last executing test programs: 10m17.742906754s ago: executing program 0 (id=2301): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) 10m17.62254744s ago: executing program 0 (id=2292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2}) close_range(r0, 0xffffffffffffffff, 0x0) 10m17.511023474s ago: executing program 0 (id=2294): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x21}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 10m17.24454675s ago: executing program 0 (id=2297): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 10m16.960076266s ago: executing program 0 (id=2299): socket$inet(0xa, 0x801, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 10m16.685735705s ago: executing program 0 (id=2302): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) socket(0x1, 0x803, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 10m16.222417772s ago: executing program 32 (id=2302): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) socket(0x1, 0x803, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 7m9.119621581s ago: executing program 2 (id=3660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/86, 0x56}], 0x1}, 0x0) 7m8.900028874s ago: executing program 2 (id=3662): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) close(r0) 7m8.668944127s ago: executing program 2 (id=3666): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r0, &(0x7f0000000200), 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 7m8.344194876s ago: executing program 2 (id=3669): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 7m8.147973049s ago: executing program 2 (id=3672): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'veth1_to_team\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 7m7.868371569s ago: executing program 2 (id=3675): ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 7m7.043257764s ago: executing program 33 (id=3675): ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 6m1.781366489s ago: executing program 4 (id=4083): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 6m1.224249416s ago: executing program 4 (id=4087): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) fsopen(0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4000840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x80, 0x4, 0x2, "02010200", '\nj#\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x0, 0x23, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0}) 5m59.068704513s ago: executing program 4 (id=4098): r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 5m58.037285436s ago: executing program 4 (id=4103): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m56.615685061s ago: executing program 4 (id=4118): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x36, 0x34, 0x63, 0x0, 0x63, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xffffffffffffffff) 5m55.603451395s ago: executing program 4 (id=4127): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) io_uring_setup(0x6b6, &(0x7f0000000000)={0x0, 0xf324, 0x40, 0x2, 0xb9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001100)) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20) 5m55.028322011s ago: executing program 34 (id=4127): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) io_uring_setup(0x6b6, &(0x7f0000000000)={0x0, 0xf324, 0x40, 0x2, 0xb9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001100)) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20) 5m6.810089039s ago: executing program 1 (id=4449): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="90", 0x1}, {&(0x7f00000008c0)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 5m6.547716869s ago: executing program 1 (id=4452): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x40005, 0x0) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000180)="17b985a7", 0x4}, {&(0x7f0000000800)="c4", 0x1}, {&(0x7f0000000340)="e31e", 0x2}, {&(0x7f0000001a00)="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", 0x601}, {&(0x7f0000000400)="89311c", 0x3}, {&(0x7f0000000480)="3049ed", 0x3}, {&(0x7f0000000580)='CQ', 0x2}], 0x7, 0x1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 5m6.147873839s ago: executing program 1 (id=4454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00100000000d0100280012800900010076657468"], 0x48}}, 0x0) 5m5.048788017s ago: executing program 1 (id=4470): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m3.564957377s ago: executing program 1 (id=4477): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 5m1.928028072s ago: executing program 1 (id=4472): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 5m1.512300908s ago: executing program 35 (id=4472): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1m2.168425684s ago: executing program 7 (id=6147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m1.685088776s ago: executing program 7 (id=6152): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000005c0)='\xbe\xc2?\xf2Sy\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00B\xf6\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5\x04\x00\x00\x00\x00\x00\x00\x00\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x19\x13\xa3iR7\xd1:\xcc)\xcbc`y\xabT@\xd4\xe1+1yDl\xd2\xa40x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1m1.081203121s ago: executing program 7 (id=6156): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 59.84445456s ago: executing program 7 (id=6164): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x1b7}, &(0x7f0000000840)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 59.236201451s ago: executing program 7 (id=6169): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="fc") readv(r1, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) 58.641755479s ago: executing program 36 (id=6169): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="fc") readv(r1, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) 8.957826908s ago: executing program 6 (id=6487): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000040), 0x0) 7.222585917s ago: executing program 5 (id=6495): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) unshare(0x2c020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) 6.812749438s ago: executing program 5 (id=6498): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000448000/0x3000)=nil, 0x3000, 0x9) 6.81261227s ago: executing program 9 (id=6499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5.79620409s ago: executing program 8 (id=6503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 5.425712893s ago: executing program 8 (id=6504): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x60400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7fff, 0x3000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xb, 0x3000, 0x1, r2, 0x5}) 5.318519142s ago: executing program 6 (id=6506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x40000000000008c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.727990409s ago: executing program 8 (id=6508): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) 2.871411723s ago: executing program 6 (id=6513): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x33, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={r3, 0x10, 0x3ff, 0x34325241, 0x3, [r4, 0x0, 0x0, r4], [0x2b8], [0x35b], [0x1a7a]}) 2.735727374s ago: executing program 6 (id=6515): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000001c0)={0xf0, 0x1e0, 0x280, 0x2b66ecb0faf5624e, 0x2, 0x5, 0xf, 0x1, {0x6, 0x6}, {0x1000, 0x2}, {0x80000000, 0x14000000, 0x1}, {0x6, 0x86}, 0x2, 0x0, 0x2, 0x6, 0x0, 0x6, 0x4235de9e, 0x69, 0x0, 0xcf9e, 0x8000, 0x6, 0x5, 0x2, 0x1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.639158915s ago: executing program 5 (id=6516): readv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000001c0)=""/44, 0x2c}], 0x6) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @time={0x80, 0x1}, 0x7, {0x2, 0xbb}, 0x3d, 0x2, 0x6}) 2.487240323s ago: executing program 6 (id=6517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "e0729b8a919f0264", "2b84cdf4f4a2e0a9bdba804bfe1a446e", "e7d85bab", "5bad2ef1a6a5fb81"}, 0x28) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.472991359s ago: executing program 3 (id=6518): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 2.222272499s ago: executing program 3 (id=6519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.206369656s ago: executing program 6 (id=6520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.71554121s ago: executing program 9 (id=6521): timer_create(0x4, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 1.560173175s ago: executing program 5 (id=6522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {0x1, 0xfff1}, {0x7}}}, 0x24}}, 0x54) 1.189632615s ago: executing program 5 (id=6523): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f00000024c0)=0x1, 0x12) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1.140047575s ago: executing program 3 (id=6524): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x45c0d00c}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="125353421ae911490a535387bf81807a9b59c5726009a7c20cf92d7626acb5e810ee928f04b94f79e402462cdd88475d82b9b361c61f8ffb870101d5f5e74c93e6cc4df2ce3647aa3e23c0085c0c1f9a5a33d10407d3f907867ba9ffd89711a50a39045d42ba58631a2e31fd138a4609b8b060adaf480c395aae518ec0812b49def6f9bd14d97a95e841085c4b7608062d8df8a8e4aa4eab705512c6ddb9d1c6231986ed6773ab652ad9f18eecf01d6f853d2beaee3416bb07de92f6ffd1169eaaea82294095cffa42a308ee44e7d0a10d0397985f171dcf2ff79313d241c1b8343615f5dd3c9ebf2c5952fdfb965760f0109dd4716adc7325353c0a62520657bba5af69d59edc0339ab4529ef4fb924e42c1569049c2246a454e2aece2303d5e9c9a7262da4bc19cb6cee4692c0a34c7260df1d392ba689fde453d412a94f7d96c5ad5c9f17bd919c84e187cf965fd0b020374fbbcf3192c8ad8a892a4ed8c1663f4274dea918b1d66ac4706f8194eda40236966c6736ecb5359660eeb6ccf1ab2310b59ac1801d77cc07e3e7c073ba558ca807c4c5e2000e42282a825193e351d875923a359087d61fc61b146e362ceb5232d9fd846e75c71724cf500a4cbbb042b00636388e0a15c766e144b7a1345757b8c8ff31d55419af0719936386db53c6381b3bd28af103c08bd77985d902979e2f0527b5739068fd35d6d3abde4ee070fdee6a97788e6b2734c92a53025218efcdf3087825fe552f954b13a19e8c363b669cd34688b26ad44e26952f025b90946b4bbc56b02c7203cc518d9877265b1d9259ee9ae9f9763517890aaca2099d88a888c1133927a416a8f432c825722304625239cd193be61b354a0baac9731a2bb2a27e866c24aa03e1eb1d256aa4dc37923b4fbbe11beefc6274e835144faa5f85d7d42abc071f79a1fccb34535986a27f773d0c702123ce4a8537a2ebee1722dc7d65333d17027f1e9eb225134065f0b0759356e888a4f815385a9714046b10f0604f4372e9b86656276270017f2a5014cca179c7bd95210b538f9c69b3694b6e1dc68a7efb47168668904b4bfc1c1e8c9779d31a9e6a5a8b21c7f01b638b0c5bec2381527f6dfe1d349a40f1ac3c9b180e88d77268a25d1ed933e443ab90ced4c6b4f116b7a9fee7216756e83691a58a49875b15dd85c501c8e7e4f86836f8f204c4ca0e0e2eb3407adc10035eaf4cf27d279e1673d3ea409844eced099e396e67ee5c13bd8fc8ca046d0e80b23dc152df473b9f3891994a73abc072dd05bb55cb67f544deff42d1741e37b3ab1458bc24ee92bb598c000171922b05047abef23a466e9f38ceae5874d41063522d5997bb267ee41381c7f08e204713b8439c861cddca429dbe3b5803ee2788bf287cc68a21d060eab5bf4a3ee7d52a560cd357d9928479d500be4c8ea52380bb8bdedea9525611551b0d329bd6c677374f4ff78a1ce749e2b68f29dc2b14abcba53b139225b18b6747d3df61ec3b754903f563183f5d2b8b17a976b23db9c09672c8e90f993ee31a7734d561a641597fd5c1abb1fffbeb7ddabb9cd474c532d9d834e65c9b3c597a35637c6acdde621c4d7d3ffaf64c9c6ba36836533ae278234505d542ae760e7e92deee5f336f6a1047a90d0e35f767113c5eead70c22e7cdfa9815446650efbb1417cbdb20c1415033bce17d3727ba607035f43439b89d2809dc102b0760a9855404f8631e9d837e7ddffc164193a28f1762b20db38aebeff0d5d7d6d7bee5319a20af40380276321fad539bb4ded87f6356bb15723a2fb1f98b4b95e602a59da44a438430911197de685b44dc906d14d539abe5c1ea06dc28ffc48ae00470eddacbc78473401917dc969b62d5979b43ce9dfa41d2edbb9f9918c20591071bc1ad23fd064ea76d29e2e1e5b099173a2a30fe9d65acf23d759e625824841a9955d766dc63c49028bee6342009deeebbc678529817abbe8a9fb8668bc7d168b53ec9c14269387d8e08f11acc8933c42eb87d7aff56b61ca6fbb6d1f294694bd5edd73d27d1bb048b1ec6ed9cd90f745e1d6e5491a7ec241ff09d253a081b4e9b8d4ab0cd392027c13c627744ff881b1d394e1f0866729e4fc13fd0bf4351e0cb342861d55ece2567f0ab45a13fcc1c9de5746b95cd78ecad8b8bdbd2412d7037647f65c74e40773fa96febc69203853b744cfcbf189494e33ff1762382c2c1a3eedbc5c8cb2cd4a34978af1ba15423a22e2933ceb6abfbff4194a221bc323581500319dce117fc44c873f1f1558a0bdc1b7ffab1a229ce62f907c18a3806ab6d55376399742b232a8cc495ec740ccdfc50e501420877705bcef9fac646bb6956029957b4855320078d951b7ecb25fdf4cde840737f22f81400d1db2965c816dfa6ec52dba597109c7cbd6283f29055c9afa874119b97eede6452ad4a371568ef9381ebbf5e854f406c6ddd203055b8b93ef68104071b994a074238b9f376979ab0183d7f3cd6dcaf976a4ddef43bb9f207921238e181b5f36289c08a088fbbd8b1fc4047b68fb93de1486c580a69e7d0a89a74990106dea048868017cdf2ad0b8f784560ddb51812611fee8d64166550bb518ed37c5618c4931f5085f3603a553c4fd87407b9212e1feee73ed69a0bb5e5a7bf2e4e1c47ad3d53be86d8572fa98165c37ee2333b664161630567c874c0428fe3485a5e32ff528c8820cd797cbbd71bac85b64891883765955d9bdd56ad24a0949986730ec0a1a558210fd241bea2f0e546c2268f22f6e1b68bc37d03410fa48ab88798d5853ade1586080c2aaba01684d8d52bc0acc59873b72826d12e67e61a026b1d0feef8d3f8a5f1990af782ff38ea3c85a9a13c210ec2edb8a44f172a179436597dd766695de2484010a6ca45b9e4f4e60cd3ba50259a997deed946068ee833dbaea9da078275745804751b5867adba28c81a03c0cb7f9fe910e75aae81acd27c05d95231de31de45e299791d27eca1a1bd096fd9c08f5210fd1fcaa7e4a6ecf367adb9fac0286b46d26f344b6e0d6fc65cf01d281950895e92a4f57d24db1277167a57b885e6c8286c639c0757af742f027b7801a72a75f01baae40aea6231b148d21cda86528fd15fa7b03d7c75b083b7d6349297adab1baf5c3e9ca2886f9089882ab86bef926fea5879723efee3aac26249cfca8a93d6087a90a2598d5046878fa6bf5eb973927cd4c8bf9b9f558c249d841451c4cbef8dd7dfc273b80c3599aa72174b748b04974a3c6906bd2c46f5f995c8ec50729e09c04e3e56557be2c57026679a5db0016c825a32c6ec6d821b1b17b827b3ca2c12436c9d5d6fc95373cf5d3b79bef53683c0ff972dbe82ae2c9c44a010d36d9837e92b8c56086e57951f923063c81f0de8af1c0aef9b35a63048f52653cb9253177b09a9e570144e66a4779d40e7433769221d3bdd02912a8a77994545eafc2d7928b42adad4058cf4959ac9879b8baf4657fabd7ff11b53df67c103185cec9b86454e706ccb91f730f42af3197004dbc430c2021a85bbabf6caea8dbdd3b8062f2ce85cbb995d16aa15eed2f097030f92df963c280fd5e1cebff43b1cfa97c93fa1755c582212644cc643dc3661960cae2fc8c50935de9c57908b29a30ff28e45a7efc6228d5501cb2fd7aa4ff55c9d49aad6d3162c813b8e8a08991fc383812fd368743431097d7114ee105d194cd4239442a58799f573f5b0f16cfe677699869beb162c641700869205a28259137e3e012fe5704aef7a2b4f70b7cbfc450de62fb6aaf22276e4500b50789bc72397c933d371579f99dc696964421cdfd0531ec4d09ee7b07f9604dda97777242fdec6f345db177c75c395636e5b59d9ab88cf10ffde646be582009962822c84a3bf0abb90bd7edc91ede84d1d4444a3ce977fb9ade7de2dfcd2254e83707386fc246acc34400b2fc85f92221796fc65881eba76ea809f59c01db3ea9a7a8eacccf670efdff2d108a6c93b8159da89e17c4568eccb6a4d79c667258148f719367fdde7be1a2dc50538186415ffa235e2cb6418da4c3060667208ca354a67539255ff56f89204148abd2e1bf5283fd42808d9ac0357b65d94cf8e1d68c83de1896b0de4c205f1d458aa0df91b5af1f2f4f71c3f8d3f853aeb2cb5eb51b70a147bfdb28f41617c9760a592ff67c3772c65f335da35d030e121f30dacc6a5de00111654141e5cfe5d6a5eab32487db94ae5bc67c8f27f9be485d40be32794d12478e69338eb1bee7a991116cbf6c0b64dbfd7ba3a1464752d922af8925feb5d2b87da38b99cf48be96f58864abe94c95a70b3764c1ef60f1411bcbcf52dec9e318715cf76b4346972bbaca08574eeb3d67b47523cbf604cbd6300d7be6574724b8ebd40762aefe6ef0924bd320f0f06cbd13daf0acf1bd5c6221ce22e53e7ef3a38f25d44ae17743f354740c8be706662ea5c94a1cb54eb2726ef0af55ed15fa16a35b60974c861eb3c30261fa9926b4cd317b1b4d488277f295a763cd1c6a9e74f9241c6166056b1bc27bb3ff4ebd7ce98fc2d85f8b596aea0de16a6ed782191783a17ca1cda57cad694e8bd9d33a34577ab9cefff348863746ae53d38ebff125e64fb68f7d8efe5d400ff5b53df5fcd6a85cdc3ef950d11f17d62221b6e5c7d7056a0ee0e86bc15c76e9361f7a1073dfcdbf9fc8a3bdc3b69065c63f3360ced8a4f7a6992fa0e8c8ad4522063884578dc10e4e0759398d5583dac3ae8f61b37793a520dcc7cde284f51e924dbaab81519253dfa2312ce14ecdc490bb680838dc7f6a77b3e0f26058f82ae0445e9e455c257acd42e2fb6ceff53fb2b6239fe132ee1cd8480be25f4cdf02a8b4e395a411db09da3d5df16dab2a356a868a0aba2cbb1fe70cf014d2db742be8b3c74fb8cb2b3aa1b1346c0bc24c5f1f08a5b3e6a2498532518fdca216bcff90bcf2d4c4a9a52e71a22d338ec9965b25185da142cb185905ef5f108e00d816301982adef40a7aa388a87d12db1289ec51135ef4dbcb1c140e256b2d6eb6837dc9e6939ac271a530d6be3f67dd08d41a5a06d5a2195351ef17588999469a1439a5e1ac81f1a9f1176de92ddf946095b77ab534acbd5f7049cffb640e32e76f09a2fa9e43da0f3475677242aa705347e4480f39d640f051dfd9efaffc3d6c732608a07fdaf3413d43c6714e2438c14c77dbf1e41b6c6a92ce600898a1727aa0d96f1a15107a5b801d8ce5cc7b89f4a4ae9000c084e9fe5e26c893bbcf20fe6fd665b76f6c7ddf7abbce8ba4c87049997012732cae347e10f859338785f604658db061f1be29c6b9391e790424f01076c458dc2eceb77f515b5be383be741cc0845be3f027e843623a64e71c70323b83be35c742112d864b41b9e8fe2fcf02cec9e03dea2c8dd8f8a20dc4bb1acd4dcc2a6a41072513fc89704db116093d71f191b88da91b19c4ef41ef4ce0ec0db080517191e0bfdf55a4590f45d813b39560f10a59150216422c3338650975ffb049912511561cb430b02283ed2f5772dfe7a9dbea1776d21be94e6915cbeb6544c8d6193fac6c6443bca7d5c180daae0c136dda63365cf77d4f7243f4a16dfab027dac166354d8ab4ad8eea09c3f4cbdbddc98a3ab9d69e0e3b584ada61cfbbfc487b8ce53bfc337487f6fadeb2a958f2f79eb5fb5781718c2ae42788ea56854aff90f0ea6004ec0b943db9dc9ff8f2e03a021291376fec671df5303bfa5e70187268edfc8f93f39942d2096534492875fa0efba9c3cec4e1306754ffa9bb5394f4bf533c7c5551252b1eba0a8edc869d46d7f9988e51bf65e3a39220e902a3a324421693a1d6cc9f554e36e155c1f98f1381e99b6fd4c95af92d028c58b4263c81b204694ef0ce32573b59a492772c832d1277b8ac188e5a6186e1c3550c5f46fa41b0b18d30c9240b00a6f3ae1185797d6eb8c6c19e16555a299003a0143b44c48e230f10f3bb68c71f6da802d35469b9cad460aa105cbe2a15012db3344813bf26d9c310f9c6efed1548f9d79f3b2e22511b0cc02f3e71b74d674902ea6ba569d28f9917c4ec035a8bedbf2a5cd125236faa05fada606d292023865829ed978fcb02d316206e4b8ee588ec0b1a5ce0eed8205d680c726e55115dad2ea592c1e50c812758f84cd4d9899adb849fbfb821a52144faa51b0a5f4998bf2f7eecfc629fb4286745d111c13f8616df5d1f64287f2507bb8a1a2ed9b935535287fc7d4e49492bad9c5a149bb21500bc27b7f50662efef95dbc8c7d564ff14be60c4f8ad98547edebf1517caae37f8cd937e50d8b2ce5acca7f5b965fb4c87dfbcc105cbefff9885a0f4bbaf6a6f691754a99c35cfe739122736e89cff85761e01839dfadedc2b7c5e410ce1ad02308425142fbd9b10f13ae315af3e572b13e53ce304053c91c8792572fa198d0ee823b0f77f134436c5f60e413b759e7f8e2c240cf800e5d5e052848f0efb1329e67a2404cb611906bba9b42fa9a4d8c0e9bcc617a55b7bbe5c5a9c81f96450ef105787978a609b08d9a9c98577b9001285320aeabf49118f8249e6b0af48192637b7215f27fe7531ec9854adee06f27a80744f7592cc157cb59aae245d01e21f6a9c7afcf78c49f20cfa717d8b7cefb1bebc10bbabb4599f6b44e700f3e5906e8ef144fe0bd0a730e2d09d25f8ba5dce21fb7036a293ef46703098464a089cdda149d94cd587b58b6e6d4efbede8b1f6c71e3d912b4e3a383529e05a8d23f5a418ee4a84b0b0719788430ab8a292c371583de46c0e706e4c9e21040721afe54bd9256ab56173bd0252678f7acd23aa91affc5ff4bb0d365446b9b277085ae3478161808dc6c3d44580f0af43b923fd40dd1bc338c4f13bdd16b56fa41dbfecd29788f8f53af777877f8b980d3847cc99f1fac22c015cef351f9d95cddf02a6bf3ce1032f0d2ff4178a5caa53d9d06b9f7f61a4b9eff30148470d079f3bd48ede859bd130646aed72e5c20d1d796e5e8f4d0f2f3be2030e714b054645561517cb365e7cc8dd51d59e991160f15f3d7d4f9d0dde4161aa85d09828a2afe6384173ad7e1ad45e22b9f701fa4bc71f033def2f2946579b1fd0e1380ac76396a0feb2b3efd532978e3e29ce10f2a82ff2230a6278b343314904f0754758218350cabc3eebbb3544c13fc8194516bd6d1dfc6c2a96e7708150725688f35c4b29379314a803a6fb298bf56f676eef9a1308e05a6583e51d88a49f00c1de31bb2567262dc5032ff2f55f022c17faca1fe275ea00b7d36cfcfb76894000a4fe9227c656b4bda1f2413f4692b52b2edfd1437e8235ec60eefc2ff304d46a0fecb84fedfa521aa3666f1a09f9bcf2fb3cb0441495789a4cb2778bdf294acc81430781ca5d6fe7d5a7b99c7d0ce71a148abdfe57279cfd40483b12efe158e880c20f397964b506bf6c063fd6db7168ecd590b5d8b3c1e8fdf3aca1739f6e92af1ea8c80122a88ca9263de3e412dddba98753e08652bd6ec3ab81e7f12daa6eb511e58dbf60b1fba777bf13d979e7c1136c51dce11febb7ae215ec83307aff9b28b60c509fa9eb604e2bdf736dbe0c3d6ee4a34db2e5a32e594d24a64c32a9947c87cbe08acf848af0796cdfa3c2843cc97d34ee9d87e6ba96f3e6263aca04d1c02eccfc7c0c3262289cd6fb979dba7901ecbb6d15705b11c96ad4f769bd96edda5e82c26c503966ceeb4bf043885c41952a6db4c2ed76ddddb2a6155e61071629f597030e72c019242ec6f0367a8d5658f7c4e4e634e69a901a9168bb22b85b0e26ac0a517637e0070566a06066bb592d49ce0a418e317ab785bf9411f237e6f8c116544b7395db92e58178fe684309fcd9816279170b8bbe50841f1565de222efde69f751881bea8c88d2bd8fc7bccea671230b0efebed9e8d86a99a9111063c253891d54cd6ad2837f81812a09aa4479aa6403f829c7fc5c7edcc71713eb8b3a85ea328de14a07182b60888d923b8bf0f86fe2120f71fcf339dfd2ebb16f9cee1b2419a5166927deb4ffa12cc5e564d96f09cb34eb5a0d930a1ee21001ce04db480249e500085718c03944e602485d78b8f00c812a877c8a76595f04fa64f6d5780d017af3da9dcfd1896382fe0a3c8182ce5a319f006e8f3e63f843684cd3f7b642a40221f05beb41f0a940de59648125e842da03c46cfda0496fdb717aa14a2489daf632877d1a9365f2fd121fbb20d025fabd51850f30b93741d9b30673a64f6274967845607581854dd970726cdfed3690944fc964269e78b31578487edee0ea87c115be2bdf28af460a11fee5f4782b3ddf3dcb5e7e24f320efbdb9c9ed42ab87ac84d3ed3a3f63eea4f3bd73df1b0b3ceffba4f588ff1c8d33fb474d717db7d0930eb7e8bb061359baacc5dceecafc44045dc58b85a7e80751267770c59f780469eaef3dcb8b41f9c2d3d8bd4e102330a417e59d296224fc6e7f4a10da37c19d04c9da8f125870958748c7fcca2361e67fe69d4adb32343603d01a0c2950498f1e57c28a3bfff8dcd3ebf96b9fad889aaab33d86093ab78b83afbcff4cae4cad467170b220bca482f59f8acd472671b8b1640f63a77be94b026f74bf1591010d27bee4c8fc9fbd9fe9af1896eff59dc6c30022470a8c0d38795e2054d6a0934df4125039ba90a57e1fca0b1d1abe84026bd8c03787d869ce6989818af65abce3763cf6f9b696b4daa5205c8662036a3df86440b9f67b30b94c8715ac5148125cc50be5307e5bbdac55efcaeebe9589c6ce52e8a0c1259fbc6bca10882f78e851116f2f480b07291311fc6bf11a29a3702d31e74bbba752590dae5f12423942b112ee1ffec98aebb28eaa0b3a094919d4ad75c6cdc9f22a5b47f7e4b517ee3c07fde90d7cffdbd461fbe934f47b331c7d7a786555955ae108dda2efd5b4a1f66d9ab30b5547427e9e8dcb0c35b83dbacdd8cdedfa297a1ca97c59965f455527ecab8c01df3431df6b4a0cacf641e4eb32ac272c74075f98000836830f4d329a9fe7b35c0d88fa364e16d2c3a27abfe26d51b87e4dd9040080ef9a6b5641a4987b35f256dbcaeccb67e18845a25a1c547a35fc4c27b3eed78d8eac9303d5c57801b53ec4b63b7cc80929bef3f59a88d8a6ab8e6f0bcff60fd2259d6ea8cea91c4bdb8d7dc7c9706caace69b005005bb5c88eddcdae6dff2819d0cac55833c6b14ff5011f218b1e96f74ccb213e2d4d7631acb7e4a8fee6171eaed6f77cb7c119ade2645e81d4dc4be5080cd3d28014334164c2759223e7e226877359fa94f437866869b630e0d653a4dcb5603ee5d8d29b85805034b86b3fed1ed8dce76c79dbbf97b35c00529a0fa3f143556083a73ba7d249d7dc116967e33b6519d5468a730a8a6eb26873ff3b6beb01a222bdd5cd4453253a65484086b9fdd3d21050c66c29dfc16b9f0a7e86f5207a67b37cb35c4adf4455fe56b438cdd755475b335b297b3819c448c7708dc13da64383f9728b3b01d885ce4248b441684a13ca952dd5ccb9fbc82a9c75752f9c30ba886652ab88249cc404a0323fd5344ff4a65fbd3f2b0485d6834521d9ce392d50275c9e03a9b335ba159cbcd7e37f6177738640aa3c3c92e86303bb936d0e78c4b5124187e8ffca041fa77498b7af1994034b686645b1940b80994dfaf322f2647424376564b84fb571d8333061523bc7a2772789e589a47e19bea31dce972912e530864e88345d8025f27df6569ad6f96d4fc0ae3891dfc5d6b8e5ca63cc705a95086308ed83f0c347c25408180edbd656c3b44367f75e7b81a8c6df14850a088a4d0a9345f6cdbb941a2627034eb6daad08a49f08d7e1238a2f361f82da834b893f1f8ed6a3658ecca85f7195f8c0b690b6931273ee5de50ec97996cb142bec8d89789b26853849a12e9df565c90886fc2dffcee07b7a778ef06b9a205e7af24ec3b437742751ad8a711caf677acc3026ecd49fb9e778ecf59265c601a1735612fb5fe756caac9eb759138db80a7c20925e2f8c63757c92cd90131f6620601e955f0030f5227e42787fc266cbbee74a983bd5875a66d771418f6f2b7c2d7379f5f0ee59359c6e4c7d00d6c2cba48fa6caa64a3330ed92df55013e62fe636ea97982820213fb0672e9be9b0b51d7266aee893fe971573920a41e16f8e4cd6e19bc2f964fc8e8489333ede8b4fdec61f1740429c92bf853cd0e2e29ca1947a4165e54444b7251afbe35f397195be8f4599213b329194555ce01cbe3cb5d979be2736583d8659929c32d4e4f32949ee63b3c53f6a17ae8f0d75320b59215e030bc03af8a4aae25d178ce4328397176a6d526aaed2f708eec9a74faffdeec0ebd502998780fa0916c472f3e47a72e4bb43deb3fd12ba05292d63a2ccf422ae9c40587e50ab7b0ff39803300d0e953b614077e529e2b357bf901879a59909ff80f0fa7373f7e3a9020ed0dfd6752aadda5e700369a2a96c884d150389344d1446944b80b2e3332fbf2b286c99af51218f872f4e1e8c7b3a706860c36b88e2e443c9b8e26efa4a1c00daaf8d74e784a1f951191e3b87bd96c676252d70ab64c26fe4722fa52b1fe887979c08b248065ef4011651f037ddd521685761abefbe5cc428962f51ca0ac09089d9155d3fcd9386ef2a628a8ebcfc414ab6cf42d63b89fa6718947e73c9848a384f17947b9e1ccbbdec5a74e92218f495ba80462ab13f4c22f144539c3d2d61cb842d46c95d7adc44e06bdabecfefe777b10a8d512bc5a3742c764dbf8b1d89b3405d722350b3370c03387b3eb322b76c8719f9bf047cea863ca3289125386288373a44ac10a6b2835fc7bd6f966b37c167f73c369f41d34b7e25f1df1f542663c2b63c64c4e4e65fca3e79891a8ae8dc0439ae8001672378dd1f412dde932ea7f06ce9c844d158ed4d664ad490a79314e3a6802cba5be998b017f3dee1747b9e4622999d65bdbcdc8ed6c2e839e9167ce7bfeee23e3d398ba93e8211678e3c4004311260fd20b363113a1df8ef8e529adbba84eb7ca48522a213c7771d31857489854a92b4f19901b75b2101234ec15b2b31b43600086e3193209f3c1e4d04d7e4f3f1dbe93074e5443c76f520928a41d84269fc92c728f38b38995118527c2a5ca60db69b1a3967495be0556e0a1b0ee54ba6a38153cef7370bdd1611103a4450b99d80c67eda3cf0eb862faa040219d7d728337cfc8bb52ce758b778ad3faab55c61bf1b4a85b1ff7b48abe438819a169fba5f1351353ede1ae9f4991e22fc1c013833cb62b79b5df6f204758e233711a605e3b7c5c25360c15e2e8da2b663f4ba2baada84aa599c29ca9d3b69c19091df66d6b1ac52085d31c9f607e9144ee9815f3003cdb468d9c7cafd5be7f6ad136fca054540ea6c5570246814f069022840a2099d7605ae30ed9b751de3b7aaa1fa30bf5514e61b316c7640f9aad65d63dd89ca850419749383586d013fb56c3990d3a028ad691b04a5f681b5b11c53673572379029a6435615c7465d59ad32f9af7c3930958141fbb7dfa9d9e8426a2689c744b04d01ab51abe4ff3f15a5f4c496e44eb01291cb814477c35d0bdf86471ea075ae49416c210", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/121, 0x79) 1.010472897s ago: executing program 9 (id=6525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 881.824609ms ago: executing program 5 (id=6526): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000640)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 870.182835ms ago: executing program 8 (id=6527): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x325}, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"]) 796.310875ms ago: executing program 3 (id=6528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd2d, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x653, 0x4, 0xffff, 0x80000001, 0xd0, {0x8, 0x0, 0x3, 0x1, 0xcbc2}, {0x81, 0x0, 0x1, 0x2, 0x4}, 0xe, 0x3, 0x6}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x4}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 580.443557ms ago: executing program 9 (id=6529): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0x10, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x89, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0x97, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x800, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x7fff, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100007, 0x8000, 0x3fd, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x0, 0x2, 0x2, 0xb, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xf66, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x3, 0xa1c, 0x81, 0x6, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 484.969816ms ago: executing program 8 (id=6530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x40000, 0x0, 0x0, 0xfc}) 392.211826ms ago: executing program 3 (id=6531): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010003, 0x0, 0x9}]}) 345.875824ms ago: executing program 9 (id=6532): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000500)=""/45, 0x2d) getdents64(r2, 0x0, 0x18) 135.743128ms ago: executing program 8 (id=6533): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0xffffffff, 0x0, 'queue1\x00', 0x4}) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x317, @time={0x65757100, 0x8}}) 46.254716ms ago: executing program 9 (id=6534): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xe, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x41) r3 = dup3(r2, r0, 0x0) write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[], 0x11b) 0s ago: executing program 3 (id=6535): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a80)=ANY=[], 0x77c}}, 0x8010) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000815) kernel console output (not intermixed with test programs): FFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 824.189336][T12550] hid-steam 0003:28DE:1142.005D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 824.292758][T12550] hid-steam 0003:28DE:1142.005D: Steam wireless receiver connected [ 824.356653][ T5889] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 824.389375][T12550] hid-steam 0003:28DE:1142.005E: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 824.546247][ T5889] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 824.588680][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 824.651191][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 824.687818][ T5889] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 824.731550][ T5889] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 824.745117][T12550] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 824.769840][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.793228][ T5889] usb 8-1: config 0 descriptor?? [ 824.799231][T21306] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 824.902629][T12550] usb 4-1: Using ep0 maxpacket: 8 [ 824.930065][T12550] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 824.961251][T12550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.994740][T12550] usb 4-1: Product: syz [ 824.999003][T12550] usb 4-1: Manufacturer: syz [ 825.012855][T12550] usb 4-1: SerialNumber: syz [ 825.027615][T12550] usb 4-1: config 0 descriptor?? [ 825.089278][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5403'. [ 825.116011][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5403'. [ 825.272181][ T5889] plantronics 0003:047F:FFFF.005F: reserved main item tag 0xd [ 825.298289][ T5889] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving [ 825.366330][ C1] plantronics 0003:047F:FFFF.005C: usb_submit_urb(ctrl) failed: -1 [ 825.390909][ T5889] plantronics 0003:047F:FFFF.005F: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 825.521389][T12550] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 825.546583][ T1209] usb 8-1: USB disconnect, device number 19 [ 825.571741][T12550] gspca_sunplus: reg_w_riv err -71 [ 825.600978][T12550] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 825.648364][T12550] usb 4-1: USB disconnect, device number 87 [ 825.697887][T21318] fido_id[21318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 826.002737][T12354] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 826.159378][ T5940] usb 9-1: USB disconnect, device number 16 [ 826.165624][T12354] usb 6-1: Using ep0 maxpacket: 32 [ 826.170982][ T5821] usb 7-1: USB disconnect, device number 29 [ 826.199012][T12354] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 826.242336][ T5821] hid-steam 0003:28DE:1142.005D: Steam wireless receiver disconnected [ 826.281727][T12354] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 826.321102][T12354] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 826.344212][T12354] usb 6-1: Product: syz [ 826.348448][T12354] usb 6-1: Manufacturer: syz [ 826.382742][T12354] usb 6-1: SerialNumber: syz [ 826.400913][T12354] usb 6-1: config 0 descriptor?? [ 826.435088][T21322] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 826.470690][T12354] hub 6-1:0.0: bad descriptor, ignoring hub [ 826.548378][T12354] hub 6-1:0.0: probe with driver hub failed with error -5 [ 826.988301][ T30] audit: type=1326 audit(1748339245.735:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21347 comm="syz.8.5410" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e539 code=0x0 [ 827.542546][T21322] usb 6-1: reset high-speed USB device number 46 using dummy_hcd [ 827.778128][T21322] usb 6-1: device firmware changed [ 827.794373][ T5821] usb 6-1: USB disconnect, device number 46 [ 827.987708][ T30] audit: type=1326 audit(1748339246.735:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 828.150792][ T30] audit: type=1326 audit(1748339246.735:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 828.202580][ T5821] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 828.220918][ T30] audit: type=1326 audit(1748339246.765:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 828.251442][ T30] audit: type=1326 audit(1748339246.765:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 828.355879][ T30] audit: type=1326 audit(1748339246.765:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 828.448344][ T30] audit: type=1326 audit(1748339246.765:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 828.491211][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 828.542735][ T5821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 828.627479][ T30] audit: type=1326 audit(1748339246.765:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 828.637205][ T5821] usb 6-1: string descriptor 0 read error: -22 [ 828.724291][ T5821] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 828.756406][ T30] audit: type=1326 audit(1748339246.765:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 828.791753][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 828.909999][ T5821] usb 6-1: config 0 descriptor?? [ 828.960537][ T30] audit: type=1326 audit(1748339246.765:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.6.5406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 829.004013][ T5821] usb 6-1: can't set config #0, error -71 [ 829.034513][ T5821] usb 6-1: USB disconnect, device number 47 [ 830.033956][T21382] syz.6.5422 (21382): drop_caches: 1 [ 830.037016][T21386] syz.6.5422 (21386): drop_caches: 1 [ 830.783423][T21382] syz.6.5422 (21382): drop_caches: 2 [ 831.381981][T21404] syz.7.5431 (21404): drop_caches: 2 [ 831.702971][ T5888] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 831.882884][ T5888] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 831.895824][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.905106][ T5888] usb 6-1: Product: syz [ 831.909618][ T5888] usb 6-1: Manufacturer: syz [ 831.920361][ T5888] usb 6-1: SerialNumber: syz [ 831.931407][ T5888] usb 6-1: config 0 descriptor?? [ 831.942046][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 833.162604][ T44] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 833.343463][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.375533][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 833.384978][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.394916][ T5888] gspca_sunplus: reg_r err -71 [ 833.399816][ T5888] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 833.418355][ T44] usb 4-1: Product: syz [ 833.432066][ T44] usb 4-1: Manufacturer: syz [ 833.443182][ T5888] usb 6-1: USB disconnect, device number 48 [ 833.450502][ T44] usb 4-1: SerialNumber: syz [ 833.943445][T21468] syzkaller1: entered promiscuous mode [ 833.948996][T21468] syzkaller1: entered allmulticast mode [ 834.126943][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5460'. [ 834.154587][T21473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 834.213915][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5460'. [ 834.508884][ T44] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 834.532534][ T44] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 834.570854][ T44] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 834.577653][T12550] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 834.762943][T12550] usb 7-1: Using ep0 maxpacket: 32 [ 834.772568][T12550] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 834.785164][T12550] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 834.796732][T12550] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 834.807480][T12550] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 834.818887][T12550] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 834.838433][T12550] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 834.848463][T12550] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.856722][T12550] usb 7-1: Product: syz [ 834.861625][T12550] usb 7-1: Manufacturer: syz [ 834.867211][T12550] usb 7-1: SerialNumber: syz [ 834.884580][T12550] usb 7-1: config 0 descriptor?? [ 834.910721][ T44] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 834.953609][ T44] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 834.982952][ T44] usb 4-1: USB disconnect, device number 88 [ 835.003928][ T44] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 835.312215][T12550] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 835.331640][T12550] input input107: Device does not respond to id packet M [ 835.362999][T12550] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 835.369195][T12550] input input107: Device does not respond to id packet P [ 835.399869][T12550] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 835.412595][T12550] input input107: Device does not respond to id packet B [ 835.430767][T12550] input input107: Limiting number of effects to 32 (device reports 101) [ 835.639367][T12550] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 835.680671][T12550] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 835.692989][T12550] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 835.717920][T12550] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 835.815949][T12550] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input107 [ 835.868913][T12550] usb 7-1: USB disconnect, device number 30 [ 836.652698][ T5940] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 836.732910][ T30] kauditd_printk_skb: 416 callbacks suppressed [ 836.732933][ T30] audit: type=1326 audit(1748339255.475:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21516 comm="syz.6.5478" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 836.880676][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 836.891132][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 836.909281][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 836.919856][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 836.955917][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.996200][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.014852][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.132690][T21524] netlink: 2024 bytes leftover after parsing attributes in process `syz.5.5480'. [ 837.142006][T21524] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.5480'. [ 837.183176][T21524] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.5480'. [ 837.304861][ T5940] usb 4-1: GET_CAPABILITIES returned 0 [ 837.310822][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 837.576432][ T5940] usb 4-1: USB disconnect, device number 89 [ 838.192494][ T44] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 838.362644][ T44] usb 8-1: Using ep0 maxpacket: 8 [ 838.378561][ T44] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 838.410665][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.446432][ T44] usb 8-1: config 0 descriptor?? [ 838.716744][ T44] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 838.858588][T21559] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5493'. [ 839.009103][ T30] audit: type=1326 audit(1748339257.755:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.8.5494" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 839.931062][ T44] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 839.972194][ T44] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 840.022663][ T44] asix 8-1:0.0: probe with driver asix failed with error -71 [ 840.089199][ T44] usb 8-1: USB disconnect, device number 20 [ 840.091016][T21581] netlink: 'syz.5.5501': attribute type 7 has an invalid length. [ 840.127479][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5501'. [ 840.142955][ T929] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 840.332781][ T929] usb 4-1: Using ep0 maxpacket: 8 [ 840.383106][ T929] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 840.402424][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.410482][ T929] usb 4-1: Product: syz [ 840.448382][ T929] usb 4-1: Manufacturer: syz [ 840.482469][ T929] usb 4-1: SerialNumber: syz [ 840.503761][ T929] usb 4-1: config 0 descriptor?? [ 840.771348][ T929] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 841.944545][T21619] macvlan2: entered allmulticast mode [ 841.963977][T21619] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 841.986641][T21619] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 842.004505][ T929] gspca_sunplus: reg_w_riv err -71 [ 842.013196][ T929] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 842.049509][ T929] usb 4-1: USB disconnect, device number 90 [ 842.061969][T21619] team0: Port device macvlan2 added [ 842.377007][T21623] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5517'. [ 842.463920][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5519'. [ 842.474392][T21627] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5519'. [ 842.651658][T21633] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 842.742858][ T44] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 842.802583][ T1209] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 842.852859][ T929] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 842.892931][ T44] usb 9-1: Using ep0 maxpacket: 32 [ 842.900165][ T44] usb 9-1: config 64 has an invalid interface number: 4 but max is 0 [ 842.908469][ T44] usb 9-1: config 64 has no interface number 0 [ 842.918596][ T44] usb 9-1: config 64 interface 4 has no altsetting 0 [ 842.930208][ T44] usb 9-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 842.939881][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.950858][ T44] usb 9-1: Product: syz [ 842.957774][ T44] usb 9-1: Manufacturer: syz [ 842.962720][ T1209] usb 6-1: Using ep0 maxpacket: 8 [ 842.972412][ T44] usb 9-1: SerialNumber: syz [ 842.974607][ T1209] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 842.989531][ T1209] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.001817][ T1209] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 843.013071][ T929] usb 7-1: Using ep0 maxpacket: 16 [ 843.019892][ T1209] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 843.031553][ T1209] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.033080][ T929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.066076][ T1209] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 843.079213][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.082578][ T929] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 843.122767][ T929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.155043][ T929] usb 7-1: config 0 descriptor?? [ 843.189327][ T929] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input108 [ 843.216765][ T44] qmi_wwan 9-1:64.4: probe with driver qmi_wwan failed with error -22 [ 843.272840][ T44] usb 9-1: USB disconnect, device number 17 [ 843.354496][ T1209] usb 6-1: GET_CAPABILITIES returned 0 [ 843.360093][ T1209] usbtmc 6-1:16.0: can't read capabilities [ 843.420855][T21631] input: syz1 as /devices/virtual/input/input109 [ 843.487256][ T5183] bcm5974 7-1:0.0: could not read from device [ 843.526108][ T5183] bcm5974 7-1:0.0: could not read from device [ 843.535532][ T929] usb 7-1: USB disconnect, device number 31 [ 843.548805][ T5183] bcm5974 7-1:0.0: could not read from device [ 844.013028][ T5940] usb 6-1: USB disconnect, device number 49 [ 845.862512][ T5940] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 845.922677][ T929] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 846.045410][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.059727][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.070694][ T5940] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 846.072760][ T929] usb 4-1: Using ep0 maxpacket: 8 [ 846.088682][ T929] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 846.089939][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.097636][ T929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 846.118223][ T929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 846.118535][ T5940] usb 9-1: config 0 descriptor?? [ 846.128822][ T929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 846.145975][ T929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.152492][ T5821] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 846.159658][ T929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 846.212813][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.315545][T21699] netlink: 304 bytes leftover after parsing attributes in process `syz.6.5549'. [ 846.325162][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5549'. [ 846.372620][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 846.380460][ T5821] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 846.396575][ T5821] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 846.410508][ T5821] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.425573][ T5821] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 846.451776][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.472838][ T5821] usb 6-1: Product: syz [ 846.477136][ T5821] usb 6-1: Manufacturer: syz [ 846.477743][ T929] usb 4-1: GET_CAPABILITIES returned 0 [ 846.481778][ T5821] usb 6-1: SerialNumber: syz [ 846.513128][ T929] usbtmc 4-1:16.0: can't read capabilities [ 846.652113][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5551'. [ 846.944846][ T5821] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 847.022575][ T929] usb 4-1: USB disconnect, device number 91 [ 847.409389][ T5940] uclogic 0003:256C:006D.0060: v1 frame probing failed: -71 [ 847.428535][ T5940] uclogic 0003:256C:006D.0060: failed probing parameters: -71 [ 847.446226][ T5940] uclogic 0003:256C:006D.0060: probe with driver uclogic failed with error -71 [ 847.490526][ T5940] usb 9-1: USB disconnect, device number 18 [ 847.775608][ T5821] usb 6-1: current rate 9338425 is different from the runtime rate 9338507 [ 848.011322][ T5821] usb 6-1: USB disconnect, device number 50 [ 848.972177][ T1209] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 849.172122][ T1209] usb 7-1: unable to get BOS descriptor or descriptor too short [ 849.292562][ T1209] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 849.392627][T21723] syz.5.5556 (21723): drop_caches: 1 [ 849.429363][ T1209] usb 7-1: can't read configurations, error -71 [ 849.647425][T21724] syz.5.5556 (21724): drop_caches: 1 [ 850.304186][T21723] syz.5.5556 (21723): drop_caches: 1 [ 851.934688][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e737800: rx timeout, send abort [ 851.945606][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e737800: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 852.041242][T21769] netlink: 532 bytes leftover after parsing attributes in process `syz.8.5578'. [ 852.487054][T21775] syz.8.5580 (21775): drop_caches: 1 [ 852.770867][T21776] syz.8.5580 (21776): drop_caches: 1 [ 852.900571][T21778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 853.408609][T21775] syz.8.5580 (21775): drop_caches: 1 [ 853.936742][T21809] all: renamed from lo (while UP) [ 854.375307][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5598'. [ 856.079534][T21844] netlink: 'syz.3.5607': attribute type 10 has an invalid length. [ 856.438232][T21844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5607'. [ 856.491808][T21844] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 856.553145][T21844] team0: Failed to send options change via netlink (err -105) [ 856.560681][T21844] team0: Port device geneve0 added [ 859.231294][T21905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 859.272080][T21904] netlink: set zone limit has 8 unknown bytes [ 860.379630][ T30] audit: type=1326 audit(1748339279.125:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21933 comm="syz.6.5638" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 860.977264][T21945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5641'. [ 861.230840][ T5821] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 861.329919][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5647'. [ 861.340536][T21956] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5647'. [ 861.412506][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 861.425592][ T5821] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 861.442829][ T44] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 861.443909][ T5821] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 861.471519][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 861.488449][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 861.498863][ T5821] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.527788][ T5821] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 861.538433][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.603170][T12550] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 861.621530][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.651015][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.664867][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 861.678240][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.688368][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.700746][ T44] usb 4-1: config 0 descriptor?? [ 861.776878][ T5821] usb 6-1: usb_control_msg returned -32 [ 861.793838][T12550] usb 8-1: Using ep0 maxpacket: 8 [ 861.802478][ T5821] usbtmc 6-1:16.0: can't read capabilities [ 861.804814][T12550] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 861.835434][T12550] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.849227][T12550] usb 8-1: Product: syz [ 861.857369][T12550] usb 8-1: Manufacturer: syz [ 861.862223][T12550] usb 8-1: SerialNumber: syz [ 861.909361][T12550] usb 8-1: config 0 descriptor?? [ 861.932003][T12550] gspca_main: se401-2.14.0 probing 047d:5003 [ 861.958629][T21966] netlink: 'syz.8.5651': attribute type 4 has an invalid length. [ 861.977922][T21966] netlink: 'syz.8.5651': attribute type 4 has an invalid length. [ 862.162229][ T44] plantronics 0003:047F:FFFF.0061: No inputs registered, leaving [ 862.236214][ T44] plantronics 0003:047F:FFFF.0061: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 862.338207][T12550] gspca_se401: Frame size: 0x2 1/4th janggu [ 862.364081][T12550] gspca_se401: Frame size: 0x127 bayer [ 862.393969][T12550] gspca_se401: Frame size: 256x0 bayer [ 862.414863][T12550] gspca_se401: Frame size: 0x0 1/16th janggu [ 862.447690][ T44] usb 6-1: USB disconnect, device number 51 [ 862.454920][T12550] gspca_se401: Frame size: 0x4 bayer [ 862.486672][ T5888] usb 4-1: USB disconnect, device number 92 [ 862.564862][T12550] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input111 [ 862.595099][T12550] usb 8-1: USB disconnect, device number 21 [ 862.715754][T21975] fido_id[21975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 863.366850][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5660'. [ 863.485403][T21993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5662'. [ 863.507091][T21993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5662'. [ 864.210795][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5671'. [ 864.382771][T12550] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 864.572656][T12550] usb 7-1: Using ep0 maxpacket: 32 [ 864.590075][T12550] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 864.600257][T12550] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.608765][T12550] usb 7-1: Product: syz [ 864.613277][T12550] usb 7-1: Manufacturer: syz [ 864.617979][T12550] usb 7-1: SerialNumber: syz [ 864.639911][T12550] usb 7-1: config 0 descriptor?? [ 864.675211][T12550] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 864.953247][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 864.960730][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 865.093244][ T5888] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 865.115440][T22044] netlink: 'syz.8.5685': attribute type 1 has an invalid length. [ 865.171880][T22045] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5686'. [ 865.264784][ T5888] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.298889][ T5888] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.324846][ T5888] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 865.342633][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 865.353452][ T5888] usb 8-1: SerialNumber: syz [ 865.493230][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5689'. [ 865.577153][ T5888] usb 8-1: 0:2 : does not exist [ 865.621250][ T5888] usb 8-1: USB disconnect, device number 22 [ 865.689258][ T6441] udevd[6441]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.132092][T12550] gspca_stk1135: reg_w 0xf err -71 [ 866.154596][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.160990][T12550] gspca_stk1135: Sensor write failed [ 866.205462][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.211877][T12550] gspca_stk1135: Sensor write failed [ 866.243021][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.249437][T12550] gspca_stk1135: Sensor read failed [ 866.275526][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.281941][T12550] gspca_stk1135: Sensor read failed [ 866.322622][T12550] gspca_stk1135: Detected sensor type unknown (0x0) [ 866.342435][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.348840][T12550] gspca_stk1135: Sensor read failed [ 866.381725][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.409178][T12550] gspca_stk1135: Sensor read failed [ 866.423676][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.451228][T12550] gspca_stk1135: Sensor write failed [ 866.472549][T12550] gspca_stk1135: serial bus timeout: status=0x00 [ 866.478953][T12550] gspca_stk1135: Sensor write failed [ 866.503099][T12550] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 866.569105][T12550] usb 7-1: USB disconnect, device number 34 [ 867.462918][ T929] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 867.633536][ T929] usb 8-1: Using ep0 maxpacket: 16 [ 867.655734][ T929] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 867.688454][ T929] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.719619][ T929] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.770975][ T929] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 867.808589][ T929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.817702][ T929] usb 8-1: Product: syz [ 867.821935][ T929] usb 8-1: Manufacturer: syz [ 867.830530][ T929] usb 8-1: SerialNumber: syz [ 868.307697][ T929] usb 8-1: 0:2 : does not exist [ 869.336868][ T929] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 869.405687][ T929] usb 8-1: USB disconnect, device number 23 [ 869.482558][ T5888] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 869.605156][T22125] syzkaller0: entered promiscuous mode [ 869.610735][T22125] syzkaller0: entered allmulticast mode [ 869.660542][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.683699][ T5888] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 869.700382][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.711982][ T5888] usb 6-1: config 0 descriptor?? [ 869.945950][ T5888] usbhid 6-1:0.0: can't add hid device: -71 [ 869.956466][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 869.982676][ T5888] usb 6-1: USB disconnect, device number 52 [ 870.442550][ T5888] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 870.539331][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.545832][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.632551][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 870.640806][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.653845][ T5888] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 870.663654][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.688851][ T5888] usb 6-1: config 0 descriptor?? [ 870.705018][ T5888] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 870.740252][ T5888] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 871.147431][T22118] ldusb 6-1:0.0: Read buffer overflow, 297 bytes dropped [ 871.163196][ T929] usb 6-1: USB disconnect, device number 53 [ 871.197499][ T929] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 873.667035][T22157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5729'. [ 873.923850][ T30] audit: type=1326 audit(1748339292.675:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.5.5734" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x0 [ 874.226361][T22178] kvm: Disabled LAPIC found during irq injection [ 874.502581][ T30] audit: type=1326 audit(1748339293.245:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 874.604908][ T30] audit: type=1326 audit(1748339293.245:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 874.672744][ T30] audit: type=1326 audit(1748339293.245:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 874.760201][ T30] audit: type=1326 audit(1748339293.245:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 874.917272][ T30] audit: type=1326 audit(1748339293.245:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 875.072126][ T30] audit: type=1326 audit(1748339293.245:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 875.119767][T22193] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5746'. [ 875.130432][ T30] audit: type=1326 audit(1748339293.245:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 875.211476][ T30] audit: type=1326 audit(1748339293.245:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 875.275097][ T30] audit: type=1326 audit(1748339293.245:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.3.5740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 875.588509][T22200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.815044][T22208] loop2: detected capacity change from 0 to 7 [ 875.869703][T22208] Dev loop2: unable to read RDB block 7 [ 875.919016][T22208] loop2: unable to read partition table [ 875.938723][T22208] loop2: partition table beyond EOD, truncated [ 875.969302][T22208] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 876.308479][T22220] binder: 22219:22220 ioctl c0306201 80000640 returned -22 [ 876.356246][T22218] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 876.992569][ T5821] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 877.160554][ T5821] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 877.187885][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.210804][ T5821] usb 7-1: Product: syz [ 877.222959][ T5821] usb 7-1: Manufacturer: syz [ 877.241474][ T5821] usb 7-1: SerialNumber: syz [ 877.263789][ T5821] usb 7-1: config 0 descriptor?? [ 878.739600][ T5821] usb 7-1: f81604_read: reg: 200f failed: -EPROTO [ 878.770053][ T5821] usb 7-1: USB disconnect, device number 35 [ 878.844476][ T5821] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 878.994041][ T5821] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 880.839269][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5804'. [ 880.872409][T22329] sctp: [Deprecated]: syz.7.5803 (pid 22329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 880.872409][T22329] Use struct sctp_sack_info instead [ 880.928929][T22328] bond7: entered allmulticast mode [ 880.934713][T22328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 880.951332][T22331] batadv_slave_0: entered promiscuous mode [ 880.972528][ T5940] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 880.996161][T22331] batadv_slave_0: entered allmulticast mode [ 881.063956][T22331] bond7: (slave batadv_slave_0): making interface the new active one [ 881.110971][T22331] bond7: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 881.144754][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.221564][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.252485][ T5940] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 881.261619][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.352924][ T5940] usb 7-1: config 0 descriptor?? [ 881.817422][ T5940] cp2112 0003:10C4:EA90.0062: unknown main item tag 0x0 [ 881.868616][ T5940] cp2112 0003:10C4:EA90.0062: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 881.923339][T13860] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 882.013941][T22349] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5812'. [ 882.023801][ T5940] cp2112 0003:10C4:EA90.0062: Part Number: 0x82 Device Version: 0xFE [ 882.093535][T22350] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5812'. [ 882.117137][T13860] usb 8-1: Using ep0 maxpacket: 32 [ 882.135599][T13860] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 882.150177][T13860] usb 8-1: config 0 has no interface number 0 [ 882.170476][T13860] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 882.193883][T13860] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 882.210807][T13860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.220335][T13860] usb 8-1: Product: syz [ 882.260455][T13860] usb 8-1: Manufacturer: syz [ 882.277093][T13860] usb 8-1: SerialNumber: syz [ 882.314902][T13860] usb 8-1: config 0 descriptor?? [ 882.337364][T13860] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 882.365208][T13860] em28xx 8-1:0.132: Video interface 132 found: [ 882.407595][T22356] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 882.750764][T13860] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 882.888625][ T1209] usb 7-1: USB disconnect, device number 36 [ 883.418073][T13860] em28xx 8-1:0.132: failed to read eeprom (err=-110) [ 883.437431][T13860] em28xx 8-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 883.676921][T13860] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 883.692917][T13860] em28xx 8-1:0.132: analog set to bulk mode. [ 883.708203][ T929] em28xx 8-1:0.132: Registering V4L2 extension [ 883.757817][T13860] usb 8-1: USB disconnect, device number 24 [ 883.798044][T13860] em28xx 8-1:0.132: Disconnecting em28xx [ 883.866757][T22393] policy can only be matched on NF_INET_PRE_ROUTING [ 883.866784][T22393] unable to load match [ 884.154837][ T929] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 884.190494][ T929] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 884.200164][ T30] kauditd_printk_skb: 449 callbacks suppressed [ 884.200183][ T30] audit: type=1326 audit(1748339302.945:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 884.206806][ T929] em28xx 8-1:0.132: No AC97 audio processor [ 884.228808][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.309612][ T30] audit: type=1326 audit(1748339302.945:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 884.435723][ T929] usb 8-1: Decoder not found [ 884.437445][ T30] audit: type=1326 audit(1748339302.995:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 884.442375][ T929] em28xx 8-1:0.132: failed to create media graph [ 884.462564][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.577063][ T30] audit: type=1326 audit(1748339302.995:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 884.599800][ T929] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 884.635327][ T929] em28xx 8-1:0.132: Remote control support is not available for this card. [ 884.673124][T13860] em28xx 8-1:0.132: Closing input extension [ 884.714604][T13860] em28xx 8-1:0.132: Freeing device [ 884.719928][ T30] audit: type=1326 audit(1748339302.995:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 884.852026][ T30] audit: type=1326 audit(1748339303.025:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 884.872465][T22416] syz_tun: entered allmulticast mode [ 884.931015][T22415] syz_tun: left allmulticast mode [ 884.950133][ T30] audit: type=1326 audit(1748339303.025:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 885.037331][ T30] audit: type=1326 audit(1748339303.025:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 885.059544][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.075054][ T30] audit: type=1326 audit(1748339303.025:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 885.097396][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.172118][ T30] audit: type=1326 audit(1748339303.025:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.5.5829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 885.194380][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.560185][T22428] KVM: debugfs: duplicate directory 22428-5 [ 886.269562][T22445] random: crng reseeded on system resumption [ 886.982503][ T5888] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 887.032680][ T5821] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 887.163397][ T5888] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 887.181608][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.195987][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.212546][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 887.224977][ T5821] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 887.244664][ T5821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.246414][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.274183][ T5821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.308488][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.326178][ T5821] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 887.332411][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.352977][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.357054][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.375897][T22470] netlink: 'syz.6.5860': attribute type 4 has an invalid length. [ 887.379716][ T5821] usb 4-1: Product: syz [ 887.385649][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.397315][ T5821] usb 4-1: Manufacturer: syz [ 887.397341][ T5821] usb 4-1: SerialNumber: syz [ 887.428296][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.440945][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.442798][ T5940] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 887.449663][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.465626][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.479593][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.496152][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.531566][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.550551][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.560660][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.577509][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.590480][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.607562][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.620328][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.644495][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.645488][ T5940] usb 9-1: config index 0 descriptor too short (expected 31, got 27) [ 887.653703][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.690510][ T5940] usb 9-1: config 1 interface 0 has no altsetting 0 [ 887.695234][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 887.718180][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.720530][ T5940] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 887.730039][ T5888] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 887.738800][ T5940] usb 9-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 887.752182][ T5940] usb 9-1: Product: syz [ 887.757038][ T5888] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 887.759813][ T5940] usb 9-1: Manufacturer: syz [ 887.772750][ T5888] usb 6-1: Product: syz [ 887.777143][ T5888] usb 6-1: Manufacturer: syz [ 887.779057][ T5940] usb 9-1: SerialNumber: syz [ 887.782095][ T5888] usb 6-1: SerialNumber: syz [ 887.815177][ T5888] usb 6-1: config 0 descriptor?? [ 887.833322][ T5888] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 887.836585][ T5821] usb 4-1: 0:2 : does not exist [ 888.392068][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 888.443195][T12354] usb 6-1: USB disconnect, device number 54 [ 888.453187][ T5940] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 888.496929][T12354] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 888.953872][ T5821] usb 4-1: USB disconnect, device number 93 [ 889.004860][T18407] udevd[18407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.289884][ T5940] usb 9-1: USB disconnect, device number 19 [ 890.335614][ T5940] usblp1: removed [ 890.524363][T22509] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5873'. [ 891.534196][ T5940] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 891.704863][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 891.740843][ T5940] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 891.764550][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 891.832771][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 891.883966][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 891.935492][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.048874][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 892.089019][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.370109][ T5940] usb 4-1: GET_CAPABILITIES returned 0 [ 892.437719][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 892.731881][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5885'. [ 892.764531][ T929] usb 4-1: USB disconnect, device number 94 [ 892.770875][T22524] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 892.798371][T22537] tipc: Started in network mode [ 892.813497][T22537] tipc: Node identity ac14140f, cluster identity 4711 [ 892.820651][T22537] tipc: New replicast peer: 255.255.255.255 [ 892.844807][T22537] tipc: Enabled bearer , priority 10 [ 893.171814][ T929] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 893.221203][ T929] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 893.966423][ T929] tipc: Node number set to 2886997007 [ 895.000263][T22577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5901'. [ 895.077957][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5901'. [ 895.118649][T22577] erspan0: entered promiscuous mode [ 895.141668][T22577] macvtap1: entered promiscuous mode [ 895.160132][T22577] macvtap1: entered allmulticast mode [ 895.188171][T22577] erspan0: entered allmulticast mode [ 896.433694][T22621] random: crng reseeded on system resumption [ 898.012629][ T5821] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 898.182594][ T929] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 898.185256][ T5821] usb 7-1: Using ep0 maxpacket: 8 [ 898.202168][ T5821] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 898.233663][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 898.259595][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 898.288058][ T5821] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.316912][ T5821] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 898.336367][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.352511][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 898.361262][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.409012][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.432925][ T929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 898.466608][ T929] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 898.488181][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.520292][ T929] usb 4-1: config 0 descriptor?? [ 898.608490][ T5821] usb 7-1: GET_CAPABILITIES returned 0 [ 898.626210][ T5821] usbtmc 7-1:16.0: can't read capabilities [ 898.944516][ T5821] usb 7-1: USB disconnect, device number 37 [ 899.030152][ T929] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0064/input/input112 [ 899.056482][ T5888] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 899.176223][ T929] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0064/input/input113 [ 899.222920][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 899.248176][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.293600][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.321208][ T929] kye 0003:0458:5011.0064: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 899.351999][ T5888] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 899.393065][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.413693][ T929] usb 4-1: USB disconnect, device number 95 [ 899.437312][ T5888] usb 9-1: config 0 descriptor?? [ 899.728405][T22679] fido_id[22679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 899.955997][ T5888] koneplus 0003:1E7D:2D51.0065: unknown main item tag 0x0 [ 899.974974][ T5888] koneplus 0003:1E7D:2D51.0065: unknown main item tag 0x0 [ 899.982283][ T5888] koneplus 0003:1E7D:2D51.0065: unknown main item tag 0x0 [ 900.007844][T13860] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 900.044293][ T5888] koneplus 0003:1E7D:2D51.0065: unknown main item tag 0x0 [ 900.072145][ T5888] koneplus 0003:1E7D:2D51.0065: unknown main item tag 0x0 [ 900.100096][T22692] loop8: detected capacity change from 0 to 7 [ 900.107099][ T5888] koneplus 0003:1E7D:2D51.0065: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input0 [ 900.137153][T22692] Dev loop8: unable to read RDB block 7 [ 900.156249][T22692] loop8: AHDI p3 [ 900.186581][T22692] loop8: partition table partially beyond EOD, truncated [ 900.216836][T13860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.219007][ T6441] Dev loop8: unable to read RDB block 7 [ 900.249475][T13860] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 900.273658][ T6441] loop8: AHDI p3 [ 900.281489][T13860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.282670][ T6441] loop8: partition table partially beyond EOD, truncated [ 900.320833][T13860] usb 7-1: config 0 descriptor?? [ 900.350608][T22693] Dev loop8: unable to read RDB block 7 [ 900.402733][T22693] loop8: AHDI p3 [ 900.406472][T22693] loop8: partition table partially beyond EOD, truncated [ 900.474271][ T5940] usb 9-1: USB disconnect, device number 20 [ 900.583754][T13860] usbhid 7-1:0.0: can't add hid device: -71 [ 900.606043][T13860] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 900.636302][T13860] usb 7-1: USB disconnect, device number 38 [ 901.040493][T22712] loop4: detected capacity change from 0 to 7 [ 901.058459][T22712] Dev loop4: unable to read RDB block 7 [ 901.092940][T22712] loop4: AHDI p3 p4 [ 901.108592][T22712] loop4: partition table partially beyond EOD, truncated [ 901.122589][T13860] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 901.140773][T22712] loop4: p3 start 4294967295 is beyond EOD, truncated [ 901.310848][T13860] usb 7-1: Using ep0 maxpacket: 32 [ 901.329998][T13860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.361771][T13860] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 901.389817][T13860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.424043][T13860] usb 7-1: config 0 descriptor?? [ 901.450487][T13860] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 901.480901][T13860] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 901.712448][ T5940] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 901.864076][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 901.872146][ T5940] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 901.891860][ T5940] usb 9-1: config 0 has no interface number 0 [ 901.899732][ T5940] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 901.916941][ T5940] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 901.922120][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5963'. [ 901.929082][ T5940] usb 9-1: config 0 interface 41 has no altsetting 0 [ 901.953720][ T5940] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 901.965818][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.977666][ T5940] usb 9-1: Product: syz [ 901.981989][ T5940] usb 9-1: Manufacturer: syz [ 901.989670][ T5940] usb 9-1: SerialNumber: syz [ 902.007731][ T5821] usb 7-1: USB disconnect, device number 39 [ 902.017983][ T5940] usb 9-1: config 0 descriptor?? [ 902.025979][T22723] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.044701][ T5821] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 902.051681][T22723] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.287183][T22723] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.303966][T13860] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 902.313090][T22723] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.454792][T22742] sctp: [Deprecated]: syz.3.5968 (pid 22742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.454792][T22742] Use struct sctp_sack_info instead [ 902.474833][T13860] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 902.492411][T13860] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 902.515084][T13860] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 902.537122][T13860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 902.549741][T13860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 902.606501][T13860] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 902.646209][T13860] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 902.678675][T13860] usb 6-1: Product: syz [ 902.689705][T13860] usb 6-1: Manufacturer: syz [ 902.743699][ T5940] Error reading MAC address [ 902.752793][T22723] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.757366][T13860] cdc_wdm 6-1:1.0: skipping garbage [ 902.793469][T22723] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.796731][T13860] cdc_wdm 6-1:1.0: skipping garbage [ 902.867402][T13860] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 902.880223][T13860] cdc_wdm 6-1:1.0: Unknown control protocol [ 903.180251][T13860] usb 6-1: USB disconnect, device number 55 [ 903.457760][T22767] netlink: 'syz.7.5978': attribute type 1 has an invalid length. [ 903.487454][ T5940] sr9700 9-1:0.41 eth13: register 'sr9700' at usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet, ce:6c:1f:89:6f:e3 [ 903.514666][ T5940] usb 9-1: USB disconnect, device number 21 [ 903.543781][ T5940] sr9700 9-1:0.41 eth13: unregister 'sr9700' usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet [ 903.631774][T22767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 903.694497][T22769] bond1: (slave gretap1): making interface the new active one [ 903.706140][T22769] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 903.832812][T13860] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 904.019075][T13860] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 904.049309][T13860] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 904.071342][T22779] team0: Port device vlan0 removed [ 904.079151][T13860] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 904.100597][T13860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 904.119939][T13860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 904.146529][T13860] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 904.157746][T13860] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 904.166137][T13860] usb 6-1: Product: syz [ 904.170414][T13860] usb 6-1: Manufacturer: syz [ 904.195069][T13860] cdc_wdm 6-1:1.0: skipping garbage [ 904.202435][ T5888] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 904.246822][T13860] cdc_wdm 6-1:1.0: skipping garbage [ 904.273074][T13860] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 904.279060][T13860] cdc_wdm 6-1:1.0: Unknown control protocol [ 904.384318][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.407254][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.434295][ T5888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 904.453037][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 904.474023][ T5888] usb 4-1: SerialNumber: syz [ 904.490735][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.496484][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 904.502695][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.508811][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.517748][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.523475][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 904.529662][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.535839][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.542415][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.548141][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 904.555024][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.560814][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 904.572455][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.578197][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 904.584629][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.590345][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 904.596550][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 904.602281][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 904.623334][ T5821] usb 6-1: USB disconnect, device number 56 [ 904.726437][T13860] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 904.777009][ T5888] usb 4-1: 0:2 : does not exist [ 904.797820][ T5888] usb 4-1: unit 5: unexpected type 0x09 [ 904.831487][ T5888] usb 4-1: USB disconnect, device number 96 [ 904.866712][T18407] udevd[18407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.905806][T13860] usb 8-1: Using ep0 maxpacket: 16 [ 904.925925][T13860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 904.945843][T13860] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 904.973314][T13860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.987074][T13860] usb 8-1: Product: syz [ 904.993140][T13860] usb 8-1: Manufacturer: syz [ 904.998608][T13860] usb 8-1: SerialNumber: syz [ 905.014217][T13860] usb 8-1: config 0 descriptor?? [ 905.030367][T13860] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 905.039874][T13860] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 905.523025][T22805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5992'. [ 905.573694][T22805] tipc: Started in network mode [ 905.578676][T22805] tipc: Node identity 1, cluster identity 4711 [ 905.612806][T22805] tipc: Node number set to 1 [ 905.657419][T13860] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 906.316066][T13860] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 906.340088][T13860] em28xx 8-1:0.0: board has no eeprom [ 906.412835][T13860] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 906.431707][T13860] em28xx 8-1:0.0: dvb set to bulk mode. [ 906.439178][T12550] em28xx 8-1:0.0: Binding DVB extension [ 906.479644][T13860] usb 8-1: USB disconnect, device number 25 [ 906.557123][T13860] em28xx 8-1:0.0: Disconnecting em28xx [ 906.627709][T12550] em28xx 8-1:0.0: Registering input extension [ 906.682824][T13860] em28xx 8-1:0.0: Closing input extension [ 906.750378][T13860] em28xx 8-1:0.0: Freeing device [ 907.699044][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6013'. [ 907.778960][ T30] kauditd_printk_skb: 1031 callbacks suppressed [ 907.778981][ T30] audit: type=1326 audit(1748339326.525:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.8.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7fc00000 [ 907.789075][T22853] erspan0: entered promiscuous mode [ 907.864380][T22853] macvtap1: entered promiscuous mode [ 907.870130][T22853] macvtap1: entered allmulticast mode [ 907.908770][T22853] erspan0: entered allmulticast mode [ 907.986083][T22857] erspan0: left allmulticast mode [ 907.991638][T22857] erspan0: left promiscuous mode [ 908.274736][T22872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6019'. [ 908.284454][T22872] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6019'. [ 908.425039][ T30] audit: type=1326 audit(1748339327.175:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.8.6011" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e539 code=0x7fc00000 [ 908.460665][T13860] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 908.468963][T22875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6020'. [ 908.633262][T13860] usb 8-1: Using ep0 maxpacket: 32 [ 908.644709][T22870] loop2: detected capacity change from 0 to 7 [ 908.663144][T18407] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 908.696162][T18407] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 908.709545][T18407] Dev loop2: unable to read RDB block 7 [ 908.720006][T18407] loop2: unable to read partition table [ 908.732157][T18407] loop2: partition table beyond EOD, truncated [ 908.754650][T22870] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 908.792643][T22870] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 908.799470][T22870] Dev loop2: unable to read RDB block 7 [ 908.847940][T22870] loop2: unable to read partition table [ 908.893060][T22870] loop2: partition table beyond EOD, truncated [ 908.899343][T22870] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 908.946964][T13860] usb 8-1: unable to get BOS descriptor or descriptor too short [ 908.976722][T13860] usb 8-1: too many configurations: 105, using maximum allowed: 8 [ 909.013262][T13860] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 909.052513][T13860] usb 8-1: can't read configurations, error -71 [ 909.678200][ T5940] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 909.856962][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 909.900733][ T5940] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 909.943446][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.970790][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 909.981391][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 909.992241][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.005939][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 910.026654][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.270970][ T5940] usb 4-1: usb_control_msg returned -32 [ 910.292679][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 910.490403][T22918] loop6: detected capacity change from 0 to 7 [ 910.506259][T22918] Dev loop6: unable to read RDB block 7 [ 910.512188][T22918] loop6: unable to read partition table [ 910.519208][T22918] loop6: partition table beyond EOD, truncated [ 910.527751][T22918] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 910.903580][T13860] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 911.084194][T13860] usb 9-1: Using ep0 maxpacket: 16 [ 911.092414][T13860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.112426][T13860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.132654][T13860] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 911.155766][T13860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.183899][T13860] usb 9-1: config 0 descriptor?? [ 911.458806][T22941] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 911.601024][T12354] usb 4-1: USB disconnect, device number 97 [ 911.607864][T13860] kye 0003:0458:5016.0066: control desc unexpectedly large [ 911.659271][T13860] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0066/input/input115 [ 911.809747][T13860] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0066/input/input116 [ 911.909989][T13860] kye 0003:0458:5016.0066: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 911.959348][T13860] usb 9-1: USB disconnect, device number 22 [ 912.185287][T22952] fido_id[22952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 912.872985][T13860] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 913.002237][ T30] audit: type=1326 audit(1748339331.745:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 913.032602][ T30] audit: type=1326 audit(1748339331.775:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 913.059154][T13860] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 913.062433][T12354] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 913.078732][ T30] audit: type=1326 audit(1748339331.775:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 913.111853][T13860] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 913.153398][T13860] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 913.178400][T13860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.201276][ T30] audit: type=1326 audit(1748339331.775:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 913.251991][T22965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 913.276877][T13860] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 913.284714][ T30] audit: type=1326 audit(1748339331.775:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 913.371504][T12354] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 913.374778][ T30] audit: type=1326 audit(1748339331.775:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 913.418655][ T30] audit: type=1326 audit(1748339331.775:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 913.488844][T12354] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 913.501088][ T30] audit: type=1326 audit(1748339331.775:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe2558 code=0x7ffc0000 [ 913.562629][T12354] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 913.577863][ T5940] usb 4-1: USB disconnect, device number 98 [ 913.601140][T12354] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 913.664467][ T30] audit: type=1326 audit(1748339331.775:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 913.671018][T12354] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 913.699752][T12354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.761196][T12354] usb 9-1: config 0 descriptor?? [ 913.838532][ T30] audit: type=1326 audit(1748339331.775:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22973 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 914.265128][T12354] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving [ 914.364627][T12354] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 915.515121][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6078'. [ 915.574155][T23019] erspan0: entered promiscuous mode [ 915.595623][T23019] macvtap1: entered promiscuous mode [ 915.617953][T23019] macvtap1: entered allmulticast mode [ 915.638184][T23019] erspan0: entered allmulticast mode [ 915.685489][T23020] erspan0: left allmulticast mode [ 915.690883][T23020] erspan0: left promiscuous mode [ 916.472828][T13860] usb 9-1: reset high-speed USB device number 23 using dummy_hcd [ 916.613009][ T5821] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 916.778195][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 916.838776][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.873970][ T5821] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 916.887493][ T1081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.906690][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.951725][ T5821] usb 4-1: config 0 descriptor?? [ 916.968777][ T5821] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 917.150060][ T1081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.391853][ T1081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.587471][ T1081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.204713][T12550] usb 9-1: USB disconnect, device number 23 [ 918.428028][ T5821] gspca_vc032x: reg_w err -71 [ 918.459170][ T5821] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 918.518540][ T5821] usb 4-1: USB disconnect, device number 99 [ 919.834531][ T1081] bond0 (unregistering): Released all slaves [ 920.083938][ T1081] bond1 (unregistering): Released all slaves [ 920.105192][T23126] KVM: debugfs: duplicate directory 23126-4 [ 920.420759][T23129] loop6: detected capacity change from 0 to 7 [ 920.438470][T18407] Dev loop6: unable to read RDB block 7 [ 920.453716][T18407] loop6: AHDI p4 [ 920.461595][T18407] loop6: partition table partially beyond EOD, truncated [ 920.505490][T23129] Dev loop6: unable to read RDB block 7 [ 920.546420][T23129] loop6: AHDI p4 [ 920.563929][T23129] loop6: partition table partially beyond EOD, truncated [ 920.853919][ T1081] mac80211_hwsim hwsim18 wlan0 (unregistering): left allmulticast mode [ 921.387506][ T1081] hsr_slave_0: left promiscuous mode [ 921.433210][ T1081] hsr_slave_1: left promiscuous mode [ 921.456759][T12550] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 921.510480][ T1081] veth1_macvtap: left promiscuous mode [ 921.524728][ T1081] veth0_macvtap: left promiscuous mode [ 921.537933][ T1081] veth1_vlan: left promiscuous mode [ 921.549035][ T1081] veth0_vlan: left promiscuous mode [ 921.554783][T13860] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 921.650107][T12550] usb 4-1: Using ep0 maxpacket: 16 [ 921.670790][T12550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.702144][T12550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.743627][T13860] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 921.770039][T13860] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 921.783782][T12550] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 921.816097][T13860] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 921.841127][T12550] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 921.865114][T13860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.890696][T12550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.914735][T23159] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 921.972939][T13860] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.994452][T12550] usb 4-1: config 0 descriptor?? [ 922.256687][T13860] usb 6-1: USB disconnect, device number 57 [ 922.501517][T12550] kovaplus 0003:1E7D:2D50.0068: unknown main item tag 0x0 [ 922.511781][T12550] kovaplus 0003:1E7D:2D50.0068: unknown main item tag 0x0 [ 922.521865][T12550] kovaplus 0003:1E7D:2D50.0068: unknown main item tag 0x0 [ 922.563346][T12550] kovaplus 0003:1E7D:2D50.0068: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 922.903383][T12550] kovaplus 0003:1E7D:2D50.0068: couldn't init struct kovaplus_device [ 922.928989][T12550] kovaplus 0003:1E7D:2D50.0068: couldn't install mouse [ 922.959559][T12550] kovaplus 0003:1E7D:2D50.0068: probe with driver kovaplus failed with error -71 [ 923.000445][T12550] usb 4-1: USB disconnect, device number 100 [ 924.400232][T23210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6135'. [ 924.962514][T13860] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 925.162392][T13860] usb 7-1: Using ep0 maxpacket: 32 [ 925.177807][T13860] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 925.189809][T13860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 925.249096][T13860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 925.322734][T13860] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 925.331852][T13860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.372961][T13860] usb 7-1: config 0 descriptor?? [ 925.382116][T23212] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 925.451314][T13860] hub 7-1:0.0: USB hub found [ 925.646067][ T5821] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 925.696854][T13860] hub 7-1:0.0: 2 ports detected [ 925.832421][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 925.890288][ T5821] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.940803][ T5821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 926.001273][ T5821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 926.042238][ T5821] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 926.082868][ T5821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 926.119414][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.128734][T13860] hub 7-1:0.0: set hub depth failed [ 926.160400][T13860] usb 7-1: USB disconnect, device number 40 [ 926.414703][ T5821] usb 4-1: GET_CAPABILITIES returned 0 [ 926.449499][ T5821] usbtmc 4-1:16.0: can't read capabilities [ 926.636016][T13860] usb 4-1: USB disconnect, device number 101 [ 927.593455][ T5888] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 927.784894][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.828844][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.840727][T23261] loop7: detected capacity change from 0 to 16384 [ 927.868869][ T5888] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 927.930808][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.981777][ T5888] usb 9-1: config 0 descriptor?? [ 928.103119][T12354] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 928.295652][T12354] usb 4-1: config 0 has no interfaces? [ 928.331030][T12354] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 928.357783][T12354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.381054][T12354] usb 4-1: Product: syz [ 928.391817][T12354] usb 4-1: Manufacturer: syz [ 928.407794][T12354] usb 4-1: SerialNumber: syz [ 928.424459][T12354] usb 4-1: config 0 descriptor?? [ 928.446238][ T5888] cm6533_jd 0003:0D8C:0022.0069: unknown main item tag 0x0 [ 928.479226][ T5888] cm6533_jd 0003:0D8C:0022.0069: unknown main item tag 0x0 [ 928.524137][ T5888] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0069/input/input118 [ 928.603609][ T5888] cm6533_jd 0003:0D8C:0022.0069: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 928.654967][ T5888] usb 9-1: USB disconnect, device number 24 [ 928.784055][T23261] I/O error, dev loop7, sector 2600 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 928.855277][T23261] I/O error, dev loop7, sector 2856 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 928.904916][T23261] I/O error, dev loop7, sector 2600 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 928.957347][T23261] buffer_io_error: 40 callbacks suppressed [ 928.957369][T23261] Buffer I/O error on dev loop7, logical block 325, async page read [ 928.984365][T23280] fido_id[23280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 929.015898][T23261] I/O error, dev loop7, sector 2600 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.048461][T23261] Buffer I/O error on dev loop7, logical block 325, async page read [ 929.076301][T23261] I/O error, dev loop7, sector 2600 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 929.096591][T23261] Buffer I/O error on dev loop7, logical block 325, async page read [ 929.193698][T12354] usb 4-1: USB disconnect, device number 102 [ 929.211500][T23259] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 929.249006][T23259] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 929.294846][T23259] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 929.303816][T23259] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 929.312707][T23259] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 929.321297][T23259] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 929.330750][T23259] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 929.362296][T23259] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 929.421066][T23259] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 929.501634][T23259] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 69 prio class 0 [ 930.016280][T23307] loop6: detected capacity change from 0 to 7 [ 930.045730][T23307] Dev loop6: unable to read RDB block 7 [ 930.082513][T23307] loop6: AHDI p1 p2 p3 p4 [ 930.087029][T23307] loop6: partition table partially beyond EOD, truncated [ 930.107139][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6168'. [ 930.116932][ T5821] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 930.130312][T23307] loop6: p1 start 926365495 is beyond EOD, truncated [ 930.170015][T23307] loop6: p2 size 47 extends beyond EOD, truncated [ 930.193898][T23307] loop6: p3 start 1886353253 is beyond EOD, truncated [ 930.218721][ T1328] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.259424][ T1328] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.280277][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 930.299542][ T5821] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 930.335014][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 930.382256][ T5821] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 930.409003][T18407] udevd[18407]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 930.436167][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 930.469405][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 930.505651][ T1328] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.507752][ T5821] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 930.549002][ T1328] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.557142][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 930.586405][ T5821] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 930.614459][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 930.660726][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 930.721200][ T5821] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 930.731577][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 930.761618][ T5821] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 930.776183][ T1328] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.787277][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 930.787316][ T5821] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 930.840708][ T1328] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.903321][ T5821] usb 6-1: string descriptor 0 read error: -22 [ 930.930243][ T5821] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 930.990699][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.083010][ T5821] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 931.148350][ T1328] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.189453][ T1328] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.766854][ T5821] usb 6-1: USB disconnect, device number 58 [ 931.961116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.967744][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.170966][T23350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 932.187248][T23350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 932.198518][T23350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 932.207984][T23350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 932.218067][T23350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 932.250975][T16144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 932.267273][T16144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 932.295020][T16144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 932.319954][T16144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 932.337764][T16144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 932.341541][T23349] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 932.802803][ T5888] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 932.940458][ T1328] bond1 (unregistering): (slave gretap1): Releasing active interface [ 932.974824][ T5888] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 933.000044][ T5888] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 933.022945][ T5888] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 933.060008][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.103293][T23358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 933.150371][ T5888] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 933.399190][ T5888] usb 9-1: USB disconnect, device number 25 [ 933.472268][ T5889] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 933.571098][ T1328] bond0 (unregistering): Released all slaves [ 933.691465][ T5889] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 933.700900][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.724553][ T5889] usb 4-1: config 0 descriptor?? [ 933.757623][ T5889] gspca_main: spca508-2.14.0 probing 8086:0110 [ 933.850856][ T1328] bond1 (unregistering): Released all slaves [ 933.996201][ T5889] gspca_spca508: reg_read err -32 [ 934.003237][ T5889] gspca_spca508: reg_read err -32 [ 934.023023][ T5889] gspca_spca508: reg_read err -32 [ 934.211419][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6193'. [ 934.264073][ T5889] gspca_spca508: reg_read err -32 [ 934.433312][T23390] tipc: Failed to remove unknown binding: 66,1,1/0:2651887970/2651887972 [ 934.453493][T23390] tipc: Failed to remove unknown binding: 66,1,1/0:2651887970/2651887972 [ 934.519570][T23350] Bluetooth: hci2: command tx timeout [ 934.529395][ T5889] gspca_spca508: reg write: error -71 [ 934.565691][ T5889] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 934.643842][ T5889] usb 4-1: USB disconnect, device number 103 [ 934.989380][ T1328] hsr_slave_0: left promiscuous mode [ 935.016508][ T1328] hsr_slave_1: left promiscuous mode [ 935.092222][ T1328] veth1_macvtap: left promiscuous mode [ 935.103491][ T1328] veth0_macvtap: left promiscuous mode [ 935.109643][ T1328] veth1_vlan: left promiscuous mode [ 935.707118][T23421] input: syz0 as /devices/virtual/input/input119 [ 936.599171][T16144] Bluetooth: hci2: command tx timeout [ 937.152107][T23356] chnl_net:caif_netlink_parms(): no params data found [ 937.256612][T23432] netlink: 'syz.5.6205': attribute type 1 has an invalid length. [ 937.431594][T23432] bond5: (slave veth3): Enslaving as an active interface with a down link [ 937.912202][T23444] macvlan0: entered promiscuous mode [ 937.971513][T23444] bond0: entered promiscuous mode [ 938.011318][T23444] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 938.055080][T23444] team0: Port device macvlan0 added [ 938.126928][T23356] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.172263][T23356] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.200849][T23356] bridge_slave_0: entered allmulticast mode [ 938.251752][T23356] bridge_slave_0: entered promiscuous mode [ 938.314263][T23356] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.321532][T23356] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.383058][T23356] bridge_slave_1: entered allmulticast mode [ 938.401157][T23356] bridge_slave_1: entered promiscuous mode [ 938.584255][ T5940] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 938.672845][T16144] Bluetooth: hci2: command tx timeout [ 938.762634][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 938.803794][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.845694][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42399, setting to 1024 [ 938.878842][ T5940] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 938.895175][T23464] vlan2: entered allmulticast mode [ 938.900499][T23464] bridge_slave_0: entered allmulticast mode [ 938.911457][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.963166][ T5940] usb 6-1: config 0 descriptor?? [ 938.991698][T23457] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 939.024362][ T5940] hub 6-1:0.0: USB hub found [ 939.034759][T23356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.123019][T23356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.237802][ T5940] hub 6-1:0.0: 1 port detected [ 939.459940][T23356] team0: Port device team_slave_0 added [ 939.491115][T23356] team0: Port device team_slave_1 added [ 939.686069][T23356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.700486][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6222'. [ 939.724877][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.751320][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.811128][T23356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.834720][T23356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.870842][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.964962][T23356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.036852][T23492] xt_CT: No such helper "netbios-ns" [ 940.255689][T23356] hsr_slave_0: entered promiscuous mode [ 940.325243][T23356] hsr_slave_1: entered promiscuous mode [ 940.371478][T23356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.378272][ T5940] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 940.379894][T13860] usb 6-1: USB disconnect, device number 59 [ 940.406724][T23356] Cannot create hsr debugfs directory [ 940.753813][T16144] Bluetooth: hci2: command tx timeout [ 941.495915][T23356] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 941.530138][T23529] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6232'. [ 941.565905][T23356] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 941.650276][T23356] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 941.681107][T23356] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 942.268358][T23356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.388556][T23356] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.455038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.462360][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.533921][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.541270][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.792855][T23565] loop2: detected capacity change from 0 to 7 [ 942.827545][T23565] Dev loop2: unable to read RDB block 7 [ 942.863735][T23565] loop2: unable to read partition table [ 942.881794][T23356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.896275][T23565] loop2: partition table beyond EOD, truncated [ 942.920225][T23565] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 943.091906][T23356] veth0_vlan: entered promiscuous mode [ 943.215962][T23356] veth1_vlan: entered promiscuous mode [ 943.432098][T23356] veth0_macvtap: entered promiscuous mode [ 943.489301][T23356] veth1_macvtap: entered promiscuous mode [ 943.596304][T23583] input: syz1 as /devices/virtual/input/input120 [ 943.628203][T23356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.699146][T23356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.722928][T23356] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.738518][T23356] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.762416][T23356] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.791518][T23356] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.082386][ T30] kauditd_printk_skb: 354 callbacks suppressed [ 944.082409][ T30] audit: type=1800 audit(1748339362.825:5383): pid=23591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6252" name="dmabuf" dev="dmabuf" ino=21 res=0 errno=0 [ 944.276355][T17253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.332642][T17253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.497726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.543783][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.010429][T23651] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6270'. [ 946.817569][T23674] netlink: 'syz.3.6279': attribute type 39 has an invalid length. [ 947.004116][ T5940] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 947.185177][ T5940] usb 7-1: Using ep0 maxpacket: 32 [ 947.241585][ T5940] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 947.282055][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.400379][ T5940] usb 7-1: config 0 descriptor?? [ 947.446914][ T5940] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 947.533564][ T5940] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input121 [ 947.937380][ T5888] usb 7-1: USB disconnect, device number 41 [ 949.835503][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6298'. [ 949.865404][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6298'. [ 950.332829][ T5888] IPVS: starting estimator thread 0... [ 950.436430][T23754] IPVS: using max 22 ests per chain, 52800 per kthread [ 950.532074][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6302'. [ 950.603033][ T1209] IPVS: starting estimator thread 0... [ 950.732537][T23764] IPVS: using max 24 ests per chain, 57600 per kthread [ 951.121473][T23778] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 951.356540][ T3010] IPVS: stop unused estimator thread 0... [ 954.270885][T23853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6326'. [ 957.915171][ T5940] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 958.107043][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 958.127916][ T5940] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 958.172412][ T5940] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.215593][ T929] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 958.222349][ T5940] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 958.275795][ T5940] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.305613][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.337485][ T5940] usb 6-1: Product: syz [ 958.341815][ T5940] usb 6-1: Manufacturer: syz [ 958.362818][ T5940] usb 6-1: SerialNumber: syz [ 958.386391][ T929] usb 7-1: config 0 has no interfaces? [ 958.423277][ T929] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 958.444239][ T929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.484106][ T929] usb 7-1: config 0 descriptor?? [ 958.760297][ T929] usb 7-1: USB disconnect, device number 42 [ 958.839922][ T5940] usb 6-1: 0:2 : does not exist [ 959.738131][T13860] usb 6-1: USB disconnect, device number 60 [ 959.972632][ T5940] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 960.153985][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 960.189513][ T5940] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 960.215887][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.242937][ T5940] usb 4-1: config 0 descriptor?? [ 960.277752][ T5940] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 960.318486][ T5940] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input123 [ 960.716655][ T5940] usb 4-1: USB disconnect, device number 104 [ 961.963028][T13860] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 962.146297][T13860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.173300][T13860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.197210][T13860] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 962.232628][ T929] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 962.263853][T24046] loop2: detected capacity change from 0 to 7 [ 962.268162][T13860] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 962.311459][T13860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.326959][T24046] Dev loop2: unable to read RDB block 7 [ 962.336033][T24046] loop2: unable to read partition table [ 962.376816][T13860] usb 9-1: config 0 descriptor?? [ 962.382101][T24046] loop2: partition table beyond EOD, truncated [ 962.405007][ T929] usb 10-1: Using ep0 maxpacket: 8 [ 962.408015][T24046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 962.433321][ T929] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 962.480533][ T929] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 962.522103][ T929] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 962.552123][ T929] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 962.632724][ T929] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.716892][ T929] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 962.792097][ T929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.894816][T13860] plantronics 0003:047F:FFFF.006A: No inputs registered, leaving [ 962.966557][T13860] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 963.083635][ T929] usb 10-1: GET_CAPABILITIES returned 0 [ 963.116986][ T929] usbtmc 10-1:16.0: can't read capabilities [ 963.157291][T24061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6386'. [ 963.280786][ T929] usb 9-1: USB disconnect, device number 26 [ 963.383655][T13860] usb 10-1: USB disconnect, device number 2 [ 963.510402][T24072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6389'. [ 964.415943][ T30] audit: type=1326 audit(1748339383.165:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 964.564598][ T30] audit: type=1326 audit(1748339383.185:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 964.586800][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.762621][ T30] audit: type=1326 audit(1748339383.185:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 964.784806][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.942631][ T30] audit: type=1326 audit(1748339383.185:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 964.964884][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.005017][T24105] loop2: detected capacity change from 0 to 7 [ 965.043730][T24105] Dev loop2: unable to read RDB block 7 [ 965.072783][T24105] loop2: unable to read partition table [ 965.077024][T24104] netlink: 'syz.5.6397': attribute type 3 has an invalid length. [ 965.102420][ T30] audit: type=1326 audit(1748339383.185:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 965.127404][T24105] loop2: partition table beyond EOD, truncated [ 965.149592][T24105] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 965.289517][ T30] audit: type=1326 audit(1748339383.185:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 965.467178][ T30] audit: type=1326 audit(1748339383.195:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 965.625045][ T30] audit: type=1326 audit(1748339383.195:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 965.681642][ T30] audit: type=1326 audit(1748339383.205:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f68558 code=0x7ffc0000 [ 965.709705][ T30] audit: type=1326 audit(1748339383.205:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.6392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 965.732084][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.153984][ T929] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 966.186889][ T929] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 966.644913][T24144] fuse: Bad value for 'fd' [ 968.672971][T16144] Bluetooth: hci2: command 0x0c1a tx timeout [ 968.681195][T24137] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 969.433887][T24137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 969.445539][T24137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 969.862655][ T929] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 970.026553][ T929] usb 4-1: Using ep0 maxpacket: 16 [ 970.039398][ T929] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.095076][ T929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 970.104623][ T929] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 970.141001][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.196158][ T929] usb 4-1: config 0 descriptor?? [ 970.427414][T24241] input: syz0 as /devices/virtual/input/input124 [ 970.672957][T24054] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 970.752532][T16144] Bluetooth: hci2: command 0x0c1a tx timeout [ 970.855418][T24054] usb 10-1: Using ep0 maxpacket: 16 [ 970.871903][T24054] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.903638][T24054] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.927931][T24054] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 970.962402][T24054] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 970.978839][T24054] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.001223][T24054] usb 10-1: config 0 descriptor?? [ 971.469958][T24054] microsoft 0003:045E:07DA.006D: No inputs registered, leaving [ 971.593338][T24054] microsoft 0003:045E:07DA.006D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 971.619645][T24054] microsoft 0003:045E:07DA.006D: no inputs found [ 971.648318][T24054] microsoft 0003:045E:07DA.006D: could not initialize ff, continuing anyway [ 971.692025][T24054] usb 10-1: USB disconnect, device number 3 [ 971.889645][T24267] fido_id[24267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 972.019387][T24271] tipc: Started in network mode [ 972.025922][T24271] tipc: Node identity 7f000001, cluster identity 4711 [ 972.034268][T24271] tipc: Enabling of bearer rejected, failed to enable media [ 972.719815][T24054] usb 4-1: USB disconnect, device number 105 [ 972.832627][T16144] Bluetooth: hci2: command 0x0c1a tx timeout [ 972.850063][T24285] binder: 24283:24285 ioctl c0306201 80000700 returned -14 [ 972.928657][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 972.928679][ T30] audit: type=1326 audit(1748339391.675:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.9.6436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 973.061475][ T30] audit: type=1326 audit(1748339391.675:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.9.6436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 973.147930][ T30] audit: type=1326 audit(1748339391.675:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.9.6436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 973.382879][ T5889] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 973.559245][ T5889] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 973.577843][ T5889] usb 6-1: config 0 has no interface number 0 [ 973.595925][ T5889] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 973.623488][ T5889] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 973.647645][ T5889] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 973.681440][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.728314][ T5889] usb 6-1: config 0 descriptor?? [ 973.754666][T24288] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 973.782990][ T44] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 973.823625][ T5889] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 973.939309][T24307] syzkaller1: entered promiscuous mode [ 973.953061][T24307] syzkaller1: entered allmulticast mode [ 973.965858][ T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.983667][ T44] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 974.029917][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.084284][ T44] usb 7-1: config 0 descriptor?? [ 974.116859][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 974.156144][ T5889] usb 6-1: USB disconnect, device number 61 [ 974.156217][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 974.517628][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 974.557995][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 974.720128][T24325] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6449'. [ 974.761769][T24325] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6449'. [ 974.808825][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 974.841872][ T44] pwc: recv_control_msg error -32 req 04 val 1300 [ 974.877028][ T44] pwc: recv_control_msg error -71 req 04 val 1400 [ 974.920811][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 974.956445][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 974.987194][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 974.996821][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 975.015571][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 975.043379][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 975.061979][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 975.079039][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 975.090638][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 975.105144][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 975.128234][ T44] pwc: Registered as video103. [ 975.168918][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input125 [ 975.288809][ T44] usb 7-1: USB disconnect, device number 43 [ 975.312567][ T929] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 975.484737][ T929] usb 9-1: Using ep0 maxpacket: 32 [ 975.495085][ T929] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 975.523300][ T929] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 975.546157][ T929] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 975.574371][T24342] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6454'. [ 975.575018][ T929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 975.645502][ T929] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 975.715744][ T929] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 975.740406][T24342] bond1: entered promiscuous mode [ 975.761451][T24342] bond1: entered allmulticast mode [ 975.779466][ T929] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 975.841090][T24348] ip6tnl1: entered allmulticast mode [ 975.862873][ T929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.887357][T24348] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 975.904711][ T929] usb 9-1: config 0 descriptor?? [ 975.992093][T24348] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 976.274198][ T929] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 976.432855][ T929] usb 9-1: USB disconnect, device number 27 [ 976.513368][ T929] usblp0: removed [ 976.872421][ T5889] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 977.072895][ T929] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 977.084836][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 977.120525][ T5889] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 977.162488][ T5889] usb 4-1: config 0 has no interface number 0 [ 977.190869][ T5889] usb 4-1: config 0 interface 12 has no altsetting 0 [ 977.234555][ T5889] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 977.243701][ T929] usb 9-1: Using ep0 maxpacket: 32 [ 977.259360][ T929] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 977.272651][ T929] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 977.281333][ T929] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 977.289781][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.313402][ T5889] usb 4-1: Product: syz [ 977.317639][ T5889] usb 4-1: Manufacturer: syz [ 977.327185][ T929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 977.350043][ T929] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 977.360233][ T5889] usb 4-1: SerialNumber: syz [ 977.362070][ T929] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 977.400781][ T929] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 977.421558][ T929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.422992][ T5889] usb 4-1: config 0 descriptor?? [ 977.444167][ T929] usb 9-1: config 0 descriptor?? [ 977.704012][ T929] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 978.245979][ T44] usb 9-1: USB disconnect, device number 28 [ 978.283217][ T44] usblp0: removed [ 978.823330][T24412] netlink: 62 bytes leftover after parsing attributes in process `syz.5.6473'. [ 978.957262][ T5889] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 978.990500][ T5889] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 979.007851][ T5889] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 979.030027][ T5889] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 979.105338][ T5889] usb 4-1: USB disconnect, device number 106 [ 979.622453][ T5889] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 979.807594][ T5889] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 979.837663][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.884590][ T5889] usb 6-1: config 0 descriptor?? [ 979.928934][ T5889] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 980.166606][ T5889] gp8psk: usb in 128 operation failed. [ 980.214714][ T929] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 980.276081][T24447] syzkaller0: entered allmulticast mode [ 980.304795][T24447] syzkaller0 (unregistering): left allmulticast mode [ 980.403207][ T5889] gp8psk: usb in 146 operation failed. [ 980.403206][ T929] usb 9-1: Using ep0 maxpacket: 32 [ 980.430046][ T929] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 980.433095][ T5889] gp8psk: failed to get FW version [ 980.466134][ T5889] gp8psk: usb in 149 operation failed. [ 980.478666][ T5889] gp8psk: failed to get FPGA version [ 980.484305][ T929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.532826][ T929] usb 9-1: config 0 descriptor?? [ 980.692805][ T5821] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 980.721166][ T5889] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 980.762438][ T5889] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 980.776122][ T929] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 980.853770][ T929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.903252][ T929] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 980.931099][ T5821] usb 7-1: Using ep0 maxpacket: 32 [ 980.935304][ T929] usb 9-1: media controller created [ 980.981353][ T5821] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 980.988627][ T44] usb 6-1: USB disconnect, device number 62 [ 981.007968][ T5821] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 981.072379][ T5821] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 981.079605][T24460] gtp0: entered promiscuous mode [ 981.090644][ T929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 981.118395][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 981.178390][ T5821] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 981.223573][ T5821] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 981.269043][ T5821] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 981.280798][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.306377][ T5821] usb 7-1: config 0 descriptor?? [ 981.566086][ T5821] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 981.672670][ T5821] usb 7-1: USB disconnect, device number 44 [ 981.717334][ T5821] usblp0: removed [ 981.962843][ T929] stb0899_attach: Driver disabled by Kconfig [ 981.990105][ T929] az6027: no front-end attached [ 981.990105][ T929] [ 982.030858][ T929] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 982.104483][ T929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input126 [ 982.152523][ T5821] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 982.173433][ T929] dvb-usb: schedule remote query interval to 400 msecs. [ 982.180865][ T929] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 982.245820][ T929] usb 9-1: USB disconnect, device number 29 [ 982.343657][ T5821] usb 7-1: Using ep0 maxpacket: 32 [ 982.373036][ T5821] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 982.414446][ T5821] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 982.428659][ T929] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 982.438975][ T5821] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 982.500211][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 982.546166][ T5821] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 982.576550][ T5821] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 982.642717][ T5821] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 982.658060][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.688792][ T5821] usb 7-1: config 0 descriptor?? [ 982.937520][ T5821] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 983.302904][ T5821] usb 7-1: USB disconnect, device number 45 [ 983.333736][ T5821] usblp0: removed [ 988.842736][ T5889] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 989.024607][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.057523][T24620] kvm: kvm [24619]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x9 [ 989.074130][ T5889] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 989.100578][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.175758][ T5889] usb 6-1: config 0 descriptor?? [ 989.205161][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 989.410711][T24634] ================================================================== [ 989.418874][T24634] BUG: KASAN: use-after-free in __crypto_shash_import+0x26a/0x2a0 [ 989.426744][T24634] Write of size 1 at addr ffff88815d205b47 by task syz.3.6535/24634 [ 989.434765][T24634] [ 989.437124][T24634] CPU: 1 UID: 0 PID: 24634 Comm: syz.3.6535 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 989.437151][T24634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 989.437163][T24634] Call Trace: [ 989.437173][T24634] [ 989.437181][T24634] dump_stack_lvl+0x189/0x250 [ 989.437214][T24634] ? __virt_addr_valid+0x1c8/0x5c0 [ 989.437243][T24634] ? rcu_is_watching+0x15/0xb0 [ 989.437268][T24634] ? __kasan_check_byte+0x12/0x40 [ 989.437290][T24634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.437323][T24634] ? rcu_is_watching+0x15/0xb0 [ 989.437347][T24634] ? lock_release+0x4b/0x3e0 [ 989.437371][T24634] ? __virt_addr_valid+0x1c8/0x5c0 [ 989.437399][T24634] ? __virt_addr_valid+0x4a5/0x5c0 [ 989.437426][T24634] print_report+0xd2/0x2b0 [ 989.437449][T24634] ? __crypto_shash_import+0x26a/0x2a0 [ 989.437467][T24634] kasan_report+0x118/0x150 [ 989.437488][T24634] ? __local_bh_enable_ip+0x12d/0x1c0 [ 989.437514][T24634] ? __crypto_shash_import+0x26a/0x2a0 [ 989.437537][T24634] __crypto_shash_import+0x26a/0x2a0 [ 989.437558][T24634] crypto_shash_import+0x84/0x230 [ 989.437578][T24634] hash_accept+0x1fb/0x280 [ 989.437604][T24634] do_accept+0x48c/0x680 [ 989.437628][T24634] ? __pfx_do_accept+0x10/0x10 [ 989.437659][T24634] __sys_accept4+0x11c/0x1c0 [ 989.437680][T24634] ? __pfx___sys_accept4+0x10/0x10 [ 989.437706][T24634] __ia32_sys_accept4+0x9a/0xb0 [ 989.437727][T24634] __do_fast_syscall_32+0xb4/0x110 [ 989.437753][T24634] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.437776][T24634] do_fast_syscall_32+0x34/0x80 [ 989.437800][T24634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 989.437823][T24634] RIP: 0023:0xf7f68539 [ 989.437842][T24634] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 989.437860][T24634] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 989.437881][T24634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 989.437895][T24634] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 989.437907][T24634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 989.437919][T24634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 989.437931][T24634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 989.437951][T24634] [ 989.437959][T24634] [ 989.673700][T24634] The buggy address belongs to the physical page: [ 989.680141][T24634] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15d205 [ 989.689118][T24634] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 989.696353][T24634] raw: 057ff00000000000 ffffea0005748148 ffffea0005748148 0000000000000000 [ 989.704954][T24634] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 989.713545][T24634] page dumped because: kasan: bad access detected [ 989.720012][T24634] page_owner info is not present (never set?) [ 989.726170][T24634] [ 989.728516][T24634] Memory state around the buggy address: [ 989.734157][T24634] ffff88815d205a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 989.742224][T24634] ffff88815d205a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 989.750291][T24634] >ffff88815d205b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 989.758360][T24634] ^ [ 989.764516][T24634] ffff88815d205b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 989.772589][T24634] ffff88815d205c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 989.780664][T24634] ================================================================== [ 989.788852][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.822262][T24634] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 989.829533][T24634] CPU: 1 UID: 0 PID: 24634 Comm: syz.3.6535 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 989.841392][T24634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 989.851465][T24634] Call Trace: [ 989.854844][T24634] [ 989.857793][T24634] dump_stack_lvl+0x99/0x250 [ 989.862428][T24634] ? __asan_memcpy+0x40/0x70 [ 989.867065][T24634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.872300][T24634] ? __pfx__printk+0x10/0x10 [ 989.876918][T24634] panic+0x2db/0x790 [ 989.880833][T24634] ? __pfx_panic+0x10/0x10 [ 989.885281][T24634] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 989.891196][T24634] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 989.897717][T24634] ? print_memory_metadata+0x314/0x400 [ 989.903197][T24634] ? __crypto_shash_import+0x26a/0x2a0 [ 989.908673][T24634] check_panic_on_warn+0x89/0xb0 [ 989.913630][T24634] ? __crypto_shash_import+0x26a/0x2a0 [ 989.919099][T24634] end_report+0x78/0x160 [ 989.923355][T24634] kasan_report+0x129/0x150 [ 989.927960][T24634] ? __local_bh_enable_ip+0x12d/0x1c0 [ 989.933354][T24634] ? __crypto_shash_import+0x26a/0x2a0 [ 989.938821][T24634] __crypto_shash_import+0x26a/0x2a0 [ 989.944213][T24634] crypto_shash_import+0x84/0x230 [ 989.949256][T24634] hash_accept+0x1fb/0x280 [ 989.953685][T24634] do_accept+0x48c/0x680 [ 989.957951][T24634] ? __pfx_do_accept+0x10/0x10 [ 989.962737][T24634] __sys_accept4+0x11c/0x1c0 [ 989.967340][T24634] ? __pfx___sys_accept4+0x10/0x10 [ 989.972470][T24634] __ia32_sys_accept4+0x9a/0xb0 [ 989.977344][T24634] __do_fast_syscall_32+0xb4/0x110 [ 989.982557][T24634] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.987781][T24634] do_fast_syscall_32+0x34/0x80 [ 989.992644][T24634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 989.998998][T24634] RIP: 0023:0xf7f68539 [ 990.003078][T24634] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 990.022702][T24634] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 990.031129][T24634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 990.039115][T24634] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 990.047133][T24634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 990.055202][T24634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 990.063180][T24634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 990.071256][T24634] [ 990.074780][T24634] Kernel Offset: disabled [ 990.079102][T24634] Rebooting in 86400 seconds..