last executing test programs: 3m57.166317844s ago: executing program 2 (id=728): creat(&(0x7f0000000100)='./file0\x00', 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x1108003, 0x0) 3m56.745064522s ago: executing program 2 (id=730): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) pread64(r0, &(0x7f0000000200)=""/161, 0xa1, 0x6) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$update(0x2, r7, &(0x7f00000002c0)="ee6abd227664825c0115b0b83c9d05f3c1baf1eec552b26225c2234e4bbac41f04b82a42915fb25239c1aff585713fbf2ceed6e7e9164d04ed04bfcf4d3c48cf9ea01c710af7eb2726abb9575cc02b96363981704d28b29bbdc6fe4ad7db709d60bb09b6dc2ce9c6778db871e4ac8c8d858d13eb05fc8430442ec99d5a62a4e339cda766b9bc16afcd7109c2c20783652c46d2483f253e488df781f975e67509f13823c08a1a395e6b0c8edb48caf91423afff200dc071b472453c441068f93cfc5db3784a04567bdba6e03a95ae80465c8f9838074159ab9f58a0b1d943a9ba7c17a8d689b5434b504c91958bb1596d938f04714dd1", 0xf6) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0xe79b04dd2a128718, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r9, 0x5708e000) 3m55.093245359s ago: executing program 2 (id=734): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x3, 0x100}}}, 0x90) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 3m54.741911981s ago: executing program 2 (id=735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) keyctl$session_to_parent(0x12) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$session_to_parent(0x12) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 3m54.300926171s ago: executing program 2 (id=736): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) write$apparmor_exec(r3, &(0x7f0000000040)={'exec ', ':\x00'}, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000640)='./file1\x00', 0x48080, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a080c, 0x0) linkat(r6, &(0x7f0000000100)='./file1\x00', r7, &(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x6a0286804a18f103, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) socket$netlink(0x10, 0x3, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000000)={0x36e, 0xe40, 0x7, 0x6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3m50.436755244s ago: executing program 2 (id=748): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0xe6e59006, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) write(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x8000, 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) fcntl$setlease(r1, 0x400, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r2, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 3m34.711351134s ago: executing program 32 (id=748): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0xe6e59006, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) write(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x8000, 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) fcntl$setlease(r1, 0x400, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r2, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 2m42.076633784s ago: executing program 0 (id=1014): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8000, 0x57d, 0x71, 0xd4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8000, 0x57d, 0x71, 0xd4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x1000, 0x0, 0x7, 0x0, 0x4, 0x1, 0xd000, '\x00', 0x31}) (async) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x1000, 0x0, 0x7, 0x0, 0x4, 0x1, 0xd000, '\x00', 0x31}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x193000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000003c0)={0x40000000, 0x2, 0x9}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000400)={0x2, 0x5, @start={0x0, 0x1, "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", "ad9073145458b2dfb26f587394401c13b50da79ef32b3c147b4c33b0f639cfb23eae300dfe2a47c92334956964d72bbf3b3a6d10e7ed87df799dce1e24bce15ba959387b3956caac845ac18598275db5c0ffa67cb55c203482a45fbdf5661981de1183a7f786044124d01d6d00d9c2c2c31980f5c6e168ef378b9521191772466b37674d892993aea700a492d5a12127757de9d7950485b551812a6414f9665ac9850cca8a2731a2f3490b6c4e1b7d00060d2d93a21a124336ad82e0e97f13589075077cdb3813dd3aa3119df19e6c4a616ab620fda72b4284154c758603271ae3c9651095b16158003155f3420b6b7aae018750a60f6877b1c6f536872abe855e9206170a976c4cedb0ddfdfe508f5d25d81da41ea146fa1561b473df6e74231668044ca702998daee478564b6521ee3450d1111aa6fdb12b1f05cfa7d572f3278bcdbd72c599d36de91a97633402c1176edcc4f2c8a4343b0d56cbc2f1788ba0a982d909499a3059e3811af570ac285537417f5f80b820b539912a06f7749146271150c5c6f0430eac3d9163d0ee88b9d124887a0803d73101d14b7909ee0b94b43cd78402b020eb3b124660c8c6347daf1853a26d9d1093fb5db98d07d8f642cdb3dc036c6f06f26d165ba1f4a0c9dcd49ca860b67575458fab34274d0764a9919a8d54a2bfd1556822376b607a814e87e3d58c6559af0b7de1ddaa4a24e9956e0a15bfe9824bc427150a47cd96bf798f91c8008d9aa45ffef96c79508330eb52ca96b8460ffe60326672e5fb62eb8b3cba0442626e091c65af36ed23a4355402e30a3a1690efa4a4b59a2b6840fe4902a42331bb38b57c87ac77c80a46b0518a83311ca5a856a49481ea0bde052d9947477504465e167d8c937853c523ebd786453fa9a649db544ba2f60231b7afccb337f83d4ca56ae0dcca624d452b98e2f14d5edf44b48731f3866973d7bfae0b3a30f134a43733c54bf908ad794aa44601560fdaa6afc1e1b1685d924fca9b10c2c379bd6c5ba791888f3073133a0b00432226d2f3651c75e92181d648747de292692f91d957105380cd3730d1bb44075a516efcbd084cf916ea30f9274a2bf7c202ac2fd12cb9f94707ff895b262635800b6c00136bd447719cea0be59ae59ba272c83de3889414ada7ec750c1545b5f04d4fb6a3bb6e3b7259f142599e5336dc538a19a28d42b599da3cc4e9ee9f904f19aebb9e0825665a85aac858676b886f2ea2d2629fbdb85807615980011c969d93ef789ed30dfbf6e2dfdd74b3573ca89760e6a65874fb5a1b4acb7525df3a9970a9bdd6201353fa742e9650064206beb63f268479f09588be485beb625f588d133a3acfd590164765ef795aa29fdc8780b68f92c765fb72db6f5506e110c22112883faeaf6954cf19f200629cf3dd25cc9d2ed5ca971d46359a8bc4530931"}, [0x1, 0xd1, 0x0, 0x7, 0x7fff, 0x0, 0x480000000, 0x3, 0x1, 0x8, 0x1fc0000, 0x4, 0x6, 0x80b, 0x7, 0x7, 0x9, 0xc49, 0x1, 0x5, 0x1, 0x8, 0x4, 0x9, 0x2, 0x100, 0x7, 0x7ff, 0x8, 0x7, 0x1, 0xa12, 0x7, 0x101, 0x5, 0x3, 0x5, 0x4, 0x3, 0x2, 0x1, 0x2, 0x3, 0x5, 0xa, 0x64db, 0x7f, 0xf, 0x6, 0x9, 0x8001, 0xf6ea, 0xffffffffffffffff, 0xdfa, 0x7e46, 0x2, 0x100000000, 0x2, 0x3, 0x7, 0x4, 0x7, 0xb, 0x5]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000400)={0x2, 0x5, @start={0x0, 0x1, "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", "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"}, [0x1, 0xd1, 0x0, 0x7, 0x7fff, 0x0, 0x480000000, 0x3, 0x1, 0x8, 0x1fc0000, 0x4, 0x6, 0x80b, 0x7, 0x7, 0x9, 0xc49, 0x1, 0x5, 0x1, 0x8, 0x4, 0x9, 0x2, 0x100, 0x7, 0x7ff, 0x8, 0x7, 0x1, 0xa12, 0x7, 0x101, 0x5, 0x3, 0x5, 0x4, 0x3, 0x2, 0x1, 0x2, 0x3, 0x5, 0xa, 0x64db, 0x7f, 0xf, 0x6, 0x9, 0x8001, 0xf6ea, 0xffffffffffffffff, 0xdfa, 0x7e46, 0x2, 0x100000000, 0x2, 0x3, 0x7, 0x4, 0x7, 0xb, 0x5]}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x44) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x44) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r1, 0x734, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x100) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000011c0)={&(0x7f0000001040), 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xa8, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffe}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xf8, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40001) close_range(r0, 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001400)=""/236, 0xec}, {&(0x7f0000001500)=""/120, 0x78}, {&(0x7f0000001580)=""/13, 0xd}], 0x3, 0xf, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001640)={&(0x7f0000001600)="1611c418b217", 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001640)={&(0x7f0000001600)="1611c418b217", 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001680)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000016c0)={'\x00', 0xb74, 0x3, 0x800, 0x2, 0x3, r5}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000001740)={0xb, 0x0, 0x0, {0xb, 0x6d28, 0x1, 0xfffffffe}}) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000001740)={0xb, 0x0, 0x0, {0xb, 0x6d28, 0x1, 0xfffffffe}}) syz_genetlink_get_family_id$wireguard(&(0x7f00000017c0), r0) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000017c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001c40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c00)={&(0x7f0000001800)={0x3f0, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x3dc, 0x8, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x4, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "efb63002f864f34a2832735b311aa41a825569f36b1a9dd9c2e47abf52786105"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @mcast1, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6905362233b13cb7e2fc1742b15a025c1ec618a6efb248f8e08c6f2b2bd87764"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "67cd362eafb74f090ad08f185b968cf9293f014f502763c9bf2e819c38ea387d"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004040) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x10044) openat$kvm(0xffffffffffffff9c, &(0x7f0000001dc0), 0x20000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001dc0), 0x20000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001e80)={'batadv_slave_1\x00'}) 2m41.784857375s ago: executing program 0 (id=1015): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xacd02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m40.616786819s ago: executing program 0 (id=1019): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0x6c3ca000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x4000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000a6b000/0x1000)=nil, 0x1000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000975000/0x4000)=nil, 0x4000, 0x3000001, 0x30, r1, 0x2000) 2m39.362963749s ago: executing program 0 (id=1024): socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000141601002dbd70000000000009000000"], 0x14}], 0x1}, 0x0) 2m38.500444618s ago: executing program 0 (id=1028): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, 0xffffffffffffffff, 0x93774000) 2m37.937473096s ago: executing program 0 (id=1030): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0xffffffffffffffa8, 0x9, 0x1}) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 2m22.678360774s ago: executing program 33 (id=1030): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0xffffffffffffffa8, 0x9, 0x1}) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 39.416587391s ago: executing program 4 (id=1465): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x60000, 0x9}, 0x8) shutdown(r0, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x84c, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x4044151) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x800002, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 38.390801025s ago: executing program 4 (id=1470): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffbfffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x6, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x2000007) ptrace$poke(0x4, r1, &(0x7f0000000400), 0x6) clock_getres(0x7, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x404c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000540)=""/55, &(0x7f00000005c0)=0x37) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000500)=""/39, 0x27, 0xfffd, 0x3, 0x0, 0x0, 0x5}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000440)={0xa}, 0xffffff95) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) close_range(r0, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x803, 0x1, 0x2, 0x5, 0x1, 0x203}, 0x20) 35.028746945s ago: executing program 4 (id=1482): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000c600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {}, @device_b}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x1, 0x8, @void, @val=0x14, @val="206aecaec79934faf96e8b6fce42e055"}}}}}}]}, 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0x2, 0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x13, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d5}, 0x40000c0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) sendfile(r8, r8, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 34.385332823s ago: executing program 4 (id=1484): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 34.114576248s ago: executing program 4 (id=1486): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='qnx4\x00', 0x200000, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './cgroup\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x1010082, 0x0, 0x0, 0x401, 0x3}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x17c, {0x6, 0x0, 0x8, 0x1, 0x2, 0xe2, {0x5, 0x62, 0x4, 0x0, 0x100000001, 0x9, 0x1, 0x3, 0x2, 0x8000, 0x2, r6, r7, 0xfffffffe, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x81, &(0x7f0000000240)={'trans=xen,', {[{@debug={'debug', 0x3d, 0x80}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_loose}, {@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_L}, {@cachetag={'cachetag', 0x3d, '\'-%'}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@seclabel}]}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x601, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) fcntl$setstatus(r1, 0x4, 0x3400) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r10, 0x1, 0x10, &(0x7f0000000000)=0x8, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000100)={0x11, 0x17, 0x1, {0x8, './cgroup'}}, 0x11) 33.72919911s ago: executing program 4 (id=1487): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) read(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x8, 0x1, {0x1, @vbi={0x8, 0x6c, 0x0, 0x129b6c7a, [0xffffffff, 0xfffc0000], [0x0, 0xfffffffe]}}}) syz_open_dev$ttys(0xc, 0x2, 0x0) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='efivarfs\x00', 0x1002050, 0x0) 18.478427534s ago: executing program 34 (id=1487): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) read(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x8, 0x1, {0x1, @vbi={0x8, 0x6c, 0x0, 0x129b6c7a, [0xffffffff, 0xfffc0000], [0x0, 0xfffffffe]}}}) syz_open_dev$ttys(0xc, 0x2, 0x0) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='efivarfs\x00', 0x1002050, 0x0) 9.542782009s ago: executing program 3 (id=1553): mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x1230851, 0x0) 9.099961846s ago: executing program 3 (id=1555): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffff6, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 9.095426846s ago: executing program 1 (id=1556): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000840)=@generic={0x3, 0xff31, 0x80000001}) socket$kcm(0x29, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030309025c0002010080000904000001020d000005b385000105240081"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5]) setfsgid(r5) syz_usb_control_io(r3, 0x0, 0x0) capset(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 8.82758503s ago: executing program 3 (id=1557): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000200)=0x6, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) accept4(r1, 0x0, &(0x7f0000000040), 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002a00010000000000fedbdf25070000001300000008000000", @ANYRES32=r3, @ANYBLOB="005ec400"], 0x24}], 0x1, 0x0, 0x0, 0x80048c0}, 0x4000880) tee(r0, r2, 0xf, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 7.157542967s ago: executing program 3 (id=1559): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) bind$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @empty}}, 0x26) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000001180)={0x258, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a764df1d7121d818b58c8f5ad4b2f71a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e6177b3e2fcb4cf3c6b07b60270a696d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fe9b8ab5c4428e4f78fb55741338c5fd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7851b4013abf13454da86f72629f662d9a5a8535d7f2c4db"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4f}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="21606eca09630ec7b733605b92b21a13"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e0e85ae14faa48658ddf2a0c4eddfc44507e89e02d6d05476471099bfb528acb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3b76bc26cac4ea2"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="72578832e7c21a7bf8ddb5493e861631428d6238a5b7ce449e2432c6e7ffb4a4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4fb7989df296249053d10f4c86ed3c92"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6f436cf2ae9ca932b002605e4797a8a339c14b3fdc17bb58"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d74c769c94d8dc50"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f9c8c78fcc4b0f8a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e5b286fc91698d819900ec914a761fab49bbb766f9fed4f1fb72aff49b723224"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bb546ed7dd07692a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1e0b052ec7c9f65ae9785d45d71f2c1c43ee993d5360f15e0ff29ce42294aada"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8287b4c147e475fff14b5c5ad10aabf5"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2cef6e74bc596877721ca19a8ac23c096a50bba25077ad93"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d2823a970e5a1fae"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="28e052247e90530959d0ba4c6193dc0c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xdba}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e2e65a1ba6e1f2c8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e9ef01022ceead8f485983f65999d2eea9989289f1924a14"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b200aa830b2e45d9"}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r4, 0xc3a51000) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c00)={0x0, [{0x0, 0x998, 0xcf, &(0x7f0000000e80)="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"}, {0x1, 0x2c8, 0x9, &(0x7f0000000280)="b7b3672264fa15ddbb4a55ae0403c4c6a7296ffc4db11b81b4c0052edb42d59088083047d9c9d800724d923a6d497d9bc8c08edc3d5930d9a376a6ca34cca1a5addb805cd6816863a2065e1d4800aa86330dda8173efe31806"}, {0x3, 0x350, 0x9, &(0x7f0000000340)="c086809909a6454f5ed1eee1eda8b28f664348857c7b24b14e081cccda36cc69805d77ccbb28c8e0d18468e8213a6b9f0916c0bee23e6f7429a790c93a9caf43f94795a9310ce496c858e6aec9396dfd7718cc283d2b735566592d559df2d04058421a455563cdc78456"}, {0x2, 0x5c0, 0x401, &(0x7f0000000dc0)="dde5bc1306165e14140a01cef65e1c39b348df3eea38fee83a9355ccbd3672e94ac333cbd92b396ddae2b18c9f61b1e0896313c9dae3b0714b8f6063ccd793f2313fdd176c35194a72afaadb0b75301d6d2a65525d920b83f6409063afb2874c8f84c7a8a4231f61cdade9cb382565ca75bc9025ffe448d564f95b165f75b018920801874155a83c7dbdf5063e2a56d2cac33c9e30b680decfdcd45c4edf0f994a6efb09d2c2222b5d26527913716be15a0f0b7ed119ab06"}, {0x3, 0x2d8, 0x7, &(0x7f00000004c0)="d5b7c4e782ac3564c4b58c77ae396e1efb503ce8fdea2e2399786b1a4e81fa07f2f347e5e8efab1b98ce868feef607b153cef8266d1808dae02accf452b4b1002159601391ae10cd39b47ff0d985baa96fb4cd9b6b0533bd78de0e"}, {0x3, 0x608, 0x34d2, &(0x7f0000000540)="45a39380e7fd95334852b6d7b9996bac8f29bc1611d06d7b107eaf9d1dee2de7d0ba199ae39ed9125402903584aaf9f60d48f616161f7d4b67ed457d8608388c0e792eb982b6e01c526eb8d2863c5a3a832e5ccb53ddf93ccce8fa9358f4e0faaf2c83df9dad5f18abe4eeb62691dd193297208b3bdd9f932b12fd5edb261cd9878f56b3a2c3886b27132bdbfae533888feff953897c3d1efe08f2bac674fd4671381310f4c12623dc2ff8822d1d5b15ee7ad1d1a54c9ff08d41e17916a1818ed5"}, {0x2, 0x798, 0xa78, &(0x7f0000000640)="99a2e4876f1c5224a292edca0bf07ad5f7964ab4d9313ee1a28784a581371cc97d0079a1a7ef3c63d4ecc73e5f5bd0561986d80aa9a411b4d98b7f4042c3e1452adc795e9a6d82f1525b5862291489e839a34daa23f383475b3c6dade9db3be1f357a9655efd0800ac26f59f5d930f30347a0a9ea520276d534a4efeba966772f32268cccce7913d2931e24b967f9cbc372704e6e3cdec5c4720532dee71f2791d4f1dce3879595cb77c4661fa6eec4fea238c76c9356e184e1865a6c3e8bc0dfa1ad1ee36512b02a1b2f54157e694ff335e8f6ba16c4dc08dca38e1b8341422f3d0c5fa31a793e8d1d17fa0d1b5ed2103eae8"}, {0x3, 0x538, 0x3, &(0x7f0000000740)="b7d420d4627e5c96b56e2d8767132cad8a3453c11d122d5fa5a13580784ab1b18e9cb039bb4cd62b876aadff9dd7c08e7f214bec1779e4bcf570376ac6e00e24484a7b72b2555f9a979a18652c597866afdbe91f0a074652ed2134f174b4b976bbc29ab67258cc9bfc783ef1caf03b4954e06f9f6b36b8d03d680ba6b01ab1659decd72600b33b86b269e9b2f6ddcee6b82b9bba46d93f8666533dcc52edf85d66ec17ccb6d7a2"}, {0x476823d21c201ea6, 0x460, 0x5, &(0x7f0000000800)="4a04cd1fe05352e3735069ff735cec37b6d709fcd16efb27c7461e2979c8d95f82d3a47572ac6686cf0fc19435e0d1cb1b02000000000000004e177e65932dcdd8be7b20c285ac1a69f10adbae55814d16e74634680b9f41a4ed8ab26a403f47e78e59567be9f7bd766167b52ac75252c90fcdf3d3a3e7a6b88c5aa672b5c08c68b4ce9c7900000000000000"}, {0x3, 0x110, 0xfffff791, &(0x7f00000008c0)="385e61a9f45f4e6977e1a2e05f19dc4ea3758b03917662a511c4c7df3ec0a9f190ba"}, {0x3, 0x8000, 0x5, &(0x7f0000002180)="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"}, {0x2, 0x770, 0x401, &(0x7f0000000fc0)="33b751d1fa1baefe71621d79e80b566edfed8e77950b9d40a1de82289a603da5cd33e92a011867f1979d60f172a0ce7640ec2cb2a0283d36e6e91118b87262ab96f9a8059e89a10a230f8c69eba097fae8a2483624fb03f13bee71eb0200ad0fab1fd753d573df657c223b011ed3bad9696737d9d92703e75147fb04d5807d0e15d5a1d2a1fa0552a9f7a8dd52112a98e749c0a8b1eb63773559dbe77768c1659ff2971a8886f702dcedc4f8cf54922f38c0c1d4012972ebb38e5da51cb2506c0ff4ff5a2bea0c617e35c7149d72b36b1f116dad1a3565f99b77d304ead472a9fa97aea553d73522e35f300cd760"}, {0x0, 0xa8, 0x6, &(0x7f0000000a00)="3e63e06443a5d93434dc323f969fd19cd9703c156a"}, {0x1, 0x368, 0x3, &(0x7f0000000a40)="3433241bf18a2856db9ce8204ade31f3beb84722910ba9489320dd8a2613db44bc3e7221c2891b9e1e39c6fe8e4512e845ae4d4b7e3021c2b522ed5a107ad2300f307efab54cdd67a3f4acc9250d706780aa2ed0de92a0e5a4789bddfdd4a95191f615f6e7fdba86e018bc427d"}, {0x0, 0x1e8, 0x7ff, &(0x7f0000000ac0)="d6bf155470c6f9e00c5a20677d3cd3117bfe18f5b51d35a2597b0d8a9e79bdcdd7e8f36e7060013f67111fee9a2f93ff1cc961da856d78f4dfbb19222c"}, {0x0, 0x7f8, 0x1, &(0x7f0000000b00)="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"}]}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33) socket$pptp(0x18, 0x1, 0x2) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r10 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @empty}}, 0x1e) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.634673676s ago: executing program 1 (id=1560): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 5.873835316s ago: executing program 3 (id=1562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TCSETS(r1, 0x8910, &(0x7f0000000080)={0x2, 0xe, 0x10, 0x6af, 0x15, "1a9f0a3f7b52f26ea6fa6a6638d7219c6a5310"}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x18200) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000280)=0xff, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x1}}, 0x20) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000240)=0x1, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendto$inet6(r0, &(0x7f0000000400)="25eed0aee8c79f49b53c108367401019c41e56367aa3f23916ddf42df6a5ca47adc0f14939ee362a401f6425b5933ed45ac2e4089f33e87ea4fa53cb6f37fa25746f5805cefb6f78a3d525962f72cff39e3fd9074e3260c84fdfced1c00ba3c8cfcd6220a22b568b9ea6d0e366394ae3490b19d046c22e484b0aa11954836b45d4047ab5007b7b758a16f51f05661f02e1cc365db0bf3b54c3c468a8b5462008bc5ffb9db10bed599639774620b78184ada2301d9d494c2c7622d859213c2d7cc96412661b8f8afb818669f98776b43d6f8c598c00e43ade1e0808a35608882523edf4820dc6b1de1a71cb3dcec7265acaaeab264a1082660423eaf763e3d5e6756b9d2e4115906f4284e5e11388dae00c59c49d5bdc02592fbd96f69a586c8e6f36af50d6de76993809225f4a7dfbd1e7feee4438420c40ee1587ef9279cba9847f32d185f2405d680fd8776df5edc7c149279dc808c693dab77ec90071fff6b0b63f5eaadf5e2118dbeebbeb235b90b8b1b871af2ebc579d404578310950526b7be662a9d89be66d6a02522e7352357c02c3a56f8ff816331bd070041ba511613602956381e6d78b645d02dbc77a188168b6312a0998fe17cfd2940c8e5d39e5a95c50f8b0cee4a9c145b23997f830c08fe2e8af162363f4e14d78fd1275af0192483de50d521d85ed5dd21e51e9fba69d7c208ae998c914f5a2393f0594abb1228eb6df78d022707d2e705854e20338e898482ced2d8b853d8cd972bf7d2df97c7fbc2fffb60e9ec9335bf4e98c6d53244dabe2d1d038c75476b620b9263bda96ec2c61f3306dfcfb9f023c3c9678e0ef245b8c3de356f4c4dfe2d791e213b592f8106467517bd0eb3be609108ac41507edb9029c1975fe0c08e461b66b0850a9faf160e658fd770266fa0c70deab155084869592563fe0c136728a2999c6a5d40891a0de089cec58b1ffe2d40e44513b3d51c8c34935b75a351d0d7f9049e6e488585c819437a4e7b338cd5772a744fe79a21327f919ef4bdb9936a5dccd353a45e2642b8cad7aea0152de1d15577c37eff9fc206115e1ed9612183f5aa55ba23b2e2b77432f038b3cc3f0c189414de1402b002ba4464448d74fac86d1ab674a4eb3d8b6e8af11ee37145026fdedb952097fa069ddd516a76c8a647c0faf5a47a75a7294b0eba99291457e4614f0e985bd363de3593590e6f303e511220ce37e1e66711dac26dadaa5f26ab172ef6c7a2f53ed66c0813867e1d53e769efafac557c3977836517f216c53625d8752073fed32346d274613fef1f874d71a632a48220978d6efbf4fb938a46777f05b10cc71d1996772e2536a22b171e2cabffb9099e73026e56210a6162140681048fa9e55388619d83278ea60e5421eaade222b61237aae0d6684f19e090d88da58d0f8e0b4725c41bfc94a5a066d842f768d7ecc527ae2f8ed793ef072da9258db0d11d36637c4765afed52049524efb6feaaa3239dcce104e0889fb10e6a4b7923b4932fecafb1add915f673426c5d6fe7f0290ee8df38763c3737a8bdb4e78b64dd66831440a5dc4e14ccbd14a13f1c513773b9daf0e06cab2bf564b57c8145af47cc64a539fa8326467b318b2e8df6b6c", 0x481, 0x4000, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 5.789971359s ago: executing program 5 (id=1563): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x142080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fstatfs(r2, &(0x7f0000000100)=""/106) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0xa3, 0x105000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa1, 0xd8, 0xff, 0x20, 0xcf2, 0x6250, 0x4642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x36, 0x10, 0x2, 0xc7, 0x3, 0xe8, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x18, 0x4, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d05, &(0x7f0000000040)=0x36) 5.545011417s ago: executing program 1 (id=1564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @increfs], 0x0, 0x0, 0x0}) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b04, 0x0) (async) mmap(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x5, 0x10010, r6, 0x910ce000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 3.421419959s ago: executing program 5 (id=1565): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0xa0101, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) r3 = gettid() io_submit(0x0, 0x1, &(0x7f0000001900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0xffffffffffffffff, &(0x7f00000004c0)="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", 0x82d, 0x8, 0x0, 0x1}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r4, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200028bd7000fbdbdf2567000000080001006a00000008000300", @ANYRES32=r8, @ANYBLOB="0800c300741300000819fa4e63000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.479493154s ago: executing program 1 (id=1566): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x800}]}, 0x14}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4317}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000080)={@val={0x8, 0x2}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8}}}}, 0x3a) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x100000000000020a, 0x0, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r9, 0x2285, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) write$sndseq(r10, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0xa, 0x4}}], 0x38) write$sndseq(r10, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0xaa9, 0x80]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x0, 0xfffffffc}}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0x1f91b19e}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick=0x64, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0xfc, 0x0, 0x0, 0xfe, @time, {0xfe}, {}, @connect}], 0xc4) read$snapshot(r10, 0x0, 0xffffffbf) read$FUSE(r10, 0x0, 0x0) r11 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={0x0, 0x2, 0x1ff, 0x5, 0x4, [0x0, 0x0, 0x0, 0x0], [0xffffffff, 0x3ff, 0xcf, 0x400], [0xbe1, 0x61, 0xffff7fff, 0x51f5], [0xfffffffffffff000, 0x80000001, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f00000002c0)={r12}) 1.265062226s ago: executing program 5 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xa2fe]}, &(0x7f0000000040), 0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1.264360392s ago: executing program 3 (id=1568): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x109502, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = socket(0x15, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x20) getsockname$l2tp6(r1, 0x0, &(0x7f0000000100)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000000000)={0x3a, 0x1}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r3, @ANYRES8=r5], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x8100) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x22855ff7}) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x24, 0x0, &(0x7f00000000c0)) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r12 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r12, 0xc3d33000) write$char_usb(r11, &(0x7f0000001300)='7', 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0xc0844123, &(0x7f0000000180)=0x4) close(r0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) 850.139085ms ago: executing program 1 (id=1569): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) dup3(r0, r0, 0x80000) 559.954868ms ago: executing program 5 (id=1570): mount(&(0x7f0000000040)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x2c0401, 0x0) 413.129427ms ago: executing program 1 (id=1571): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2091b080410aa61b4d2010203010902120001e900000009040000000206"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x16e, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15c, 0x2, 0x1, 0x4, 0x7f03e8a59c0bd627, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "1c1a5d"}, {0x5, 0x24, 0x0, 0x84c}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x32}, [@mbim={0xc, 0x24, 0x1b, 0x401, 0x80, 0x1, 0x10, 0x1, 0xfb}, @mbim_extended={0x8, 0x24, 0x1c, 0x10, 0x7, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x6, [0x8, 0x7, 0x4, 0x0, 0x8100]}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x9, 0x63, 0x9, 0x2, 0x1}, @mdlm_detail={0xc8, 0x24, 0x13, 0x8, "408138b7b98b6336139e7bd7b8871e0b76cc440d43daf14e7faab58010313185c953c927c8f119411b7d8fdebad654b930002e0cf5ae19f60c78fd4749969e35ba7d99660178e8c394d6769bacee5e6bdbdf0ca5d51d17a45db0c3888ffccafba97ebda8743997a3080e880e1a54b6b37eb3c3f66abb269430943c700c1a2dc5f2ffab8d658167f9f97302e5c62275f2c5309d670e7ded7363086eccd233859152aa18c6474e11bdc1a97636c211cc926bf135db82ecdb0f2486366634e2ba71e20c856f"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x2, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x7, 0x5c}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xa, 0xfa, 0x58}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0xf7, 0x5, 0x10, 0x3}, 0x7a, &(0x7f0000000680)={0x5, 0xf, 0x7a, 0x4, [@generic={0x50, 0x10, 0xa, "c7e5a576772534576a6cc694d08637cc125065710502de29c6db4b2942eb02e2ad62febc9eafee8a3348529e4e7b2a92ac1527c8b210f7a81efe20a0df484af33c63ab7804d4357d7373f62c44"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xd, 0xf, 0xfffc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x75, 0x1, 0x7ff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "8f5849bbc88ca09f94a1688ca10a8ec1"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x22, &(0x7f0000000280)=@string={0x22, 0x3, "1db871123e999ec1348c7b86286983e6965169066b0a0691786c1b076b05d0d2"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1809}}, {0xe0, &(0x7f0000000500)=@string={0xe0, 0x3, "5a8fefcc7b69f8e19d3ad8072c19d4eb6cb092f0ff2a15b30deac55d5b6fe317dc7411d0f17a0c906770bdd1ed2a074cddab30ecceabc1e74050acaf628759ac34d096d5fc925ce1cd37e9b3808a59b7c04d99eff56f7b26fbfc36e6891789305329c0bd67fb689aada4ed1d74c40a76bc697cf371e27fe63b9a2a5d875a6e1fcba7e29903821bc3adc2240a27f691c25a8ec8f4230ae26e0f6b34a9924a96eb5c5ce714991b027e6cfc8476547b206eed6607de324698a2abcc3d8ca4bcc9def2c64cfb3c47a826a36cad4469bf8031ffba5149dc36c5d6a853dbb40b10"}}]}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000380)={r2, 0x1, 0x0, @random="83f047e9529c"}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) 326.261163ms ago: executing program 5 (id=1572): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcb7c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xb1, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x26c6}, @device_a, @device_a, @from_mac=@device_b, {0x1, 0x81a}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x8b, "03186fc9cc4f6eacfd4b988df47d7c58622f79a9a75a8bf47a63f12681cf583fc12a17202e1948c8b3fa5accc103ac82f38a4174dab342d9862524f3f3fbac2e276a4333107d76b5d39ebe67d654d3018cb403a75e93dbcc9a730f857c05787a4af913a83aed4535a0f0762cdf3f028853411943dfce4fb21b637eaad618509a1ba39fdd53c0158a22ebdf"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe89}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x86401, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r2, 0x7ff}, &(0x7f0000000340)=0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000380)=0x1, &(0x7f00000003c0)=0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000400)=0x5) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x5, 0xf7, 0x7, 0xff}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x8, &(0x7f00000004c0)=[{0x578, 0x5, 0x1, 0x7ff}, {0x100, 0x6, 0x9, 0x2}, {0x5, 0x3, 0x40, 0x7fffffff}, {0x1, 0x1, 0x10, 0x80000001}, {0x8000, 0x8, 0x7, 0x4e4}, {0x9, 0x40, 0x6, 0x2749a94b}, {0x0, 0x9a, 0xa, 0x1000}, {0xffff, 0x5, 0x8, 0x5}]}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000540)={r3, 0x2}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={r6, 0x2c0}, &(0x7f0000000600)=0x8) r7 = fsmount(0xffffffffffffffff, 0x0, 0xf5) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x1404, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x21}, 0x840) fcntl$setlease(r4, 0x400, 0x2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000740)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x140c, 0xdffa3e66ad1db308, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r4) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x811) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000009c0)=0x2, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) write$cgroup_pressure(r4, &(0x7f0000000b00)={'full', 0x20, 0x5}, 0x2f) io_setup(0x7, &(0x7f0000000b40)=0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/kernel/uevent_seqnum', 0x8000, 0x4) r12 = eventfd2(0x3, 0x801) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000001e40), 0x101200, 0x0) io_submit(r10, 0xa, &(0x7f0000003480)=[&(0x7f0000001b80)={0x0, 0x0, 0x0, 0x3, 0xfff, r9, &(0x7f0000000b80)="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", 0x1000, 0xf4d2, 0x0, 0x3}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x8, 0x8, r11, &(0x7f0000001c00)="6e53abecfe09621ad4f6c68bbfd46cfc2774fe3a528a5eeb6910a3270a3a07ba111a2d359282b07efae820128c172b2ee1936e395d85e0a52bda68706ca3371e11229e3e153ca08d99cc5b6bc69d864be3f269c8a56b84d784bc560dba95ceff0aae4b670e0506b531601299a76850aeaf088a4d40dded676f12aa17818c4d315e38aaffbf312d07a061bd00b0f6ef02774defed8a5b446affe789982b87ef69de483f5f4a548a19251045bd3340baa78e5e16c4e4a78b941da82592bec32377a93e", 0xc2, 0x2d96c341, 0x0, 0x5, r12}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0xc, 0xf, r4, &(0x7f0000001d40)="7bc39844f32bbf3c076c25946b87f19065b7b945263717c9a6a1e45d18d06b9bcbf53cb18591152feea73acad682a544891362a789bf830e648ecc37c042e163e2ba39ecb5fb427517b2d663a0fc06f94f1e91cff591e3f74a855d662ddee5f1b30ce6edb26e49c0ead96791d5a8c37dbd909d69a77a250313b1a9f1219670195b45447e672eadeb0d3a11ebf533749fa0098dad96e4331eebb1556b0f1958442f1870d49b589a4c8033218309dd2c75c05f7ee366a293f23c7646f875fdcfc410ba080802691dc2530ee2b972c12c97d8f65d1254578fedef1200de9d0d07e2f169d7128c7765d11feb5b5e9c73", 0xee, 0x1ff, 0x0, 0x2, r13}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x1, 0x2, r5, &(0x7f0000001ec0)="c22cfffbf52e19e2e4f1042a8b82a57fa239019387bd5c73f1576e27ece28b12d9773f0f1a33687a1f4bde580e3953dba4e1efff092a9b9a1fe7a1da202a0f8dfa105b6af387968151b86447acd26468316f4f9f76f790da7883c8a4eb81be0b3a462d3b8b868ab9063d2e42933d5f5af4f5f900711ee7d89b50222c4b33893449b0402ea35a0901abd0a4369447d5d8bec4c8069c2c2aa813301a7f3ed0ce71ec317c7590dff60049fc43eb254e83c33eacb1772a1bb219eaaa0f846c1a6471815dc5e097bed0550786ddf28a4e", 0xce, 0x1, 0x0, 0x3, r4}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x2, 0x2, r5, &(0x7f0000002000)="60d6225146ef89ecf1fdd7df4f77b8ad7b5c011a0bb1e889a4a29f882742a28db302342ce154", 0x26, 0x4, 0x0, 0x1, r0}, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x3, 0x0, r7, &(0x7f0000002080)="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", 0x1000, 0xd, 0x0, 0x1}, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x1, 0x2, r7, &(0x7f00000030c0)="e3ba8e24252e2e36e05aff8aafeedc0f6ad4c2471915aa4e2890ed5cfd310b42b7c02ce233b14c90a67811e044b2e6abf89e007c546e71d368641c4e8acfa362d3da6b454523d2c69df60209116ced74e520044be144bd8eb5f7584fadf3be73d353e829b91c64c1507652049b028c6de3e980b129492309e72e6cc66e4f3a1adefd48b3207d978b97c6846f26ca8f00066213b4e897c3d12f61dea4e0858180eb8fd812d4ccb281b931d0357ae6b6bf9f1ac71bf37f9044dc258c43fdc04fb54ce624", 0xc3, 0x1140000000000000, 0x0, 0x1, r0}, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x8, 0x8, r9, &(0x7f0000003200)="18647b0fe21db98d7c7a9a90abb05e6afc10c6259c0a9cee81502ea4c38dc2a4c605d99f238924cb7f43225cd929f5179e2637861d31bf894efb3a61e07d02593e25b4dfe80620b5ccdd4c7e12d50bd4e458c7ff", 0x54, 0x0, 0x0, 0x7, r4}, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x1000, r4, &(0x7f00000032c0)="ae41158939dcb60b2011a46c8e580e2f6d51ed3a04aa62a8c85aa94e1c4d11ed19c0ab5305635d92ddc1914fa21f71b16d17834f07b443dd6113637319daef1798e0b078d3fffe3939edfd5b48e19f2eaab093670e2b", 0x56, 0x3ff, 0x0, 0x2, r7}, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x8, 0x6, r9, &(0x7f0000003380)="19464f19f72b38ce36b9cc71c4febfaebdc5a9628e6c539f83de3c361c33987b77578a33b5eec1cbb9bfea5e5326e26197fc589a40fc3041d50cc4a65a428b90b68ad9fb48716b06ea4ef7a9e968d9362eaf124150354cc17383659fc5b04b18fe086ffe3cffa775807ac66bf6bbe7b4f2f42e13a36e5f431d0b35d8fe08f3fae85605b3be4aa616927baa50ddd39b0b9ae8404ba407fbd2bb014bbcfbbd07", 0x9f, 0xfffffffffffffffb, 0x0, 0x5}]) 0s ago: executing program 5 (id=1573): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x58, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}]}]}], {0x14}}, 0x80}}, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): 3.282066][ T9950] syzkaller0: refused to change device tx_queue_len [ 493.587105][ T9959] /dev/rnullb0: Can't open blockdev [ 494.052776][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.061636][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.782370][ T5953] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 495.048243][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 495.066291][ T5953] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 495.112350][ T5953] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 495.162951][ T5953] usb 6-1: config 63 has no interface number 0 [ 495.169289][ T5953] usb 6-1: config 63 interface 66 has no altsetting 0 [ 495.200920][ T5953] usb 6-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 495.220839][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.323688][ T9977] sctp: [Deprecated]: syz.1.1134 (pid 9977) Use of int in max_burst socket option deprecated. [ 495.323688][ T9977] Use struct sctp_assoc_value instead [ 495.711665][ T9985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1135'. [ 495.823268][ T9983] /dev/rnullb0: Can't open blockdev [ 495.920837][ T5953] usb 6-1: Product: syz [ 495.925855][ T5953] usb 6-1: Manufacturer: syz [ 495.930581][ T5953] usb 6-1: SerialNumber: syz [ 496.447117][ T9989] /dev/rnullb0: Can't open blockdev [ 496.645220][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'. [ 496.673583][ T9993] syz.1.1137 uses old SIOCAX25GETINFO [ 496.706425][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'. [ 497.074190][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 497.205599][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 497.688499][ T5953] uvcvideo 6-1:63.66: probe with driver uvcvideo failed with error -22 [ 497.730749][ T5953] usb 6-1: USB disconnect, device number 7 [ 498.252779][ T5953] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 498.443780][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 498.463035][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 498.490035][ T5953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.532315][ T5953] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.574593][ T5953] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.619847][ T5953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.661475][ T5953] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.703821][ T5953] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.753205][ T5953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.792531][ T5953] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.801585][ T5953] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.895078][ T5953] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.945910][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.972479][ T5953] usb 6-1: Product: syz [ 498.991039][ T5953] usb 6-1: Manufacturer: syz [ 499.063330][ T5953] usb 6-1: SerialNumber: syz [ 499.096408][ T5953] cdc_ncm 6-1:1.0: skipping garbage [ 499.101901][ T5953] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 499.132407][ T5953] cdc_ncm 6-1:1.0: bind() failure [ 499.913095][T10027] /dev/rnullb0: Can't open blockdev [ 500.370791][T10040] netlink: 'syz.1.1151': attribute type 2 has an invalid length. [ 500.422431][T10040] /dev/rnullb0: Can't open blockdev [ 500.467877][ T986] IPVS: starting estimator thread 0... [ 500.563548][T10046] IPVS: using max 25 ests per chain, 60000 per kthread [ 500.639453][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.651252][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.713519][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 500.774991][T10043] binder: BINDER_SET_CONTEXT_MGR already set [ 500.781451][T10043] binder: 10042:10043 ioctl 4018620d 200000004a80 returned -16 [ 500.848826][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.877134][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.946596][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.967761][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 500.987804][ T43] usb 5-1: config 1 has no interface number 0 [ 501.006944][ T43] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.059276][ T43] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 501.078630][ T5935] usb 6-1: USB disconnect, device number 8 [ 501.093801][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.123238][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.141950][ T43] usb 5-1: Product: syz [ 501.158019][ T43] usb 5-1: Manufacturer: syz [ 501.176159][ T43] usb 5-1: SerialNumber: syz [ 501.263314][T10055] netlink: 'syz.5.1155': attribute type 5 has an invalid length. [ 501.567397][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.575639][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.792388][ T5935] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 502.027663][ T43] cdc_ncm 5-1:1.1: bind() failure [ 502.067217][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 502.104724][ T5935] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.113040][ T5935] usb 4-1: config 0 has no interface number 0 [ 502.130875][ T5935] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 502.161392][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.206312][ T5935] usb 4-1: Product: syz [ 502.221051][ T5935] usb 4-1: Manufacturer: syz [ 502.240280][ T5935] usb 4-1: SerialNumber: syz [ 502.245795][T10045] /dev/rnullb0: Can't open blockdev [ 502.272906][ T5935] usb 4-1: config 0 descriptor?? [ 502.285954][ T43] usb 5-1: USB disconnect, device number 31 [ 502.303997][ T5935] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 502.517166][ T5935] gspca_spca1528: reg_w err -71 [ 502.552470][ T5935] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 502.601235][ T5935] usb 4-1: USB disconnect, device number 79 [ 502.893971][T10074] /dev/rnullb0: Can't open blockdev [ 502.930527][T10074] /dev/rnullb0: Can't open blockdev [ 502.993288][T10074] /dev/rnullb0: Can't open blockdev [ 502.999329][T10074] /dev/rnullb0: Can't open blockdev [ 503.063531][T10074] /dev/rnullb0: Can't open blockdev [ 503.098680][T10074] /dev/rnullb0: Can't open blockdev [ 503.138324][T10074] /dev/rnullb0: Can't open blockdev [ 503.222447][T10074] /dev/rnullb0: Can't open blockdev [ 503.231969][T10074] /dev/rnullb0: Can't open blockdev [ 503.240225][T10074] /dev/rnullb0: Can't open blockdev [ 503.304317][T10074] /dev/rnullb0: Can't open blockdev [ 503.310854][T10074] /dev/rnullb0: Can't open blockdev [ 503.339471][T10074] /dev/rnullb0: Can't open blockdev [ 503.346524][T10074] /dev/rnullb0: Can't open blockdev [ 503.355087][T10074] /dev/rnullb0: Can't open blockdev [ 503.363751][T10074] /dev/rnullb0: Can't open blockdev [ 503.370253][T10074] /dev/rnullb0: Can't open blockdev [ 503.379067][T10074] /dev/rnullb0: Can't open blockdev [ 503.386256][T10074] /dev/rnullb0: Can't open blockdev [ 503.403312][T10074] /dev/rnullb0: Can't open blockdev [ 503.409968][T10074] /dev/rnullb0: Can't open blockdev [ 503.437799][T10074] /dev/rnullb0: Can't open blockdev [ 503.492850][T10074] /dev/rnullb0: Can't open blockdev [ 503.499531][T10074] /dev/rnullb0: Can't open blockdev [ 503.516872][T10074] /dev/rnullb0: Can't open blockdev [ 503.538762][T10074] /dev/rnullb0: Can't open blockdev [ 503.546609][T10074] /dev/rnullb0: Can't open blockdev [ 503.553942][T10074] /dev/rnullb0: Can't open blockdev [ 503.561880][T10074] /dev/rnullb0: Can't open blockdev [ 503.573349][T10074] /dev/rnullb0: Can't open blockdev [ 503.581029][T10074] /dev/rnullb0: Can't open blockdev [ 503.589507][T10074] /dev/rnullb0: Can't open blockdev [ 503.599408][T10074] /dev/rnullb0: Can't open blockdev [ 503.650915][T10074] /dev/rnullb0: Can't open blockdev [ 503.689669][T10074] /dev/rnullb0: Can't open blockdev [ 504.171836][T10089] comedi comedi3: fl512: I/O port conflict (0x4f24,16) [ 504.187716][T10089] ./cgroup: Can't lookup blockdev [ 504.393449][T10103] program syz.5.1167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.412479][ T5985] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 504.602896][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 504.663462][ T5985] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 504.718598][ T5985] usb 5-1: config 1 interface 0 has no altsetting 0 [ 504.767737][ T5985] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 504.802553][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.832157][ T5985] usb 5-1: Product: syz [ 504.847039][ T5985] usb 5-1: Manufacturer: syz [ 504.855156][T10116] /dev/rnullb0: Can't open blockdev [ 504.862443][ T5985] usb 5-1: SerialNumber: syz [ 505.112402][ T5935] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 505.129392][T10124] /dev/rnullb0: Can't open blockdev [ 505.292381][ T5935] usb 4-1: device descriptor read/64, error -71 [ 505.526342][ T30] audit: type=1800 audit(1753864585.122:39): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1174" name="/" dev="9p" ino=2 res=0 errno=0 [ 505.734538][T10127] netfs: Couldn't get user pages (rc=-14) [ 506.242682][ T5935] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 506.392641][ T5935] usb 4-1: device descriptor read/64, error -71 [ 506.523998][ T5935] usb usb4-port1: attempt power cycle [ 506.882770][ T5935] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 506.968148][ T5935] usb 4-1: device descriptor read/8, error -71 [ 507.219554][ T5985] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input28 [ 507.243648][ T5935] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 507.287866][ T5200] bcm5974 5-1:1.0: could not read from device [ 507.294138][ T5935] usb 4-1: device descriptor read/8, error -71 [ 507.353672][ T5985] usb 5-1: USB disconnect, device number 32 [ 507.370715][ T5200] bcm5974 5-1:1.0: could not read from device [ 507.413337][ T5935] usb usb4-port1: unable to enumerate USB device [ 507.641316][T10153] /dev/rnullb0: Can't open blockdev [ 507.798806][T10156] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 507.838717][T10156] /dev/rnullb0: Can't open blockdev [ 507.895914][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 509.279352][T10173] /dev/rnullb0: Can't open blockdev [ 510.612589][ T5985] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 510.697934][T10182] /dev/rnullb0: Can't open blockdev [ 510.795065][T10184] (syz.3.1192,10184,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 510.814951][T10184] (syz.3.1192,10184,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 510.850708][ T5985] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 510.867690][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.926138][ T5985] pwc: Logitech ViewPort AV 100 webcam detected. [ 511.011326][T10189] /dev/rnullb0: Can't open blockdev [ 511.091533][T10171] /dev/rnullb0: Can't open blockdev [ 511.131095][ T5985] pwc: Failed to set LED on/off time (-71) [ 511.159308][ T5985] pwc: send_video_command error -71 [ 511.202353][ T5985] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 511.210227][ T5985] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71 [ 511.271760][ T5985] usb 5-1: USB disconnect, device number 33 [ 511.449012][ T5988] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 511.617962][ T5988] usb 4-1: unable to get BOS descriptor or descriptor too short [ 511.636269][ T5988] usb 4-1: too many configurations: 193, using maximum allowed: 8 [ 511.675425][ T5988] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 511.702392][ T5988] usb 4-1: can't read configurations, error -61 [ 511.872561][ T5988] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 512.118643][ T5988] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.119927][T10204] /dev/rnullb0: Can't open blockdev [ 512.142557][ T5988] usb 4-1: too many configurations: 193, using maximum allowed: 8 [ 512.175625][ T5988] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 512.192472][ T5988] usb 4-1: can't read configurations, error -61 [ 512.209863][ T5988] usb usb4-port1: attempt power cycle [ 512.582344][ T5988] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 512.686757][ T5988] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.702423][ T5988] usb 4-1: too many configurations: 193, using maximum allowed: 8 [ 512.734610][ T5988] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 512.762624][ T5988] usb 4-1: can't read configurations, error -61 [ 512.853131][T10213] raw_sendmsg: syz.1.1203 forgot to set AF_INET. Fix it! [ 512.912501][ T5988] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 512.967678][ T5988] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.982496][ T5988] usb 4-1: too many configurations: 193, using maximum allowed: 8 [ 513.442546][ T5988] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 513.450578][ T5988] usb 4-1: can't read configurations, error -61 [ 513.458500][ T5988] usb usb4-port1: unable to enumerate USB device [ 514.267316][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 514.319209][T10217] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 514.358945][T10217] /dev/rnullb0: Can't open blockdev [ 514.407661][T10219] /dev/rnullb0: Can't open blockdev [ 514.439531][T10221] sctp: [Deprecated]: syz.3.1206 (pid 10221) Use of int in max_burst socket option deprecated. [ 514.439531][T10221] Use struct sctp_assoc_value instead [ 514.489395][T10221] syz.3.1206: attempt to access beyond end of device [ 514.489395][T10221] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 514.549278][T10221] gfs2: error -5 reading superblock [ 514.885931][T10232] /dev/rnullb0: Can't open blockdev [ 515.326061][T10238] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 515.345763][T10239] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 515.347542][T10240] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 515.391342][T10239] /dev/rnullb0: Can't open blockdev [ 515.440944][T10240] /dev/rnullb0: Can't open blockdev [ 516.166738][T10259] /dev/rnullb0: Can't open blockdev [ 516.304379][T10265] comedi comedi3: pcl726: I/O port conflict (0x4f27,16) [ 516.377687][T10269] netlink: 'syz.3.1220': attribute type 12 has an invalid length. [ 516.420878][T10271] /dev/rnullb0: Can't open blockdev [ 516.531354][T10273] /dev/rnullb0: Can't open blockdev [ 516.679264][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 516.836477][T10284] tipc: Can't bind to reserved service type 1 [ 516.877065][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 516.919073][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 516.949536][ T43] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 516.975429][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.001736][ T43] usb 4-1: Product: syz [ 517.012716][ T5935] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 517.021638][T10286] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 517.031223][ T43] usb 4-1: Manufacturer: syz [ 517.048715][ T30] audit: type=1107 audit(1753864596.652:40): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='d' [ 517.061714][ T43] usb 4-1: SerialNumber: syz [ 517.098691][ T43] usb 4-1: config 0 descriptor?? [ 517.148590][T10290] /dev/rnullb0: Can't open blockdev [ 517.162389][ T5935] usb 5-1: device descriptor read/64, error -71 [ 517.424857][ T5935] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 517.498432][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.530448][T10293] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1227'. [ 517.582376][ T5935] usb 5-1: device descriptor read/64, error -71 [ 517.640095][ T43] usb 4-1: USB disconnect, device number 88 [ 517.722734][ T5935] usb usb5-port1: attempt power cycle [ 517.746802][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.092435][ T5935] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 518.147359][ T5935] usb 5-1: device descriptor read/8, error -71 [ 518.412493][ T5935] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 518.464153][ T5935] usb 5-1: device descriptor read/8, error -71 [ 518.572788][ T5935] usb usb5-port1: unable to enumerate USB device [ 518.692787][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 518.853336][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 518.878385][ T9] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 518.892317][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.914046][ T9] usb 6-1: Product: syz [ 518.930975][ T9] usb 6-1: Manufacturer: syz [ 518.941097][ T9] usb 6-1: SerialNumber: syz [ 518.995313][T10306] netlink: 'syz.1.1230': attribute type 21 has an invalid length. [ 519.003565][T10306] netlink: 'syz.1.1230': attribute type 13 has an invalid length. [ 519.011491][T10306] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1230'. [ 519.028097][T10306] binder: 10305:10306 ioctl c0306201 0 returned -14 [ 519.037281][T10306] binder: 10305:10306 ioctl c0306201 2000000000c0 returned -11 [ 519.054193][T10306] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1230'. [ 519.182353][ T9] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 519.198289][T10310] netlink: 'syz.1.1231': attribute type 21 has an invalid length. [ 519.238389][ T9] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 519.251562][ T9] mxuport 6-1:254.0: probe with driver mxuport failed with error -71 [ 519.282850][ T9] usb 6-1: USB disconnect, device number 9 [ 519.896569][T10316] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1233'. [ 519.947217][T10320] /dev/rnullb0: Can't open blockdev [ 520.172160][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.213116][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.262414][T10325] /dev/rnullb0: Can't open blockdev [ 520.583617][T10333] /dev/rnullb0: Can't open blockdev [ 521.940692][T10355] /dev/rnullb0: Can't open blockdev [ 522.011225][T10357] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 522.302897][ T9] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 522.472843][ T9] usb 4-1: device descriptor read/64, error -71 [ 522.732887][ T9] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 522.892555][ T9] usb 4-1: device descriptor read/64, error -71 [ 523.024516][T10367] /dev/rnullb0: Can't open blockdev [ 523.032890][ T9] usb usb4-port1: attempt power cycle [ 523.406637][ T9] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 523.478058][ T9] usb 4-1: device descriptor read/8, error -71 [ 523.742424][ T9] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 523.804099][ T9] usb 4-1: device descriptor read/8, error -71 [ 523.946613][ T9] usb usb4-port1: unable to enumerate USB device [ 524.125792][T10380] /dev/rnullb0: Can't open blockdev [ 524.550776][T10390] sctp: [Deprecated]: syz.4.1257 (pid 10390) Use of int in max_burst socket option deprecated. [ 524.550776][T10390] Use struct sctp_assoc_value instead [ 524.648780][T10395] /dev/rnullb0: Can't open blockdev [ 524.719178][T10394] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1258'. [ 525.540555][T10407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1260'. [ 526.515872][T10419] /dev/rnullb0: Can't open blockdev [ 527.144394][T10434] /dev/rnullb0: Can't open blockdev [ 527.555944][T10447] netlink: 'syz.4.1269': attribute type 4 has an invalid length. [ 527.949584][T10453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 528.025588][T10453] /dev/rnullb0: Can't open blockdev [ 528.179866][T10460] vivid-002: disconnect [ 528.206414][ T5165] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 528.216140][ T5165] Bluetooth: hci5: Injecting HCI hardware error event [ 528.227142][ T5165] Bluetooth: hci5: hardware error 0x00 [ 528.293086][T10460] vivid-002: reconnect [ 528.472607][T10462] mkiss: ax0: crc mode is auto. [ 528.702759][ T5935] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 528.859409][T10478] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 528.865985][T10478] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 528.874920][T10478] vhci_hcd vhci_hcd.0: Device attached [ 528.901064][ T5935] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 528.923758][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.962294][ T5935] usb 6-1: Product: syz [ 528.966529][ T5935] usb 6-1: Manufacturer: syz [ 529.001650][ T5935] usb 6-1: SerialNumber: syz [ 529.041834][ T5935] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 529.058510][ T5985] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 529.091424][T10479] vhci_hcd: connection closed [ 529.113441][ T9368] vhci_hcd: stop threads [ 529.132318][T10294] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 529.161202][ T9368] vhci_hcd: release socket [ 529.173115][ T5988] usb 40-1: SetAddress Request (3) to port 0 [ 529.185514][ T9368] vhci_hcd: disconnect device [ 529.209841][ T5988] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 529.242333][T10461] Bluetooth: hci4: command 0x0406 tx timeout [ 529.248187][ T5988] usb 40-1: enqueue for inactive port 0 [ 529.357099][T10466] /dev/rnullb0: Can't open blockdev [ 529.473306][ T5935] usb 6-1: USB disconnect, device number 10 [ 529.492945][ T5985] usb 5-1: device descriptor read/64, error -71 [ 529.687846][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.699588][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.715201][ T5988] usb usb40-port1: attempt power cycle [ 529.772547][ T5985] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 529.973637][ T5985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 530.035857][ T5985] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.087003][ T5985] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 530.102327][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.103565][T10501] /dev/rnullb0: Can't open blockdev [ 530.113472][ T5985] usb 5-1: Product: syz [ 530.119954][ T5985] usb 5-1: Manufacturer: syz [ 530.125659][ T5985] usb 5-1: SerialNumber: syz [ 530.203852][T10294] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 530.210956][T10294] ath9k_htc: Failed to initialize the device [ 530.243233][ T5935] usb 6-1: ath9k_htc: USB layer deinitialized [ 530.287939][ T5165] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 530.347285][ T5988] usb usb40-port1: unable to enumerate USB device [ 530.371806][ T5985] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input29 [ 530.398070][T10505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.402465][ T5200] bcm5974 5-1:1.0: could not read from device [ 530.445224][ T5200] bcm5974 5-1:1.0: could not read from device [ 530.472855][ T5985] usb 5-1: USB disconnect, device number 39 [ 530.562652][ T986] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 530.673465][ T5993] udevd[5993]: Error opening device "/dev/input/event4": No such file or directory [ 530.736511][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4" [ 530.754794][ T986] usb 4-1: Using ep0 maxpacket: 8 [ 530.772593][ T986] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 530.786917][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4" [ 530.816463][ T986] usb 4-1: config 0 has no interface number 0 [ 530.827115][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4" [ 530.839453][ T986] usb 4-1: too many endpoints for config 0 interface 55 altsetting 255: 154, using maximum allowed: 30 [ 530.883362][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4" [ 530.911731][ T986] usb 4-1: config 0 interface 55 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 530.932863][ T986] usb 4-1: config 0 interface 55 altsetting 255 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 531.161657][ T986] usb 4-1: config 0 interface 55 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.215578][ T986] usb 4-1: config 0 interface 55 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 154 [ 531.260275][ T986] usb 4-1: config 0 interface 55 has no altsetting 0 [ 531.282121][ T986] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 531.305428][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.351850][ T986] usb 4-1: config 0 descriptor?? [ 531.379773][ T986] ldusb 4-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 531.451257][ T986] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 531.656568][ T5988] usb 4-1: USB disconnect, device number 93 [ 531.656615][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 531.697729][T10503] ldusb 4-1:0.55: Couldn't submit HID_REQ_SET_REPORT -71 [ 531.725017][ T5988] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 531.879152][T10525] tty tty4: ldisc open failed (-12), clearing slot 3 [ 532.549127][ T5935] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 532.702706][ T5935] usb 5-1: device descriptor read/64, error -71 [ 532.962480][ T5935] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 533.122645][ T5935] usb 5-1: device descriptor read/64, error -71 [ 533.232822][ T5935] usb usb5-port1: attempt power cycle [ 533.266541][T10546] autofs: Bad value for 'fd' [ 533.492804][T10551] /dev/rnullb0: Can't open blockdev [ 533.594804][ T5935] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 533.649629][ T5935] usb 5-1: device descriptor read/8, error -71 [ 533.902560][ T5935] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 533.921518][T10561] RDS: rds_bind could not find a transport for fe80::25, load rds_tcp or rds_rdma? [ 533.970804][ T5935] usb 5-1: device descriptor read/8, error -71 [ 534.094952][ T5935] usb usb5-port1: unable to enumerate USB device [ 535.092709][ T5988] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 535.292583][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 535.318982][ T5988] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.352869][ T5988] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 535.392401][ T5988] usb 4-1: can't read configurations, error -71 [ 535.975442][T10585] delete_channel: no stack [ 535.983770][T10585] delete_channel: no stack [ 535.988392][T10585] delete_channel: no stack [ 536.040183][T10585] delete_channel: no stack [ 536.062747][T10585] delete_channel: no stack [ 536.096588][T10585] delete_channel: no stack [ 536.102925][T10585] delete_channel: no stack [ 536.107753][T10585] delete_channel: no stack [ 536.149752][T10585] delete_channel: no stack [ 536.165586][T10585] delete_channel: no stack [ 536.170617][T10585] delete_channel: no stack [ 536.181438][T10585] delete_channel: no stack [ 536.191208][T10585] delete_channel: no stack [ 536.204979][T10585] delete_channel: no stack [ 536.209802][T10585] delete_channel: no stack [ 536.248769][T10585] delete_channel: no stack [ 536.262345][T10294] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 536.268112][T10585] delete_channel: no stack [ 536.280303][T10585] delete_channel: no stack [ 536.300443][T10585] delete_channel: no stack [ 536.330819][T10585] delete_channel: no stack [ 536.356885][T10585] delete_channel: no stack [ 536.361690][T10585] delete_channel: no stack [ 536.391028][T10585] delete_channel: no stack [ 536.411346][T10585] delete_channel: no stack [ 536.473330][T10585] delete_channel: no stack [ 536.484707][T10585] delete_channel: no stack [ 536.499574][T10585] delete_channel: no stack [ 536.513934][T10294] usb 5-1: Using ep0 maxpacket: 32 [ 536.524916][T10585] delete_channel: no stack [ 536.538391][T10294] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 536.558019][T10585] delete_channel: no stack [ 536.578295][T10294] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 536.613568][T10294] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 536.625157][T10585] delete_channel: no stack [ 536.646693][T10294] usb 5-1: config 1 has no interface number 0 [ 536.664980][T10585] delete_channel: no stack [ 536.669634][T10585] delete_channel: no stack [ 536.685388][T10294] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.735643][T10294] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 536.788209][T10585] delete_channel: no stack [ 536.799328][T10294] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 536.832712][T10294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.898068][T10294] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 537.088623][T10294] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 537.097831][ T5935] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 537.294018][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 537.315797][ T5935] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 537.342406][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.372539][ T5935] usb 4-1: Product: syz [ 537.387061][ T5935] usb 4-1: Manufacturer: syz [ 537.391788][ T5935] usb 4-1: SerialNumber: syz [ 537.453266][ T5935] usb 4-1: config 0 descriptor?? [ 537.742539][ T5935] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 538.124586][T10294] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 538.412955][ T5953] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 538.594409][ T5953] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 538.615476][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.632668][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.685067][ T5935] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 538.711754][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 538.750832][ T5935] usb 4-1: USB disconnect, device number 96 [ 538.774159][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.808475][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.850852][ T5988] usb 5-1: USB disconnect, device number 44 [ 538.857698][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 538.879000][ T5988] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 538.914194][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.944823][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.969689][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 538.999482][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.022833][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.050106][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.064671][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.079489][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.119934][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.149765][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.169530][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.193072][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.216444][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.243532][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.282370][ T5935] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 539.283830][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.356755][ T5953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.373859][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 539.382963][T10612] netlink: 568 bytes leftover after parsing attributes in process `syz.1.1320'. [ 539.392405][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.432349][ T5988] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 539.446673][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 539.460226][ T5935] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 539.465917][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.469139][ T5935] usb 4-1: config 6 has no interface number 0 [ 539.501881][ T5935] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 539.505377][ T5953] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 539.537809][ T5935] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 539.542425][ T5953] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 539.569929][ T5935] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 539.584158][ T5953] usb 6-1: Product: syz [ 539.596442][ T5953] usb 6-1: Manufacturer: syz [ 539.599727][ T5935] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 539.611343][ T5953] usb 6-1: SerialNumber: syz [ 539.613098][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 539.633873][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.636747][ T5953] usb 6-1: config 0 descriptor?? [ 539.647308][ T5935] usb 4-1: Product: syz [ 539.647328][ T5935] usb 4-1: Manufacturer: syz [ 539.647344][ T5935] usb 4-1: SerialNumber: syz [ 539.658509][ T5935] hso 4-1:6.2: Failed to find INT IN ep [ 539.683361][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.702481][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.753580][ T5988] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 539.775274][ T5953] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 539.792333][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.835935][ T5988] usb 5-1: config 0 descriptor?? [ 539.858718][ T5988] hub 5-1:0.0: USB hub found [ 539.900583][ T5953] usb 4-1: USB disconnect, device number 97 [ 540.002610][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 540.013095][ T43] usb 6-1: USB disconnect, device number 11 [ 540.043035][ T43] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 540.071531][T10610] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1319'. [ 540.077181][T10605] /dev/rnullb0: Can't open blockdev [ 540.109898][ T5988] hub 5-1:0.0: 1 port detected [ 540.755207][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.768660][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.870039][ T5988] hub 5-1:0.0: activate --> -90 [ 541.122498][ T5953] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 541.281374][ T5985] usb 5-1: USB disconnect, device number 45 [ 541.299472][ T5953] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 541.325706][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 541.357875][ T5953] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 541.368892][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.404245][ T5953] usb 6-1: config 0 descriptor?? [ 541.522686][ T5988] usb 5-1-port1: config error [ 541.849077][ T5953] hid_parser_main: 29 callbacks suppressed [ 541.849103][ T5953] lenovo 0003:17EF:60A3.0006: unknown main item tag 0x0 [ 541.875483][ T5953] lenovo 0003:17EF:60A3.0006: unknown main item tag 0x0 [ 541.888715][ T5953] lenovo 0003:17EF:60A3.0006: unknown main item tag 0x0 [ 541.896467][ T5953] lenovo 0003:17EF:60A3.0006: unknown main item tag 0x0 [ 541.904068][ T5953] lenovo 0003:17EF:60A3.0006: unknown main item tag 0x0 [ 541.954250][ T5953] lenovo 0003:17EF:60A3.0006: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0 [ 542.096498][T10630] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 542.103075][T10630] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 542.139445][T10630] vhci_hcd vhci_hcd.0: Device attached [ 542.191525][T10631] usbip_core: unknown command [ 542.213251][T10631] vhci_hcd: unknown pdu 0 [ 542.224096][T10631] usbip_core: unknown command [ 542.234845][ T9362] vhci_hcd: stop threads [ 542.246120][ T9362] vhci_hcd: release socket [ 542.265513][ T9362] vhci_hcd: disconnect device [ 543.663331][ T5953] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 543.852899][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 543.881317][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 543.944855][ T5953] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 543.963194][ T5953] usb 5-1: can't read configurations, error -71 [ 544.072430][ T5985] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 544.242463][ T5985] usb 4-1: Using ep0 maxpacket: 8 [ 544.258074][ T5985] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 544.269879][ T5985] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 544.288996][ T5985] usb 4-1: config 0 has no interface number 0 [ 544.303571][ T5985] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.317178][ T5985] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 544.332943][ T5985] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 544.347010][ T5985] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 544.363483][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 544.371581][ T5985] usb 4-1: Product: syz [ 544.407759][ T5985] usb 4-1: config 0 descriptor?? [ 544.431744][T10652] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 544.500873][ T986] usb 6-1: USB disconnect, device number 12 [ 544.658269][T10656] /dev/rnullb0: Can't open blockdev [ 544.992461][ T986] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 545.079022][ T5985] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input30 [ 545.162848][ T986] usb 6-1: Using ep0 maxpacket: 32 [ 545.176929][ T986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.212360][ T986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.274946][ T986] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 545.300548][ T5985] usb 4-1: USB disconnect, device number 98 [ 545.306601][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 545.318394][ T986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.337714][T10665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.389535][ T986] usb 6-1: config 0 descriptor?? [ 545.425013][ T986] hub 6-1:0.0: USB hub found [ 545.630078][T10658] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1333'. [ 545.666928][ T986] hub 6-1:0.0: 1 port detected [ 545.797032][T10670] /dev/rnullb0: Can't open blockdev [ 546.352395][ T5935] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 546.402428][ T986] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 546.522366][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 546.544742][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 546.562405][ T986] usb 5-1: Using ep0 maxpacket: 32 [ 546.574982][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.592174][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.594013][T10676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1340'. [ 546.612311][ T986] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 546.620695][ T986] usb 5-1: config 0 has no interface number 0 [ 546.637420][ T986] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 546.647844][ T5935] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.660961][ T986] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 546.674537][ T986] usb 5-1: config 0 interface 54 has no altsetting 0 [ 546.682978][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.695892][T10679] /dev/rnullb0: Can't open blockdev [ 546.709404][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.719045][ T5935] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.738302][ T986] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 546.749236][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.760339][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.780755][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.789933][ T986] usb 5-1: Product: syz [ 546.799857][ T986] usb 5-1: Manufacturer: syz [ 546.804932][ T5935] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.818214][ T986] usb 5-1: SerialNumber: syz [ 546.836943][ T986] usb 5-1: config 0 descriptor?? [ 546.845522][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.865170][T10672] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 546.876234][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.892963][T10672] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 546.896811][ T5935] usb 4-1: Product: syz [ 546.915331][ T5935] usb 4-1: Manufacturer: syz [ 546.925815][ T5935] usb 4-1: SerialNumber: syz [ 546.964058][ T5935] cdc_ncm 4-1:1.0: skipping garbage [ 546.988424][ T5935] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 547.016215][ T5935] cdc_ncm 4-1:1.0: bind() failure [ 547.126219][ T986] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 547.181421][ T986] scsi host1: usb-storage 5-1:0.54 [ 547.243561][T10294] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 547.287211][ T986] ums_eneub6250 5-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 547.316741][ T5985] usb 6-1: USB disconnect, device number 13 [ 547.326966][ T986] usb 5-1: USB disconnect, device number 48 [ 547.717676][T10689] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1343'. [ 547.748187][T10689] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1343'. [ 548.429637][T10704] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1347'. [ 548.515101][T10706] /dev/rnullb0: Can't open blockdev [ 548.982363][ T5953] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 549.069353][ T986] usb 4-1: USB disconnect, device number 99 [ 549.177414][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 549.197404][T10716] program syz.3.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.205742][ T5953] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 549.249566][ T5953] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 549.281929][ T5953] usb 5-1: config 0 has no interface number 0 [ 549.311827][ T5953] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.359023][ T5953] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 549.452927][ T5953] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 549.467335][ T5953] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 549.467440][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 549.467463][ T5953] usb 5-1: Product: syz [ 549.474960][ T5953] usb 5-1: config 0 descriptor?? [ 549.475859][T10708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.529034][T10725] /dev/rnullb0: Can't open blockdev [ 549.545294][T10725] PM: Enabling pm_trace changes system date and time during resume. [ 549.545294][T10725] PM: Correct system time has to be restored manually after resume. [ 549.655495][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 549.656726][T10728] ./file0: Can't lookup blockdev [ 550.115665][ T5953] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input31 [ 550.173399][T10738] /dev/rnullb0: Can't open blockdev [ 550.335954][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.358696][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.399060][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.456959][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.533290][ T5953] usb 5-1: USB disconnect, device number 49 [ 550.533419][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 550.927058][ T30] audit: type=1326 audit(1753864630.532:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.3.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50a78e9a9 code=0x7fc00000 [ 550.985624][ T30] audit: type=1326 audit(1753864630.532:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.3.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa50a78e9a9 code=0x7fc00000 [ 551.042478][ T30] audit: type=1326 audit(1753864630.532:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.3.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50a78e9a9 code=0x7fc00000 [ 551.084091][T10294] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 551.253216][T10294] usb 6-1: Using ep0 maxpacket: 16 [ 551.280089][T10294] usb 6-1: unable to get BOS descriptor or descriptor too short [ 551.283147][T10749] /dev/rnullb0: Can't open blockdev [ 551.317276][T10294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.346579][T10294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 551.370527][T10294] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.427459][T10294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.442411][ T5935] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 551.475182][T10294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 551.505867][T10294] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.554993][T10294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.588240][T10294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 551.589433][T10757] /dev/rnullb0: Can't open blockdev [ 551.607510][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 551.622524][T10294] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.658874][ T5935] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 551.682991][ T5935] usb 4-1: config 5 has no interface number 0 [ 551.693619][T10294] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.714264][ T5935] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 551.731357][T10294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.749693][T10294] usb 6-1: Product: syz [ 551.762574][ T5935] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 551.783972][T10294] usb 6-1: Manufacturer: syz [ 551.804265][T10294] usb 6-1: SerialNumber: syz [ 551.810686][ T5935] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 551.843997][T10294] cdc_ncm 6-1:1.0: skipping garbage [ 551.855524][ T5935] usb 4-1: config 5 interface 168 has no altsetting 0 [ 551.876231][T10294] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 551.898822][ T5935] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 551.912293][T10294] cdc_ncm 6-1:1.0: bind() failure [ 551.920642][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.948437][ T5935] usb 4-1: Product: syz [ 551.954244][ T5935] usb 4-1: Manufacturer: syz [ 551.958890][ T5935] usb 4-1: SerialNumber: syz [ 551.983417][T10747] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 552.003480][T10747] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 552.158423][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.167919][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.275587][T10747] /dev/rnullb0: Can't open blockdev [ 552.477304][ C0] usb 4-1: NFC: Urb failure (status -71) [ 552.516910][ C0] usb 4-1: NFC: Urb failure (status -71) [ 552.532435][ T5935] usb 4-1: NFC: Unable to get FW version [ 552.553991][ T5935] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -71 [ 552.644130][ T5935] usb 4-1: USB disconnect, device number 100 [ 553.161621][T10786] /dev/rnullb0: Can't open blockdev [ 553.602352][ T5935] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 553.772700][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 553.780836][ T5935] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 553.790633][ T5935] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 553.806121][ T5935] usb 5-1: config 0 has no interface number 0 [ 553.832606][ T5935] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.869017][ T5935] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 553.888853][ T5985] usb 6-1: USB disconnect, device number 14 [ 553.914403][ T5935] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.932410][T10294] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 554.017086][ T5935] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 554.035522][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 554.072913][ T5935] usb 5-1: Product: syz [ 554.080140][ T5935] usb 5-1: config 0 descriptor?? [ 554.096563][T10785] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 554.158353][T10294] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 554.180176][T10294] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 554.189377][T10294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.199225][T10294] usb 4-1: Product: syz [ 554.207914][T10294] usb 4-1: Manufacturer: syz [ 554.214256][T10294] usb 4-1: SerialNumber: syz [ 554.282496][ T5985] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 554.452655][ T5985] usb 6-1: Using ep0 maxpacket: 8 [ 554.470206][ T5985] usb 6-1: config 255 has an invalid interface number: 143 but max is 0 [ 554.487078][ T5985] usb 6-1: config 255 has an invalid interface number: 198 but max is 0 [ 554.498682][ T5985] usb 6-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 554.515788][ T5985] usb 6-1: config 255 has 2 interfaces, different from the descriptor's value: 1 [ 554.531139][ T5985] usb 6-1: config 255 has no interface number 0 [ 554.556197][ T5985] usb 6-1: config 255 has no interface number 1 [ 554.566339][ T5985] usb 6-1: config 255 interface 143 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.581108][ T5985] usb 6-1: config 255 interface 143 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 554.598475][ T5985] usb 6-1: config 255 interface 143 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 554.619516][ T5985] usb 6-1: too many endpoints for config 255 interface 198 altsetting 74: 205, using maximum allowed: 30 [ 554.631368][ T5985] usb 6-1: config 255 interface 198 altsetting 74 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 554.660877][ T5985] usb 6-1: config 255 interface 198 altsetting 74 has a duplicate endpoint with address 0x2, skipping [ 554.679786][ T5985] usb 6-1: config 255 interface 198 altsetting 74 has 4 endpoint descriptors, different from the interface descriptor's value: 205 [ 554.701203][ T5985] usb 6-1: config 255 interface 198 has no altsetting 0 [ 554.719425][ T5985] usb 6-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=c7.51 [ 554.729117][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.740909][ T5935] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input33 [ 554.746053][ T5985] usb 6-1: Product: syz [ 554.774615][ T5985] usb 6-1: Manufacturer: syz [ 554.779515][ T5985] usb 6-1: SerialNumber: syz [ 554.798160][T10790] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 554.817270][ T5985] keyspan 6-1:255.143: Keyspan 4 port adapter converter detected [ 554.830658][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 87 [ 554.841844][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 7 [ 554.877536][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 81 [ 554.898972][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 1 [ 554.926346][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 554.950076][ T5988] usb 5-1: USB disconnect, device number 50 [ 554.950092][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 555.008231][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 82 [ 555.038152][T10790] /dev/rnullb0: Can't open blockdev [ 555.071321][T10294] usb 4-1: reset high-speed USB device number 101 using dummy_hcd [ 555.072132][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 555.127497][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 83 [ 555.144382][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 3 [ 555.158839][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 555.190457][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 84 [ 555.212387][ T5985] keyspan 6-1:255.143: found no endpoint descriptor for endpoint 4 [ 555.274464][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 555.304425][ T5985] keyspan 6-1:255.198: Keyspan 4 port adapter converter detected [ 555.314682][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 87 [ 555.327339][T10788] /dev/rnullb0: Can't open blockdev [ 555.337086][T10294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 555.349077][ T5985] keyspan 6-1:255.198: unsupported endpoint type 0 [ 555.360472][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 81 [ 555.374411][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 1 [ 555.374448][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 555.388882][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 555.396775][T10294] usb 4-1: device firmware changed [ 555.406145][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 82 [ 555.433856][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 2 [ 555.450934][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 555.458465][T10294] usb 4-1: USB disconnect, device number 101 [ 555.466873][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 83 [ 555.508880][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 3 [ 555.539062][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 555.597009][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 84 [ 555.635752][ T5985] keyspan 6-1:255.198: found no endpoint descriptor for endpoint 4 [ 555.698752][ T5985] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 555.723468][T10795] /dev/rnullb0: Can't open blockdev [ 555.766170][ T5985] usb 6-1: USB disconnect, device number 15 [ 555.839026][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 555.917009][ T5985] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 556.020849][ T5985] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 556.083963][ T5985] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 556.157930][ T5985] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 556.209111][T10803] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 556.220977][ T5985] keyspan 6-1:255.143: device disconnected [ 556.246394][T10803] /dev/rnullb0: Can't open blockdev [ 556.266683][ T5985] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 556.344225][ T5985] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 556.401869][ T5985] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 556.808569][ T5985] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 556.844484][ T5985] keyspan 6-1:255.198: device disconnected [ 557.284021][T10294] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 557.492525][T10294] usb 4-1: Using ep0 maxpacket: 8 [ 557.515955][T10294] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 557.557059][T10294] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 557.586216][T10294] usb 4-1: config 0 has no interface number 0 [ 557.603498][T10294] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.656207][T10294] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 557.702317][T10294] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.734374][T10824] binder: 10823:10824 ioctl 4018620d 0 returned -22 [ 557.755744][T10294] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 557.795359][T10294] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 557.847844][T10294] usb 4-1: Product: syz [ 557.884957][T10294] usb 4-1: config 0 descriptor?? [ 557.911105][T10816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 558.551119][T10294] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input34 [ 558.649577][T10852] binder: 10849:10852 ioctl c0306201 0 returned -14 [ 558.775119][T10294] usb 4-1: USB disconnect, device number 102 [ 558.781198][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 559.022621][T10857] /dev/rnullb0: Can't open blockdev [ 559.338699][T10861] /dev/rnullb0: Can't open blockdev [ 559.532384][T10294] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 559.617074][T10865] /dev/rnullb0: Can't open blockdev [ 559.825780][T10294] usb 6-1: Using ep0 maxpacket: 16 [ 559.853910][T10294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.865459][T10294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.905127][T10294] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 559.962482][T10294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.002841][T10294] usb 6-1: config 0 descriptor?? [ 560.064073][T10874] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 560.081115][T10874] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 560.087684][T10874] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 560.097626][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.100870][T10874] vhci_hcd vhci_hcd.0: Device attached [ 560.106756][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.195794][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.243202][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.271894][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.364002][ T5953] usb 40-1: SetAddress Request (7) to port 0 [ 560.384981][ T5953] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 560.402019][T10877] vhci_hcd: connection closed [ 560.431586][ T9362] vhci_hcd: stop threads [ 560.491832][ T9362] vhci_hcd: release socket [ 560.527390][ T9362] vhci_hcd: disconnect device [ 560.708006][T10294] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 560.722352][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.729859][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.777603][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.818336][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.861730][T10859] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1393'. [ 560.932457][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.944589][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.952136][ T5935] hid-generic FFFD:0003:0000.0007: unknown main item tag 0x0 [ 560.968364][ T5935] hid-generic FFFD:0003:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 560.975934][T10859] /dev/rnullb0: Can't open blockdev [ 561.159552][ T5985] usb 6-1: USB disconnect, device number 16 [ 561.788024][T10898] /dev/rnullb0: Can't open blockdev [ 561.841251][T10900] syz.3.1404: attempt to access beyond end of device [ 561.841251][T10900] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 561.915209][ T5935] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 561.943183][T10900] gfs2: error -5 reading superblock [ 562.116950][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 562.124066][ T5935] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 562.141153][ T5935] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 562.178056][ T5935] usb 5-1: config 0 has no interface number 0 [ 562.196901][ T5935] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.238231][ T5935] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 562.273262][ T5935] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 562.305086][ T5935] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 562.319029][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 562.328604][ T5935] usb 5-1: Product: syz [ 562.361834][ T5935] usb 5-1: config 0 descriptor?? [ 562.387940][T10895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 562.572418][ T43] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 562.743385][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 562.782125][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 562.818815][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.862497][ T43] usb 4-1: Product: syz [ 562.866839][ T43] usb 4-1: Manufacturer: syz [ 562.871540][ T43] usb 4-1: SerialNumber: syz [ 562.905811][ T43] usb 4-1: config 0 descriptor?? [ 562.952105][ T43] usb-storage 4-1:0.0: USB Mass Storage device detected [ 562.994177][ T43] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 563.005973][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.017367][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.096055][ T43] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc6-next-20250718-syzkaller) [ 563.096055][ T43] Please send a copy of this message to and [ 563.123484][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.156554][ T5935] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input35 [ 563.790690][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.890588][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.970041][T10294] usb 5-1: USB disconnect, device number 51 [ 564.976162][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 565.486030][T10931] netlink: 'syz.1.1414': attribute type 37 has an invalid length. [ 565.562557][ T5953] usb 40-1: device descriptor read/8, error -110 [ 565.997344][ T5953] usb usb40-port1: attempt power cycle [ 566.554418][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.563465][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.631153][T10294] hid_parser_main: 29 callbacks suppressed [ 566.631173][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.667468][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.704463][ T5953] usb usb40-port1: unable to enumerate USB device [ 566.708724][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.745727][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.768964][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.796902][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.860919][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.883100][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.913121][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.937985][T10294] hid-generic FFFD:0003:0000.0009: unknown main item tag 0x0 [ 566.979297][T10294] hid-generic FFFD:0003:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 567.376188][ T5953] usb 4-1: USB disconnect, device number 103 [ 567.738321][T10950] nfs: Deprecated parameter 'intr' [ 567.912421][ T5953] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 568.102438][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 568.133781][ T5953] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 568.159459][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.198024][ T5953] usb 5-1: config 0 descriptor?? [ 568.237899][ T5953] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 568.250653][ T5988] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 568.423211][ T5988] usb 4-1: Using ep0 maxpacket: 8 [ 568.447585][ T5988] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 568.472525][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.522777][ T5988] usb 4-1: Product: syz [ 568.527192][ T5988] usb 4-1: Manufacturer: syz [ 568.531903][ T5988] usb 4-1: SerialNumber: syz [ 568.568243][ T5988] usb 4-1: config 0 descriptor?? [ 568.692818][T10962] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 568.714146][T10962] /dev/rnullb0: Can't open blockdev [ 568.829251][ T5988] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 569.038760][ T5953] gspca_vc032x: reg_w err -71 [ 569.048240][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.062953][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.079041][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.098875][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.112882][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.118344][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.143007][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.148461][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.173293][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.189216][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.209433][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.219537][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.239877][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.252315][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.270295][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.275796][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.281491][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.289134][ T5953] gspca_vc032x: I2c Bus Busy Wait 00 [ 569.294852][ T5953] gspca_vc032x: Unknown sensor... [ 569.301862][ T5953] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 569.340701][ T5953] usb 5-1: USB disconnect, device number 52 [ 569.680019][T10950] /dev/rnullb0: Can't open blockdev [ 569.737207][ T5988] gspca_sunplus: reg_w_riv err -71 [ 569.762377][ T5988] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 569.798382][ T5988] usb 4-1: USB disconnect, device number 104 [ 570.297131][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.329471][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.378302][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.405476][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.571890][T10989] No control pipe specified [ 570.641800][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.676055][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.789825][T10994] netlink: 'syz.5.1434': attribute type 5 has an invalid length. [ 570.798264][T10994] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1434'. [ 570.812938][T10994] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1434'. [ 570.825922][T10996] /dev/rnullb0: Can't open blockdev [ 570.831913][T10994] /dev/rnullb0: Can't open blockdev [ 570.862404][ T5953] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 571.043440][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 571.064139][ T5953] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 571.085406][ T5953] usb 5-1: config 0 has no interface number 0 [ 571.091745][ T5953] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.133893][ T5953] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 571.147538][ T5953] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 571.162602][ T5953] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 571.173794][ T5953] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 571.186252][ T5953] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 571.196916][ T5953] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 571.207503][ T5953] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 571.220145][ T5953] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 571.262502][ T5953] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.284566][ T9] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 571.306162][ T5953] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 571.336398][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.372981][ T5953] usb 5-1: Product: syz [ 571.383062][ T5953] usb 5-1: Manufacturer: syz [ 571.392716][ T5953] usb 5-1: SerialNumber: syz [ 571.415388][ T5953] usb 5-1: config 0 descriptor?? [ 571.431920][T10992] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 571.460936][T10992] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 571.477243][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.647282][ T5953] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 571.667537][ T5953] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 571.955045][ T5953] hid_parser_main: 29 callbacks suppressed [ 571.955070][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.019394][ T5988] usb 5-1: USB disconnect, device number 53 [ 572.057454][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 572.098949][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.100281][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 572.142414][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.157647][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.168264][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.175762][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.189443][ T9] usb 6-1: config 0 descriptor?? [ 572.227438][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.239838][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.250379][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 572.251038][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.265300][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.287114][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 572.307828][ T5953] hid-generic FFFD:0003:0000.000A: unknown main item tag 0x0 [ 572.333249][ T5953] hid-generic FFFD:0003:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 572.355909][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 572.425866][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 572.466355][ T9] usb 6-1: media controller created [ 572.519860][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.612804][T11020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.633659][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 572.652894][T11020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.679343][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 572.729806][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 572.746475][T11020] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1440'. [ 572.809005][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 572.844636][T11023] sctp: [Deprecated]: syz.3.1439 (pid 11023) Use of int in maxseg socket option. [ 572.844636][T11023] Use struct sctp_assoc_value instead [ 572.902738][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 573.064539][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 573.071092][ T9] dvb-usb: error while querying for an remote control event. [ 573.232381][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 573.240725][ T9] dvb-usb: error while querying for an remote control event. [ 573.413960][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 573.443845][ T9] dvb-usb: error while querying for an remote control event. [ 573.507300][T11030] /dev/rnullb0: Can't open blockdev [ 573.569641][T11032] /dev/rnullb0: Can't open blockdev [ 573.642353][T10294] dvb-usb: bulk message failed: -22 (1/0) [ 573.649380][T10294] dvb-usb: error while querying for an remote control event. [ 573.840253][T11040] /dev/rnullb0: Can't open blockdev [ 573.872336][T10294] dvb-usb: bulk message failed: -22 (1/0) [ 573.878410][T10294] dvb-usb: error while querying for an remote control event. [ 573.946755][ T5988] usb 6-1: USB disconnect, device number 17 [ 574.093307][ T5988] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 574.312736][ T5953] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 574.485660][ T5953] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 574.532410][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.592282][ T5953] usb 4-1: Product: syz [ 574.616150][ T5953] usb 4-1: Manufacturer: syz [ 574.654593][ T5953] usb 4-1: SerialNumber: syz [ 574.702134][ T5953] usb 4-1: config 0 descriptor?? [ 574.729123][ T5953] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 574.947297][T11051] /dev/rnullb0: Can't open blockdev [ 574.991583][T11054] netlink: 'syz.5.1448': attribute type 1 has an invalid length. [ 575.061711][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.071806][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.134095][ T5953] gspca_sunplus: reg_w_riv err -71 [ 575.152905][ T5953] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 575.216933][ T5953] usb 4-1: USB disconnect, device number 105 [ 576.243068][ T5953] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 576.423404][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 576.438669][ T5953] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 576.460265][ T5953] usb 4-1: config 0 has no interface number 0 [ 576.483139][ T5953] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.512661][ T5953] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 576.552739][ T5953] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 576.593099][ T5953] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 576.613047][ T5953] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 576.645401][ T5953] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 576.656626][T11010] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 576.665822][ T5953] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 576.678571][ T5953] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 576.691100][ T5953] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 576.703445][ T5953] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.721668][ T5953] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 576.731779][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.751476][ T5953] usb 4-1: Product: syz [ 576.761589][ T5953] usb 4-1: Manufacturer: syz [ 576.779819][ T5953] usb 4-1: SerialNumber: syz [ 576.801868][ T5953] usb 4-1: config 0 descriptor?? [ 576.821578][T11064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 576.829540][T11010] usb 5-1: Using ep0 maxpacket: 8 [ 576.839257][T11010] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 576.852723][T11064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 576.863469][T11010] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 576.883946][ T5953] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 576.902374][T11010] usb 5-1: config 0 has no interface number 0 [ 576.919550][ T5953] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 576.929449][T11010] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.960896][T11010] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 576.974469][T11010] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 577.020843][T11010] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 577.051191][T11010] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 577.060494][T11010] usb 5-1: Product: syz [ 577.083486][T11010] usb 5-1: config 0 descriptor?? [ 577.090752][T11073] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 577.137984][T10294] hid_parser_main: 29 callbacks suppressed [ 577.138006][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.161105][ T5935] usb 4-1: USB disconnect, device number 106 [ 577.203863][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.215916][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.239275][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.257364][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.266993][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.279307][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.296168][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.307103][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.320520][T10294] hid-generic FFFD:0003:0000.000B: unknown main item tag 0x0 [ 577.350936][T10294] hid-generic FFFD:0003:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 577.749587][T11010] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input37 [ 579.032451][ T5988] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 579.192988][ T5988] usb 6-1: Using ep0 maxpacket: 8 [ 579.219199][ T5988] usb 6-1: config 7 has an invalid interface number: 30 but max is 0 [ 579.242684][ T5988] usb 6-1: config 7 has no interface number 0 [ 579.269611][ T5988] usb 6-1: config 7 interface 30 has no altsetting 0 [ 579.301639][T11099] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1462'. [ 579.320555][ T5988] usb 6-1: string descriptor 0 read error: -22 [ 579.331153][ T5988] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=10.9c [ 579.362994][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.453000][ T5988] usb_ehset_test 6-1:7.30: probe with driver usb_ehset_test failed with error -32 [ 579.614293][ T5988] usb 6-1: USB disconnect, device number 18 [ 579.857654][T10294] usb 5-1: USB disconnect, device number 54 [ 579.857683][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 580.409559][T11115] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 580.463004][T11115] /dev/rnullb0: Can't open blockdev [ 580.510181][T11116] /dev/rnullb0: Can't open blockdev [ 580.849677][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 581.477685][T11126] /dev/rnullb0: Can't open blockdev [ 581.592415][ T986] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 581.657324][T11128] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1472'. [ 581.792557][ T986] usb 5-1: Using ep0 maxpacket: 32 [ 581.801321][T11130] /dev/rnullb0: Can't open blockdev [ 581.819099][ T986] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 581.840636][ T986] usb 5-1: config 0 has no interface number 0 [ 581.879760][ T986] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.903519][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1472'. [ 581.911260][ T986] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 581.931382][T11135] /dev/rnullb0: Can't open blockdev [ 581.946379][ T986] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 581.983531][ T986] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 582.016103][ T986] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 582.048217][ T986] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.102356][ T986] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 582.177541][ T986] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 582.232310][ T986] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 582.272751][ T986] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.303303][T11139] /dev/rnullb0: Can't open blockdev [ 582.353649][ T986] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 582.364259][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.393817][ T986] usb 5-1: Product: syz [ 582.398048][ T986] usb 5-1: Manufacturer: syz [ 583.046399][ T986] usb 5-1: SerialNumber: syz [ 583.065388][ T986] usb 5-1: config 0 descriptor?? [ 583.083408][T11124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 583.090942][T11124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 583.129662][ T986] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 583.162355][ T986] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 583.321798][T11151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.395573][ T5935] usb 5-1: USB disconnect, device number 55 [ 583.408732][ T986] hid_parser_main: 29 callbacks suppressed [ 583.408754][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.447710][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.507181][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.530633][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.565176][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.609661][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.610077][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.692939][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.722173][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.769766][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.830665][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.888299][ T986] hid-generic FFFD:0003:0000.000C: unknown main item tag 0x0 [ 583.938745][ T986] hid-generic FFFD:0003:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 584.045112][ T5935] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 584.183223][ T5935] usb 6-1: device descriptor read/64, error -71 [ 584.453288][ T5935] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 584.612275][ T5935] usb 6-1: device descriptor read/64, error -71 [ 584.734261][ T5935] usb usb6-port1: attempt power cycle [ 585.092585][ T5935] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 585.133058][ T5935] usb 6-1: device descriptor read/8, error -71 [ 585.197520][T11179] /dev/rnullb0: Can't open blockdev [ 585.221880][T11177] tmpfs: Bad value for 'mpol' [ 585.243282][T11177] /dev/rnullb0: Can't open blockdev [ 585.372346][ T5935] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 585.433603][ T5935] usb 6-1: device descriptor read/8, error -71 [ 585.479826][T11181] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1485'. [ 585.563676][ T5935] usb usb6-port1: unable to enumerate USB device [ 585.660206][T11183] 9pnet: Could not find request transport: xen [ 586.836585][T11199] /dev/rnullb0: Can't open blockdev [ 586.890373][T11201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.923199][T11201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.052794][ T5953] hid-generic FFFD:0003:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 587.214761][T11205] /dev/rnullb0: Can't open blockdev [ 587.699295][T11209] syzkaller1: entered promiscuous mode [ 587.719450][T11209] syzkaller1: entered allmulticast mode [ 587.749630][T11209] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1493'. [ 587.784308][T11209] tipc: Started in network mode [ 587.801921][T11209] tipc: Node identity , cluster identity 4711 [ 587.829680][T11209] tipc: Failed to set node id, please configure manually [ 587.877230][T11209] tipc: Enabling of bearer rejected, failed to enable media [ 588.828861][T11216] /dev/rnullb0: Can't open blockdev [ 589.032810][ T986] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 589.202473][ T986] usb 6-1: Using ep0 maxpacket: 32 [ 589.219738][ T986] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 589.239299][ T986] usb 6-1: config 0 has no interface number 0 [ 589.260768][ T986] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 589.294014][ T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.312856][ T986] usb 6-1: Product: syz [ 589.328882][ T986] usb 6-1: Manufacturer: syz [ 589.334999][ T986] usb 6-1: SerialNumber: syz [ 589.361167][ T986] usb 6-1: config 0 descriptor?? [ 589.391974][ T986] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 589.415884][ T986] usb 6-1: selecting invalid altsetting 1 [ 589.421675][ T986] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 589.464449][ T986] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 589.498891][ T986] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 589.523585][ T986] usb 6-1: media controller created [ 589.611666][ T986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.677347][T11221] /dev/rnullb0: Can't open blockdev [ 589.938913][T11225] /dev/rnullb0: Can't open blockdev [ 590.150532][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.204356][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.253658][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.274916][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.599797][T11234] /dev/rnullb0: Can't open blockdev [ 590.682486][T11218] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 590.734736][ T986] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 590.779225][ T986] zl10353_read_register: readreg error (reg=127, ret==-32) [ 591.480043][T11246] /dev/rnullb0: Can't open blockdev [ 591.692802][T11248] /dev/rnullb0: Can't open blockdev [ 591.746383][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.779812][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.873945][ T986] usb 6-1: USB disconnect, device number 23 [ 591.905776][ T5953] hid_parser_main: 68 callbacks suppressed [ 591.905798][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.018078][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.042653][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.054055][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.061602][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.109538][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.132431][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.162466][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.170064][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.233362][ T5953] hid-generic FFFD:0003:0000.000E: unknown main item tag 0x0 [ 592.259042][ T5953] hid-generic FFFD:0003:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 592.426734][T11265] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 592.465876][T11265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 592.498554][T11265] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 592.527690][T11265] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 592.556965][T11265] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 592.590723][T11265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 592.622118][T11265] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 592.646850][T11265] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 593.130989][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 593.304846][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 593.328335][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.357239][ T9] usb 4-1: config 0 descriptor?? [ 593.393583][ T9] cp210x 4-1:0.0: cp210x converter detected [ 593.794459][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 594.017774][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 594.213214][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.222844][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.267453][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.277018][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.289454][T11270] netlink: 'syz.3.1512': attribute type 5 has an invalid length. [ 595.938687][T11294] /dev/rnullb0: Can't open blockdev [ 596.135047][T11297] /dev/rnullb0: Can't open blockdev [ 596.169465][T11190] syz.4.1487: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 596.233099][T11190] CPU: 1 UID: 0 PID: 11190 Comm: syz.4.1487 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 596.233131][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.233149][T11190] Call Trace: [ 596.233158][T11190] [ 596.233170][T11190] dump_stack_lvl+0x189/0x250 [ 596.233211][T11190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.233242][T11190] ? __pfx__printk+0x10/0x10 [ 596.233273][T11190] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 596.233306][T11190] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 596.233340][T11190] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 596.233374][T11190] warn_alloc+0x214/0x310 [ 596.233415][T11190] ? __pfx_warn_alloc+0x10/0x10 [ 596.233451][T11190] ? __get_vm_area_node+0x28f/0x300 [ 596.233476][T11190] ? vb2_vmalloc_alloc+0xef/0x340 [ 596.233501][T11190] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 596.233559][T11190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.233584][T11190] ? vb2_vmalloc_alloc+0xef/0x340 [ 596.233606][T11190] ? __get_vm_area_node+0x28f/0x300 [ 596.233631][T11190] ? vb2_vmalloc_alloc+0xef/0x340 [ 596.233652][T11190] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 596.233678][T11190] ? vb2_vmalloc_alloc+0xef/0x340 [ 596.233730][T11190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.233762][T11190] ? __kasan_kmalloc+0x93/0xb0 [ 596.233790][T11190] vmalloc_user_noprof+0xad/0xf0 [ 596.233814][T11190] ? vb2_vmalloc_alloc+0xef/0x340 [ 596.233836][T11190] vb2_vmalloc_alloc+0xef/0x340 [ 596.233856][T11190] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 596.233878][T11190] __vb2_queue_alloc+0x9bf/0x15a0 [ 596.233938][T11190] vb2_core_create_bufs+0x765/0xde0 [ 596.233983][T11190] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 596.234014][T11190] ? rcu_is_watching+0x15/0xb0 [ 596.234047][T11190] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 596.234084][T11190] vb2_create_bufs+0x5b9/0xae0 [ 596.234120][T11190] ? __pfx_vb2_create_bufs+0x10/0x10 [ 596.234154][T11190] ? v4l_sanitize_format+0x5d6/0x9f0 [ 596.234195][T11190] v4l_create_bufs+0x190/0x2a0 [ 596.234229][T11190] __video_do_ioctl+0xc98/0xdb0 [ 596.234261][T11190] ? __pfx___video_do_ioctl+0x10/0x10 [ 596.234298][T11190] video_usercopy+0x871/0x14f0 [ 596.234330][T11190] ? __pfx___video_do_ioctl+0x10/0x10 [ 596.234350][T11190] ? __pfx_video_usercopy+0x10/0x10 [ 596.234389][T11190] ? __fget_files+0x2a/0x420 [ 596.234424][T11190] ? __fget_files+0x2a/0x420 [ 596.234455][T11190] ? __fget_files+0x3a0/0x420 [ 596.234491][T11190] v4l2_ioctl+0x18a/0x1e0 [ 596.234525][T11190] ? __pfx_v4l2_ioctl+0x10/0x10 [ 596.234558][T11190] __se_sys_ioctl+0xf9/0x170 [ 596.234586][T11190] do_syscall_64+0xfa/0x3b0 [ 596.234618][T11190] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.234647][T11190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.234668][T11190] ? clear_bhb_loop+0x60/0xb0 [ 596.234694][T11190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.234719][T11190] RIP: 0033:0x7f20e6d8e9a9 [ 596.234742][T11190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.234759][T11190] RSP: 002b:00007f20e7c55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.234782][T11190] RAX: ffffffffffffffda RBX: 00007f20e6fb6080 RCX: 00007f20e6d8e9a9 [ 596.234798][T11190] RDX: 00002000000002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 596.234812][T11190] RBP: 00007f20e6e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 596.234825][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.234838][T11190] R13: 0000000000000000 R14: 00007f20e6fb6080 R15: 00007ffea6d2ef88 [ 596.234871][T11190] [ 596.234966][T11190] Mem-Info: [ 596.305175][ T5165] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 596.373976][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 596.391798][T11190] active_anon:41203 inactive_anon:0 isolated_anon:0 [ 596.391798][T11190] active_file:16858 inactive_file:42906 isolated_file:0 [ 596.391798][T11190] unevictable:768 dirty:36 writeback:0 [ 596.391798][T11190] slab_reclaimable:11595 slab_unreclaimable:100679 [ 596.391798][T11190] mapped:36340 shmem:35417 pagetables:1752 [ 596.391798][T11190] sec_pagetables:0 bounce:0 [ 596.391798][T11190] kernel_misc_reclaimable:0 [ 596.391798][T11190] free:1110916 free_pcp:28192 free_cma:0 [ 596.684941][ T5988] usb 4-1: USB disconnect, device number 107 [ 596.764414][ T5988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 596.772620][T11190] Node 0 active_anon:167412kB inactive_anon:0kB active_file:67424kB inactive_file:171424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148052kB dirty:144kB writeback:0kB shmem:142832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12872kB pagetables:7008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 596.977290][ T5988] cp210x 4-1:0.0: device disconnected [ 597.015675][T11190] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 597.116373][T11190] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.222528][T11190] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 597.228558][T11190] Node 0 DMA32 free:539372kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172340kB inactive_anon:0kB active_file:67428kB inactive_file:170344kB unevictable:3264kB writepending:148kB present:3129332kB managed:2556420kB mlocked:1716kB bounce:0kB free_pcp:80584kB local_pcp:43492kB free_cma:0kB [ 597.332642][ T5988] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 597.352379][T11190] lowmem_reserve[]: 0 0 1 1 1 [ 597.368195][T11190] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 597.479137][T11190] lowmem_reserve[]: 0 0 0 0 0 [ 597.499497][ T5988] usb 4-1: Using ep0 maxpacket: 32 [ 597.505753][T11190] Node 1 Normal free:3888392kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23548kB local_pcp:7712kB free_cma:0kB [ 597.554318][ T5988] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 597.572243][ T5988] usb 4-1: config 0 has no interface number 0 [ 597.602373][ T5988] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 597.634135][ T5988] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 597.654503][T11190] lowmem_reserve[]: 0 0 0 0 0 [ 597.662938][T11190] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 597.672360][ T5988] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 597.712318][T11190] Node 0 DMA32: 62*4kB (E) 105*8kB (E) 41*16kB (UME) 512*32kB (UME) 243*64kB (ME) 88*128kB (UME) 52*256kB (ME) 22*512kB (UME) 12*1024kB (UM) 1*2048kB (U) 111*4096kB (M) = 538512kB [ 597.733631][ T5988] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 597.751686][T11190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 597.777427][T11310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.779592][ T5988] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 597.786548][T11310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.833953][T11190] Node 1 Normal: 105*4kB (UME) 23*8kB (UME) 34*16kB (UME) 118*32kB (UME) 32*64kB (UME) 10*128kB (UME) 3*256kB (UM) 1*512kB (M) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3888444kB [ 597.894832][ T5988] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.992331][T11190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.032309][ T5988] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 598.057550][T11190] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 598.067140][T11190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.102347][T11190] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 598.111690][T11190] 102268 total pagecache pages [ 598.112233][ T5988] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 598.215653][T11190] 1 pages in swap cache [ 598.226864][ T5988] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 598.239151][ T5988] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.241392][T11190] Free swap = 124992kB [ 598.265002][ T5988] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 598.283291][T11190] Total swap = 124996kB [ 598.292044][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.300138][T11190] 2097051 pages RAM [ 598.300153][T11190] 0 pages HighMem/MovableOnly [ 598.300161][T11190] 426032 pages reserved [ 598.300171][T11190] 0 pages cma reserved [ 598.357283][ T5988] usb 4-1: Product: syz [ 598.369802][ T5988] usb 4-1: Manufacturer: syz [ 598.389482][ T5988] usb 4-1: SerialNumber: syz [ 598.416473][ T5988] usb 4-1: config 0 descriptor?? [ 598.442611][T11307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 598.463836][T11307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 598.501454][ T5988] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 598.536660][ T5988] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 598.865702][ T5988] hid_parser_main: 29 callbacks suppressed [ 598.865727][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 598.949022][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 598.987490][ T5953] usb 4-1: USB disconnect, device number 108 [ 599.053339][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.117577][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.159566][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.174646][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.191229][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.206399][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.236048][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.278964][ T5988] hid-generic FFFD:0003:0000.000F: unknown main item tag 0x0 [ 599.346164][ T5988] hid-generic FFFD:0003:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 599.410457][T11322] /dev/rnullb0: Can't open blockdev [ 599.417646][T11323] /dev/rnullb0: Can't open blockdev [ 599.726420][T11326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1529'. [ 600.602790][ T43] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 600.925273][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 600.936968][ T43] usb 4-1: config 44 has an invalid interface number: 80 but max is 1 [ 600.962244][ T43] usb 4-1: config 44 has an invalid interface number: 195 but max is 1 [ 600.970720][ T43] usb 4-1: config 44 contains an unexpected descriptor of type 0x2, skipping [ 601.013642][ T43] usb 4-1: config 44 has an invalid descriptor of length 1, skipping remainder of the config [ 601.052294][ T43] usb 4-1: config 44 has no interface number 0 [ 601.112232][ T43] usb 4-1: config 44 has no interface number 1 [ 601.118680][ T43] usb 4-1: config 44 interface 80 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 601.186119][ T43] usb 4-1: config 44 interface 80 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 601.232524][ T43] usb 4-1: config 44 interface 80 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 601.293285][ T43] usb 4-1: too many endpoints for config 44 interface 195 altsetting 97: 188, using maximum allowed: 30 [ 601.342539][ T43] usb 4-1: config 44 interface 195 altsetting 97 has a duplicate endpoint with address 0x3, skipping [ 601.402253][ T43] usb 4-1: config 44 interface 195 altsetting 97 endpoint 0xF has an invalid bInterval 129, changing to 11 [ 601.452477][ T43] usb 4-1: config 44 interface 195 altsetting 97 endpoint 0x5 has invalid maxpacket 520, setting to 64 [ 601.502418][ T43] usb 4-1: config 44 interface 195 altsetting 97 has a duplicate endpoint with address 0x5, skipping [ 601.572252][ T43] usb 4-1: config 44 interface 195 altsetting 97 has a duplicate endpoint with address 0x5, skipping [ 601.622371][T11337] tipc: Enabled bearer , priority 0 [ 601.622380][ T43] usb 4-1: config 44 interface 195 altsetting 97 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 601.691656][T11337] syzkaller0: MTU too low for tipc bearer [ 601.722488][ T43] usb 4-1: config 44 interface 195 altsetting 97 has 6 endpoint descriptors, different from the interface descriptor's value: 188 [ 601.740388][T11337] tipc: Disabling bearer [ 601.768875][ T43] usb 4-1: config 44 interface 195 has no altsetting 0 [ 601.826550][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=08da, bcdDevice= b.ef [ 601.852439][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.861378][ T43] usb 4-1: Product: 〚ਪ娓霏ꉄᗺㆅ朘㚄콀ꁆ벳볼?램貒띻䰐䶩婆늎ﮤ苓흷䶴㎭ᚗ䒔젖෥쑧㵢я巑⽚᫼鋅ꝅ [ 601.940430][ T43] usb 4-1: Manufacturer: щ [ 601.972424][ T43] usb 4-1: SerialNumber: Ѕ [ 602.017776][T11330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.418353][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 602.431380][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 602.440776][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 602.462034][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 602.477103][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 602.535321][ T43] usb 4-1: USB disconnect, device number 109 [ 602.927756][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1536'. [ 603.004803][T11348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1536'. [ 603.359809][T11340] chnl_net:caif_netlink_parms(): no params data found [ 603.602631][T11355] /dev/rnullb0: Can't open blockdev [ 603.933244][T11357] /dev/rnullb0: Can't open blockdev [ 604.014014][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.021300][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.102486][T11340] bridge_slave_0: entered allmulticast mode [ 604.161289][T11340] bridge_slave_0: entered promiscuous mode [ 604.272795][T11340] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.342598][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.351401][T11340] bridge_slave_1: entered allmulticast mode [ 604.388003][T11340] bridge_slave_1: entered promiscuous mode [ 604.525072][ T51] Bluetooth: hci6: command tx timeout [ 604.712754][ T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 604.789749][T11340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.837767][T11340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.902531][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 604.934955][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 604.964387][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.992468][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 605.042393][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.099225][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.131741][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 605.154669][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.195532][T11340] team0: Port device team_slave_0 added [ 605.217309][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.249728][T11340] team0: Port device team_slave_1 added [ 605.259916][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 605.368980][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.474071][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.497493][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.553438][ T43] usb 6-1: Product: syz [ 605.557807][ T43] usb 6-1: Manufacturer: syz [ 605.608873][ T43] usb 6-1: SerialNumber: syz [ 605.624931][T11340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.632019][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.708449][ T43] cdc_ncm 6-1:1.0: skipping garbage [ 605.732359][ T43] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 605.739328][ T43] cdc_ncm 6-1:1.0: bind() failure [ 605.837202][T11340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.890279][T11340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.956311][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.015772][T11380] binder: 11379:11380 ioctl 400c620e 0 returned -14 [ 606.042605][T11340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.219286][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 606.249573][T11340] hsr_slave_0: entered promiscuous mode [ 606.266648][T11340] hsr_slave_1: entered promiscuous mode [ 606.294435][T11340] debugfs: 'hsr0' already exists in 'hsr' [ 606.300313][T11340] Cannot create hsr debugfs directory [ 606.415908][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 606.425143][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.452300][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 606.481725][ T9] usb 4-1: config 1 has no interface number 0 [ 606.498458][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 606.530805][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 606.580958][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.592002][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.602421][ T51] Bluetooth: hci6: command tx timeout [ 606.621114][ T9] usb 4-1: Product: syz [ 606.641253][ T9] usb 4-1: Manufacturer: syz [ 606.651407][ T9] usb 4-1: SerialNumber: syz [ 606.959447][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.986312][T11387] /dev/rnullb0: Can't open blockdev [ 607.352213][ T43] usb 4-1: USB disconnect, device number 110 [ 607.479903][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.739955][ T986] usb 6-1: USB disconnect, device number 24 [ 607.776452][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.385599][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.553044][ T9] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 608.613860][T11340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 608.684246][ T51] Bluetooth: hci6: command tx timeout [ 608.711316][T11340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 608.770986][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 608.848997][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 608.872105][T11340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 608.932478][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 608.941576][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.013851][T11340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 609.058617][ T9] usb 6-1: config 0 descriptor?? [ 609.462822][ T61] bridge_slave_1: left allmulticast mode [ 609.472679][ T61] bridge_slave_1: left promiscuous mode [ 609.480215][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.666502][ T9] hid_parser_main: 29 callbacks suppressed [ 609.666527][ T9] apple 0003:05AC:027A.0010: unknown main item tag 0x0 [ 609.716602][ T9] apple 0003:05AC:027A.0010: unknown main item tag 0x0 [ 609.761716][ T9] apple 0003:05AC:027A.0010: hidraw0: USB HID v0.05 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 609.874886][ T61] bridge_slave_0: left allmulticast mode [ 609.880587][ T61] bridge_slave_0: left promiscuous mode [ 609.938874][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.269493][T11425] /dev/rnullb0: Can't open blockdev [ 610.762412][ T51] Bluetooth: hci6: command tx timeout [ 610.818026][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.828606][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.190661][ T43] usb 6-1: USB disconnect, device number 25 [ 611.732422][ T43] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 611.910740][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.934105][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.963072][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.016911][ T43] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 612.061579][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.092148][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.104849][ T43] usb 6-1: config 0 descriptor?? [ 612.149546][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.195428][ T61] bond0 (unregistering): Released all slaves [ 612.361751][ T43] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 612.412386][ T43] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 612.459614][ T43] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 612.518376][ T43] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 612.567342][ T43] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 612.628780][ T43] acrux 0003:1A34:0802.0011: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 612.691136][ T43] acrux 0003:1A34:0802.0011: no inputs found [ 612.722532][ T43] acrux 0003:1A34:0802.0011: Failed to enable force feedback support, error: -19 [ 613.058927][ T43] usb 6-1: USB disconnect, device number 26 [ 613.195268][T11461] syz.1.1560 (11461): /proc/11460/oom_adj is deprecated, please use /proc/11460/oom_score_adj instead. [ 613.219641][T11340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.300310][T11463] /dev/rnullb0: Can't open blockdev [ 613.729086][T11340] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.918428][ T9362] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.924806][T11469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.925822][ T9362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.991301][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.998544][ T9372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.159875][ T61] hsr_slave_0: left promiscuous mode [ 614.195192][ T61] hsr_slave_1: left promiscuous mode [ 614.228554][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.272388][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.299996][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.339451][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.373220][ T5935] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 614.429418][ T61] veth1_macvtap: left promiscuous mode [ 614.447447][ T61] veth0_macvtap: left promiscuous mode [ 614.464484][ T61] veth1_vlan: left promiscuous mode [ 614.479312][ T61] veth0_vlan: left promiscuous mode [ 614.532362][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 614.567186][ T5935] usb 6-1: config 0 has an invalid interface number: 54 but max is 0 [ 614.601997][ T5935] usb 6-1: config 0 has no interface number 0 [ 614.625712][ T5935] usb 6-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 614.666497][ T5935] usb 6-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 614.717578][ T5935] usb 6-1: config 0 interface 54 has no altsetting 0 [ 614.748189][ T5935] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 614.803318][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.811498][ T5935] usb 6-1: Product: syz [ 614.838023][ T5935] usb 6-1: Manufacturer: syz [ 614.859322][ T5935] usb 6-1: SerialNumber: syz [ 614.883518][ T5935] usb 6-1: config 0 descriptor?? [ 614.889443][T11471] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 614.960879][T11471] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 615.284300][T11471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.338785][T11471] /dev/rnullb0: Can't open blockdev [ 615.383500][ T5935] ums_eneub6250 6-1:0.54: USB Mass Storage device detected [ 615.482132][ T5935] scsi host1: usb-storage 6-1:0.54 [ 615.602673][ T5935] ums_eneub6250 6-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 615.647527][ T5935] usb 6-1: USB disconnect, device number 27 [ 616.593288][ T61] team0 (unregistering): Port device team_slave_1 removed [ 616.899930][ T61] team0 (unregistering): Port device team_slave_0 removed [ 618.297252][T11487] /dev/rnullb0: Can't open blockdev [ 618.396862][T11487] syzkaller1: entered promiscuous mode [ 618.437939][T11487] syzkaller1: entered allmulticast mode [ 618.466053][T11487] hsr_slave_0: entered allmulticast mode [ 618.471857][T11487] hsr_slave_1: entered allmulticast mode [ 618.924615][T11503] /dev/rnullb0: Can't open blockdev [ 619.332629][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.335565][T11340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.372146][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.430401][T11510] batadv_slave_0: entered promiscuous mode [ 619.612410][ T5953] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 619.857961][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 619.893402][ T5953] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 619.901759][ T5953] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 619.951547][ T5953] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 619.995877][ T5953] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 620.024822][ T5953] usb 4-1: config 0 interface 0 has no altsetting 0 [ 620.036547][ T5953] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 620.045992][ T5953] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 620.062890][ T5953] usb 4-1: Product: syz [ 620.067277][ T5953] usb 4-1: Manufacturer: syz [ 620.072027][ T5953] usb 4-1: SerialNumber: syz [ 620.106977][ T5953] usb 4-1: config 0 descriptor?? [ 620.139533][ T5953] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 620.163538][ T5953] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 620.603028][ T31] INFO: task syz.0.1030:9603 blocked for more than 143 seconds. [ 620.610738][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 620.656977][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.719225][ T31] task:syz.0.1030 state:D stack:26632 pid:9603 tgid:9603 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 620.739420][T11340] veth0_vlan: entered promiscuous mode [ 620.782339][ T31] Call Trace: [ 620.785692][ T31] [ 620.813404][ T31] __schedule+0x1737/0x4d30 [ 620.818011][ T31] ? __lock_acquire+0xab9/0xd20 [ 620.836253][T11340] veth1_vlan: entered promiscuous mode [ 620.902269][ T31] ? schedule+0x165/0x360 [ 620.913581][ T5953] usb 4-1: USB disconnect, device number 111 [ 620.968054][ T31] ? __lock_acquire+0xab9/0xd20 [ 620.969242][ T5953] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 621.012063][ T31] ? __pfx___schedule+0x10/0x10 [ 621.036214][ T31] ? schedule+0x91/0x360 [ 621.062274][ T31] schedule+0x165/0x360 [ 621.066520][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.122265][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 621.128109][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 621.188747][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 621.212245][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.262480][ T31] ? userfaultfd_release_all+0x15a/0x5e0 [ 621.268224][ T31] down_write+0x1ab/0x1f0 [ 621.322337][ T31] ? __pfx_down_write+0x10/0x10 [ 621.325388][ T5953] usb 2-1: USB disconnect, device number 16 [ 621.327259][ T31] ? locks_remove_file+0x344/0xea0 [ 621.327297][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 621.327311][ T31] userfaultfd_release_all+0x15a/0x5e0 [ 621.407615][ T31] ? ima_file_free+0x150/0x460 [ 621.421151][ T31] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 621.442787][ T31] userfaultfd_release+0xe7/0x1b0 [ 621.447893][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 621.481380][ T31] ? evm_file_release+0x108/0x1e0 [ 621.486647][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 621.502275][ T31] __fput+0x449/0xa70 [ 621.506333][ T31] task_work_run+0x1d4/0x260 [ 621.510962][ T31] ? __pfx_task_work_run+0x10/0x10 [ 621.533309][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 621.538893][ T31] exit_to_user_mode_loop+0xec/0x110 [ 621.562701][ T31] do_syscall_64+0x2bd/0x3b0 [ 621.567379][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.581773][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.610998][ T31] ? clear_bhb_loop+0x60/0xb0 [ 621.620559][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.627429][ T31] RIP: 0033:0x7fecc638e9a9 [ 621.631884][ T31] RSP: 002b:00007ffd68042908 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 621.640965][ T31] RAX: 0000000000000000 RBX: 00007fecc65b7ba0 RCX: 00007fecc638e9a9 [ 621.650863][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 621.660248][ T31] RBP: 00007fecc65b7ba0 R08: 0000000000000000 R09: 0000000a68042bff [ 621.671680][ T31] R10: 00007fecc65b7ac0 R11: 0000000000000246 R12: 0000000000070f3c [ 621.681801][ T31] R13: 00007ffd68042a00 R14: ffffffffffffffff R15: 00007ffd68042a20 [ 621.693688][ T31] [ 621.696790][ T31] INFO: task syz.0.1030:9608 blocked for more than 144 seconds. [ 621.710028][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 621.719445][ T31] Blocked by coredump. [ 621.741136][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.754425][ T31] task:syz.0.1030 state:D stack:28936 pid:9608 tgid:9603 ppid:5869 task_flags:0x40044c flags:0x00004006 [ 621.771250][ T31] Call Trace: [ 621.776606][ T31] [ 621.779576][ T31] __schedule+0x1737/0x4d30 [ 621.787692][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.802558][ T31] ? schedule+0x165/0x360 [ 621.806958][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.811852][ T31] ? __pfx___schedule+0x10/0x10 [ 621.830610][ T31] ? schedule+0x91/0x360 [ 621.843200][ T31] schedule+0x165/0x360 [ 621.847431][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.857904][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 621.865539][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 621.871393][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 621.882216][ T31] ? exit_mm+0xcc/0x2c0 [ 621.886431][ T31] ? __pfx_mm_release+0x10/0x10 [ 621.891318][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.901621][ T31] down_read+0x98/0x2e0 [ 621.906108][ T31] exit_mm+0xcc/0x2c0 [ 621.910139][ T31] ? __pfx_exit_mm+0x10/0x10 [ 621.919867][ T31] ? rcu_is_watching+0x15/0xb0 [ 621.929354][ T31] do_exit+0x648/0x2300 [ 621.939940][ T31] ? do_raw_spin_lock+0x121/0x290 [ 621.947463][ T31] ? __pfx_do_exit+0x10/0x10 [ 621.952128][ T31] do_group_exit+0x21c/0x2d0 [ 621.961788][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.971449][ T31] get_signal+0x1286/0x1340 [ 621.990428][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 622.002221][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 622.008517][ T31] ? __fput_deferred+0x215/0x390 [ 622.027166][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 622.047945][ T31] exit_to_user_mode_loop+0x75/0x110 [ 622.058421][ T31] do_syscall_64+0x2bd/0x3b0 [ 622.070866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.082689][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.088800][ T31] ? clear_bhb_loop+0x60/0xb0 [ 622.117228][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.131586][ T31] RIP: 0033:0x7fecc638e9a9 [ 622.146827][ T31] RSP: 002b:00007fecc41f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 622.164943][ T31] RAX: fffffffffffffffc RBX: 00007fecc65b6080 RCX: 00007fecc638e9a9 [ 622.182468][ T31] RDX: 000000000300000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 622.190503][ T31] RBP: 00007fecc6410d69 R08: 0000000000000003 R09: 0000000093771000 [ 622.222295][ T31] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 622.230323][ T31] R13: 0000000000000000 R14: 00007fecc65b6080 R15: 00007ffd680427a8 [ 622.257795][ T31] [ 622.260951][ T31] [ 622.260951][ T31] Showing all locks held in the system: [ 622.308471][ T31] 2 locks held by kworker/0:0/9: [ 622.352289][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 622.488790][ T31] #1: ffffc900000e7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 622.512551][ T31] 1 lock held by khungtaskd/31: [ 622.517481][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 622.551797][ T31] 2 locks held by getty/5605: [ 622.559614][ T31] #0: ffff8880338350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 622.580651][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 622.592028][ T31] 5 locks held by kworker/0:5/5935: [ 622.601809][ T31] 1 lock held by syz.0.1030/9603: [ 622.608827][ T31] #0: ffff88807fb36d60 (&mm->mmap_lock){++++}-{4:4}, at: userfaultfd_release_all+0x15a/0x5e0 [ 622.652477][ T31] 2 locks held by syz.0.1030/9607: [ 622.657638][ T31] 1 lock held by syz.0.1030/9608: [ 622.702366][ T31] #0: ffff88807fb36d60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 622.711270][ T31] 1 lock held by syz.5.1191/10185: [ 622.778906][ T31] 1 lock held by udevd/10819: [ 622.800584][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 622.842528][ T31] 3 locks held by syz-executor/11340: [ 622.847971][ T31] #0: ffff88807e688dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 622.892226][ T31] #1: ffff88807e6880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 622.901996][ T31] #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 622.962328][ T31] 1 lock held by syz.3.1568/11491: [ 622.967504][ T31] 1 lock held by syz.1.1571/11510: [ 623.006502][ T31] 2 locks held by dhcpcd-run-hook/11547: [ 623.042239][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 623.072558][ T31] #1: ffff8880b8624008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 623.112349][ T31] [ 623.114733][ T31] ============================================= [ 623.114733][ T31] [ 623.202513][ T31] NMI backtrace for cpu 1 [ 623.202534][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 623.202559][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.202572][ T31] Call Trace: [ 623.202580][ T31] [ 623.202589][ T31] dump_stack_lvl+0x189/0x250 [ 623.202627][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.202656][ T31] ? __pfx__printk+0x10/0x10 [ 623.202698][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 623.202728][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 623.202755][ T31] ? __pfx__printk+0x10/0x10 [ 623.202788][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 623.202815][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 623.202843][ T31] watchdog+0xf93/0xfe0 [ 623.202877][ T31] ? watchdog+0x1de/0xfe0 [ 623.202905][ T31] kthread+0x70e/0x8a0 [ 623.202937][ T31] ? __pfx_watchdog+0x10/0x10 [ 623.202957][ T31] ? __pfx_kthread+0x10/0x10 [ 623.202989][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.203016][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.203042][ T31] ? __pfx_kthread+0x10/0x10 [ 623.203073][ T31] ret_from_fork+0x3f9/0x770 [ 623.203102][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 623.203133][ T31] ? __switch_to_asm+0x39/0x70 [ 623.203150][ T31] ? __switch_to_asm+0x33/0x70 [ 623.203167][ T31] ? __pfx_kthread+0x10/0x10 [ 623.203197][ T31] ret_from_fork_asm+0x1a/0x30 [ 623.203232][ T31] [ 623.203239][ T31] Sending NMI from CPU 1 to CPUs 0: [ 623.354105][ C0] NMI backtrace for cpu 0 [ 623.354122][ C0] CPU: 0 UID: 0 PID: 10185 Comm: syz.5.1191 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 623.354143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.354154][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 623.354177][ C0] Code: 24 65 48 8b 0c 25 08 50 e7 92 65 8b 15 08 4f 27 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c <8b> 91 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 [ 623.354192][ C0] RSP: 0018:ffffc9000b01eea0 EFLAGS: 00000246 [ 623.354208][ C0] RAX: ffffffff822e888d RBX: ffffea000111f180 RCX: ffff888026003c00 [ 623.354221][ C0] RDX: 0000000000000000 RSI: ffffffff8c04d3e0 RDI: ffffffff8c04d3a0 [ 623.354233][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822e884a [ 623.354244][ C0] R10: dffffc0000000000 R11: ffffed100d21eae2 R12: dffffc0000000000 [ 623.354257][ C0] R13: ffffea000111f100 R14: ffffffff822e884a R15: ffffea000111f1b0 [ 623.354270][ C0] FS: 0000000000000000(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 623.354285][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.354296][ C0] CR2: 00005579c18ca950 CR3: 0000000097a40000 CR4: 00000000003526f0 [ 623.354316][ C0] Call Trace: [ 623.354322][ C0] [ 623.354328][ C0] __page_table_check_zero+0xfd/0x530 [ 623.354350][ C0] ? __reset_page_owner+0x148/0x1f0 [ 623.354370][ C0] free_unref_folios+0xdd1/0x1520 [ 623.354397][ C0] ? folios_put_refs+0x299/0x640 [ 623.354423][ C0] folios_put_refs+0x559/0x640 [ 623.354453][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 623.354480][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 623.354509][ C0] shmem_undo_range+0x49e/0x14b0 [ 623.354544][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 623.354607][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 623.354632][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 623.354655][ C0] shmem_evict_inode+0x272/0xa70 [ 623.354679][ C0] ? inode_wait_for_writeback+0xf9/0x290 [ 623.354697][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 623.354719][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 623.354742][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 623.354770][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 623.354790][ C0] evict+0x501/0x9c0 [ 623.354815][ C0] ? __pfx_evict+0x10/0x10 [ 623.354832][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 623.354859][ C0] ? _raw_spin_unlock+0x28/0x50 [ 623.354880][ C0] ? iput+0x6d8/0x9d0 [ 623.354909][ C0] __dentry_kill+0x209/0x660 [ 623.354936][ C0] ? shrink_kill+0x8d/0x2c0 [ 623.354951][ C0] shrink_kill+0xa9/0x2c0 [ 623.354966][ C0] shrink_dentry_list+0x2e0/0x5e0 [ 623.354986][ C0] shrink_dcache_parent+0xa1/0x2c0 [ 623.355005][ C0] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 623.355031][ C0] do_one_tree+0x23/0xe0 [ 623.355048][ C0] shrink_dcache_for_umount+0xa0/0x170 [ 623.355067][ C0] generic_shutdown_super+0x67/0x2c0 [ 623.355089][ C0] kill_litter_super+0x76/0xb0 [ 623.355110][ C0] deactivate_locked_super+0xbc/0x130 [ 623.355130][ C0] cleanup_mnt+0x425/0x4c0 [ 623.355148][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.355173][ C0] task_work_run+0x1d4/0x260 [ 623.355191][ C0] ? __pfx_task_work_run+0x10/0x10 [ 623.355207][ C0] ? kmem_cache_free+0x18f/0x400 [ 623.355229][ C0] do_exit+0x6b5/0x2300 [ 623.355256][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 623.355280][ C0] ? do_raw_spin_lock+0x121/0x290 [ 623.355306][ C0] ? __pfx_do_exit+0x10/0x10 [ 623.355340][ C0] do_group_exit+0x21c/0x2d0 [ 623.355354][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.355380][ C0] get_signal+0x1286/0x1340 [ 623.355410][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 623.355429][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 623.355450][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 623.355476][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 623.355497][ C0] exit_to_user_mode_loop+0x75/0x110 [ 623.355515][ C0] do_syscall_64+0x2bd/0x3b0 [ 623.355540][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.355563][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.355580][ C0] ? clear_bhb_loop+0x60/0xb0 [ 623.355605][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.355621][ C0] RIP: 0033:0x7f26c43c1265 [ 623.355634][ C0] Code: Unable to access opcode bytes at 0x7f26c43c123b. [ 623.355643][ C0] RSP: 002b:00007f26c21f5f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 623.355659][ C0] RAX: fffffffffffffdfc RBX: 00007f26c45b5fa0 RCX: 00007f26c43c1265 [ 623.355672][ C0] RDX: 00007f26c21f5fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.355683][ C0] RBP: 00007f26c4410d69 R08: 0000000000000000 R09: 0000000000000000 [ 623.355694][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 623.355704][ C0] R13: 0000000000000000 R14: 00007f26c45b5fa0 R15: 00007fffed6aeef8 [ 623.355724][ C0] [ 623.452306][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 623.452332][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 623.452363][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.452378][ T31] Call Trace: [ 623.452389][ T31] [ 623.452399][ T31] dump_stack_lvl+0x99/0x250 [ 623.452439][ T31] ? __asan_memcpy+0x40/0x70 [ 623.452478][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.452529][ T31] ? __pfx__printk+0x10/0x10 [ 623.452588][ T31] vpanic+0x281/0x750 [ 623.452620][ T31] ? __pfx_vpanic+0x10/0x10 [ 623.452645][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 623.452683][ T31] ? preempt_schedule+0xae/0xc0 [ 623.452717][ T31] ? preempt_schedule_common+0x83/0xd0 [ 623.452758][ T31] panic+0xb9/0xc0 [ 623.452785][ T31] ? __pfx_panic+0x10/0x10 [ 623.452814][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 623.452848][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 623.452880][ T31] watchdog+0xfd2/0xfe0 [ 623.452913][ T31] ? watchdog+0x1de/0xfe0 [ 623.452945][ T31] kthread+0x70e/0x8a0 [ 623.452984][ T31] ? __pfx_watchdog+0x10/0x10 [ 623.453008][ T31] ? __pfx_kthread+0x10/0x10 [ 623.453045][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.453077][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.453107][ T31] ? __pfx_kthread+0x10/0x10 [ 623.453142][ T31] ret_from_fork+0x3f9/0x770 [ 623.453176][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 623.453212][ T31] ? __switch_to_asm+0x39/0x70 [ 623.453232][ T31] ? __switch_to_asm+0x33/0x70 [ 623.453251][ T31] ? __pfx_kthread+0x10/0x10 [ 623.453287][ T31] ret_from_fork_asm+0x1a/0x30 [ 623.453328][ T31] [ 623.996807][ T31] Kernel Offset: disabled [ 624.001144][ T31] Rebooting in 86400 seconds..