class+0x4e/0x130 [ 239.520120][ T8584] ? __lock_acquire+0xcc5/0x3c40 [ 239.520139][ T8584] ? __pfx_register_lock_class+0x10/0x10 [ 239.520163][ T8584] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 239.520185][ T8584] ? mark_lock+0xb5/0xc60 [ 239.520210][ T8584] ? hlock_class+0x4e/0x130 [ 239.520244][ T8584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.520275][ T8584] ? policy_nodemask+0xea/0x4e0 [ 239.520294][ T8584] alloc_pages_mpol+0x1fc/0x540 [ 239.520313][ T8584] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 239.520347][ T8584] alloc_pages_noprof+0x131/0x390 [ 239.520366][ T8584] get_zeroed_page_noprof+0x14/0x50 [ 239.520387][ T8584] simple_transaction_get+0x62/0x140 [ 239.520410][ T8584] ? __pfx_sel_write_member+0x10/0x10 [ 239.520429][ T8584] selinux_transaction_write+0xc3/0x180 [ 239.520449][ T8584] ? __pfx_selinux_transaction_write+0x10/0x10 [ 239.520467][ T8584] vfs_write+0x24c/0x1150 [ 239.520492][ T8584] ? __fget_files+0x1fc/0x3a0 [ 239.520507][ T8584] ? __pfx___mutex_lock+0x10/0x10 [ 239.520530][ T8584] ? __pfx_vfs_write+0x10/0x10 [ 239.520560][ T8584] ? __fget_files+0x206/0x3a0 [ 239.520582][ T8584] ksys_write+0x12b/0x250 [ 239.520595][ T8584] ? __pfx_ksys_write+0x10/0x10 [ 239.520616][ T8584] do_syscall_64+0xcd/0x250 [ 239.520639][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.520662][ T8584] RIP: 0033:0x7fc7f4f8d169 [ 239.520675][ T8584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.520690][ T8584] RSP: 002b:00007fc7f5dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.520705][ T8584] RAX: ffffffffffffffda RBX: 00007fc7f51a5fa0 RCX: 00007fc7f4f8d169 [ 239.520716][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.520725][ T8584] RBP: 00007fc7f5dec090 R08: 0000000000000000 R09: 0000000000000000 [ 239.520735][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.520744][ T8584] R13: 0000000000000000 R14: 00007fc7f51a5fa0 R15: 00007ffc381cd208 [ 239.520765][ T8584] [ 239.524002][ T30] audit: type=1400 audit(1742411718.549:815): avc: denied { compute_member } for pid=8581 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 239.880654][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.688'. [ 239.889760][ T5953] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 240.104965][ T5953] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 240.126483][ T5953] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 241.379979][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 241.399731][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 241.408664][ T5953] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 241.463374][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.692'. [ 241.499646][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.516665][ T8608] tipc: Can't bind to reserved service type 1 [ 241.529959][ T5953] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 241.554984][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.591305][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.677872][ T5953] usb 5-1: Product: syz [ 241.686235][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.702160][ T5953] usb 5-1: Manufacturer: syz [ 241.707152][ T5953] usb 5-1: SerialNumber: syz [ 241.717059][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 241.939912][ T5912] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 242.278785][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.291069][ T5953] usb 5-1: config 0 descriptor?? [ 242.296965][ T10] usb 1-1: config 0 descriptor?? [ 242.309910][ T8586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.767645][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.789700][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.809702][ T5912] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 242.819058][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.835853][ T5912] usb 6-1: config 0 descriptor?? [ 242.973641][ T8630] netlink: 76 bytes leftover after parsing attributes in process `syz.1.698'. [ 243.019763][ T30] audit: type=1400 audit(1742411722.039:816): avc: denied { nlmsg_write } for pid=8629 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.270144][ T5912] ortek 0003:1223:3F07.0012: unknown main item tag 0x6 [ 243.277103][ T5912] ortek 0003:1223:3F07.0012: report_id 29495 is invalid [ 243.284569][ T5912] ortek 0003:1223:3F07.0012: item 0 2 1 8 parsing failed [ 243.300250][ T5912] ortek 0003:1223:3F07.0012: probe with driver ortek failed with error -22 [ 243.312274][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.701'. [ 243.485830][ T5912] usb 6-1: USB disconnect, device number 13 [ 243.588795][ T8653] FAULT_INJECTION: forcing a failure. [ 243.588795][ T8653] name failslab, interval 1, probability 0, space 0, times 0 [ 243.656378][ T8653] CPU: 1 UID: 0 PID: 8653 Comm: syz.5.705 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 243.656406][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.656416][ T8653] Call Trace: [ 243.656421][ T8653] [ 243.656428][ T8653] dump_stack_lvl+0x16c/0x1f0 [ 243.656455][ T8653] should_fail_ex+0x50a/0x650 [ 243.656482][ T8653] ? fs_reclaim_acquire+0xae/0x150 [ 243.656508][ T8653] ? sel_write_member+0x22e/0x410 [ 243.656528][ T8653] should_failslab+0xc2/0x120 [ 243.656548][ T8653] __kmalloc_noprof+0xcb/0x510 [ 243.656566][ T8653] ? __might_fault+0x13b/0x190 [ 243.656588][ T8653] sel_write_member+0x22e/0x410 [ 243.656608][ T8653] ? __pfx_sel_write_member+0x10/0x10 [ 243.656627][ T8653] ? lock_acquire+0x2f/0xb0 [ 243.656650][ T8653] ? __might_fault+0xe3/0x190 [ 243.656676][ T8653] ? _copy_from_user+0x59/0xd0 [ 243.656696][ T8653] ? __pfx_sel_write_member+0x10/0x10 [ 243.656713][ T8653] selinux_transaction_write+0xf5/0x180 [ 243.656734][ T8653] ? __pfx_selinux_transaction_write+0x10/0x10 [ 243.656752][ T8653] vfs_write+0x24c/0x1150 [ 243.656779][ T8653] ? __fget_files+0x1fc/0x3a0 [ 243.656796][ T8653] ? __pfx___mutex_lock+0x10/0x10 [ 243.656819][ T8653] ? __pfx_vfs_write+0x10/0x10 [ 243.656850][ T8653] ? __fget_files+0x206/0x3a0 [ 243.656872][ T8653] ksys_write+0x12b/0x250 [ 243.656887][ T8653] ? __pfx_ksys_write+0x10/0x10 [ 243.656911][ T8653] do_syscall_64+0xcd/0x250 [ 243.656935][ T8653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.656958][ T8653] RIP: 0033:0x7f270158d169 [ 243.656971][ T8653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.656985][ T8653] RSP: 002b:00007f270245d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.657001][ T8653] RAX: ffffffffffffffda RBX: 00007f27017a5fa0 RCX: 00007f270158d169 [ 243.657011][ T8653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 243.657021][ T8653] RBP: 00007f270245d090 R08: 0000000000000000 R09: 0000000000000000 [ 243.657031][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.657040][ T8653] R13: 0000000000000000 R14: 00007f27017a5fa0 R15: 00007ffea8930cc8 [ 243.657059][ T8653] [ 243.878761][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.905480][ T5953] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 243.949923][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 243.958281][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 244.062539][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 244.179996][ T5825] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 244.361252][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 244.599782][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 244.609828][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 245.238801][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 245.246587][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 245.268080][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 245.311028][ T5825] usb 2-1: config 150 has an invalid interface number: 120 but max is 0 [ 245.413340][ T5825] usb 2-1: config 150 has no interface number 0 [ 245.420398][ T5825] usb 2-1: config 150 interface 120 has no altsetting 0 [ 245.431207][ T9] usb 4-1: config 179 has no interface number 0 [ 245.480043][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 245.509757][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 245.528526][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 245.555748][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 245.570686][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 245.606537][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 245.615495][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.638185][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 245.646002][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 245.674989][ T5953] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 245.690830][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 245.732425][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 245.851063][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 245.865523][ T5953] usb 5-1: USB disconnect, device number 66 [ 245.892975][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.956196][ T5953] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 246.132361][ T8656] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 246.150830][ T5953] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 246.178265][ T5953] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 246.192335][ T5953] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 246.202787][ T5953] keyspan 5-1:0.0: device disconnected [ 246.246926][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.266092][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.396416][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input30 [ 246.509972][ T5953] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 246.646545][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 246.646566][ T2147] usb 4-1: USB disconnect, device number 48 [ 246.662168][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 246.665433][ T2147] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 246.678096][ T5953] usb 5-1: no configurations [ 246.684662][ T5953] usb 5-1: can't read configurations, error -22 [ 246.819814][ T5953] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 246.882766][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'. [ 246.945916][ T5825] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 246.968506][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.987883][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 247.113734][ T5825] usb 2-1: can't set config #150, error -71 [ 247.113892][ T5953] usb 5-1: no configurations [ 247.120640][ T5825] usb 2-1: USB disconnect, device number 35 [ 247.140845][ T5953] usb 5-1: can't read configurations, error -22 [ 247.149213][ T5953] usb usb5-port1: attempt power cycle [ 247.219512][ T8689] netlink: 'syz.1.715': attribute type 11 has an invalid length. [ 247.299506][ T30] audit: type=1400 audit(1742411726.319:817): avc: denied { write } for pid=8686 comm="+}[@" name="mouse0" dev="devtmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 247.599726][ T30] audit: type=1400 audit(1742411726.619:818): avc: denied { read } for pid=8693 comm="syz.4.718" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.661022][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 247.667127][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 247.781149][ T8702] FAULT_INJECTION: forcing a failure. [ 247.781149][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 247.832215][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.5.720 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 247.832247][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.832257][ T8702] Call Trace: [ 247.832262][ T8702] [ 247.832270][ T8702] dump_stack_lvl+0x16c/0x1f0 [ 247.832299][ T8702] should_fail_ex+0x50a/0x650 [ 247.832330][ T8702] ? fs_reclaim_acquire+0xae/0x150 [ 247.832355][ T8702] ? tomoyo_encode2+0x100/0x3e0 [ 247.832378][ T8702] should_failslab+0xc2/0x120 [ 247.832398][ T8702] __kmalloc_noprof+0xcb/0x510 [ 247.832416][ T8702] ? d_absolute_path+0x137/0x1b0 [ 247.832437][ T8702] ? rcu_is_watching+0x12/0xc0 [ 247.832459][ T8702] tomoyo_encode2+0x100/0x3e0 [ 247.832486][ T8702] tomoyo_encode+0x29/0x50 [ 247.832509][ T8702] tomoyo_realpath_from_path+0x19d/0x720 [ 247.832541][ T8702] tomoyo_path_number_perm+0x248/0x590 [ 247.832562][ T8702] ? tomoyo_path_number_perm+0x235/0x590 [ 247.832585][ T8702] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.832631][ T8702] ? __pfx_lock_release+0x10/0x10 [ 247.832653][ T8702] ? trace_lock_acquire+0x14e/0x1f0 [ 247.832676][ T8702] ? lock_acquire+0x2f/0xb0 [ 247.832697][ T8702] ? __fget_files+0x40/0x3a0 [ 247.832717][ T8702] ? __fget_files+0x206/0x3a0 [ 247.832737][ T8702] security_file_ioctl+0x9b/0x240 [ 247.832762][ T8702] __x64_sys_ioctl+0xb7/0x200 [ 247.832787][ T8702] do_syscall_64+0xcd/0x250 [ 247.832814][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.832837][ T8702] RIP: 0033:0x7f270158d169 [ 247.832851][ T8702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.832867][ T8702] RSP: 002b:00007f270245d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.832883][ T8702] RAX: ffffffffffffffda RBX: 00007f27017a5fa0 RCX: 00007f270158d169 [ 247.832894][ T8702] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 247.832905][ T8702] RBP: 00007f270245d090 R08: 0000000000000000 R09: 0000000000000000 [ 247.832914][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.832924][ T8702] R13: 0000000000000000 R14: 00007f27017a5fa0 R15: 00007ffea8930cc8 [ 247.832946][ T8702] [ 247.833274][ T8702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.069912][ T5825] usb 1-1: USB disconnect, device number 43 [ 248.469751][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 248.620048][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 248.628303][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.665240][ T8723] sp0: Synchronizing with TNC [ 248.673749][ T8723] sp0: Found TNC [ 248.681684][ T8723] netlink: 36 bytes leftover after parsing attributes in process `syz.5.725'. [ 248.699521][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.733652][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.743029][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.751182][ T10] usb 4-1: Product: syz [ 249.382118][ T10] usb 4-1: Manufacturer: syz [ 249.386872][ T10] usb 4-1: SerialNumber: syz [ 249.510388][ T8719] [U] è` [ 249.730006][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.726'. [ 249.809968][ T10] usb 4-1: 0:2 : does not exist [ 250.057887][ T8739] FAULT_INJECTION: forcing a failure. [ 250.057887][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 250.087009][ T8739] CPU: 1 UID: 0 PID: 8739 Comm: syz.4.732 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 250.087034][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.087044][ T8739] Call Trace: [ 250.087049][ T8739] [ 250.087055][ T8739] dump_stack_lvl+0x16c/0x1f0 [ 250.087083][ T8739] should_fail_ex+0x50a/0x650 [ 250.087108][ T8739] ? fs_reclaim_acquire+0xae/0x150 [ 250.087134][ T8739] should_failslab+0xc2/0x120 [ 250.087154][ T8739] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 250.087171][ T8739] ? find_inode_fast+0x1e9/0x600 [ 250.087192][ T8739] ? __d_alloc+0x31/0xaa0 [ 250.087213][ T8739] __d_alloc+0x31/0xaa0 [ 250.087233][ T8739] d_alloc_pseudo+0x1c/0xc0 [ 250.087256][ T8739] alloc_file_pseudo_noaccount+0xd0/0x230 [ 250.087280][ T8739] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 250.087306][ T8739] ? iput+0xd3/0x890 [ 250.087330][ T8739] bdev_file_open_by_dev+0x13e/0x210 [ 250.087353][ T8739] disk_scan_partitions+0x1ed/0x320 [ 250.087375][ T8739] blkdev_common_ioctl+0x67d/0x2210 [ 250.087392][ T8739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.087419][ T8739] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 250.087434][ T8739] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.087463][ T8739] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 250.087488][ T8739] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 250.087514][ T8739] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.087543][ T8739] ? __pfx_lock_release+0x10/0x10 [ 250.087572][ T8739] blkdev_ioctl+0x1cd/0x6d0 [ 250.087589][ T8739] ? __pfx_blkdev_ioctl+0x10/0x10 [ 250.087604][ T8739] ? selinux_file_ioctl+0x180/0x270 [ 250.087627][ T8739] ? selinux_file_ioctl+0xb4/0x270 [ 250.087653][ T8739] ? __pfx_blkdev_ioctl+0x10/0x10 [ 250.087671][ T8739] __x64_sys_ioctl+0x190/0x200 [ 250.087694][ T8739] do_syscall_64+0xcd/0x250 [ 250.087718][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.087740][ T8739] RIP: 0033:0x7f218c38d169 [ 250.087753][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.087774][ T8739] RSP: 002b:00007f218d1f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.087790][ T8739] RAX: ffffffffffffffda RBX: 00007f218c5a5fa0 RCX: 00007f218c38d169 [ 250.087806][ T8739] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 250.087816][ T8739] RBP: 00007f218d1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 250.087830][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.087840][ T8739] R13: 0000000000000000 R14: 00007f218c5a5fa0 R15: 00007ffcc83205c8 [ 250.087871][ T8739] [ 250.468305][ T30] audit: type=1800 audit(1742411729.479:819): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.733" name="file1" dev="tmpfs" ino=750 res=0 errno=0 [ 250.565017][ T9] usb 4-1: USB disconnect, device number 49 [ 250.825012][ T30] audit: type=1400 audit(1742411729.849:820): avc: denied { write } for pid=8745 comm="syz.1.737" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 250.895501][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 250.913006][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.736'. [ 250.993657][ T8753] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 251.003654][ T8753] SELinux: failed to load policy [ 251.043070][ T8757] input: syz0 as /devices/virtual/input/input31 [ 251.152194][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 251.208143][ T30] audit: type=1400 audit(1742411730.229:821): avc: denied { ioctl } for pid=8751 comm="syz.4.738" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 251.268309][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.268562][ T2147] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 251.429780][ T2147] usb 6-1: Using ep0 maxpacket: 16 [ 251.446989][ T2147] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.461945][ T2147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 251.479555][ T8770] sg_write: data in/out 215/14 bytes for SCSI command 0x0-- guessing data in; [ 251.479555][ T8770] program syz.3.744 not setting count and/or reply_len properly [ 251.490941][ T2147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.558692][ T2147] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 251.674238][ T2147] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 251.718386][ T2147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.721224][ T8768] 9pnet_fd: Insufficient options for proto=fd [ 251.848627][ T2147] usb 6-1: config 0 descriptor?? [ 251.892148][ T8755] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 251.962492][ T2147] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 252.127344][ T8779] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 252.203615][ T30] audit: type=1400 audit(1742411731.229:822): avc: denied { connect } for pid=8754 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.381300][ T30] audit: type=1400 audit(1742411731.229:823): avc: denied { bind } for pid=8754 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.656377][ T30] audit: type=1400 audit(1742411731.229:824): avc: denied { write } for pid=8754 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.761177][ T30] audit: type=1400 audit(1742411731.259:825): avc: denied { read } for pid=8754 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.780219][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.928672][ T8793] bridge2: entered promiscuous mode [ 253.099792][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 253.099835][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.108495][ T8797] netlink: 'syz.1.750': attribute type 11 has an invalid length. [ 253.127642][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 253.160282][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 253.347779][ T8803] Cannot find add_set index 0 as target [ 253.924359][ T30] audit: type=1400 audit(1742411732.949:826): avc: denied { write } for pid=8806 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 255.181125][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.189238][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 255.197773][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 255.357318][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.364588][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.524634][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.758'. [ 255.539361][ T8819] mmap: syz.0.756 (8819) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.259811][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 257.267477][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 257.273642][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 259.341357][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 259.347464][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 259.349700][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.419827][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.419860][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 261.427007][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 263.499875][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 263.507122][ T9] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 263.513265][ T9] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 263.709052][ T9] usb 6-1: USB disconnect, device number 14 [ 264.194455][ T8834] trusted_key: encrypted_key: master key parameter '@ûˆÁâßuìÖ$Jô|àóÓBX.ÐëŽÈî–4ƒùîëë¿'-V|θïÇ€jÇFP¡¶•²gÝ‹ÌOaKÜDÜ:}Æ$JY˜ÄàU [ 264.194455][ T8834] ¦„EøS¥¿úÚ¶örºýËÊŽ^ÕËC\ö|¦†1}ÝJi¾\¹U«–±kR,¨oFþÔqÔí R&…ƒù€«' is invalid [ 264.425919][ T8846] Cannot find add_set index 0 as target [ 265.400624][ T5901] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 265.575297][ T5901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.587637][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.596559][ T5901] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.611639][ T5901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.621272][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.629266][ T5901] usb 6-1: Product: syz [ 265.633497][ T5901] usb 6-1: Manufacturer: syz [ 265.638064][ T5901] usb 6-1: SerialNumber: syz [ 265.653975][ T5901] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 265.661168][ T5901] cdc_ncm 6-1:1.0: bind() failure [ 265.679773][ T2147] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 265.695220][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.772'. [ 265.799838][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 265.889430][ T5953] usb 6-1: USB disconnect, device number 15 [ 266.450121][ T2147] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 266.462471][ T2147] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 266.471752][ T2147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.474710][ T9] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 266.479841][ T2147] usb 2-1: Product: syz [ 266.493252][ T2147] usb 2-1: Manufacturer: syz [ 266.497939][ T2147] usb 2-1: SerialNumber: syz [ 266.505564][ T2147] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 266.520990][ T2147] dvb-usb: bulk message failed: -22 (3/0) [ 266.530300][ T9] usb 4-1: config 0 has no interface number 0 [ 266.538586][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 266.547961][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.558336][ T2147] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 266.559397][ T9] usb 4-1: Product: syz [ 266.590266][ T2147] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 266.600840][ T9] usb 4-1: Manufacturer: syz [ 266.605460][ T9] usb 4-1: SerialNumber: syz [ 266.650303][ T9] usb 4-1: config 0 descriptor?? [ 266.658363][ T2147] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 266.672477][ T9] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 266.690187][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 266.695937][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 266.724882][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 266.740753][ T8872] FAULT_INJECTION: forcing a failure. [ 266.740753][ T8872] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 266.749574][ T2147] usb 2-1: USB disconnect, device number 36 [ 266.754051][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 266.776493][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.0.776 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 266.776519][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.776529][ T8872] Call Trace: [ 266.776535][ T8872] [ 266.776542][ T8872] dump_stack_lvl+0x16c/0x1f0 [ 266.776569][ T8872] should_fail_ex+0x50a/0x650 [ 266.776599][ T8872] _copy_from_user+0x2e/0xd0 [ 266.776619][ T8872] kstrtouint_from_user+0xd7/0x1c0 [ 266.776642][ T8872] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 266.776673][ T8872] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 266.776700][ T8872] proc_fail_nth_write+0x84/0x250 [ 266.776725][ T8872] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 266.776748][ T8872] ? ksys_write+0x12b/0x250 [ 266.776769][ T8872] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 266.776791][ T8872] vfs_write+0x24c/0x1150 [ 266.776818][ T8872] ? __fget_files+0x1fc/0x3a0 [ 266.776836][ T8872] ? __pfx___mutex_lock+0x10/0x10 [ 266.776860][ T8872] ? __pfx_vfs_write+0x10/0x10 [ 266.776893][ T8872] ? __fget_files+0x206/0x3a0 [ 266.776918][ T8872] ksys_write+0x12b/0x250 [ 266.776933][ T8872] ? __pfx_ksys_write+0x10/0x10 [ 266.776956][ T8872] do_syscall_64+0xcd/0x250 [ 266.776982][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.777004][ T8872] RIP: 0033:0x7f5d50b8bc1f [ 266.777018][ T8872] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 266.777033][ T8872] RSP: 002b:00007f5d4e9f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 266.777050][ T8872] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d50b8bc1f [ 266.777061][ T8872] RDX: 0000000000000001 RSI: 00007f5d4e9f60a0 RDI: 0000000000000004 [ 266.777071][ T8872] RBP: 00007f5d4e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 266.777081][ T8872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 266.777091][ T8872] R13: 0000000000000000 R14: 00007f5d50da5fa0 R15: 00007ffd65b86708 [ 266.777114][ T8872] [ 266.975929][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.006342][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.018894][ T9] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0) [ 267.027113][ T9] usb 4-1: media controller created [ 267.044611][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.661142][ T9] ttusb2: set interface to alts=3 failed [ 267.807835][ T9] DVB: Unable to find symbol tda10086_attach() [ 267.829062][ T9] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0' [ 267.850138][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 267.864589][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 267.879166][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 267.897265][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 268.931037][ T9] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected. [ 269.074142][ T8901] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 269.092538][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 269.108780][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 269.297265][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 269.410446][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 269.486189][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 269.550646][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 269.557386][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 269.625452][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 269.677184][ T5953] usb 4-1: USB disconnect, device number 50 [ 269.681473][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 269.709731][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 269.721211][ T5953] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected. [ 269.889746][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 269.909926][ T8902] ceph: No mds server is up or the cluster is laggy [ 269.935979][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.945541][ T8906] ceph: No mds server is up or the cluster is laggy [ 270.028821][ T9] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 270.120887][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 270.127020][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 270.133647][ T2147] libceph: connect (1)[c::]:6789 error -101 [ 270.139877][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 270.246529][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=5102, bcdDevice= 0.40 [ 270.312740][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.365994][ T9] usb 5-1: Product: syz [ 270.395352][ T8922] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 270.406984][ T9] usb 5-1: Manufacturer: syz [ 270.441571][ T9] usb 5-1: SerialNumber: syz [ 270.818736][ T8922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.962823][ T2147] libceph: mon0 (1)[c::]:6789 connect error [ 271.026986][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 271.033837][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 271.095865][ T9] usb 5-1: USB disconnect, device number 70 [ 271.689913][ T5901] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 271.883447][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 271.948526][ T5901] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 272.019911][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.352767][ T5901] usb 4-1: config 0 descriptor?? [ 272.372493][ T5901] usbtest 4-1:0.0: FX2 device [ 272.399716][ T30] audit: type=1400 audit(1742411751.399:827): avc: denied { read } for pid=8951 comm="syz.5.798" path="socket:[21300]" dev="sockfs" ino=21300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.430896][ T5901] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 272.506324][ T30] audit: type=1400 audit(1742411751.409:828): avc: denied { execute } for pid=8951 comm="syz.5.798" path="pipe:[21299]" dev="pipefs" ino=21299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 272.572639][ T30] audit: type=1400 audit(1742411751.529:829): avc: denied { write } for pid=8955 comm="syz.5.801" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 272.597273][ T2147] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 272.606871][ T5901] usb 4-1: USB disconnect, device number 51 [ 273.589148][ T2147] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.599529][ T2147] usb 1-1: config 0 interface 0 has no altsetting 0 [ 273.614643][ T2147] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 273.739858][ T5869] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 273.762777][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.775855][ T2147] usb 1-1: config 0 descriptor?? [ 273.911596][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.922828][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.932982][ T5869] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 273.942468][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.952725][ T5869] usb 2-1: config 0 descriptor?? [ 273.971011][ T5953] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 274.511192][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.519899][ T2147] magicmouse 0003:05AC:0269.0013: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 274.524378][ T5953] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.565643][ T5953] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.575392][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.585802][ T5953] usb 6-1: config 0 descriptor?? [ 274.663804][ T5869] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 274.682882][ T5869] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 274.692963][ T5869] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 274.707744][ T2147] usb 1-1: USB disconnect, device number 44 [ 274.709729][ T5869] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 274.729871][ T5869] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 274.737940][ T5869] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 274.748935][ T5869] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 274.765651][ T5869] hid-thrustmaster 0003:044F:B65D.0014: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 274.790573][ T5869] hid-thrustmaster 0003:044F:B65D.0014: Wrong number of endpoints? [ 275.205099][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.238715][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.279415][ T30] audit: type=1400 audit(1742411754.299:830): avc: denied { read } for pid=8971 comm="syz.5.803" name="file0" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 275.360059][ T30] audit: type=1400 audit(1742411754.299:831): avc: denied { open } for pid=8971 comm="syz.5.803" path="/90/file0" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 275.382754][ C0] hid-thrustmaster 0003:044F:B65D.0014: Unknown packet type 0x0, unable to proceed further with wheel init [ 276.173214][ T31] INFO: task syz.2.263:7000 blocked for more than 143 seconds. [ 276.186327][ T31] Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 276.223414][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.238796][ T31] task:syz.2.263 state:D stack:26768 pid:7000 tgid:6999 ppid:5819 task_flags:0x400740 flags:0x00004006 [ 276.255198][ T31] Call Trace: [ 276.258550][ T31] [ 276.261559][ T31] __schedule+0xf43/0x5890 [ 276.848581][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 276.859132][ T31] ? find_held_lock+0x2d/0x110 [ 276.864153][ T31] ? __pfx___schedule+0x10/0x10 [ 276.869215][ T31] ? schedule+0x298/0x350 [ 276.873916][ T31] ? __pfx_lock_release+0x10/0x10 [ 276.879078][ T31] ? finish_task_switch.isra.0+0x217/0xcc0 [ 276.885217][ T31] ? lock_acquire+0x2f/0xb0 [ 276.889892][ T31] ? schedule+0x1fd/0x350 [ 276.894255][ T31] schedule+0xe7/0x350 [ 276.898447][ T31] schedule_timeout+0x244/0x280 [ 276.903437][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 276.908892][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.914147][ T31] __wait_for_common+0x3e1/0x600 [ 276.919114][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 276.924586][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 276.930167][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 276.935572][ T31] wait_for_completion_state+0x1c/0x40 [ 276.941610][ T31] do_coredump+0x86f/0x4410 [ 276.946458][ T31] ? unwind_get_return_address+0x59/0xa0 [ 276.954260][ T31] ? __pfx_do_coredump+0x10/0x10 [ 276.959482][ T31] ? stack_trace_save+0x95/0xd0 [ 276.965419][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 276.970987][ T31] ? hlock_class+0x4e/0x130 [ 276.975637][ T31] ? stack_depot_save_flags+0x28/0x9c0 [ 276.981304][ T31] ? kasan_save_stack+0x42/0x60 [ 276.986147][ T31] ? kasan_save_stack+0x33/0x60 [ 276.991049][ T31] ? kasan_save_track+0x14/0x30 [ 276.995909][ T31] ? kasan_save_free_info+0x3b/0x60 [ 277.001232][ T31] ? __kasan_slab_free+0x51/0x70 [ 277.006188][ T31] ? kmem_cache_free+0x2e2/0x4d0 [ 277.011237][ T31] ? __sigqueue_free+0xba/0x2a0 [ 277.016093][ T31] ? get_signal+0xcbc/0x26c0 [ 277.020833][ T31] ? arch_do_signal_or_restart+0x90/0x7e0 [ 277.026611][ T31] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 277.032492][ T31] ? find_held_lock+0x2d/0x110 [ 277.037265][ T31] ? proc_coredump_connector+0x2d2/0x4f0 [ 277.043075][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 277.068056][ T31] get_signal+0x230b/0x26c0 [ 277.075308][ T31] ? __pfx_get_signal+0x10/0x10 [ 277.085447][ T31] ? rcu_is_watching+0x12/0xc0 [ 277.090353][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 277.096357][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 277.102030][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 277.108201][ T31] ? ksys_mmap_pgoff+0x85/0x5c0 [ 277.114756][ T31] ? rcu_is_watching+0x12/0xc0 [ 277.120630][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 277.126721][ T31] do_syscall_64+0xda/0x250 [ 277.131338][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.137596][ T31] RIP: 0033:0x7f607964e750 [ 277.151348][ T31] RSP: 002b:00007f60775f53f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.160009][ T31] RAX: 0000000000000000 RBX: 00007f60799a5fa8 RCX: 00007f607978d169 [ 277.168017][ T31] RDX: 00007f60775f5400 RSI: 00007f60775f5530 RDI: 000000000000000b [ 277.178841][ T31] RBP: 00007f60799a5fa0 R08: 00007f607a4ee000 R09: 0000000000000000 [ 277.187542][ T31] R10: 0000400000000000 R11: 0000000000000246 R12: 00007f60799a5fac [ 277.195585][ T31] R13: 0000000000000000 R14: 00007ffe8056a800 R15: 00007ffe8056a8e8 [ 277.203615][ T31] [ 277.208318][ T31] [ 277.208318][ T31] Showing all locks held in the system: [ 277.208870][ T5869] usb 2-1: USB disconnect, device number 37 [ 277.217293][ T31] 1 lock held by khungtaskd/31: [ 277.229462][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 277.239761][ T30] audit: type=1326 audit(1742411756.259:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270158d169 code=0x7fc00000 [ 277.273679][ T31] 3 locks held by kworker/u8:2/36: [ 277.278895][ T31] 2 locks held by getty/5584: [ 277.290541][ T2147] usb 6-1: USB disconnect, device number 16 [ 277.298255][ T31] #0: ffff888036ae20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 277.308140][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 277.318365][ T31] 3 locks held by kworker/0:5/5869: [ 277.323638][ T31] #0: ffff888144287d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 277.334707][ T31] #1: ffffc900042afd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 277.346169][ T31] #2: ffff888144bac190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 277.355270][ T31] 1 lock held by syz.4.813/9000: [ 277.360301][ T31] #0: ffffffff8e1c8480 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 277.370486][ T31] [ 277.372808][ T31] ============================================= [ 277.372808][ T31] [ 277.381261][ T31] NMI backtrace for cpu 1 [ 277.381273][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 277.381291][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.381301][ T31] Call Trace: [ 277.381306][ T31] [ 277.381312][ T31] dump_stack_lvl+0x116/0x1f0 [ 277.381341][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 277.381359][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.381381][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 277.381401][ T31] watchdog+0xf62/0x12b0 [ 277.381429][ T31] ? __pfx_watchdog+0x10/0x10 [ 277.381452][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.381474][ T31] ? __kthread_parkme+0x148/0x220 [ 277.381492][ T31] ? __pfx_watchdog+0x10/0x10 [ 277.381516][ T31] kthread+0x3af/0x750 [ 277.381535][ T31] ? __pfx_kthread+0x10/0x10 [ 277.381558][ T31] ? __pfx_kthread+0x10/0x10 [ 277.381579][ T31] ret_from_fork+0x45/0x80 [ 277.381599][ T31] ? __pfx_kthread+0x10/0x10 [ 277.381619][ T31] ret_from_fork_asm+0x1a/0x30 [ 277.381647][ T31] [ 277.381653][ T31] Sending NMI from CPU 1 to CPUs 0: [ 277.493584][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 277.503120][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 277.509967][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 277.520455][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.530513][ T31] Call Trace: [ 277.533777][ T31] [ 277.536689][ T31] dump_stack_lvl+0x3d/0x1f0 [ 277.541275][ T31] panic+0x71d/0x800 [ 277.545157][ T31] ? __pfx_panic+0x10/0x10 [ 277.549555][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 277.554916][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.560886][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 277.566251][ T31] ? watchdog+0xdcc/0x12b0 [ 277.570656][ T31] ? watchdog+0xdbf/0x12b0 [ 277.575066][ T31] watchdog+0xddd/0x12b0 [ 277.579301][ T31] ? __pfx_watchdog+0x10/0x10 [ 277.583964][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.589171][ T31] ? __kthread_parkme+0x148/0x220 [ 277.594178][ T31] ? __pfx_watchdog+0x10/0x10 [ 277.598849][ T31] kthread+0x3af/0x750 [ 277.602904][ T31] ? __pfx_kthread+0x10/0x10 [ 277.607484][ T31] ? __pfx_kthread+0x10/0x10 [ 277.612063][ T31] ret_from_fork+0x45/0x80 [ 277.616467][ T31] ? __pfx_kthread+0x10/0x10 [ 277.621040][ T31] ret_from_fork_asm+0x1a/0x30 [ 277.625798][ T31] [ 277.628999][ T31] Kernel Offset: disabled [ 277.633308][ T31] Rebooting in 86400 seconds..