last executing test programs: 2m43.384973638s ago: executing program 0 (id=622): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xa, 0x3}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000000)="70c6", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x20000000) 2m42.267214351s ago: executing program 0 (id=628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="3ef226662ed93f0f05670f01cbc74424008000c0fec744240271000000c744240600000000b988020000b8e9350000ba000000000f3024b885003ef241a4c4e3b57e3700f30fc7710f460f0766b8f5000f00d0", 0x53}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.813957139s ago: executing program 0 (id=634): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)="f5", 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast1, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 2m41.615945156s ago: executing program 0 (id=636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0xcf, 0x1, 0xfd, 0x2, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0x52, 0xe1, 0xd, 0x80}, 0xe) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x2004c144, 0x0, 0x0) 2m41.274358561s ago: executing program 0 (id=639): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) 2m41.021629835s ago: executing program 0 (id=643): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m25.906148124s ago: executing program 32 (id=643): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m56.875521294s ago: executing program 3 (id=919): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) 1m56.582015811s ago: executing program 3 (id=923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x9000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 1m56.199765594s ago: executing program 3 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m55.438436605s ago: executing program 3 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) move_pages(r1, 0x6, &(0x7f0000000040)=[&(0x7f00008e3000/0x1000)=nil, &(0x7f00009e5000/0x1000)=nil, &(0x7f0000225000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000004c000/0x2000)=nil, &(0x7f00002e7000/0x4000)=nil], &(0x7f0000000180)=[0x1ff, 0x8ce7, 0x6edd9d33, 0x0, 0xa, 0xd4fa], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000086b1d010140000102030109025f000301bc00060904000000010100000a24010600020221"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f000000f140), 0x2, 0x0) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f000000f280)=@multiplanar_userptr={0x1, 0xa, 0x4, 0x10000, 0x1, {}, {0x2, 0x0, 0x5, 0x7, 0x8, 0x9, "525067fc"}, 0x79, 0x2, {0x0}}) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}}, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m54.562514869s ago: executing program 3 (id=934): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x22, 0xffffffffffffffff, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140), 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x14000012) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xe002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$MSR(0x0, 0x547, 0x0) read$FUSE(0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffffffffcf9) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x300) 1m53.394917689s ago: executing program 3 (id=939): syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r1, 0x0, 0x80000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x38, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 1m48.091519835s ago: executing program 2 (id=959): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020e4c1c40030478fae9a701020301090212000109e2200a0904ab0800f90a493f8876e6b0ab25c39443f108aaa0986608"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) 1m46.987332763s ago: executing program 2 (id=961): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x200a, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1867726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x222008, &(0x7f0000000300)={[{@huge_never}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x25, 0x35, 0x25]}}, {@mode={'mode', 0x3d, 0x6}}, {@huge_never}, {@huge_advise}, {@huge_always}, {@usrquota}, {@huge_within_size}], [{@dont_appraise}]}) userfaultfd(0x80001) epoll_create1(0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0xf73, 0xe, 0x1, 0x1, 0xe8, 0x100, 0x7, 0x7b1, 0x6, 0x4, 0x400, 0x800000, 0x8, 0xfffff23c, 0x14, 0x12, {0x4, 0x2}, 0x80, 0x3}}) syz_open_dev$sg(0x0, 0x0, 0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000640)=""/168, 0xa8}], 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m46.628237949s ago: executing program 2 (id=964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@dstopts={0x88}]}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.015718881s ago: executing program 2 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010000000000000000000200000000000009000000000c001680050002000200000006001c004e240000080010000180ffff08001e0022"], 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) writev(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000002280)={0x2020}, 0x2020) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r10) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r11, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x0) 1m43.855033913s ago: executing program 2 (id=968): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)="371b", 0x2) 1m43.062933288s ago: executing program 2 (id=974): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x40000476, 0x4000000000000000, 0xfffffffffffffffc, 0x8, 0x0, 0xfeff}) syz_open_dev$dri(0x0, 0x1, 0x0) (async) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYBLOB='f']) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], 0x1, 0x800}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x3c}}, 0x0) (async) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x3c}}, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1m38.325119209s ago: executing program 33 (id=939): syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r1, 0x0, 0x80000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x38, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 1m27.555884225s ago: executing program 34 (id=974): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x40000476, 0x4000000000000000, 0xfffffffffffffffc, 0x8, 0x0, 0xfeff}) syz_open_dev$dri(0x0, 0x1, 0x0) (async) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYBLOB='f']) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], 0x1, 0x800}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x3c}}, 0x0) (async) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x3c}}, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 17.559328247s ago: executing program 7 (id=1189): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = fsmount(r6, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r10, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) io_uring_enter(r11, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) 14.380708715s ago: executing program 6 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x0, 0xcb, r0}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x20, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) 13.649350414s ago: executing program 7 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x7d, 'syz1\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 12.482620089s ago: executing program 6 (id=1202): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001540)=""/4094, 0xffe}], 0x1) 12.331802064s ago: executing program 7 (id=1203): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x3136564e}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x7d, 'syz1\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 10.580782516s ago: executing program 6 (id=1209): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) 9.393490577s ago: executing program 1 (id=1211): open(&(0x7f0000000180)='./bus\x00', 0x14b27e, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r0, 0x0, 0x5, &(0x7f0000000500)='syz1\x00'}, 0x30) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000580)={0x802b}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000016f00000100186371ae9b1c03"], 0x0) write$uinput_user_dev(r7, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff00, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001480)={0x0, "b126f1479f92cadd792aeeebcaf231d5"}) 7.528522229s ago: executing program 1 (id=1212): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x7, 0x6b, @buffer={0xfb, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00E', 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 7.458270823s ago: executing program 4 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x7d, 'syz1\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 6.943291129s ago: executing program 1 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400000000000000691084000000000004000000000000009500000000000000e001a237577b17006eb5b61e21"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x30bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8209}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001040)={0x0, "a1f62ab6b9adc7abf3075e0e6a9ae888"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x3, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4}}]}}]}}]}}, 0x0) 6.52919534s ago: executing program 6 (id=1216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000400)=""/170, 0x40000000}, 0x20) 6.244115672s ago: executing program 4 (id=1218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x3f9, 0xc01, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x9, 0x5, 0x1}}}, 0x28) 6.020646663s ago: executing program 7 (id=1219): setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000940)=0x2, 0x4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x5, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000fff, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xc, &(0x7f0000001600)=""/12, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0xf, 0x8, 0xffff0000}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000016c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x4, 0x9, 0x6}, {0x0, 0x5, 0xf, 0x3}, {0x5, 0x4, 0xc}, {0x1, 0x5, 0xe}, {0x4, 0x4, 0xd, 0x6}, {0x0, 0x5, 0xc, 0x5}], 0x10, 0x5}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000001840)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0xbd6b, 0x10001, 0x1000, 0xf7ff, 0x0, "4ae23ae17df2e98c0064180009bad88f00", 0x6, 0xf7fffffa}) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x20040000) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8e}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a854a7a4124a91520800000000000000030000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x2, 0x8, "5a7ac6fe", "95d2315b"}}, 0x0}, 0x0) 5.955220264s ago: executing program 4 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x48, &(0x7f0000000800)=ANY=[@ANYBLOB]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) creat(&(0x7f0000000100)='./file0\x00', 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x80, 0xffff, 0x2, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x66, 0x0, 0x3, 0xc21e7b23d62c6de8, 0x0, @multicast2, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x14, 0x17, 0x3, 0x4, [{@remote, 0xe0}, {@loopback, 0x7}]}]}}}}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) chown(&(0x7f00000003c0)='./file0\x00', r6, 0xee01) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x2, 0x4e24, 0x9, 0x2, 0x80, 0xc0, 0x3b, r5, r6}, {0x7, 0x8, 0x1ff, 0x8, 0x9, 0xfff, 0x920, 0x9e8}, {0x0, 0x8000, 0xfffffffffffffffc, 0x9}, 0x5, 0x6e6bbf, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3505, 0x1, 0x0, 0xf9, 0xfffffff0, 0x2, 0x8}}, 0xe8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.903354055s ago: executing program 1 (id=1221): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) init_module(0x0, 0x78, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00', @ANYRESHEX], 0x50) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x8000000, 0x0) 4.881272445s ago: executing program 5 (id=1222): r0 = socket(0xa, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bind(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0), 0x2140085, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={r5, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "0a9bdb4153b6d485", "2072adf1fec6d363bf3d728883140d1e", "dc08fd06", "a884a6680c540101"}, 0x28) write$binfmt_script(r6, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0x0, 0x0, 0x36, 0x200}, 0x9c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xbb4}], 0x1, 0x40010022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000280)) 4.822464922s ago: executing program 4 (id=1223): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.691000171s ago: executing program 1 (id=1224): setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000940)=0x2, 0x4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x5, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000fff, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xc, &(0x7f0000001600)=""/12, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0xf, 0x8, 0xffff0000}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000016c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x4, 0x9, 0x6}, {0x0, 0x5, 0xf, 0x3}, {0x5, 0x4, 0xc}, {0x1, 0x5, 0xe}, {0x4, 0x4, 0xd, 0x6}, {0x0, 0x5, 0xc, 0x5}], 0x10, 0x5}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000001840)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0xbd6b, 0x10001, 0x1000, 0xf7ff, 0x0, "4ae23ae17df2e98c0064180009bad88f00", 0x6, 0xf7fffffa}) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x20040000) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8e}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a854a7a4124a91520800000000000000030000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x2, 0x8, "5a7ac6fe", "95d2315b"}}, 0x0}, 0x0) 3.391379967s ago: executing program 5 (id=1225): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x3ff, 0x100, 0x1, 0x0, 0x0, [{{r0}, 0x7}]}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='2E', 0x2}], 0x1) 3.333039827s ago: executing program 4 (id=1226): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10007, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @sliced={0x5, [0x2, 0x6, 0x7, 0x2, 0x1ff, 0x7fff, 0x7f, 0x1ff, 0x2e60, 0x6, 0x7d3c, 0x0, 0x2, 0xfff8, 0x5, 0x9, 0x6, 0x7, 0x5, 0xe9d, 0x2, 0x1ff, 0x8001, 0x9, 0x4, 0x3, 0x925, 0x2b3, 0x8, 0x2, 0xb, 0xbd8, 0x2, 0x4, 0x200, 0xff01, 0x2, 0x401, 0x0, 0x1, 0x1, 0x7, 0x1, 0x0, 0x5, 0x2, 0x0, 0x9], 0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r10, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r10, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000}) close_range(r8, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000080)=0x81, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r11, 0x4b46, &(0x7f0000000000)) 3.227300156s ago: executing program 6 (id=1227): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) 2.019219568s ago: executing program 5 (id=1228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.795168052s ago: executing program 4 (id=1229): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x3136564e}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x7d, 'syz1\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 1.68289404s ago: executing program 5 (id=1230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x3f9, 0xc01, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x9, 0x5, 0x1}}}, 0x28) 1.544846162s ago: executing program 5 (id=1231): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x80000000, 0xfffff000, 0xfffffffffffff000}) r1 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r1, 0x200}], 0x1, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.184525928s ago: executing program 7 (id=1232): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {'\x00\x00\x00\x00\a\x00'}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 1.10066831s ago: executing program 5 (id=1233): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r2, 0x603, 0x50bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc0}]}, 0x28}}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000500)={0x1, 0x5, {0xffffffffffffffff}, {0xee01}, 0x7, 0x10000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {r8, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="00032dbd700cfbdbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000) 201.185601ms ago: executing program 1 (id=1234): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) init_module(0x0, 0x78, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00', @ANYRESHEX], 0x50) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x8000000, 0x0) 106.955576ms ago: executing program 7 (id=1235): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000807000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 0s ago: executing program 6 (id=1236): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x900, 0x880}, 0x0) kernel console output (not intermixed with test programs): 28][ T5840] hsr_slave_0: entered promiscuous mode [ 105.869890][ T5840] hsr_slave_1: entered promiscuous mode [ 105.897997][ T5844] hsr_slave_0: entered promiscuous mode [ 105.904994][ T5844] hsr_slave_1: entered promiscuous mode [ 105.911511][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.920141][ T5844] Cannot create hsr debugfs directory [ 105.940888][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.948449][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.974991][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.065523][ T5841] hsr_slave_0: entered promiscuous mode [ 106.072275][ T5841] hsr_slave_1: entered promiscuous mode [ 106.079822][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.087951][ T5841] Cannot create hsr debugfs directory [ 106.146763][ T5842] hsr_slave_0: entered promiscuous mode [ 106.154449][ T5842] hsr_slave_1: entered promiscuous mode [ 106.161023][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.170414][ T5842] Cannot create hsr debugfs directory [ 106.271461][ T5843] hsr_slave_0: entered promiscuous mode [ 106.278612][ T5843] hsr_slave_1: entered promiscuous mode [ 106.285400][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.293536][ T5843] Cannot create hsr debugfs directory [ 106.838276][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.857041][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.868973][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.891599][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.954737][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.968617][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.980083][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.004277][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.094942][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.110805][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.117788][ T5156] Bluetooth: hci3: command tx timeout [ 107.117840][ T5156] Bluetooth: hci2: command tx timeout [ 107.126162][ T5846] Bluetooth: hci4: command tx timeout [ 107.140542][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.168533][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.193239][ T5846] Bluetooth: hci0: command tx timeout [ 107.193270][ T5156] Bluetooth: hci1: command tx timeout [ 107.278104][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.299192][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.311442][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.323203][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.466273][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.478197][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.505031][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.519283][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.608326][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.673316][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.687344][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.720454][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.727961][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.771674][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.797644][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.820398][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.828091][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.840651][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.848171][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.880473][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.911956][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.937491][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.945181][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.966402][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.981442][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.989035][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.024484][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.031763][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.054564][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.095839][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.103070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.114972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.122168][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.139912][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.172002][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.179400][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.189998][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.197267][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.959746][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.988913][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.081473][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.203488][ T5156] Bluetooth: hci4: command tx timeout [ 109.205449][ T5846] Bluetooth: hci2: command tx timeout [ 109.210064][ T51] Bluetooth: hci3: command tx timeout [ 109.226338][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.237429][ T5842] veth0_vlan: entered promiscuous mode [ 109.267026][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.273318][ T5156] Bluetooth: hci1: command tx timeout [ 109.279685][ T5156] Bluetooth: hci0: command tx timeout [ 109.290898][ T5840] veth0_vlan: entered promiscuous mode [ 109.314955][ T5842] veth1_vlan: entered promiscuous mode [ 109.357457][ T5844] veth0_vlan: entered promiscuous mode [ 109.390745][ T5844] veth1_vlan: entered promiscuous mode [ 109.410606][ T5840] veth1_vlan: entered promiscuous mode [ 109.518838][ T5841] veth0_vlan: entered promiscuous mode [ 109.560928][ T5844] veth0_macvtap: entered promiscuous mode [ 109.579226][ T5842] veth0_macvtap: entered promiscuous mode [ 109.598126][ T5840] veth0_macvtap: entered promiscuous mode [ 109.608488][ T5841] veth1_vlan: entered promiscuous mode [ 109.619799][ T5844] veth1_macvtap: entered promiscuous mode [ 109.634180][ T5842] veth1_macvtap: entered promiscuous mode [ 109.686958][ T5840] veth1_macvtap: entered promiscuous mode [ 109.718641][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.755925][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.780300][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.797566][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.822307][ T5841] veth0_macvtap: entered promiscuous mode [ 109.844400][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.856916][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.867099][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.877540][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.886764][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.896126][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.910002][ T5841] veth1_macvtap: entered promiscuous mode [ 109.936718][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.946002][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.955790][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.965646][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.995985][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.005050][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.015464][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.026340][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.064156][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.127703][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.174594][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.185883][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.195359][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.205928][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.220680][ T5843] veth0_vlan: entered promiscuous mode [ 110.285986][ T5843] veth1_vlan: entered promiscuous mode [ 110.298135][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.313616][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.399619][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.418095][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.443671][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.451877][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.498563][ T5843] veth0_macvtap: entered promiscuous mode [ 110.540335][ T5843] veth1_macvtap: entered promiscuous mode [ 110.582343][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.595023][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.604982][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.627408][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.655044][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.691239][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.698399][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.709844][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.760206][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.824657][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.835032][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.859918][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.879114][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.908727][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.922212][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.016808][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.056464][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.274017][ T5156] Bluetooth: hci4: command tx timeout [ 111.279624][ T5156] Bluetooth: hci3: command tx timeout [ 111.284322][ T51] Bluetooth: hci2: command tx timeout [ 111.286139][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.353735][ T51] Bluetooth: hci0: command tx timeout [ 111.353746][ T5156] Bluetooth: hci1: command tx timeout [ 111.356362][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.418307][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.580394][ T5967] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.7'. [ 111.693702][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.713156][ T43] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 111.853759][ T5977] fuse: Bad value for 'fd' [ 111.874459][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.112921][ T5978] kvm: apic: phys broadcast and lowest prio [ 112.543250][ T5972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 112.711007][ T5980] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 112.808240][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.834473][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.978718][ T5984] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.442015][ T5954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.708551][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.865483][ T5954] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 114.000863][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.158878][ T5954] usb 3-1: config 0 descriptor?? [ 115.643396][ T5954] itetech 0003:258A:6A88.0001: item fetching failed at offset 5/7 [ 116.395831][ T5954] itetech 0003:258A:6A88.0001: probe with driver itetech failed with error -22 [ 116.484070][ T5954] usb 3-1: USB disconnect, device number 2 [ 117.593256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.606215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.874385][ T6039] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 118.018588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.120840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.223157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.838556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 118.848992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.940270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 118.950056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.958920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.326966][ T6050] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 119.533272][ T6052] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 121.280500][ T6066] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 124.859053][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.893423][ T6095] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 125.356686][ T43] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 125.380535][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.443346][ T43] usb 5-1: config 0 has no interface number 0 [ 125.496092][ T43] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 125.564773][ T43] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.577361][ T6108] program syz.0.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.048368][ T43] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 126.082148][ T6107] bond1: entered allmulticast mode [ 126.088165][ T6107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.117268][ T6107] bridge0: port 3(bond1) entered blocking state [ 126.119870][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.145061][ T43] usb 5-1: Product: syz [ 126.169735][ T43] usb 5-1: Manufacturer: syz [ 126.178642][ T6107] bridge0: port 3(bond1) entered disabled state [ 126.196031][ T43] usb 5-1: SerialNumber: syz [ 126.236855][ T6107] bond1: entered promiscuous mode [ 126.264007][ T43] usb 5-1: config 0 descriptor?? [ 126.279222][ T6107] bridge0: port 3(bond1) entered blocking state [ 126.286411][ T6107] bridge0: port 3(bond1) entered forwarding state [ 126.697048][ T1092] bridge0: port 3(bond1) entered disabled state [ 128.117919][ T6128] Bluetooth: MGMT ver 1.23 [ 129.176167][ T43] usb 5-1: USB disconnect, device number 2 [ 130.506353][ T6151] team_slave_0: entered promiscuous mode [ 130.512348][ T6151] team_slave_1: entered promiscuous mode [ 130.585319][ T6151] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.744132][ T6151] team0: Device macvtap1 is already an upper device of the team interface [ 130.761692][ T6151] team_slave_0: left promiscuous mode [ 130.767465][ T6151] team_slave_1: left promiscuous mode [ 130.936547][ T6159] sp0: Synchronizing with TNC [ 130.962240][ T6160] sp0: Found TNC [ 131.008477][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.400643][ T6170] kvm: apic: phys broadcast and lowest prio [ 134.013084][ T6177] x_tables: duplicate underflow at hook 1 [ 137.046493][ T6188] Zero length message leads to an empty skb [ 138.804122][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.814737][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.247625][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.56'. [ 139.996611][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 140.014774][ T6217] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 140.048702][ T6217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.308063][ T6228] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 142.359078][ T6232] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 143.944357][ T6249] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 144.707150][ T24] hid-generic 0000:0004:0001.0002: unknown main item tag 0x0 [ 144.719890][ T24] hid-generic 0000:0004:0001.0002: unknown main item tag 0x0 [ 144.727567][ T24] hid-generic 0000:0004:0001.0002: unknown main item tag 0x0 [ 144.740895][ T24] hid-generic 0000:0004:0001.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 145.928302][ T6259] hub 8-0:1.0: USB hub found [ 145.949369][ T6259] hub 8-0:1.0: 1 port detected [ 146.356377][ T6261] 9pnet_fd: Insufficient options for proto=fd [ 146.432267][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 147.572021][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.582076][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.590790][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.600197][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.609247][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.617511][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.626037][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.635709][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.643754][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.652301][ T6270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.900131][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.102258][ T6290] netlink: 596 bytes leftover after parsing attributes in process `syz.0.77'. [ 148.111785][ T6265] hsr_slave_0 (unregistering): left promiscuous mode [ 148.192825][ T6280] netlink: 'syz.0.77': attribute type 29 has an invalid length. [ 148.239061][ T6287] netlink: 'syz.0.77': attribute type 29 has an invalid length. [ 148.322914][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.493135][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 148.507870][ T43] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 148.508535][ T6293] futex_wake_op: syz.4.79 tries to shift op by -1; fix this program [ 148.614510][ T6295] xt_hashlimit: max too large, truncated to 1048576 [ 148.799959][ T43] usb 4-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 148.821582][ T43] usb 4-1: config 0 has no interface number 0 [ 148.829894][ T43] usb 4-1: config 0 interface 202 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.558340][ T43] usb 4-1: New USB device found, idVendor=08ca, idProduct=0109, bcdDevice=bf.1b [ 150.342804][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.351149][ T43] usb 4-1: Product: syz [ 150.387192][ T43] usb 4-1: Manufacturer: syz [ 150.392775][ T43] usb 4-1: SerialNumber: syz [ 150.420556][ T43] usb 4-1: config 0 descriptor?? [ 150.656285][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.680256][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.749377][ T43] usb 4-1: USB disconnect, device number 2 [ 150.753182][ T924] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 151.125968][ T924] usb 5-1: Using ep0 maxpacket: 16 [ 151.300858][ T924] usb 5-1: config 1 has an invalid interface number: 220 but max is 1 [ 151.314460][ T924] usb 5-1: config 1 has an invalid interface number: 76 but max is 1 [ 151.326922][ T924] usb 5-1: config 1 has no interface number 0 [ 151.335649][ T924] usb 5-1: config 1 has no interface number 1 [ 151.342568][ T924] usb 5-1: config 1 interface 220 has no altsetting 0 [ 151.355640][ T924] usb 5-1: config 1 interface 76 has no altsetting 0 [ 151.376083][ T924] usb 5-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4 [ 151.390150][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.408571][ T924] usb 5-1: Product: syz [ 151.415873][ T924] usb 5-1: Manufacturer: syz [ 151.421119][ T924] usb 5-1: SerialNumber: syz [ 151.793851][ T924] usb 5-1: USB disconnect, device number 3 [ 153.456470][ T924] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.653832][ T924] usb 3-1: device descriptor read/64, error -71 [ 154.538196][ T6334] vivid-009: kernel_thread() failed [ 154.792882][ T924] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.003410][ T924] usb 3-1: device descriptor read/64, error -71 [ 155.151896][ T924] usb usb3-port1: attempt power cycle [ 155.758618][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.873120][ T6348] ======================================================= [ 155.873120][ T6348] WARNING: The mand mount option has been deprecated and [ 155.873120][ T6348] and is ignored by this kernel. Remove the mand [ 155.873120][ T6348] option from the mount to silence this warning. [ 155.873120][ T6348] ======================================================= [ 156.066185][ T24] usb 2-1: no configurations [ 156.066210][ T24] usb 2-1: can't read configurations, error -22 [ 156.197991][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.434647][ T24] usb 2-1: no configurations [ 156.434674][ T24] usb 2-1: can't read configurations, error -22 [ 156.442979][ T24] usb usb2-port1: attempt power cycle [ 156.913376][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.997268][ T24] usb 2-1: no configurations [ 157.001557][ T24] usb 2-1: can't read configurations, error -22 [ 157.471406][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 157.493372][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.531373][ T24] usb 2-1: no configurations [ 157.531398][ T24] usb 2-1: can't read configurations, error -22 [ 157.531975][ T24] usb usb2-port1: unable to enumerate USB device [ 158.304192][ T6365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.98'. [ 158.442459][ T6358] hsr_slave_0 (unregistering): left promiscuous mode [ 159.212798][ T6370] input: syz0 as /devices/virtual/input/input6 [ 159.392363][ T6372] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 159.392363][ T6372] program syz.0.99 not setting count and/or reply_len properly [ 160.704035][ T6378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.835203][ T6378] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 162.521674][ T6402] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.811795][ T6405] netlink: 'syz.3.107': attribute type 21 has an invalid length. [ 162.819999][ T6405] netlink: 128 bytes leftover after parsing attributes in process `syz.3.107'. [ 162.829814][ T6405] netlink: 'syz.3.107': attribute type 5 has an invalid length. [ 162.837843][ T6405] netlink: 3 bytes leftover after parsing attributes in process `syz.3.107'. [ 164.623114][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 164.922835][ T43] usb 5-1: device descriptor read/64, error -71 [ 165.202911][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.385591][ T43] usb 5-1: device descriptor read/64, error -71 [ 165.573053][ T43] usb usb5-port1: attempt power cycle [ 166.683069][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.731819][ T43] usb 5-1: device descriptor read/8, error -71 [ 167.090100][ T6445] kvm: apic: phys broadcast and lowest prio [ 167.422853][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.504751][ T43] usb 5-1: device descriptor read/8, error -71 [ 168.234377][ T43] usb usb5-port1: unable to enumerate USB device [ 168.352794][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.533073][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 168.566883][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.613688][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.659207][ T5887] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.686792][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.720796][ T5887] usb 3-1: config 0 descriptor?? [ 168.723797][ T6457] binder: BINDER_SET_CONTEXT_MGR already set [ 168.736468][ T5887] hub 3-1:0.0: USB hub found [ 168.782874][ T6457] binder: 6455:6457 ioctl 4018620d 2000000002c0 returned -16 [ 168.815896][ T6460] overlayfs: failed to clone upperpath [ 170.052353][ T5887] hub 3-1:0.0: 2 ports detected [ 170.384098][ T6471] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 171.347778][ T5887] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 172.444258][ T5887] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 172.636968][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 172.645431][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.711148][ T6473] fuse: Bad value for 'rootmode' [ 172.938916][ T5887] usb 3-1: USB disconnect, device number 6 [ 173.967080][ T6482] bond0: entered promiscuous mode [ 173.972636][ T6482] bond_slave_0: entered promiscuous mode [ 173.982834][ T6482] bond_slave_1: entered promiscuous mode [ 174.453892][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 174.494369][ T6482] binfmt_misc: register: failed to install interpreter file ./file0 [ 174.803835][ T6485] hsr_slave_0 (unregistering): left promiscuous mode [ 175.901987][ T6497] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 175.904341][ T6496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.132'. [ 175.977392][ T6498] net_ratelimit: 44 callbacks suppressed [ 175.977437][ T6498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.379753][ T6496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.132'. [ 178.387954][ T6508] kvm: apic: phys broadcast and lowest prio [ 184.117843][ T6530] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.555824][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'. [ 184.994793][ T6536] netlink: 'syz.3.143': attribute type 12 has an invalid length. [ 188.237475][ T6562] xt_hashlimit: max too large, truncated to 1048576 [ 188.888120][ T6562] syz.1.149 (6562) used greatest stack depth: 18864 bytes left [ 189.384660][ T6570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.993013][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 190.002356][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 190.296195][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 192.342833][ T5963] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 192.586369][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.162'. [ 193.082969][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 193.120688][ T5963] usb 1-1: unable to get BOS descriptor or descriptor too short [ 193.321746][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 193.337154][ T5963] usb 1-1: config 1 has an invalid interface number: 26 but max is 1 [ 193.421407][ T6613] autofs: Unknown parameter 'z r)ޟj' [ 193.434160][ T5963] usb 1-1: config 1 has an invalid interface number: 89 but max is 1 [ 193.456683][ T5963] usb 1-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 193.508028][ T5963] usb 1-1: config 1 has no interface number 0 [ 193.569344][ T5963] usb 1-1: config 1 has no interface number 1 [ 193.710178][ T5963] usb 1-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.118774][ T5963] usb 1-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.221627][ T6620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.923055][ T5963] usb 1-1: config 1 interface 26 has no altsetting 0 [ 194.930756][ T5963] usb 1-1: config 1 interface 89 has no altsetting 0 [ 195.113059][ T5963] usb 1-1: string descriptor 0 read error: -71 [ 195.119743][ T5963] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 195.166411][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.264726][ T5963] usb 1-1: can't set config #1, error -71 [ 195.335646][ T5963] usb 1-1: USB disconnect, device number 3 [ 195.511687][ T6629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.167'. [ 195.541561][ T6629] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 198.933253][ T6671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.522883][ T5156] Bluetooth: hci3: command tx timeout [ 199.552265][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.731735][ T6674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.755834][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 199.779706][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 199.822146][ T5913] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 199.997835][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.031202][ T5913] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 200.045362][ T5913] usb 4-1: Product: syz [ 200.049616][ T5913] usb 4-1: Manufacturer: syz [ 200.067052][ T5913] usb 4-1: SerialNumber: syz [ 200.081426][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.867064][ T5913] usb 4-1: can't set config #1, error -71 [ 201.944567][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.954924][ T5913] usb 4-1: USB disconnect, device number 3 [ 202.166908][ T6687] capability: warning: `syz.0.180' uses deprecated v2 capabilities in a way that may be insecure [ 202.335691][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 202.462922][ T5887] usb 2-1: device descriptor read/64, error -71 [ 202.493884][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 202.542665][ T6696] netlink: 'syz.2.182': attribute type 6 has an invalid length. [ 202.860727][ T6688] bond0: entered promiscuous mode [ 203.199493][ T6688] bond_slave_0: entered promiscuous mode [ 203.206322][ T6688] bond_slave_1: entered promiscuous mode [ 203.444052][ T6688] batadv0: entered promiscuous mode [ 203.710949][ T6688] hsr1: entered allmulticast mode [ 203.748239][ T6688] bond0: entered allmulticast mode [ 203.754128][ T6688] bond_slave_0: entered allmulticast mode [ 203.760007][ T6688] bond_slave_1: entered allmulticast mode [ 203.773707][ T6688] batadv0: entered allmulticast mode [ 203.781103][ T6688] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 204.467185][ T6691] pim6reg1: entered promiscuous mode [ 204.578345][ T6691] pim6reg1: entered allmulticast mode [ 204.959961][ T6718] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 205.788242][ T6719] libceph: resolve '400' (ret=-3): failed [ 205.796888][ T6719] tc_dump_action: action bad kind [ 205.943295][ T6727] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 209.273295][ T924] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 209.623662][ T924] usb 5-1: device descriptor read/64, error -71 [ 210.015127][ T6760] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 210.097291][ T924] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 210.439576][ T924] usb 5-1: device descriptor read/64, error -71 [ 210.521159][ T6766] netlink: 'syz.1.200': attribute type 3 has an invalid length. [ 210.613528][ T924] usb usb5-port1: attempt power cycle [ 215.058160][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 215.928987][ T6821] libceph: resolve '400' (ret=-3): failed [ 216.036548][ T6821] tc_dump_action: action bad kind [ 218.313261][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 220.786313][ T6848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.831692][ T6872] netlink: 87 bytes leftover after parsing attributes in process `syz.0.227'. [ 223.283063][ T6879] libceph: resolve '400' (ret=-3): failed [ 223.403519][ T6879] tc_dump_action: action bad kind [ 223.968403][ T6887] kernel read not supported for file / ԢW)S- (pid: 6887 comm: syz.2.229) [ 224.750065][ T31] audit: type=1800 audit(1755785988.066:2): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.229" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=11345 res=0 errno=0 [ 226.856795][ T6908] ip6t_srh: unknown srh invflags 4000 [ 227.845066][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 227.847284][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 227.861046][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 227.862508][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 229.034839][ T6934] input: syz0 as /devices/virtual/input/input8 [ 230.320457][ T6941] libceph: resolve '400' (ret=-3): failed [ 230.328972][ T6941] tc_dump_action: action bad kind [ 230.526877][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 234.507105][ T6988] input: syz0 as /devices/virtual/input/input9 [ 234.892814][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.210028][ T6993] netlink: 96 bytes leftover after parsing attributes in process `syz.4.258'. [ 235.230743][ T6993] Illegal XDP return value 4294967294 on prog (id 80) dev N/A, expect packet loss! [ 235.332141][ T5887] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.364717][ T6994] libceph: resolve '400' (ret=-3): failed [ 235.374870][ T6994] tc_dump_action: action bad kind [ 235.426678][ T5887] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.475711][ T5887] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.508323][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.555344][ T7000] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 235.569571][ T6983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.605867][ T7000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.261'. [ 235.638903][ T7000] bridge0: port 4(ipvlan1) entered blocking state [ 235.667005][ T7000] bridge0: port 4(ipvlan1) entered disabled state [ 235.694471][ T7000] ipvlan1: entered allmulticast mode [ 235.702658][ T7000] veth0_vlan: entered allmulticast mode [ 235.722409][ T5887] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.755354][ T7000] ipvlan1: left allmulticast mode [ 235.775043][ T5963] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.842303][ T7000] veth0_vlan: left allmulticast mode [ 235.857584][ T7000] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 235.994928][ T7007] Cannot find add_set index 0 as target [ 236.687987][ T5963] usb 1-1: device descriptor read/64, error -71 [ 236.993280][ T5963] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 237.385486][ T5887] usb 3-1: USB disconnect, device number 7 [ 238.553384][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 241.262834][ T924] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 241.503438][ T7045] libceph: resolve '400' (ret=-3): failed [ 241.514757][ T7045] tc_dump_action: action bad kind [ 241.693123][ T924] usb 5-1: device descriptor read/64, error -71 [ 242.065734][ T924] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 242.598051][ T924] usb 5-1: device descriptor read/64, error -71 [ 242.805481][ T924] usb usb5-port1: attempt power cycle [ 245.945107][ T7070] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 248.397689][ T5853] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 248.534119][ T5853] usb 2-1: device descriptor read/64, error -71 [ 248.784481][ T5853] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 249.143022][ T5853] usb 2-1: device descriptor read/64, error -71 [ 249.355875][ T5853] usb usb2-port1: attempt power cycle [ 250.267889][ T7122] netlink: 'syz.3.291': attribute type 4 has an invalid length. [ 251.822834][ T5963] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 253.355433][ T5963] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 253.388261][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.418390][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.428722][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 253.444546][ T5963] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 253.454277][ T5963] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 253.462567][ T5963] usb 1-1: Manufacturer: syz [ 253.507943][ T5963] usb 1-1: config 0 descriptor?? [ 253.692388][ T7163] xt_connbytes: Forcing CT accounting to be enabled [ 253.702354][ T7163] Cannot find set identified by id 0 to match [ 254.299846][ T5156] Bluetooth: hci0: unexpected event for opcode 0x040e [ 254.326234][ T5963] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 254.451676][ T5963] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 254.710720][ T7177] netlink: 19 bytes leftover after parsing attributes in process `syz.1.307'. [ 254.947213][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 254.955574][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 254.964160][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 254.973075][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 254.982420][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 254.991151][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 254.999921][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 255.008695][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 255.016871][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 255.025669][ T7181] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 255.133243][ T5963] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 256.994978][ T924] usb 1-1: USB disconnect, device number 6 [ 257.412426][ T7208] 9pnet_fd: Insufficient options for proto=fd [ 257.970867][ T7210] input: syz0 as /devices/virtual/input/input10 [ 258.679764][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.691013][ T7225] bridge_slave_1: left allmulticast mode [ 258.707102][ T7225] bridge_slave_1: left promiscuous mode [ 258.723955][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.746043][ T7225] bridge_slave_1: entered promiscuous mode [ 258.799724][ T7225] bridge_slave_1: entered allmulticast mode [ 258.830869][ T7225] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 258.926854][ T7232] cgroup: Unknown subsys name 'noxattr' [ 259.198482][ T7235] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.321'. [ 259.509615][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.321'. [ 259.743092][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 260.293248][ T7249] net_ratelimit: 45 callbacks suppressed [ 260.293285][ T7249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.486667][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.493894][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.768107][ T7263] input: syz0 as /devices/virtual/input/input11 [ 263.743304][ T5963] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 264.916001][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 265.165359][ T5963] usb 5-1: device not accepting address 14, error -71 [ 267.042015][ T7310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.200469][ T7334] hub 8-0:1.0: USB hub found [ 270.210161][ T7334] hub 8-0:1.0: 1 port detected [ 273.087434][ T7361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.529341][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 273.968572][ T7364] hsr_slave_0 (unregistering): left promiscuous mode [ 274.243679][ T5853] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 274.742784][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 274.750292][ T5853] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 274.759374][ T5853] usb 3-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 274.949058][ T5853] usb 3-1: config 0 has no interface number 0 [ 274.958728][ T5853] usb 3-1: config 0 interface 202 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.066152][ T5853] usb 3-1: New USB device found, idVendor=08ca, idProduct=0109, bcdDevice=bf.1b [ 275.088468][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.097217][ T5853] usb 3-1: Product: syz [ 275.102945][ T5853] usb 3-1: Manufacturer: syz [ 275.108268][ T5853] usb 3-1: SerialNumber: syz [ 275.139284][ T5853] usb 3-1: config 0 descriptor?? [ 275.374070][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.396510][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.548973][ T5853] usb 3-1: USB disconnect, device number 8 [ 280.161186][ T7414] Cannot find add_set index 0 as target [ 283.619955][ T7438] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 285.860846][ T7473] program syz.1.381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.007517][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 289.641674][ T7509] vivid-003: kernel_thread() failed [ 290.372924][ T31] audit: type=1326 audit(1755786054.386:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abd8ebe9 code=0x7ffc0000 [ 290.849125][ T31] audit: type=1326 audit(1755786054.386:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abd8ebe9 code=0x7ffc0000 [ 290.875520][ T31] audit: type=1326 audit(1755786054.396:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f68abd8ebe9 code=0x7ffc0000 [ 291.066993][ T31] audit: type=1326 audit(1755786054.396:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abd8ebe9 code=0x7ffc0000 [ 291.091398][ T31] audit: type=1326 audit(1755786054.396:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abd8ebe9 code=0x7ffc0000 [ 291.115966][ T31] audit: type=1326 audit(1755786054.396:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f68abd90a7c code=0x7ffc0000 [ 291.140154][ T31] audit: type=1326 audit(1755786054.406:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68abd909b4 code=0x7ffc0000 [ 292.511239][ T31] audit: type=1326 audit(1755786054.406:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68abd909b4 code=0x7ffc0000 [ 292.535619][ T31] audit: type=1326 audit(1755786054.406:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abd8ebe9 code=0x7ffc0000 [ 292.558810][ T31] audit: type=1326 audit(1755786054.406:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abd8ebe9 code=0x7ffc0000 [ 294.074855][ T7533] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 294.375275][ T7546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 295.797979][ T7558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.514655][ T5853] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 296.864840][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 297.028089][ T5853] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 297.072950][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.132099][ T5853] usb 2-1: Product: syz [ 297.174333][ T5853] usb 2-1: Manufacturer: syz [ 297.235083][ T5853] usb 2-1: SerialNumber: syz [ 297.309387][ T5853] usb 2-1: config 0 descriptor?? [ 297.615657][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.647986][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.774243][ T7591] input: syz0 as /devices/virtual/input/input12 [ 298.896161][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 298.937244][ T7563] fuse: blksize only supported for fuseblk [ 298.946236][ T5853] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 298.986678][ T5853] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 299.506573][ T5853] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32 [ 300.275172][ T5853] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 301.323429][ T7614] kvm: apic: phys broadcast and lowest prio [ 301.332775][ T5853] usb 1-1: device descriptor read/64, error -71 [ 302.044999][ T5913] usb 2-1: USB disconnect, device number 12 [ 302.115953][ T5853] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 302.277653][ T5853] usb 1-1: device descriptor read/64, error -71 [ 302.415520][ T5853] usb usb1-port1: attempt power cycle [ 302.792977][ T5853] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 303.399520][ T5853] usb 1-1: device descriptor read/8, error -71 [ 303.692897][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 304.010857][ T5913] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 304.659184][ T7657] ubi31: attaching mtd0 [ 304.694185][ T5913] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 304.721956][ T977] kernel write not supported for file /342/sched (pid: 977 comm: kworker/1:2) [ 304.752498][ T7657] ubi31: scanning is finished [ 304.757641][ T7657] ubi31: empty MTD device detected [ 305.153516][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.185953][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.206714][ T5913] usb 4-1: SerialNumber: syz [ 305.226504][ T7637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.256816][ T5913] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 305.708084][ T7657] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 305.722816][ T7657] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 305.747112][ T7657] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 305.811648][ T7669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.473522][ T7657] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 306.508304][ T7657] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 306.561321][ T7657] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 306.591439][ T7657] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3261245675 [ 306.628030][ T7657] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 306.672783][ T7666] ubi31: background thread "ubi_bgt31d" started, PID 7666 [ 306.733783][ T7678] 9pnet_fd: Insufficient options for proto=fd [ 306.762722][ T924] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 306.771512][ T5913] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 306.827271][ T5913] usb 4-1: USB disconnect, device number 4 [ 307.238651][ T924] usb 1-1: Using ep0 maxpacket: 16 [ 307.289101][ T924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.311391][ T924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.333545][ T924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.380184][ T924] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 307.411455][ T924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.445735][ T924] usb 1-1: config 0 descriptor?? [ 308.313842][ T924] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 308.655039][ T924] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 308.909720][ T924] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 309.015681][ T5913] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 309.135870][ T7696] netlink: 'syz.2.435': attribute type 21 has an invalid length. [ 309.144241][ T7696] netlink: 128 bytes leftover after parsing attributes in process `syz.2.435'. [ 309.154032][ T7696] netlink: 'syz.2.435': attribute type 5 has an invalid length. [ 309.162551][ T7696] netlink: 3 bytes leftover after parsing attributes in process `syz.2.435'. [ 309.762790][ T924] usb 1-1: USB disconnect, device number 11 [ 309.776623][ T5913] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 309.905230][ T5913] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 310.006148][ T5913] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 312.052802][ T924] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 313.082977][ T924] usb 4-1: Using ep0 maxpacket: 8 [ 313.122011][ T924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 313.473189][ T924] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 313.483029][ T924] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 313.527391][ T924] usb 4-1: Product: syz [ 313.531729][ T924] usb 4-1: Manufacturer: syz [ 313.556815][ T924] usb 4-1: SerialNumber: syz [ 313.813862][ T924] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 313.825984][ T924] usb 4-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 313.836044][ T924] usb 4-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 313.844418][ T924] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 314.712999][ T924] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 314.721661][ T924] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 314.752184][ T924] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 314.774534][ T924] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 314.802399][ T924] usb 4-1: USB disconnect, device number 5 [ 314.819039][ T924] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 314.842219][ T924] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 314.888774][ T924] visor 4-1:1.0: device disconnected [ 315.153208][ T7747] 9pnet_fd: Insufficient options for proto=fd [ 317.202840][ T977] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 317.564003][ T7767] Cannot find add_set index 0 as target [ 317.904460][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 318.309000][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.323109][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.333744][ T977] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.541183][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.574566][ T977] usb 5-1: config 0 descriptor?? [ 318.598780][ T977] hub 5-1:0.0: USB hub found [ 318.661901][ T7774] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 319.128091][ T977] hub 5-1:0.0: 2 ports detected [ 319.234790][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 319.814932][ T7782] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 319.823198][ T7782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.458'. [ 320.294918][ T977] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 320.301570][ T977] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 320.507721][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 320.551445][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 320.617447][ T977] usb 5-1: USB disconnect, device number 16 [ 321.122718][ T7789] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 321.130880][ T7789] netlink: 224 bytes leftover after parsing attributes in process `syz.4.459'. [ 322.879408][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.786118][ T7816] bridge1: entered allmulticast mode [ 324.952854][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 325.358090][ T7838] Cannot find set identified by id 0 to match [ 325.777487][ T7845] trusted_key: syz.2.475 sent an empty control message without MSG_MORE. [ 328.282820][ T924] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 328.493035][ T924] usb 1-1: Using ep0 maxpacket: 16 [ 328.836530][ T7878] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.482'. [ 328.838370][ T7878] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.482'. [ 329.514942][ T924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 329.523099][ T924] usb 1-1: config 1 has an invalid descriptor of length 84, skipping remainder of the config [ 329.523134][ T924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.523208][ T924] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.333153][ T924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.333189][ T924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.333211][ T924] usb 1-1: Product: syz [ 330.333227][ T924] usb 1-1: Manufacturer: ш [ 330.333243][ T924] usb 1-1: SerialNumber: syz [ 330.701091][ T924] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 330.718630][ T924] cdc_ncm 1-1:1.0: bind() failure [ 330.737150][ T924] usb 1-1: USB disconnect, device number 12 [ 331.106282][ T7887] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002 [ 332.713880][ T7901] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 332.742978][ T7901] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 332.770050][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 332.779355][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 334.364864][ T5963] kernel write not supported for file /350/attr/sockcreate (pid: 5963 comm: kworker/1:6) [ 335.771029][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 335.828230][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 335.996623][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 336.233680][ T7947] netlink: 'syz.1.498': attribute type 11 has an invalid length. [ 336.254187][ T977] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 336.582377][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 336.611467][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.672841][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.722832][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 336.784524][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 336.822837][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.896517][ T977] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 336.911916][ T977] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.046438][ T977] usb 5-1: Manufacturer: syz [ 337.523789][ T977] usb 5-1: config 0 descriptor?? [ 337.962883][ T977] rc_core: IR keymap rc-hauppauge not found [ 337.969130][ T977] Registered IR keymap rc-empty [ 338.009565][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 338.066106][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 338.290442][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 338.384836][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 338.662795][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 338.755083][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 338.873832][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.007139][ T7978] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 339.334746][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.365003][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.398260][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.532224][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.552882][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.583173][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.615292][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 339.643162][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 340.161676][ T977] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 340.203316][ T977] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 340.414988][ T977] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 340.505515][ T977] usb 5-1: USB disconnect, device number 17 [ 340.537534][ T7990] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 340.602223][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 341.514828][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 341.798006][ T8009] netlink: 96 bytes leftover after parsing attributes in process `syz.2.511'. [ 341.828536][ T8009] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8009 comm: syz.2.511) [ 342.005581][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 342.005637][ T31] audit: type=1800 audit(1755786105.936:19): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.511" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=14216 res=0 errno=0 [ 345.760854][ T8036] ubi: mtd0 is already attached to ubi31 [ 346.663581][ T8041] input: syz0 as /devices/virtual/input/input16 [ 347.389044][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 349.019768][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 349.081056][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 350.502874][ T8077] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 351.368642][ T31] audit: type=1326 audit(1755786115.446:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.4.529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x0 [ 355.015711][ T977] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 355.233301][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 355.306796][ T8127] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 355.391603][ T977] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 355.627271][ T977] usb 3-1: config 0 has no interface number 0 [ 355.833436][ T977] usb 3-1: New USB device found, idVendor=5ccd, idProduct=0325, bcdDevice=d4.7c [ 355.950264][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.077250][ T977] usb 3-1: Product: syz [ 356.081996][ T977] usb 3-1: Manufacturer: syz [ 356.121365][ T8128] xt_TCPMSS: Only works on TCP SYN packets [ 356.175039][ T977] usb 3-1: SerialNumber: syz [ 356.264167][ T977] usb 3-1: config 0 descriptor?? [ 356.292526][ T977] usb-storage 3-1:0.131: USB Mass Storage device detected [ 357.660479][ T5913] usb 3-1: USB disconnect, device number 9 [ 358.886981][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 359.812862][ T5887] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 359.985313][ T5887] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.024229][ T5887] usb 5-1: config 0 has no interface number 0 [ 360.043416][ T5887] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 360.082736][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.125451][ T5887] usb 5-1: config 0 descriptor?? [ 360.177174][ T5887] usb 5-1: selecting invalid altsetting 1 [ 360.203722][ T5887] dvb_ttusb_budget: ttusb_init_controller: error [ 360.210701][ T5887] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 360.445030][ T5887] DVB: Unable to find symbol cx22700_attach() [ 360.647957][ T5887] DVB: Unable to find symbol tda10046_attach() [ 360.662729][ T5887] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 360.693057][ T5887] usb 5-1: USB disconnect, device number 18 [ 361.091615][ T8206] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 363.800142][ T8299] process 'syz.0.601' launched './file0' with NULL argv: empty string added [ 367.487584][ T8400] netfs: Couldn't get user pages (rc=-14) [ 367.496529][ T8400] netfs: Zero-sized read [R=1] [ 368.468339][ T8434] input: syz1 as /devices/virtual/input/input17 [ 368.992914][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 369.152910][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 369.179932][ T5913] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 369.215822][ T5913] usb 3-1: config 1 has no interface number 1 [ 369.234911][ T5913] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 122, changing to 7 [ 369.255781][ T5913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.268868][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.287748][ T5913] usb 3-1: Product: syz [ 369.298677][ T5913] usb 3-1: Manufacturer: syz [ 369.310857][ T5913] usb 3-1: SerialNumber: syz [ 369.587839][ T5913] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 369.618663][ T5913] usb 3-1: 2:1 : sample bitwidth 82 in over sample bytes 4 [ 369.647009][ T5913] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 369.768609][ T5913] usb 3-1: USB disconnect, device number 10 [ 369.820595][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.972880][ T924] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 370.040913][ T8466] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 370.132990][ T924] usb 5-1: Using ep0 maxpacket: 8 [ 370.206332][ T924] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.237292][ T924] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.265883][ T924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.278753][ T924] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 370.313838][ T924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.352312][ T924] usb 5-1: config 0 descriptor?? [ 370.820720][ T31] audit: type=1326 audit(1755786134.906:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.3.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe334b8ebe9 code=0x0 [ 370.853568][ T977] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 371.022892][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 371.043288][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.065233][ T977] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 371.080687][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.110088][ T977] usb 2-1: config 0 descriptor?? [ 371.420876][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.546456][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.567592][ T977] kye 0003:0458:501A.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 371.602207][ T977] kye 0003:0458:501A.0005: unknown main item tag 0x7 [ 371.623944][ T977] kye 0003:0458:501A.0005: item fetching failed at offset 6/7 [ 371.649463][ T977] kye 0003:0458:501A.0005: parse failed [ 371.679200][ T977] kye 0003:0458:501A.0005: probe with driver kye failed with error -22 [ 371.757740][ T977] usb 2-1: USB disconnect, device number 13 [ 373.245484][ T924] usbhid 5-1:0.0: can't add hid device: -71 [ 373.281583][ T924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 373.327463][ T924] usb 5-1: USB disconnect, device number 19 [ 373.597015][ T977] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 373.692838][ T5853] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 373.762723][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 373.795571][ T977] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.812511][ T977] usb 4-1: no configurations [ 373.836672][ T977] usb 4-1: can't read configurations, error -22 [ 373.852923][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 373.865484][ T5853] usb 3-1: unable to get BOS descriptor or descriptor too short [ 373.879335][ T5853] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 373.888700][ T5853] usb 3-1: config 0 has no interface number 0 [ 373.901771][ T5853] usb 3-1: config 0 interface 253 has no altsetting 0 [ 373.922059][ T5853] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=47.2a [ 373.937618][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.947936][ T5853] usb 3-1: Product: syz [ 373.952519][ T5853] usb 3-1: Manufacturer: syz [ 373.959112][ T5853] usb 3-1: SerialNumber: syz [ 373.970665][ T5853] usb 3-1: config 0 descriptor?? [ 374.203328][ T5853] usb_ehset_test 3-1:0.253: probe with driver usb_ehset_test failed with error -32 [ 374.231373][ T5853] usb 3-1: USB disconnect, device number 11 [ 374.925428][ T977] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 375.084884][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.109956][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.163020][ T977] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 375.184465][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.238755][ T977] usb 4-1: config 0 descriptor?? [ 375.487788][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 375.501377][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 375.530398][ T977] usb 4-1: USB disconnect, device number 7 [ 375.544324][ T5853] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 375.722808][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 375.734724][ T5853] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 375.757213][ T5853] usb 3-1: config 0 has no interface number 0 [ 375.779064][ T5853] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 375.796143][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.812686][ T5853] usb 3-1: Product: syz [ 375.818848][ T5853] usb 3-1: Manufacturer: syz [ 375.832865][ T5853] usb 3-1: SerialNumber: syz [ 375.848450][ T5853] usb 3-1: config 0 descriptor?? [ 375.869275][ T5853] smsc95xx v2.0.0 [ 376.092130][ T8572] overlayfs: failed to clone upperpath [ 376.267946][ T5853] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 376.301119][ T5853] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 376.731490][ T5853] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 376.748565][ T5853] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 376.764316][ T5853] usb 3-1: USB disconnect, device number 12 [ 377.411100][ T8601] syzkaller0: create flow: hash 1789970693 index 1 [ 377.491491][ T8598] syzkaller0: entered promiscuous mode [ 377.498163][ T8598] syzkaller0: entered allmulticast mode [ 377.671563][ T6016] syzkaller0: tun_net_xmit 48 [ 377.679164][ T8601] syzkaller0: delete flow: hash 1789970693 index 1 [ 377.932851][ T977] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 378.092824][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 378.109074][ T977] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 378.129565][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.139987][ T977] usb 3-1: Product: syz [ 378.145066][ T977] usb 3-1: Manufacturer: syz [ 378.150056][ T977] usb 3-1: SerialNumber: syz [ 378.168728][ T977] usb 3-1: config 0 descriptor?? [ 379.992908][ T8626] random: crng reseeded on system resumption [ 380.089054][ T977] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 380.105453][ T977] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 380.154566][ T977] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 380.198585][ T977] usb 3-1: USB disconnect, device number 13 [ 380.400785][ T8637] 9pnet_fd: p9_fd_create_unix (8637): problem connecting socket: ./file0: -5 [ 380.745524][ T8648] syzkaller1: tun_chr_ioctl cmd 21731 [ 380.756655][ T8648] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 381.203311][ T8665] sock: sock_timestamping_bind_phc: sock not bind to device [ 382.232712][ T5926] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 382.265339][ T8707] netfs: Couldn't get user pages (rc=-14) [ 382.404432][ T5926] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 382.426274][ T5926] usb 5-1: config 0 has no interfaces? [ 382.441589][ T5926] usb 5-1: config 0 has no interfaces? [ 382.449740][ T5926] usb 5-1: config 0 has no interfaces? [ 382.461152][ T5926] usb 5-1: config 0 has no interfaces? [ 382.469591][ T5926] usb 5-1: config 0 has no interfaces? [ 382.491912][ T5926] usb 5-1: config 0 has no interfaces? [ 382.503721][ T5926] usb 5-1: config 0 has no interfaces? [ 382.511327][ T5926] usb 5-1: config 0 has no interfaces? [ 382.535213][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.550797][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.559507][ T5926] usb 5-1: Product: syz [ 382.568107][ T5926] usb 5-1: Manufacturer: syz [ 382.573250][ T5926] usb 5-1: SerialNumber: syz [ 382.585201][ T5926] usb 5-1: config 0 descriptor?? [ 382.839253][ T5926] usb 5-1: USB disconnect, device number 20 [ 383.396047][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.411851][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.423874][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.435188][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.444842][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.492856][ T5926] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 383.600916][ T8728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 383.652916][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 383.670885][ T5926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 383.697943][ T5926] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 383.712315][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 383.726546][ T5926] usb 5-1: Product: syz [ 383.731732][ T5926] usb 5-1: Manufacturer: syz [ 383.767938][ T5926] usb 5-1: SerialNumber: syz [ 383.804936][ T5926] usb 5-1: config 0 descriptor?? [ 383.813399][ T8695] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.318761][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.393253][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.403396][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 384.421468][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.462216][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.489437][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.748344][ T31] audit: type=1326 audit(1755786148.836:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.778832][ T31] audit: type=1326 audit(1755786148.836:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.811238][ T31] audit: type=1326 audit(1755786148.836:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.833902][ T31] audit: type=1326 audit(1755786148.836:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.857909][ T31] audit: type=1326 audit(1755786148.836:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.895834][ T31] audit: type=1326 audit(1755786148.836:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.897286][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.926505][ T31] audit: type=1326 audit(1755786148.836:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.960547][ T31] audit: type=1326 audit(1755786148.836:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 384.993775][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.001941][ T8723] bridge_slave_0: entered allmulticast mode [ 385.021441][ T8723] bridge_slave_0: entered promiscuous mode [ 385.067476][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.079161][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.091209][ T8723] bridge_slave_1: entered allmulticast mode [ 385.128073][ T8723] bridge_slave_1: entered promiscuous mode [ 385.278354][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.295691][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.512960][ T5846] Bluetooth: hci5: command tx timeout [ 385.529208][ T8723] team0: Port device team_slave_0 added [ 385.545422][ T8723] team0: Port device team_slave_1 added [ 385.630460][ T5853] usb 5-1: USB disconnect, device number 21 [ 385.641876][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.654153][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.712762][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.737940][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.793163][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.867781][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.151261][ T31] audit: type=1326 audit(1755786150.236:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197778ebe9 code=0x7ffc0000 [ 386.165169][ T8723] hsr_slave_0: entered promiscuous mode [ 386.210802][ T31] audit: type=1326 audit(1755786150.236:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197778ebe9 code=0x7ffc0000 [ 386.240051][ T8723] hsr_slave_1: entered promiscuous mode [ 386.282588][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.316457][ T8723] Cannot create hsr debugfs directory [ 386.364019][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.798'. [ 387.418713][ T8723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.470643][ T8723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.561379][ T8723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.593839][ T5846] Bluetooth: hci5: command tx timeout [ 387.608867][ T8723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.026655][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.090766][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.145827][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.153222][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.217186][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.224840][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.036959][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.673183][ T5846] Bluetooth: hci5: command tx timeout [ 390.294850][ T8723] veth0_vlan: entered promiscuous mode [ 390.351594][ T8723] veth1_vlan: entered promiscuous mode [ 390.465094][ T8723] veth0_macvtap: entered promiscuous mode [ 390.499023][ T8887] kvm: pic: non byte read [ 390.535072][ T8723] veth1_macvtap: entered promiscuous mode [ 390.548737][ T8887] kvm: pic: non byte read [ 390.557802][ T8887] kvm: pic: non byte read [ 390.587898][ T8887] kvm: pic: non byte read [ 390.602290][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.618028][ T8887] kvm: pic: non byte read [ 390.623372][ T8887] kvm: pic: non byte read [ 390.631559][ T8887] kvm: pic: non byte read [ 390.667171][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.675996][ T8887] kvm: pic: non byte read [ 390.680795][ T8887] kvm: pic: non byte read [ 390.730087][ T8887] kvm: pic: non byte read [ 390.757453][ T8723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.775553][ T8723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.791426][ T8723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.808832][ T8723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.057950][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.102555][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.226689][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.243611][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.513966][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 391.513986][ T31] audit: type=1326 audit(1755786155.596:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 391.591114][ T31] audit: type=1326 audit(1755786155.596:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 391.630256][ T31] audit: type=1326 audit(1755786155.596:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 391.715822][ T31] audit: type=1326 audit(1755786155.646:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 391.754541][ T5846] Bluetooth: hci5: command tx timeout [ 391.788048][ T31] audit: type=1326 audit(1755786155.646:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 391.911007][ T31] audit: type=1326 audit(1755786155.646:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 392.047505][ T31] audit: type=1326 audit(1755786155.646:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 392.172923][ T31] audit: type=1326 audit(1755786155.646:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 392.288015][ T31] audit: type=1326 audit(1755786155.646:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 392.378534][ T31] audit: type=1326 audit(1755786155.646:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5597b8ebe9 code=0x7ffc0000 [ 394.254146][ T8975] 9pnet_fd: Insufficient options for proto=fd [ 394.333056][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 394.430579][ T8970] ip6gretap0: entered promiscuous mode [ 394.461611][ T8970] macvtap1: entered promiscuous mode [ 394.495861][ T8970] macvtap1: entered allmulticast mode [ 394.549018][ T8970] ip6gretap0: entered allmulticast mode [ 394.581754][ T8977] ip6gretap0: left allmulticast mode [ 394.590305][ T8977] ip6gretap0: left promiscuous mode [ 395.888219][ T8990] netlink: 'syz.3.859': attribute type 5 has an invalid length. [ 395.896343][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.859'. [ 396.968182][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 398.597781][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 399.074960][ T9044] 9pnet_fd: Insufficient options for proto=fd [ 400.970459][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 402.876256][ T924] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 403.044948][ T924] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 403.071679][ T924] usb 5-1: config 0 has no interface number 0 [ 403.097356][ T924] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 403.145098][ T924] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 403.192048][ T924] usb 5-1: config 0 interface 255 has no altsetting 0 [ 403.226552][ T924] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 403.255121][ T924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.299126][ T924] usb 5-1: config 0 descriptor?? [ 403.339067][ T924] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 403.955007][ T924] usb 5-1: USB disconnect, device number 22 [ 404.232917][ T5853] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 404.266636][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 404.387516][ T5853] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 404.399630][ T5853] usb 6-1: config 0 has no interface number 0 [ 404.408117][ T5853] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.492746][ T5853] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.538736][ T5853] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 404.724104][ T9101] hsr_slave_0 (unregistering): left promiscuous mode [ 404.779560][ T9107] netfs: Couldn't get user pages (rc=-14) [ 404.999077][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.031698][ T5853] usb 6-1: config 0 descriptor?? [ 405.478074][ T5853] uclogic 0003:256C:006E.0006: interface is invalid, ignoring [ 405.856129][ T9121] 9pnet_fd: Insufficient options for proto=fd [ 407.217273][ T5963] usb 6-1: USB disconnect, device number 2 [ 410.413107][ T9175] 9pnet_fd: Insufficient options for proto=fd [ 411.980247][ T9194] overlayfs: missing 'lowerdir' [ 413.070648][ T9220] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 415.322303][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 415.582819][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 415.582839][ T31] audit: type=1326 audit(1755786179.666:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 415.717516][ T31] audit: type=1326 audit(1755786179.666:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 415.760633][ T31] audit: type=1326 audit(1755786179.706:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 415.806088][ T9264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.941'. [ 415.903456][ T31] audit: type=1326 audit(1755786179.706:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 415.946864][ T9259] Cannot find add_set index 0 as target [ 416.019950][ T31] audit: type=1326 audit(1755786179.706:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 416.134872][ T31] audit: type=1326 audit(1755786179.706:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 416.168899][ T31] audit: type=1326 audit(1755786179.706:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 416.261628][ T31] audit: type=1326 audit(1755786179.706:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc838ebe9 code=0x7ffc0000 [ 416.272782][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 416.599079][ T31] audit: type=1326 audit(1755786179.706:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbc8390b07 code=0x7ffc0000 [ 417.273219][ T31] audit: type=1326 audit(1755786179.706:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9257 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdbc8390a7c code=0x7ffc0000 [ 417.542365][ T9270] team0: entered promiscuous mode [ 417.556951][ T9270] team_slave_0: entered promiscuous mode [ 417.568644][ T9270] team_slave_1: entered promiscuous mode [ 417.580866][ T9270] batadv_slave_1: entered promiscuous mode [ 417.589683][ T9270] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 417.601383][ T9270] Cannot create hsr debugfs directory [ 419.547086][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.555638][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.563750][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.571936][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.580627][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.589082][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.597622][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.606015][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.614544][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 419.622821][ T9310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 421.462965][ T977] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 421.622905][ T977] usb 6-1: device descriptor read/64, error -71 [ 421.873850][ T977] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 422.023506][ T977] usb 6-1: device descriptor read/64, error -71 [ 422.153628][ T977] usb usb6-port1: attempt power cycle [ 422.556742][ T977] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 422.643700][ T977] usb 6-1: device descriptor read/8, error -71 [ 423.483013][ T977] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 423.638987][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.966'. [ 424.535213][ T977] usb 6-1: device descriptor read/8, error -71 [ 424.686788][ T977] usb usb6-port1: unable to enumerate USB device [ 428.395809][ T9408] Cannot find add_set index 0 as target [ 429.919107][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 430.114633][ T5913] usb 6-1: device descriptor read/64, error -71 [ 430.366714][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 431.272898][ T5913] usb 6-1: device descriptor read/64, error -71 [ 431.348539][ T9433] xt_hashlimit: max too large, truncated to 1048576 [ 431.404455][ T5913] usb usb6-port1: attempt power cycle [ 431.889436][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 431.900719][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 431.909700][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 431.912863][ T5913] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 431.998645][ T9441] Cannot find add_set index 0 as target [ 432.662526][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 432.700812][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 433.123239][ T5853] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 433.199440][ T5913] usb 6-1: device descriptor read/8, error -71 [ 433.322787][ T5853] usb 5-1: not running at top speed; connect to a high speed hub [ 433.355703][ T9439] chnl_net:caif_netlink_parms(): no params data found [ 433.374308][ T5853] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 433.403638][ T5853] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.442221][ T5853] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 433.455364][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.485552][ T5853] usb 5-1: Product: ᰁ [ 433.490506][ T5853] usb 5-1: Manufacturer: и [ 433.526685][ T5853] usb 5-1: SerialNumber: 隧⁂ǵ≙⋉逨韷暡謃퀹བ킹龴붜駭㏳ꪣ⨤厫깤돺⋉뾅픕扞驏榵楲幏⤼鑛鈠 [ 433.583940][ T9445] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 433.785901][ T9463] Cannot find add_set index 0 as target [ 434.314121][ T5853] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 434.341940][ T5853] usb 5-1: USB disconnect, device number 23 [ 434.357666][ T5853] usblp0: removed [ 434.368374][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.389173][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.397616][ T9439] bridge_slave_0: entered allmulticast mode [ 434.406131][ T9439] bridge_slave_0: entered promiscuous mode [ 434.415784][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.442861][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.468989][ T9439] bridge_slave_1: entered allmulticast mode [ 434.501758][ T9439] bridge_slave_1: entered promiscuous mode [ 434.694589][ T9474] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 434.777504][ T9439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.794154][ T5846] Bluetooth: hci6: command tx timeout [ 434.988742][ T9439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.263024][ T9439] team0: Port device team_slave_0 added [ 435.291879][ T9439] team0: Port device team_slave_1 added [ 435.365767][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.403490][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.481188][ T9439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.537953][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.558442][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.636554][ T9439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.530082][ T9439] hsr_slave_0: entered promiscuous mode [ 436.581156][ T9439] hsr_slave_1: entered promiscuous mode [ 436.627475][ T9439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.662777][ T9439] Cannot create hsr debugfs directory [ 436.883089][ T5846] Bluetooth: hci6: command tx timeout [ 437.457514][ T9439] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 437.537271][ T9503] Cannot find add_set index 0 as target [ 437.742932][ T5963] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 438.077315][ T9439] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.180617][ T9439] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.200428][ T9439] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 438.209212][ T5963] usb 5-1: device descriptor read/64, error -71 [ 438.409005][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1008'. [ 438.438582][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 438.468326][ T5963] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 438.481298][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 438.672695][ T5963] usb 5-1: device descriptor read/64, error -71 [ 438.730857][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.777525][ T9439] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.808060][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.815753][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.860148][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.868354][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.919449][ T5963] usb usb5-port1: attempt power cycle [ 438.966072][ T5846] Bluetooth: hci6: command tx timeout [ 439.873000][ T5963] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 440.831050][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 440.831163][ T31] audit: type=1326 audit(1755786204.916:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9533 comm="syz.5.1013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8be418ebe9 code=0x0 [ 441.007966][ T9534] tipc: Enabling of bearer rejected, failed to enable media [ 441.033329][ T5846] Bluetooth: hci6: command tx timeout [ 441.079994][ T9538] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 441.256148][ T5963] usb 5-1: device descriptor read/8, error -71 [ 441.433561][ T9439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.827853][ T9561] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1018'. [ 442.851217][ T9561] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9561 comm: syz.4.1018) [ 442.931607][ T31] audit: type=1800 audit(1755786206.956:147): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1018" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=26071 res=0 errno=0 [ 443.683507][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 443.697216][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 443.715713][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 443.727669][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 443.736691][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 444.093919][ T9439] veth0_vlan: entered promiscuous mode [ 444.374877][ T9439] veth1_vlan: entered promiscuous mode [ 444.485691][ T9439] veth0_macvtap: entered promiscuous mode [ 445.137575][ T9439] veth1_macvtap: entered promiscuous mode [ 445.264120][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.317557][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.358351][ T9439] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.400429][ T9439] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.414024][ T9439] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.783901][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.834666][ T5846] Bluetooth: hci7: command tx timeout [ 446.052878][ T9439] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.091938][ T9566] chnl_net:caif_netlink_parms(): no params data found [ 446.123470][ T5963] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 446.264533][ T5963] usb 5-1: device descriptor read/64, error -71 [ 446.547812][ T5963] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 446.744294][ T5963] usb 5-1: device descriptor read/64, error -71 [ 446.762460][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.764448][ T9566] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.770871][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.795803][ T9566] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.804721][ T9566] bridge_slave_0: entered allmulticast mode [ 446.814487][ T9566] bridge_slave_0: entered promiscuous mode [ 446.853487][ T5963] usb usb5-port1: attempt power cycle [ 446.911803][ T9566] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.922188][ T9566] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.932101][ T9566] bridge_slave_1: entered allmulticast mode [ 446.944811][ T9566] bridge_slave_1: entered promiscuous mode [ 446.969651][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.978357][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.129204][ T9566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.153249][ T9566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.202799][ T5963] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 447.298719][ T5963] usb 5-1: device descriptor read/8, error -71 [ 447.513891][ T9566] team0: Port device team_slave_0 added [ 447.543642][ T5963] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 447.557152][ T9566] team0: Port device team_slave_1 added [ 447.595075][ T5963] usb 5-1: device descriptor read/8, error -71 [ 447.715259][ T5963] usb usb5-port1: unable to enumerate USB device [ 447.913005][ T5846] Bluetooth: hci7: command tx timeout [ 448.627343][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.648760][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.722043][ T9566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.756314][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.772427][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.858343][ T9566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.019190][ T9566] hsr_slave_0: entered promiscuous mode [ 450.051843][ T5846] Bluetooth: hci7: command tx timeout [ 450.075295][ T9566] hsr_slave_1: entered promiscuous mode [ 450.093508][ T9566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.123595][ T9566] Cannot create hsr debugfs directory [ 450.822908][ T5926] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 450.983685][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 452.073559][ T5846] Bluetooth: hci7: command tx timeout [ 452.520913][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.589263][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.556431][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.589301][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.216223][ T5926] usb 5-1: config 0 descriptor?? [ 454.256080][ T5926] usb 5-1: can't set config #0, error -71 [ 454.281344][ T5926] usb 5-1: USB disconnect, device number 32 [ 458.924849][ T5926] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 459.031236][ T9566] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.093321][ T9566] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.101907][ T5926] usb 7-1: device descriptor read/64, error -71 [ 459.127434][ T9566] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.159903][ T9566] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.349964][ T9566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.378397][ T9566] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.436171][ T9566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.447552][ T9566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.477706][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.485255][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.496531][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.504273][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.560096][ T5926] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 459.696613][ T5926] usb 7-1: device descriptor read/64, error -71 [ 459.817663][ T5926] usb usb7-port1: attempt power cycle [ 460.196590][ T9566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.242945][ T9467] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 460.909528][ T5926] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 461.405547][ T9467] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 461.451646][ T9467] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.562990][ T5926] usb 7-1: device not accepting address 4, error -71 [ 461.618943][ T9694] binfmt_misc: register: failed to install interpreter file ./file0 [ 461.654564][ T9467] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 461.837344][ T9467] usb 6-1: config 1 has no interface number 1 [ 461.869386][ T9467] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 461.918025][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 461.945268][ T9467] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.972638][ T9467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.012039][ T9467] usb 6-1: Product: syz [ 462.027115][ T9467] usb 6-1: Manufacturer: syz [ 462.041584][ T9467] usb 6-1: SerialNumber: syz [ 462.829584][ T9701] hsr_slave_0 (unregistering): left promiscuous mode [ 462.896604][ T9467] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 462.938762][ T9467] usb 6-1: MIDIStreaming interface descriptor not found [ 463.124112][ T9467] usb 6-1: USB disconnect, device number 11 [ 463.245621][ T6281] udevd[6281]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.587793][ T9566] veth0_vlan: entered promiscuous mode [ 464.639754][ T9566] veth1_vlan: entered promiscuous mode [ 465.117343][ T9566] veth0_macvtap: entered promiscuous mode [ 465.353829][ T5887] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 465.597569][ T9566] veth1_macvtap: entered promiscuous mode [ 465.693914][ T5887] usb 6-1: device descriptor read/64, error -71 [ 465.767440][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.915935][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.056778][ T5887] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 466.559064][ T9566] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.625213][ T9566] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.641279][ T9566] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.675883][ T9566] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.732805][ T5887] usb 6-1: device descriptor read/64, error -71 [ 466.854620][ T5887] usb usb6-port1: attempt power cycle [ 467.008537][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.060158][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.280450][ T5887] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 467.299258][ T9762] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9762 comm: syz.6.1063) [ 467.330194][ T31] audit: type=1800 audit(1755786231.416:148): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1063" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27346 res=0 errno=0 [ 467.398507][ T9761] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1063'. [ 468.158710][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.178556][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.382970][ T5887] usb 6-1: device not accepting address 14, error -71 [ 468.991679][ T9774] netlink: 'syz.1.1067': attribute type 3 has an invalid length. [ 469.917901][ T9774] overlay: ./file0 is not a directory [ 470.163749][ T9780] netfs: Couldn't get user pages (rc=-14) [ 472.595752][ T924] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 472.615980][ T9805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.496855][ T924] usb 6-1: device descriptor read/64, error -71 [ 473.582947][ T9803] Cannot find set identified by id 0 to match [ 473.762892][ T924] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 473.942767][ T924] usb 6-1: device descriptor read/64, error -71 [ 474.054473][ T924] usb usb6-port1: attempt power cycle [ 474.480402][ T9820] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.1080'. [ 474.490610][ T9820] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.1080'. [ 475.150132][ T924] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 476.575617][ T9829] xt_hashlimit: max too large, truncated to 1048576 [ 477.643849][ T9833] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1085'. [ 477.699110][ T9833] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9833 comm: syz.1.1085) [ 477.728175][ T31] audit: type=1800 audit(1755786241.806:149): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1085" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27462 res=0 errno=0 [ 478.504365][ T9850] netlink: 'syz.4.1092': attribute type 10 has an invalid length. [ 478.546259][ T9850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1092'. [ 478.561551][ T924] usb 6-1: device descriptor read/8, error -71 [ 478.583663][ T9850] team0: Device geneve0 is up. Set it down before adding it as a team port [ 478.624647][ T9850] net_ratelimit: 98 callbacks suppressed [ 478.624670][ T9850] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 479.108559][ T9861] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1093'. [ 479.139484][ T9861] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9861 comm: syz.7.1093) [ 479.217380][ T31] audit: type=1800 audit(1755786243.246:150): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1093" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27575 res=0 errno=0 [ 480.342776][ T9866] serio: Serial port pty30 [ 480.892670][ T5853] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 481.035337][ T9884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.472824][ T5853] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 481.481438][ T5853] usb 5-1: config 0 has no interface number 0 [ 481.518863][ T5853] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 481.545830][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.564400][ T5853] usb 5-1: Product: syz [ 481.571858][ T5853] usb 5-1: Manufacturer: syz [ 481.612901][ T5853] usb 5-1: SerialNumber: syz [ 481.671591][ T5853] usb 5-1: config 0 descriptor?? [ 481.911050][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.978565][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.130740][ T5853] usb 5-1: Firmware version (0.0) predates our first public release. [ 482.172747][ T5853] usb 5-1: Please update to version 0.2 or newer [ 482.430143][ T5853] usb 5-1: USB disconnect, device number 33 [ 484.099266][ T9926] netlink: 'syz.6.1109': attribute type 7 has an invalid length. [ 484.313075][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1109'. [ 485.155796][ T5853] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 485.346629][ T9926] : entered promiscuous mode [ 485.402878][ T5853] usb 5-1: device descriptor read/64, error -71 [ 485.671540][ T5853] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 485.726556][ T9938] input: syz0 as /devices/virtual/input/input18 [ 485.873097][ T5853] usb 5-1: device descriptor read/64, error -71 [ 486.353800][ T5853] usb usb5-port1: attempt power cycle [ 486.729481][ T9957] loop2: detected capacity change from 0 to 7 [ 486.737324][ T5853] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 486.770334][ T5853] usb 5-1: device descriptor read/8, error -71 [ 486.783716][ T9959] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.1114'. [ 486.819242][ T9959] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.1114'. [ 486.837977][ T5862] Dev loop2: unable to read RDB block 7 [ 486.873612][ T5862] loop2: unable to read partition table [ 486.893329][ T5862] loop2: partition table beyond EOD, truncated [ 486.919058][ T9957] Dev loop2: unable to read RDB block 7 [ 486.937294][ T9957] loop2: unable to read partition table [ 486.971175][ T9957] loop2: partition table beyond EOD, truncated [ 487.018620][ T9957] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 487.042788][ T5853] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 487.097804][ T5853] usb 5-1: device descriptor read/8, error -71 [ 487.233085][ T5853] usb usb5-port1: unable to enumerate USB device [ 491.428829][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1132'. [ 493.844387][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 493.882837][ T5926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 494.082844][ T5926] usb 8-1: device descriptor read/64, error -71 [ 494.453557][ T5926] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 494.812939][ T5926] usb 8-1: device descriptor read/64, error -71 [ 494.929581][ T5926] usb usb8-port1: attempt power cycle [ 496.242993][ T5926] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 496.558946][T10062] overlayfs: failed to resolve './file0/file0:obj_user=': -2 [ 496.666656][ T5926] usb 8-1: device descriptor read/8, error -71 [ 501.942888][ T5887] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 502.206377][ T5963] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 502.314993][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.341948][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.361480][ T5887] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 502.371603][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.387859][ T5963] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 502.409543][ T5887] usb 6-1: SerialNumber: syz [ 502.426680][ T5963] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 502.449509][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.484825][ T5963] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 502.514791][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 502.550331][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.708300][T10127] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 502.708300][T10127] program syz.5.1161 not setting count and/or reply_len properly [ 502.884046][T10126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.960768][T10126] batadv_slave_1 (unregistering): left promiscuous mode [ 503.935769][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.944928][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.961401][ T5963] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 503.974425][ T5963] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 504.193841][T10131] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 504.783991][T10131] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 505.103580][ T5963] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 505.112359][ T5963] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 505.157695][ T5887] usb 6-1: 0:2 : does not exist [ 505.229774][ T5887] usb 6-1: unit 5 not found! [ 505.302774][ T5887] usb 6-1: USB disconnect, device number 20 [ 505.732455][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.289376][ T5887] usb 5-1: USB disconnect, device number 38 [ 507.042992][ T5853] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 507.199303][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.213176][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 507.229575][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.243870][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.258182][ T5853] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.268933][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.284388][ T5853] usb 5-1: Product: syz [ 507.289080][ T5853] usb 5-1: Manufacturer: syz [ 507.294053][ T5853] usb 5-1: SerialNumber: syz [ 508.020563][ T5853] usb 5-1: 0:2 : does not exist [ 508.262816][ T5853] usb 5-1: USB disconnect, device number 39 [ 508.433786][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.472256][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'. [ 509.284474][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 509.912040][T10183] hsr_slave_0 (unregistering): left promiscuous mode [ 510.003265][T10191] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1181'. [ 511.073101][ T5963] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 511.614256][ T5963] usb 7-1: Using ep0 maxpacket: 32 [ 511.751042][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.380774][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.400889][ T5963] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 512.411028][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.424648][ T5963] usb 7-1: config 0 descriptor?? [ 512.437455][ T5963] hub 7-1:0.0: USB hub found [ 512.816352][ T5963] hub 7-1:0.0: 2 ports detected [ 513.565558][T10232] mmap: syz.1.1193 (10232) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 513.835490][ T5963] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 513.848398][ T5963] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 514.116982][ T5963] usbhid 7-1:0.0: can't add hid device: -71 [ 514.123834][ T5963] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 514.933882][ T5963] usb 7-1: USB disconnect, device number 6 [ 515.034923][T10245] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1196'. [ 515.661928][T10255] 9pnet_fd: Insufficient options for proto=fd [ 517.153859][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1205'. [ 518.956384][ T924] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 519.117938][T10297] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1210'. [ 519.883749][ T924] usb 5-1: Using ep0 maxpacket: 32 [ 519.903013][ T924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.954264][ T924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.986982][ T924] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 520.020385][ T924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.204085][ T924] usb 5-1: config 0 descriptor?? [ 521.162198][ T924] usb 5-1: can't set config #0, error -71 [ 521.240481][ T924] usb 5-1: USB disconnect, device number 40 [ 521.856449][T10312] bond2: entered allmulticast mode [ 521.863498][T10312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.488762][T10327] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1221'. [ 523.772927][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 525.173861][ T5887] usb 8-1: Using ep0 maxpacket: 32 [ 525.188410][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.200653][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.213216][ T5887] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 525.222457][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.253516][ T5887] usb 8-1: config 0 descriptor?? [ 525.279369][ T5887] hub 8-1:0.0: USB hub found [ 525.591608][ T5887] hub 8-1:0.0: 2 ports detected [ 526.510602][T10359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.636175][ T5887] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 526.649474][ T5887] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 526.665733][ T5887] usbhid 8-1:0.0: can't add hid device: -32 [ 526.676412][ T5887] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 527.455876][ T9467] usb 8-1: USB disconnect, device number 6 [ 528.588072][T10381] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1234'. [ 528.991567][ T32] INFO: task syz-executor:5844 blocked for more than 143 seconds. [ 529.580343][ T32] Not tainted 6.16.0-syzkaller #0 [ 529.591943][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.652830][ T32] task:syz-executor state:D stack:21016 pid:5844 tgid:5844 ppid:1 task_flags:0x400140 flags:0x00004004 [ 529.676044][ T32] Call Trace: [ 529.683353][ T32] [ 529.687622][ T32] __schedule+0x16aa/0x4c90 [ 529.718662][ T32] ? do_raw_spin_lock+0x121/0x290 [ 529.731866][ T32] ? schedule+0x165/0x360 [ 529.761479][ T32] ? __lock_acquire+0xab9/0xd20 [ 529.775769][ T32] ? __pfx___schedule+0x10/0x10 [ 529.790138][ T32] ? schedule+0x91/0x360 [ 529.799207][ T32] schedule+0x165/0x360 [ 529.809425][ T32] v9fs_evict_inode+0x170/0x320 [ 529.817896][ T32] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 529.832220][ T32] ? __pfx_var_wake_function+0x10/0x10 [ 529.846272][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 529.856204][ T32] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 529.871395][ T32] evict+0x501/0x9c0 [ 529.886264][ T32] ? __pfx_evict+0x10/0x10 [ 529.905602][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 529.919279][ T32] ? _raw_spin_unlock+0x28/0x50 [ 529.933844][ T32] ? iput+0x6d8/0x9d0 [ 529.942725][ T32] __dentry_kill+0x209/0x660 [ 529.955448][ T32] ? dput+0x37/0x2b0 [ 529.967321][ T32] dput+0x19f/0x2b0 [ 529.977091][ T32] shrink_dcache_for_umount+0xa0/0x170 [ 530.006407][ T32] generic_shutdown_super+0x67/0x2c0 [ 530.017719][ T32] kill_anon_super+0x3b/0x70 [ 530.028504][ T32] v9fs_kill_super+0x4c/0x90 [ 530.042706][ T32] deactivate_locked_super+0xbc/0x130 [ 530.058475][ T32] cleanup_mnt+0x425/0x4c0 [ 530.072763][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.087552][ T32] task_work_run+0x1d1/0x260 [ 530.100251][ T32] ? __pfx_task_work_run+0x10/0x10 [ 530.114664][ T32] ? __x64_sys_umount+0x122/0x160 [ 530.131667][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 530.143184][ T32] exit_to_user_mode_loop+0xec/0x110 [ 530.148783][ T32] do_syscall_64+0x2bd/0x3b0 [ 530.176355][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.201218][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.227473][ T32] ? clear_bhb_loop+0x60/0xb0 [ 530.232262][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.285793][ T32] RIP: 0033:0x7f68abd8ff17 [ 530.290356][ T32] RSP: 002b:00007ffdd0a33338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 530.339636][ T32] RAX: 0000000000000000 RBX: 00007f68abe11c05 RCX: 00007f68abd8ff17 [ 530.372899][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd0a333f0 [ 530.381177][ T32] RBP: 00007ffdd0a333f0 R08: 0000000000000000 R09: 0000000000000000 [ 530.442336][ T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd0a34480 [ 530.471866][ T32] R13: 00007f68abe11c05 R14: 0000000000059b53 R15: 00007ffdd0a344c0 [ 530.510772][ T32] [ 530.522722][ T32] [ 530.522722][ T32] Showing all locks held in the system: [ 530.530533][ T32] 1 lock held by khungtaskd/32: [ 530.591659][ T32] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 530.631809][ T32] 2 locks held by getty/5597: [ 530.643191][ T32] #0: ffff8880315c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 530.653757][ T32] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 530.687966][ T32] 1 lock held by syz-executor/5844: [ 530.703169][ T32] #0: ffff88805b1dc0e0 (&type->s_umount_key#69){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 530.713708][ T32] 7 locks held by kworker/1:3/5887: [ 530.719226][ T32] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 530.729842][ T32] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 530.741654][ T32] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 530.751138][ T32] #3: ffffffff99d20cd0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 530.761932][ T32] #4: ffff8880b8639598 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x7b0/0xfe0 [ 530.772177][ T32] #5: ffff888028aa0a28 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 530.782073][ T32] #6: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 530.796159][ T32] 1 lock held by syz.3.939/9253: [ 530.801282][ T32] #0: ffff88805b1dc0e0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 530.811555][ T32] 1 lock held by syz.2.974/9382: [ 530.821165][ T32] #0: ffff88805b1dc0e0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 530.835214][ T32] 1 lock held by syz.2.974/9383: [ 530.840235][ T32] #0: ffff88805b1dc0e0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 530.850438][ T32] 2 locks held by syz.5.1231/10369: [ 530.856426][ T32] [ 530.859384][ T32] ============================================= [ 530.859384][ T32] [ 530.868233][ T32] NMI backtrace for cpu 0 [ 530.868257][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 530.868282][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.868295][ T32] Call Trace: [ 530.868304][ T32] [ 530.868313][ T32] dump_stack_lvl+0x189/0x250 [ 530.868343][ T32] ? __wake_up_klogd+0xd9/0x110 [ 530.868386][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.868415][ T32] ? __pfx__printk+0x10/0x10 [ 530.868457][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 530.868493][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 530.868522][ T32] ? _printk+0xcf/0x120 [ 530.868554][ T32] ? __pfx__printk+0x10/0x10 [ 530.868583][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 530.868619][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 530.868656][ T32] watchdog+0xfee/0x1030 [ 530.868690][ T32] ? watchdog+0x1de/0x1030 [ 530.868731][ T32] kthread+0x70e/0x8a0 [ 530.868763][ T32] ? __pfx_watchdog+0x10/0x10 [ 530.868793][ T32] ? __pfx_kthread+0x10/0x10 [ 530.868824][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.868844][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.868865][ T32] ? __pfx_kthread+0x10/0x10 [ 530.868902][ T32] ret_from_fork+0x3fc/0x770 [ 530.868927][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 530.868955][ T32] ? __switch_to_asm+0x39/0x70 [ 530.868981][ T32] ? __switch_to_asm+0x33/0x70 [ 530.869006][ T32] ? __pfx_kthread+0x10/0x10 [ 530.869035][ T32] ret_from_fork_asm+0x1a/0x30 [ 530.869079][ T32] [ 530.869087][ T32] Sending NMI from CPU 0 to CPUs 1: [ 531.035270][ C1] NMI backtrace for cpu 1 [ 531.035289][ C1] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 531.035312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.035323][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 531.035355][ C1] Code: 8b 3d 74 6e fa 0b 48 89 de 5b e9 33 20 55 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 90 9c 92 65 8b 15 58 6a dc 10 81 e2 00 01 ff 00 [ 531.035371][ C1] RSP: 0018:ffffc9000408fcc8 EFLAGS: 00000246 [ 531.035389][ C1] RAX: ffffffff81aeb144 RBX: 0000000000000001 RCX: 0000000000000000 [ 531.035402][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000408fd40 [ 531.035415][ C1] RBP: 0000000000000000 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 531.035428][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 00000000000f4240 [ 531.035441][ C1] R13: ffffc9000408fd40 R14: ffffc9000408fd40 R15: 0000000000000001 [ 531.035455][ C1] FS: 000055558cade500(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 531.035471][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.035483][ C1] CR2: 00007ffcef9f3fb8 CR3: 0000000076b9e000 CR4: 00000000003526f0 [ 531.035500][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000008d00c0ed [ 531.035511][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 531.035523][ C1] Call Trace: [ 531.035530][ C1] [ 531.035537][ C1] trace_hrtimer_setup+0x14/0x200 [ 531.035563][ C1] hrtimer_nanosleep+0xb9/0x360 [ 531.035584][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 531.035608][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 531.035635][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 531.035662][ C1] __se_sys_clock_nanosleep+0x2f1/0x380 [ 531.035694][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 531.035727][ C1] ? do_syscall_64+0xbe/0x3b0 [ 531.035750][ C1] do_syscall_64+0xfa/0x3b0 [ 531.035771][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.035789][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.035808][ C1] ? clear_bhb_loop+0x60/0xb0 [ 531.035854][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.035872][ C1] RIP: 0033:0x7fb8be5c1463 [ 531.035887][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 531.035910][ C1] RSP: 002b:00007fffd2be12f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 531.035928][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8be5c1463 [ 531.035941][ C1] RDX: 00007fffd2be1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.035952][ C1] RBP: 0000000000000000 R08: 000000003b18be6b R09: 7fffffffffffffff [ 531.035965][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffd2be1760 [ 531.035976][ C1] R13: 0000000000000004 R14: 00007fffd2be134c R15: 00007fffd2be13e0 [ 531.035998][ C1] [ 531.036587][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 531.340620][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 531.350713][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.361159][ T32] Call Trace: [ 531.364500][ T32] [ 531.367475][ T32] dump_stack_lvl+0x99/0x250 [ 531.372442][ T32] ? __asan_memcpy+0x40/0x70 [ 531.377109][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.382710][ T32] ? __pfx__printk+0x10/0x10 [ 531.387721][ T32] panic+0x2db/0x790 [ 531.391657][ T32] ? __pfx_panic+0x10/0x10 [ 531.396209][ T32] ? nmi_backtrace_stall_check+0x433/0x440 [ 531.402057][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 531.407564][ T32] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 531.414575][ T32] watchdog+0x102d/0x1030 [ 531.419155][ T32] ? watchdog+0x1de/0x1030 [ 531.423616][ T32] kthread+0x70e/0x8a0 [ 531.427830][ T32] ? __pfx_watchdog+0x10/0x10 [ 531.433168][ T32] ? __pfx_kthread+0x10/0x10 [ 531.437810][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.443132][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.448347][ T32] ? __pfx_kthread+0x10/0x10 [ 531.453236][ T32] ret_from_fork+0x3fc/0x770 [ 531.457947][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 531.463094][ T32] ? __switch_to_asm+0x39/0x70 [ 531.468063][ T32] ? __switch_to_asm+0x33/0x70 [ 531.472961][ T32] ? __pfx_kthread+0x10/0x10 [ 531.477585][ T32] ret_from_fork_asm+0x1a/0x30 [ 531.482471][ T32] [ 531.485850][ T32] Kernel Offset: disabled [ 531.490237][ T32] Rebooting in 86400 seconds..