last executing test programs: 7m0.103873129s ago: executing program 2 (id=2710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x3c, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x40808) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r6, &(0x7f0000000080)="b0d25e54d4facaa24ac8532a982c910f1f4887a72914ea51577963f1144458e1856258c35dafdc5eb9dfa644367addedeed7aaf3379f5c4cba54f9fab3645e1fa560bd44fa23a19d29e65c539a82afe390f57fea3048f0f63f65978785ff1ae0f68942124e537aefc7cc5ab84f03774885744a13b2", 0x75, 0x8800, &(0x7f0000000280)={0x1a, 0x10f, 0x9, 0x6, 0x21, 0x10, @broadcast}, 0x10) socket(0x1d, 0x2, 0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) clock_gettime(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) getuid() getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x21c, 0x12, 0x8, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x67, 0x0, {0x4e22, 0x4e21, [0x8, 0x3, 0xd, 0x1], [0x4, 0x7ff, 0xc8, 0x5], r7, [0xe15, 0xffffffff]}, 0x9, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "44d5158bac18851d0a15b7bfb4e12ec94311658a230b65fd83cfccb08ccd33eb36b496a3834b7a6f97d47931297140d8094c79ced1a6acc6ec7aaa6590803a750b826af36cc34b6bd3a9817a45163c04ee36ddd86a705eb7fc85c87490819894f9f0b9c2777e1ce0cb835042994d19dd1ca40d68b5b4d66d45b0092f197f7b453558960f8e5805d7a017bcd1b399faec6600c2c8ff5653a9b38b4fef3a2f94e3b4051779e544c5cc2412c5677e1ae848a362d453c39e15777420934bd6be36db6c72dbecfeaaab205a63fdc5de2adfe239f2b42560cbb5d6e41e7c918962ddf8042bdaceba7a2b2dd58a05814167763e58ceb683b73c"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "03d1410deda0eac0653448368ca88e8a56005b6a9856329e3441e0722be5528acd756265566e2e51fb88b46c63a9edcb959d309d37b011bc2754fd9570d8447bbc1ec091aac0d190f3b841a75327f1f93ce18c46e138433eef9245541aa388715fa0bbdaeafa0f27778cdd9776cb0fd94147566945192db5901467712b7f116fa6d33cf8a3139ce93b0a194cf0bf68997e7419727d433f4fb738b55304edd6dafb3169d79090562eb2f72188d1ad5cd166b1209a46d3e8570cd182a674b90dfd0805018000"/208}]}, 0x21c}}, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 6m59.069885848s ago: executing program 2 (id=2714): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r1, &(0x7f00000002c0)={0x130, 0x0, r2, {0x7, 0xc, 0x0, '\x00', {0x86, 0x4af22, 0x6, 0x6, 0x0, r3, 0xa000, '\x00', 0x6, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff3}, {0x203d7f, 0x7, 0xc000000}, {0x4000100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x5, 0xc8}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x7ffffffe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r6, 0x0, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) syz_emit_ethernet(0x52, &(0x7f00000005c0)={@local, @local, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x2, 0x9, 0x3c, 0x6b, 0x0, 0x8a, 0x1, 0x0, @remote, @remote, {[@ssrr={0x89, 0x3, 0x30}, @lsrr={0x83, 0xf, 0x48, [@multicast1, @broadcast, @private=0xa010100]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x8, 0x99f, 0x7, 0x2}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) unshare(0x22020600) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/pid\x00') mount_setattr(0xffffffffffffff9c, 0x0, 0x1800, &(0x7f00000017c0)={0x10008b, 0x0, 0x0, {r8}}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aac000000060a010400000000000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c000300040000000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a3200000000140000001100200000000000000000000100000a66a91297ac033ce31227a5bf7b4f13564a9784211352af9a83723ac1daa70985a395fb47cae4fd667ab082be943a1c7e8e95f75a878c236297c3321eed80c79be43d61f6418f88ffdf5f18d5521fd6afec06e391e168365e3306a91c0907e8241709f5c4715f1e70fa41fe56a4016c6fcad0b40db99213a281ca3a81ca5d233b78f94cef41a262cc0e17f6d1b6fa8d93385c563f3aa719986938fc1cc9649e9be245a110da6f4c14f31ae6f36d3a06d6350b581504406ca6efdea46bd8e2707ca9d470cd0d56959287ba32b621428ecab93fdbcc973f979ede315c1b16d4c2248b9d4b11615605cb46c273da44d53053b2ce7c9bd8f8073373fbf8c5e52058320e00"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x3, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="a5689faaeb578b5511d108f979", 0xd}, {&(0x7f0000000100)="9adb76b655a8e172e07f686fb43ff4cb96d1d9a4ea13d6a76ab7f26203ec454bdae2cfe15f834c77e4901bae951f570d7f4cd39ea31882ea81980d4775623c616c5d9bdc7beaa7a8125783808638b60346984f0019a5d2aeaaf50dd16626a29be8", 0x61}, {&(0x7f0000000180)="d4a2afbadadb42c4b9b8cde276c09cc33f51007b2ed6f96d5a51ea", 0x1b}, {&(0x7f0000000240)="d13664a209fd32a846c7d32f855c8d8a65c6c0f9aad9561cbc1695c113aef1b97b0ee13e6fecc51bf72cd77762d4ff899e45a1456fde7fc449d49b57bc5565038dc196035977282cf70706efae3511c406d9e5bfd4b136f3ede3735589872eea348c2b6da8e40884931e3d941d1f8a2945a9411b81f6b19f8afc62896eb9d749d2efb323e67edeb5e2e07ce0587c3376f4f3bb735f5af9740437fe38352fd627d2fef1008107984797a0c5ab16b95e094fc5382ffc4232f3d8299ef213e5d8180384dad53c44f5c531b1e4e79908468bc291912536dd7eeffae52a8a0ef572c7da759e743c55f5", 0xe7}], 0x4, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa8}}, @ip_retopts={{0x10}}], 0x110}, 0x20000090) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @broadcast}, {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000040)=0x5, 0x2) 6m58.994859192s ago: executing program 2 (id=2715): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = dup(r0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008120c0500000000000001090224000100009028090400fe07afcfc57309218100030107280009058103400003c100"], 0x0) creat(0x0, 0x8) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) epoll_create1(0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x28, {0x28, 0x6, "c263138526792c3cbdeace938d0fb742a4e06e446c4e88e788a1ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m55.57473993s ago: executing program 2 (id=2726): openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x3}, [], {0x4, 0x4}}, 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6m52.161127044s ago: executing program 2 (id=2738): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 6m50.953647752s ago: executing program 2 (id=2748): shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf00"], 0x28}}, 0x4000080) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="200403000000e25f91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000200)=""/106) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYBLOB="8123cd32d8a0b42e6e86a07b894efee2c4b86dbadad19ab4793464c8c5ba69cd9a3bcfbc5d6d4b66464d325d80cbe3cbb3dbc8c9bc3388b5b7f09a750bfc274fdf2556f8ded6b61985c6e29d221717ec67d961253e1e18c3df25a022fc5f750039684afc398a8b40d0a64f9a0629030d10ac2866d3083c09151455adc6622a582299cb1de770a94b81919a3c8fd80dc14806ba7bc87de58a829a8315711634993152db3ad364f71eda331fc88add7a0821029b4746bd4943ef806a3b98b95148b6d012cc7a108bfab811bb97cd33000d99abf27acdfb16b180cbdf", @ANYRES16=r2], 0x22) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x3, 'syz1\x00', 0x2}) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000010c0)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000001240)={0x2, 0x6, 0x0, 0xe45, 0xe, 0xd}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x5, "166b006c4000000c00f9ffffffffffff00", 0xfffffffe, 0xffffffff}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000ac0)=0x48) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4030ae7b, &(0x7f0000001200)={0x10, 0x0, 0x7f, 0x101, 0x2}) landlock_restrict_self(r4, 0xe) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000001fc0)={r3, 0x0, 0x2, 0x1, 0x3, 0x1, [0x0, 0x2, 0x7, 0x100000000, 0x4, 0x4]}) 6m34.482876025s ago: executing program 32 (id=2748): shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf00"], 0x28}}, 0x4000080) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="200403000000e25f91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000200)=""/106) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYBLOB="8123cd32d8a0b42e6e86a07b894efee2c4b86dbadad19ab4793464c8c5ba69cd9a3bcfbc5d6d4b66464d325d80cbe3cbb3dbc8c9bc3388b5b7f09a750bfc274fdf2556f8ded6b61985c6e29d221717ec67d961253e1e18c3df25a022fc5f750039684afc398a8b40d0a64f9a0629030d10ac2866d3083c09151455adc6622a582299cb1de770a94b81919a3c8fd80dc14806ba7bc87de58a829a8315711634993152db3ad364f71eda331fc88add7a0821029b4746bd4943ef806a3b98b95148b6d012cc7a108bfab811bb97cd33000d99abf27acdfb16b180cbdf", @ANYRES16=r2], 0x22) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x3, 'syz1\x00', 0x2}) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000010c0)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000001240)={0x2, 0x6, 0x0, 0xe45, 0xe, 0xd}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x5, "166b006c4000000c00f9ffffffffffff00", 0xfffffffe, 0xffffffff}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000ac0)=0x48) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4030ae7b, &(0x7f0000001200)={0x10, 0x0, 0x7f, 0x101, 0x2}) landlock_restrict_self(r4, 0xe) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000001fc0)={r3, 0x0, 0x2, 0x1, 0x3, 0x1, [0x0, 0x2, 0x7, 0x100000000, 0x4, 0x4]}) 18.017735291s ago: executing program 5 (id=3663): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000800000000000000081017004e224e22"], 0x24}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4400000000080102000000000000000000000006140004800800054080000001080006400000000906000240810000000500030084000000090001"], 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000b06010100000000000000000100000105000100070000000900020073797a3000000000040007807d830913dd596481730975d55858c8"], 0x2c}, 0x1, 0x0, 0x0, 0x4004085}, 0x48000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @empty}, 0x800, 0x1, 0x1, 0xb, 0x0, 0x6}, 0x20) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000240)={0x56, 0x0, 0x7, 0x280000000}) 17.983820241s ago: executing program 3 (id=3664): io_uring_setup(0xcda, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300"/352], 0x610) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.921177226s ago: executing program 0 (id=3666): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040ac05650200000000000109022400010000500b0904000ffe0300000009218c00fc01222800090581032004b481fe55d46c7602750917a8f0070acf3264064934b93a1afa0731de264a3c8eee"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000300)='system_u:object_r:default_t:s0\x00', 0x1f, 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000075c0)={@loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0xd432, 0x40, 0x409, 0x500, 0xa, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) fsopen(0x0, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) listns(0x0, 0x0, 0x0, 0x0) 16.287194259s ago: executing program 3 (id=3667): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000200)={'veth1_to_bridge\x00', @ifru_settings={0x4, 0x0, @te1=&(0x7f00000001c0)={0x90, 0xfffffff7, 0x5, 0x81}}}) r1 = signalfd(r0, &(0x7f00000002c0)={[0x7fffffffffffffff]}, 0x8) execveat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000340)='veth1_to_bridge\x00', &(0x7f0000000380)='.\x00', &(0x7f00000003c0)='.\x00', &(0x7f0000000400)='\'@\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\\]%\x00', &(0x7f00000004c0)=',%%.^))^^%\x00']}, &(0x7f0000000740)={[&(0x7f0000000540)=')%&}$\x00', 0x0, &(0x7f00000005c0)='/dev/net/tun\x00', &(0x7f0000000600)='^)-\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='\\(Q', &(0x7f00000006c0)='/dev/radio#\x00', &(0x7f0000000700)='veth1_to_bridge\x00']}, 0x100) recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000880)=@sco, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/190, 0xbe}], 0x1, &(0x7f0000000a00)=""/215, 0xd7}, 0xfffffffc}], 0x1, 0x40, &(0x7f0000000b40)={0x77359400}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000c00)={0x0, @bt={0x9, 0xfffffffb, 0x1, 0x3, 0xa31, 0x1, 0x2, 0xeaa4, 0xfffffff8, 0xf, 0x4, 0x2, 0x3, 0x7, 0x1d, 0x22, {0x7, 0x8}, 0x9, 0x1}}) sendmsg$nl_generic(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x1e, 0x400, 0x70bd2a, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8090) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000e40)={0x0, 0x5, 0xfffffc73, r1, 0x0, &(0x7f0000000e00)={0x990afa, 0x10bb49e7, '\x00', @p_u8=&(0x7f0000000dc0)=0x3b}}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20804}, 0x20000000) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000f80)={{0x9, 0xe6b1}, 0x100, './file0/file0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x8084) utimes(0x0, &(0x7f00000013c0)={{0x77359400}, {0x0, 0xea60}}) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) read$FUSE(r1, &(0x7f0000001440)={0x2020}, 0x2020) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000003480)) 15.970035409s ago: executing program 5 (id=3669): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xcaa0c155c3b9f6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x569882, 0x84) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x4, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xf423f, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) setgroups(0xffffffffffffff79, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/51, 0x0}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fbdb7f000200000014000900ff010000000000000000000000000001050004000100000008000600e00000021400ec24827e6c06b1ee000000000000000000aa050002000a0000000500020002000000050002000800000008000800ac141417"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004044) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/95, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x1}) eventfd(0x3fd) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) 15.648164116s ago: executing program 1 (id=3671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x20, &(0x7f0000000680)=[@cr4={0x1, 0x100280}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x75, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 14.575718448s ago: executing program 3 (id=3672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = syz_open_dev$evdev(0x0, 0x4, 0x2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x8, 0x7]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000700)=[0x1, 0x6]) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) bind$llc(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r4, &(0x7f0000000380)=""/144, 0x90) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x91, 0xf7, 0x40}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x1, 0xff, 0x40, 0x6}, 0xa3, &(0x7f0000000080)={0x5, 0xf, 0xa3, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x1869, 0x0, 0xd8f, [0x3f00, 0xff30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x0, 0x3, 0x3}, @generic={0x56, 0x10, 0x2, "676c1d1b890067c3ecb8cc4c7458ba6a4043296a393e40e4d2ec5444ca14a1e343971403f763260b39106dc0cb70e5fa0ebb5e53cf140a78d27ac33d3af567ec8260eaab04e56dcce898eff37bb271e02c9541"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x2, 0x7, 0x7ff, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "11adf63015810ad5a3bff1a45538f6e4"}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}, {0x4f, &(0x7f0000000280)=@string={0x4f, 0x3, "f070ec362eaa19bc22347ed068f1b54a271d0ec50b0f6bfb1a15b52d4dccf0d4fc00361fbb7b1ddabd3537021f8e1c7a44782dac19715202ec21b57ae72ba1698e3b1c7ff3a2a9584ad6fda951"}}, {0x7, &(0x7f0000000300)=@string={0x7, 0x3, "68bb72aece"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4ff}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) 14.255088047s ago: executing program 5 (id=3673): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x20000004) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d40)=[{{&(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)="0f1ad46903cf6425d0e5c4acbf89486389a33d138b854dc3f0c1a4e5e458edc3549b", 0x22}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r5, r1, r4, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r4, r1, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r1, r5, r0, r0, r0, r0]}}], 0xa8, 0x20000800}}, {{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000005c0)="b0f35b5946430c559e3a9f53c2b138bf8b4d05498c98b5310e4454678bf316ce13b25608a5f9e09aa280dcda7b2e3bd6cb17bdd85c53a9832be21018cee10d47cf8bb2740d0ffba73012f317ec702143d252a88eca1c6cf8b2f074b9fb0fd41bb30bdf1a0024c07d0fe0263ddfe71fe08e68de988911e576912cb5631985cb23536fc171e82c1a6f6bb768ede59e18", 0x8f}, {&(0x7f0000000680)="85a7bccd8f181fd5e0a792ed1758786d38dc1d992d5b55d0510f07cba50ccff432e40944b125e25ccdfe516850aa1d832128488dcd039ea6", 0x38}, {&(0x7f00000006c0)="9b65cfa97942d414b49b2921a960cb9663e8bde5964fbfd5aa5e0ed9ef8f5f9c9ac2ce34b3ed0c45e0e81cae99fb643e3a08a54328913204663a0ffb99563c9769a6c8076ed60b79f74f4749497c807054fe7d3e04f337ae2f99b3ab180e993641f32498135af4d9f7cf8d6d9cee5bd83a29fc8fe1ec90702f4287459e402997dc39c0fbc9ca9a2580648026bcfacc692e4cf5f565b71a87266cc0f49929e7ae4b98c2e01c4000362424add45453f65a", 0xb0}, {&(0x7f0000000900)="a69a84ce38c68d869fe344b7368c6ace1dbb9bb492fe2c143f6b61e97bac0e0e2685eed6d07c416d67fc6db52903b1c5bbc0ef71369c577380cd08c52d70416b7ab605751101fe4c8473be937e1c448e8ab0dadb7e575c05093c3f3d6713fbcd6b40bb97851cf8fd9fec32efde109ff8972023724274437e7f848c976e7ec73331a8b7bb0026a597e1e307b27601bdd1400a43e523ba2c7ccc46dff4b5f292bfbda75334acf5e9b3d3678bbeaec04d18231179630a25ff51281375d5cfe1efcb7135689bd35a45c8a36bdd", 0xcb}, {&(0x7f0000000a00)="fe1e652c35aa53b686ca1fa3602181216beab3562310dd31d502bbc50fbd7ea2eed842faae43b33d587a044900b5dbc519ab743624e5fa17bec62db02fce25953381e26472e122e14ab868affc139944d3395ad030a9c38da55d2633824e599df0e161cf13b9f33c74f35ddcb669c4fd1e65d19b", 0x74}, {&(0x7f0000000a80)="f71a6753a70be8ac4d51d0d3584f8f87f67890793ad6d718494098e14b21c30799c6c8bc712925dc7f635306f0e87764143518d38093c5ddf6681865cffd400b70cf984ed0939363148a9727648dc0ffb24b87f3afe1581ac7acda5561328b73f0becb23a23a8f8f1ac13b39ff7c67e9481f0b5d34332122967d33ae73d14e0e6834d841b872126f91b0237e5f41ae7cbc76f3629ed0", 0x96}, {&(0x7f0000000b40)="194146f65e3a118dc5816476dff78a27e973588a629c082c791f4c38467f117d202cdc36325d734cf1039313e237f6cfe9b2bfcf2bfedcc9a52c631c0c07094f92c363cef4e31064689056a8d894f0d304ce03246a562a280ecc192000ec7da693e54618ea9be05ffd698d87c464b45cc0ff82119c1214bba4eebca79e65456218f86b58278755147d1774bef10d6383185e547d00b3c134ad06331e5aa5d2eb8e8ad8f5c6b8f3a6829c154035bcc88ebc24d8554134dd63e44f665796c104a47f054e2dd99ec1fefed0fab14260755f55378a2f3db0e2cff6", 0xd9}], 0x7, &(0x7f0000000d00), 0x0, 0x80a0}}], 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x10, 0x1, 0x41, 0x1, 0x0, 0x2004c9, 0xfffffffffffffffc, 0xa1d, 0x7, 0x5, 0x79, 0xffffffffffffffff, 0x2, 0xfffffffffffffffc], 0x3332d000, 0x10082}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13.086370262s ago: executing program 0 (id=3674): socket$phonet(0x23, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, &(0x7f0000000240)="af48fa26046e1bf10f427727f21f97e6434561127c0690ffa7576b2b2c68ad97f3dd308823a9799973909bfb2205845e33"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000003c0)={0x10, 0x1, r5}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x2000000, {0x0, 0x0, 0x0, r4, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r9, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="921000001022000014000300636169663000"/28, @ANYBLOB="3400000011000100bd7000fddbdf2500000000", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 12.922857567s ago: executing program 1 (id=3675): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001d00)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) 11.846307894s ago: executing program 1 (id=3676): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="540000000906010800000000000000000700000009000200737978310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000940)=0x707987cd) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 10.7984403s ago: executing program 3 (id=3678): io_uring_setup(0xcda, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300"/352], 0x610) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.106097419s ago: executing program 1 (id=3679): syz_open_dev$hidraw(0x0, 0x0, 0x40000) add_key(0x0, 0x0, &(0x7f0000000080)="0000000000000001f069000000000001000080c00070000002000200861fa72e5b01504104bfeacdd5a9007d167c7164713697ef3caf9bfe3e60012ed84d0948d009c79458a36c3e87ea33ce9360a683218cd568dad568d890f236964c2f343ff045c795f2801eaf840413ef7cde5e04bd72fe28d1a221a9388971cf0e0d9d9eef039e358c9c386b301f39ebd67d426d849e42a5af55febb6e8e21566b1651e4cd570422acec6a12c2e1ba8122c89e9cc3ecb6861267a4bb2ebbb28ab055a9c4d00d61d13c7292a7", 0xc8, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x9, "80a77e83cc4b20dc0d"}, &(0x7f00000004c0)=0x11) r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045731, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r2}, &(0x7f0000000540)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000100)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x92, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 9.099946463s ago: executing program 5 (id=3680): socket$phonet(0x23, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, &(0x7f0000000240)="af48fa26046e1bf10f427727f21f97e6434561127c0690ffa7576b2b2c68ad97f3dd308823a9799973909bfb2205845e33"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000003c0)={0x10, 0x1, r5}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x2000000, {0x0, 0x0, 0x0, r4, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r9, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="921000001022000014000300636169663000"/28, @ANYBLOB="3400000011000100bd7000fddbdf2500000000", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 9.097544307s ago: executing program 3 (id=3681): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x16, 0xffffffffffffffa4, "f4caa10b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.048107653s ago: executing program 0 (id=3682): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) openat$kvm(0xffffff9c, 0x0, 0x2d2a81, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 6.30119448s ago: executing program 5 (id=3684): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040ac05650200000000000109022400010000500b0904000ffe0300000009218c00fc01222800090581032004b481fe55d46c7602750917a8f0070acf3264064934b93a1afa0731de264a3c8eee"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000300)='system_u:object_r:default_t:s0\x00', 0x1f, 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000075c0)={@loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0xd432, 0x40, 0x409, 0x500, 0xa, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) fsopen(0x0, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) listns(0x0, 0x0, 0x0, 0x0) 5.861081617s ago: executing program 0 (id=3685): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x1, 0x80000, r0}) write$P9_RWSTAT(r2, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x1, 0x1, {0x1000, 0x8, 0x3, 0x7, 0x7}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40081d4}, 0x8840) 5.347355759s ago: executing program 4 (id=3686): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001d00)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.87201719s ago: executing program 1 (id=3687): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x614000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f0000000240)={0x2, 0x200, &(0x7f0000000140)}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001010130040904000000010130"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x26020480) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0x2, 0x5}, {0x44e9f4f6f6d4d2eb, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x44042) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @loopback, 0x9}, 0x1c) socket$alg(0x26, 0x5, 0x0) 4.670574768s ago: executing program 0 (id=3688): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x12}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[]) syz_usb_control_io$sierra_net(r0, &(0x7f0000000380)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0010010100000104082b8da6505806c4ba227de52c3e98ff0a6e69d90d4570a1a70898059e7c939ad382f0ee4b09942f5ded4e5fd4e9bbe35749396592b7cb86cfe6043c5718ffc2fa2c7f30ca1310dd967924fd5cfa6694a4375ababc328e18cd37552e5942ed000cb759303e54de87f91c393285bea67b88e08b4cda18f4aca4c5f106"], &(0x7f0000000240)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000900)={0x1c, &(0x7f00000003c0)={0x20, 0x10, 0xba, "ccbfec1dbaf5363f8ed4bfdb81e8035a378b0447d0f54267415ed9d68c826fef9256baf9a678f6cc30fcfac495ee333c28e93a734f55c14af72974ff1d05041cc22a4862d7404bba4cb9964c40dbea0ca4a1d966a2e3cab75597a2ed9055a1bd7fc903f12abe5af38bf7e59578ba54fe88fcf7e926fb09fb3a885055d5d81f3770c5020b8524c428d7e4b52fe6626591fb371e424e3d11879f4af3e8085f8d7c2a73f0dcfd2a51e189fe7b26b1e2db792dbd0b27edc17d01401a"}, &(0x7f0000000480)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000008c0)}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0x0, 0x0, '\x00', 0x5}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x20, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x100000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) rseq(0xfffffffffffffffe, 0x20, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) 4.579382241s ago: executing program 4 (id=3689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) io_submit(0x0, 0x2, &(0x7f0000002140)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0]) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 3.885704101s ago: executing program 4 (id=3690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000832700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f74"], 0x54}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x189d40, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x2, 0x0, 0x1, 0xc239}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0) 3.733695086s ago: executing program 4 (id=3691): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x83, 0x0, 0x0) 3.661248779s ago: executing program 4 (id=3692): io_uring_setup(0xcda, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300"/352], 0x610) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 159.522243ms ago: executing program 3 (id=3693): ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="16010000020000402505a1a440000112030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000e0000000006241a00000009cc5a1253020000000904010000020d00000904010102020d00000905820208000000040905030210"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 142.55789ms ago: executing program 4 (id=3694): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x0, 0x0, 0x0, 0x10, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) dup(r0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, &(0x7f0000043280)={0x2020}, 0x2020) splice(r5, 0x0, r4, 0x0, 0x100000000001, 0x0) write$binfmt_script(r6, &(0x7f0000000bc0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) times(0xfffffffffffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)={0x5, 0x0, [{0x8ff, 0x0, 0x1}, {0x87e, 0x0, 0x7fffffff}, {0x330, 0x0, 0x4}, {0x40d, 0x0, 0x8000}, {0xb46, 0x0, 0x1}]}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r8 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0xfe) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="5bcec14fc766b6ac4ca6dcc5df5cb2ca749556b7e49423e44f9afcadbf31baaa9a9173b75656700e573ef034e60d74", 0x2f) 27.334491ms ago: executing program 0 (id=3695): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) syz_usb_connect$uac3(0x2, 0xf9, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x9, 0x80, 0x8, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x30, 0x3}, [@multiply_unit={0xb, 0x24, 0xd, 0x8, 0x8e, 0x4, 0x2}, @mixer_unit={0x9, 0x24, 0x5, 0x4, 0x2, "cc67cbc0"}, @power_domain={0x9, 0x24, 0x10, 0xe, 0x4, 0x0, 0x80}, @extension_unit={0x9, 0x24, 0xa, 0x4, 0x5, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x5, 0x9, 0x11}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7, 0x9, 0xff, {0xa, 0x25, 0x25, 0x526, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x80, 0xffff8000, 0x5, 0x4, 0x3, 0x9, 0x6, 0x3}, @as_header={0x17, 0x24, 0x1, 0x7f, 0x5, 0xffff, 0x1002, 0x2, 0x4, 0x8001, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x3, 0x81, "65043ccfa211"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7b}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x81, 0x3, {0xa, 0x25, 0x25, 0x800, 0x8, 0x2}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x1, 0x40, 0x6, 0x10, 0x2}, 0x1a, &(0x7f0000000300)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x5, 0x10, 0x4, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x0, 0x8ae2}]}, 0x4, [{0x2a, &(0x7f0000000340)=@string={0x2a, 0x3, "5590af1f0f1ecf03911fba1d80143955fdb58e7960f60bcb1afaf1179ad7e00198882de43df81084"}}, {0x6f, &(0x7f0000000380)=@string={0x6f, 0x3, "671153577f7d9a6d747bfaabaecb6afaf14d9475a925623436204d9043646157b19e0743d88a66f3b9bdd8e654ae9a461a1c853d911723a6f8d8086690cbb26871b3f9f01ca91479f942528ad0ea550d0d48dc03d752fd8fcd8bd0f91d3a5fc099b2dd5f9f316681471d357678"}}, {0x84, &(0x7f0000000400)=@string={0x84, 0x3, "22a486d2f2c36b666d011d0f82752aed4579e71adcb25ff7ec3562ca855a7b3b45eabd2aad2ea43c31fb6e54801e8b2b69a9f7de320f82bdc2e0cac437d6e1a755e68d98fd2d0d2ba656c1e81d30fbd1a0a6160bca5ac855bd17f6a17cfb027866c161072e369c94324779b602429b1872f1a9bf4f549565442b5a76f61cff03ea78"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140a}}]}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r2, 0x0, 0x0, 0x3, &(0x7f0000000b40)='LLL'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r6}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000140)={r7, &(0x7f0000000040)='\x00', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x7]}, {0x9, 0x3, 0x1, 0xffffffff}}, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x2}) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/59, 0x332000, 0x800, 0x0, 0x5}, 0x1c) 26.126738ms ago: executing program 1 (id=3696): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x264, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4c5e6d51c9a24884943a37d5e27ed091"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a69192f82545bfbae43ae6bb08ea0af6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d113c468b887f08f721e78727fa712f3"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd215}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa7}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d6eb2b90ee2c3e8eb8660fbed30521e0"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x184, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0xa4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "48e135ae20ed4d13f82302cb24e36ccf"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "61256f0833f1137e6e348db8b0128132f53271d1ec662b51561c06c4573f48d6"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "38e3438b7f080d39f8e30525e1c37a531918d67add929ad5c04fb5423bbddd6a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7b9ddebd09e7d3f7d9b786f2f83fc44211b09340645afe7f812fc0265d8efacb"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc835b127a1646aa978077b155dc287b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x66}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x264}, 0x1, 0x0, 0x0, 0x44000}, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 5 (id=3697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x2b, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000000)={0x3, 0x7}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r6}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/215, &(0x7f0000000400)=0xd7) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000206197900000000000000000000000005000100070000000900020073797a3000000000140007800500"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x800) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x48000) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f0000000080)=[0x1, 0x1]) kernel console output (not intermixed with test programs): status = -71 [ 1288.429365][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1288.440883][ T10] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1288.457156][ T10] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1288.465479][ T5802] mceusb 4-1:0.0: Registered à €T with mce emulator interface version 1 [ 1288.474075][ T5802] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1288.486280][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1288.494455][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1288.496454][ T5802] usb 4-1: USB disconnect, device number 23 [ 1288.511643][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.517446][T14606] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1288.540348][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1288.913591][ T5802] usb 1-1: USB disconnect, device number 22 [ 1288.935014][T18298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1288.957920][T14607] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1288.966987][T14607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.975861][T14606] usb 5-1: device descriptor read/64, error -71 [ 1288.991877][T14607] usb 6-1: config 0 descriptor?? [ 1290.209745][T14607] cp210x 6-1:0.0: cp210x converter detected [ 1290.321150][T14606] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1290.607796][ T29] usb 2-1: USB disconnect, device number 20 [ 1290.652831][T14607] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1290.660335][T14607] cp210x 6-1:0.0: querying part number failed [ 1290.682340][T14607] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1290.712276][T14607] usb 6-1: USB disconnect, device number 15 [ 1290.736234][T14607] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1290.773990][T14606] usb 5-1: device descriptor read/64, error -71 [ 1290.838179][T14607] cp210x 6-1:0.0: device disconnected [ 1291.281992][T14606] usb usb5-port1: attempt power cycle [ 1291.372695][T18330] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 1291.423984][T18330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1291.556955][T18332] bond1: (slave veth0_to_bond): making interface the new active one [ 1291.583646][T18332] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1291.732968][T18330] bond1: entered promiscuous mode [ 1291.738144][T18330] veth0_to_bond: entered promiscuous mode [ 1291.746449][T18330] bond1: entered allmulticast mode [ 1291.751672][T18330] veth0_to_bond: entered allmulticast mode [ 1291.770232][ T29] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1292.152958][ T29] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1292.333507][ T29] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1292.344682][ T29] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1292.357841][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.364593][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1292.373822][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.392670][ T29] usb 2-1: config 0 descriptor?? [ 1292.542669][T18323] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1293.431832][T15061] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1293.656916][T18358] netlink: 'syz.5.3261': attribute type 2 has an invalid length. [ 1293.686825][ T30] audit: type=1400 audit(2000524787.269:1160): avc: denied { connect } for pid=18357 comm="syz.5.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1293.716964][T14606] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1293.823443][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 1293.829399][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1294.874419][T14606] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1295.051680][T14606] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1295.066016][ T29] usb 2-1: USB disconnect, device number 21 [ 1295.072633][ T30] audit: type=1400 audit(2000524787.416:1161): avc: denied { setopt } for pid=18357 comm="syz.5.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1295.475797][T14606] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1295.484867][T14606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1295.492840][T14606] usb 5-1: SerialNumber: syz [ 1296.027043][T14606] hub 5-1:1.0: bad descriptor, ignoring hub [ 1296.033004][T14606] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1296.040551][T14606] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1296.050159][ T30] audit: type=1400 audit(2000524789.438:1162): avc: denied { write } for pid=18366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.110207][ T30] audit: type=1400 audit(2000524789.438:1163): avc: denied { write } for pid=18381 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.151615][ T29] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1296.390242][T14606] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1296.501810][T14606] usb 5-1: USB disconnect, device number 33 [ 1296.511127][T15061] usb 1-1: device descriptor read/all, error -71 [ 1296.695192][T18402] netlink: 'syz.5.3267': attribute type 1 has an invalid length. [ 1296.756426][T18408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3267'. [ 1296.840473][T18391] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 1297.461372][ T30] audit: type=1400 audit(2000524790.768:1164): avc: denied { write } for pid=18383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.492568][T18391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3266'. [ 1297.492995][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 1297.537220][T18402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1297.579781][ T30] audit: type=1400 audit(2000524790.851:1165): avc: denied { write } for pid=18413 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.662918][T18409] bond2: entered promiscuous mode [ 1297.686834][T18409] bond2: entered allmulticast mode [ 1297.959415][ T29] usb 2-1: device descriptor read/all, error -71 [ 1298.078829][T18430] usb usb8: usbfs: process 18430 (syz.0.3271) did not claim interface 3 before use [ 1298.091208][T18430] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3271'. [ 1298.284093][T18429] netlink: 'syz.5.3272': attribute type 4 has an invalid length. [ 1300.470025][ T29] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1300.575908][ T5726] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1301.697152][T18454] netlink: 'syz.4.3279': attribute type 2 has an invalid length. [ 1301.959895][ T5726] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1301.968973][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.979466][ T5726] usb 1-1: config 0 descriptor?? [ 1302.201363][ T5726] cp210x 1-1:0.0: cp210x converter detected [ 1302.238726][ T30] audit: type=1400 audit(2000524795.134:1166): avc: denied { write } for pid=18459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.262512][T18464] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 1302.276846][T18464] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3281'. [ 1302.310603][T14603] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1302.378058][ T30] audit: type=1400 audit(2000524795.300:1167): avc: denied { write } for pid=18479 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.781868][ T30] audit: type=1400 audit(2000524795.670:1168): avc: denied { write } for pid=18484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.883390][ T5726] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1302.933860][ T30] audit: type=1400 audit(2000524795.771:1169): avc: denied { write } for pid=18498 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.986038][T18502] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 1303.010765][T18502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1303.032458][T18502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3283'. [ 1303.119296][ T5726] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1303.136886][T14603] usb 6-1: Using ep0 maxpacket: 16 [ 1303.140805][T18502] bond3: entered promiscuous mode [ 1303.155941][T18502] bond3: entered allmulticast mode [ 1303.344763][T18508] usb usb8: usbfs: process 18508 (syz.3.3286) did not claim interface 3 before use [ 1303.357113][T18508] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1303.572157][ T5726] usb 1-1: USB disconnect, device number 25 [ 1303.587245][ T5726] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1303.602633][ T5726] cp210x 1-1:0.0: device disconnected [ 1303.648577][T18513] netlink: 'syz.1.3287': attribute type 4 has an invalid length. [ 1303.791115][T14603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.801250][T14603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1303.812089][T14603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1303.834065][T14603] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1303.843747][T14603] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1304.071648][ T30] audit: type=1400 audit(2000524796.824:1170): avc: denied { write } for pid=18511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.115473][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'. [ 1304.137525][T18529] bridge_slave_1: left allmulticast mode [ 1304.144710][T18529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.158784][T18529] bridge_slave_0: left allmulticast mode [ 1304.166173][T18529] bridge_slave_0: left promiscuous mode [ 1304.178588][T18529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.223193][ T30] audit: type=1400 audit(2000524796.981:1171): avc: denied { write } for pid=18531 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.241237][T14603] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1304.254210][T14603] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1304.262205][T14603] usb 6-1: Manufacturer: syz [ 1304.282319][T14603] usb 6-1: config 0 descriptor?? [ 1304.514079][T18526] wg1 speed is unknown, defaulting to 1000 [ 1304.935978][ T30] audit: type=1400 audit(2000524797.655:1172): avc: denied { write } for pid=18535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.991182][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1305.147959][T14603] rc_core: IR keymap rc-hauppauge not found [ 1305.153903][T14603] Registered IR keymap rc-empty [ 1305.158809][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1305.223527][ T30] audit: type=1400 audit(2000524797.904:1173): avc: denied { write } for pid=18563 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1305.291795][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1305.380063][T14603] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1305.453663][T14603] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input103 [ 1305.624256][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1305.719887][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1305.820661][T18581] netlink: 'syz.4.3294': attribute type 1 has an invalid length. [ 1305.828413][T18581] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1305.837504][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1305.935954][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1306.055224][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1306.242829][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1306.436969][T16967] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1306.492887][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1306.547858][ T30] audit: type=1400 audit(2000524799.159:1174): avc: denied { write } for pid=18568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.631995][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1306.733668][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1306.848536][ T5726] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1306.856926][T14603] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1306.873508][T18600] blktrace: Concurrent blktraces are not allowed on sg0 [ 1306.979409][T14603] mceusb 6-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 1306.990617][T14603] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1307.803657][ T30] audit: type=1400 audit(2000524799.326:1175): avc: denied { write } for pid=18597 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.059193][T18607] usb usb8: usbfs: process 18607 (syz.3.3299) did not claim interface 3 before use [ 1308.073085][T18607] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3299'. [ 1308.564168][ T5726] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1308.575090][ T5726] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1308.586045][ T5726] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1308.599091][ T5726] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1308.605730][ T5726] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1308.614766][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.932346][ T5726] usb 5-1: config 0 descriptor?? [ 1309.029915][T18591] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1309.347340][T14606] usb 6-1: USB disconnect, device number 16 [ 1309.402754][T18615] netlink: 'syz.5.3303': attribute type 4 has an invalid length. [ 1309.576850][T15061] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1309.868136][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1310.460181][T15061] usb 1-1: Using ep0 maxpacket: 32 [ 1311.290440][T15061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.301345][T15061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.311091][T15061] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1311.320121][T15061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.335202][T18634] netlink: 'syz.5.3306': attribute type 1 has an invalid length. [ 1311.340708][T15061] usb 1-1: config 0 descriptor?? [ 1311.345926][T18634] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3306'. [ 1311.520238][T15061] hub 1-1:0.0: USB hub found [ 1312.312784][ T5726] usbhid 5-1:0.0: can't add hid device: -71 [ 1312.319514][ T5726] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1312.328209][T15061] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1312.329441][T18643] SELinux: failed to load policy [ 1312.341793][ T5726] usb 5-1: USB disconnect, device number 34 [ 1313.180887][T15061] usbhid 1-1:0.0: can't add hid device: -71 [ 1313.191395][T15061] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1313.330039][T18660] usb usb8: usbfs: process 18660 (syz.5.3312) did not claim interface 3 before use [ 1313.342172][T18660] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3312'. [ 1313.603424][T15061] usb 1-1: USB disconnect, device number 26 [ 1313.764771][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1314.249525][T18669] netlink: 'syz.1.3316': attribute type 4 has an invalid length. [ 1314.280369][T18644] Bluetooth: hci0: command 0x0406 tx timeout [ 1314.460296][T16967] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1314.685777][T18682] netlink: 'syz.4.3317': attribute type 1 has an invalid length. [ 1314.693602][T18682] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3317'. [ 1314.789210][T16967] usb 6-1: Using ep0 maxpacket: 16 [ 1314.808085][T16967] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.827672][T16967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1314.853744][T16967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1314.867082][T16967] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1314.877445][T16967] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1316.734129][T16967] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1316.743962][T16967] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1316.758215][T16967] usb 6-1: Manufacturer: syz [ 1316.775172][T16967] usb 6-1: config 0 descriptor?? [ 1316.897649][T18691] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1318.268237][T16967] rc_core: IR keymap rc-hauppauge not found [ 1318.853474][ T30] audit: type=1400 audit(2000524810.441:1176): avc: denied { associate } for pid=18697 comm="syz.0.3324" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1319.219742][T16967] Registered IR keymap rc-empty [ 1319.369837][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.403165][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.412040][ T10] usb 4-1: device descriptor read/64, error -110 [ 1319.446916][T16967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1319.479939][T16967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input104 [ 1319.575084][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.661704][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.740436][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1319.748144][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.758898][T18711] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1319.770806][T18711] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1319.802270][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.818892][ T29] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1319.870558][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1320.093012][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1320.301932][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1320.352166][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1320.391359][T18720] netlink: 'syz.1.3322': attribute type 1 has an invalid length. [ 1320.461898][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1320.585688][T16967] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1320.600774][T18720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1320.690112][T18722] bond4: (slave veth0_to_bond): making interface the new active one [ 1320.706854][T18722] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1320.854030][T16967] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1320.866127][T18724] bond4: entered promiscuous mode [ 1320.871257][T18724] veth0_to_bond: entered promiscuous mode [ 1320.878590][T18724] bond4: entered allmulticast mode [ 1320.883740][T18724] veth0_to_bond: entered allmulticast mode [ 1320.975985][T16967] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1321.144277][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1321.155187][ T29] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1321.166142][ T29] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1321.179173][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1321.185787][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1321.194816][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.218555][T16967] usb 6-1: USB disconnect, device number 17 [ 1321.395878][T18732] netlink: 'syz.3.3330': attribute type 1 has an invalid length. [ 1321.441281][T18732] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3330'. [ 1321.457791][ T29] usb 5-1: config 0 descriptor?? [ 1321.480113][T18707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1321.970179][ T5712] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1321.979135][T16967] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1322.247159][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1322.259816][T16967] usb 6-1: Using ep0 maxpacket: 16 [ 1322.267169][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1322.284368][T16967] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.317977][T16967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1322.857745][T16967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 54725, setting to 1024 [ 1322.897796][ T5712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1322.917366][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1322.926223][ T5712] usb 1-1: SerialNumber: syz [ 1322.973319][T16967] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1323.068359][ T5712] hub 1-1:1.0: bad descriptor, ignoring hub [ 1323.077806][T16967] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.110072][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1323.144855][ T5712] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1323.195033][T16967] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1323.213888][ T5712] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1323.282649][T16967] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1323.350559][T16967] usb 6-1: Manufacturer: syz [ 1323.385922][T16967] usb 6-1: config 0 descriptor?? [ 1323.622739][T18748] blktrace: Concurrent blktraces are not allowed on sg0 [ 1323.851044][ T5712] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1325.852011][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 1325.858026][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1325.879966][ T29] usb 5-1: USB disconnect, device number 35 [ 1325.914253][ T5712] usb 1-1: USB disconnect, device number 27 [ 1329.496115][T16967] rc_core: IR keymap rc-hauppauge not found [ 1329.502106][T16967] Registered IR keymap rc-empty [ 1329.508273][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1329.887632][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1329.898950][ T5712] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1329.907967][T16967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1329.937256][T16967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input105 [ 1330.032198][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1330.127134][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1330.181781][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1330.254594][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1330.399353][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1330.551119][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1330.656705][T18780] netlink: 'syz.5.3344': attribute type 1 has an invalid length. [ 1330.913338][T18780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1331.014963][T18784] bond1: (slave veth0_to_bond): Releasing active interface [ 1331.022306][T18784] veth0_to_bond: left promiscuous mode [ 1331.028468][T18784] veth0_to_bond: left allmulticast mode [ 1331.183059][ T5712] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1331.298894][T18790] usb usb8: usbfs: process 18790 (syz.1.3347) did not claim interface 3 before use [ 1331.327933][T18790] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1331.668452][ T29] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1331.683216][T18784] bond3: (slave veth0_to_bond): making interface the new active one [ 1331.696583][T18784] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1331.712149][T18785] bond3: entered promiscuous mode [ 1331.717240][T18785] veth0_to_bond: entered promiscuous mode [ 1331.723896][T18785] bond3: entered allmulticast mode [ 1331.729040][T18785] veth0_to_bond: entered allmulticast mode [ 1331.976912][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1332.163779][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1332.206372][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1332.282091][T16967] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1332.328263][T16967] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1332.336879][T16967] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1332.728849][ T5712] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1332.754399][T16967] usb 6-1: USB disconnect, device number 18 [ 1332.777241][ T5712] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1332.801925][ T5712] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1332.816123][ T5712] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1332.822942][ T5712] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1332.837077][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.848860][ T5712] usb 1-1: config 0 descriptor?? [ 1332.861834][T18779] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1333.245912][T18802] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1336.079894][ T5712] usbhid 1-1:0.0: can't add hid device: -71 [ 1336.088064][ T5712] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1336.118207][ T5712] usb 1-1: USB disconnect, device number 29 [ 1336.527673][T18644] Bluetooth: hci2: command 0x0406 tx timeout [ 1337.314388][ T29] usb 4-1: device descriptor read/all, error -71 [ 1337.529695][T18842] netlink: 'syz.3.3359': attribute type 1 has an invalid length. [ 1337.567559][T18842] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1338.146895][T18847] netlink: 'syz.5.3354': attribute type 1 has an invalid length. [ 1338.393222][T18847] bond3: (slave veth0_to_bond): Releasing active interface [ 1338.408807][T18847] veth0_to_bond: left promiscuous mode [ 1338.465623][T18847] veth0_to_bond: left allmulticast mode [ 1340.079153][T18867] netlink: 'syz.0.3366': attribute type 1 has an invalid length. [ 1340.148171][T18867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1340.244819][ T5726] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1340.261713][T18867] bond4: entered promiscuous mode [ 1340.266778][T18867] bond4: entered allmulticast mode [ 1340.651952][T18873] netlink: 'syz.5.3368': attribute type 1 has an invalid length. [ 1340.672367][T18873] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3368'. [ 1340.774515][T16967] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1340.883768][ T5712] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1340.971227][ T5802] IPVS: starting estimator thread 0... [ 1341.162941][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 1341.173798][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.201125][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1341.220906][ T5802] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 1341.238427][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 54725, setting to 1024 [ 1341.254672][ T5712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1341.276142][T18892] IPVS: using max 52 ests per chain, 124800 per kthread [ 1341.285519][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1341.314917][ T5712] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1341.327466][ T5712] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1341.336688][ T5712] usb 5-1: Manufacturer: syz [ 1341.357019][ T5712] usb 5-1: config 0 descriptor?? [ 1341.418450][ T30] audit: type=1400 audit(2000524831.324:1177): avc: denied { write } for pid=18894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.492341][ T5802] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1341.510414][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1341.525909][ T30] audit: type=1400 audit(2000524831.425:1178): avc: denied { write } for pid=18905 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.531970][ T5802] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1341.594409][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1341.623323][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1341.650408][ T5802] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1341.662775][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1341.675516][ T5712] rc_core: IR keymap rc-hauppauge not found [ 1341.683097][ T5712] Registered IR keymap rc-empty [ 1341.699160][ T5802] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1341.711418][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1341.718464][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1341.766274][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1341.785706][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1341.795425][ T5802] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1341.806359][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1341.835012][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1341.842010][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1341.847358][ T5802] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1341.871541][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input106 [ 1341.885924][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1341.913582][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1341.930116][ T5802] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1341.949260][ T5802] usb 4-1: string descriptor 0 read error: -22 [ 1341.965518][ T5802] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1341.977616][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.993784][ T5802] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1342.009307][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1342.065105][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1342.118555][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1342.173389][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1342.225285][ T30] audit: type=1400 audit(2000524832.053:1179): avc: denied { write } for pid=18909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.238164][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1342.290534][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.300660][ T5726] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1342.320714][ T5726] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1342.333546][ T5726] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1342.383952][ T5726] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1342.421178][T14606] usb 4-1: USB disconnect, device number 30 [ 1342.450605][ T30] audit: type=1400 audit(2000524832.265:1180): avc: denied { write } for pid=18925 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.478992][ T5726] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1342.479313][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1342.628255][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1344.263649][T18942] netlink: 'syz.5.3372': attribute type 1 has an invalid length. [ 1344.267114][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1344.298842][T18942] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3372'. [ 1344.338027][ T5712] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1344.361092][ T5712] mceusb 5-1:0.0: Registered à €T with mce emulator interface version 1 [ 1344.391597][ T5712] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1344.467198][ T5712] usb 5-1: USB disconnect, device number 36 [ 1344.558671][T18951] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 1344.575330][ T5726] usb 2-1: string descriptor 0 read error: -71 [ 1344.584722][ T5726] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1344.593775][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.811064][T18951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1346.148930][T18967] netlink: 'syz.5.3379': attribute type 1 has an invalid length. [ 1346.254115][ T5726] usb 2-1: can't set config #1, error -71 [ 1346.261408][ T5726] usb 2-1: USB disconnect, device number 25 [ 1346.271866][T18951] bond4: (slave veth0_to_bond): Releasing active interface [ 1346.303333][T18951] veth0_to_bond: left promiscuous mode [ 1346.330125][ T30] audit: type=1400 audit(2000524835.866:1181): avc: denied { write } for pid=18933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1346.434941][ T30] audit: type=1400 audit(2000524835.967:1182): avc: denied { write } for pid=18975 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1346.494964][T18951] veth0_to_bond: left allmulticast mode [ 1346.712031][T18979] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 1347.369794][T18967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1347.699560][T18970] bond4: entered promiscuous mode [ 1347.704634][T18970] bond4: entered allmulticast mode [ 1349.885657][T18980] bond1: (slave veth0_to_bond): Releasing active interface [ 1349.924449][T18980] veth0_to_bond: left promiscuous mode [ 1350.612960][T18980] veth0_to_bond: left allmulticast mode [ 1352.421148][T19017] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1352.582282][ T30] audit: type=1400 audit(2000524841.636:1183): avc: denied { write } for pid=18985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1352.669154][T19014] netlink: 'syz.0.3388': attribute type 1 has an invalid length. [ 1353.683356][T19014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3388'. [ 1353.838459][ T30] audit: type=1400 audit(2000524842.771:1184): avc: denied { write } for pid=19029 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1353.880029][T19027] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1353.906350][T19027] SELinux: failed to load policy [ 1354.141130][T19039] netlink: 'syz.0.3393': attribute type 1 has an invalid length. [ 1354.169695][ T30] audit: type=1400 audit(2000524843.085:1185): avc: denied { write } for pid=19037 comm="syz.1.3392" name="file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1354.210260][T19039] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1354.313394][ T30] audit: type=1400 audit(2000524843.141:1186): avc: denied { open } for pid=19037 comm="syz.1.3392" path="/86/file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1354.535297][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 1354.949695][ T29] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1357.107666][T19058] FAULT_INJECTION: forcing a failure. [ 1357.107666][T19058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.120930][T19058] CPU: 1 UID: 0 PID: 19058 Comm: syz.3.3391 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.120959][T19058] Tainted: [L]=SOFTLOCKUP [ 1357.120966][T19058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1357.120977][T19058] Call Trace: [ 1357.120984][T19058] [ 1357.120990][T19058] dump_stack_lvl+0x100/0x190 [ 1357.121017][T19058] should_fail_ex.cold+0x5/0xa [ 1357.121044][T19058] _copy_from_user+0x2e/0xd0 [ 1357.121072][T19058] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1357.121097][T19058] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1357.121123][T19058] do_sock_getsockopt+0x530/0x6e0 [ 1357.121141][T19058] ? __lock_acquire+0x4a5/0x2630 [ 1357.121165][T19058] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1357.121183][T19058] ? find_held_lock+0x2b/0x80 [ 1357.121197][T19058] ? ksys_write+0x190/0x250 [ 1357.121221][T19058] ? find_held_lock+0x2b/0x80 [ 1357.121241][T19058] ? __fget_files+0x21f/0x3d0 [ 1357.121267][T19058] __sys_getsockopt+0x148/0x260 [ 1357.121298][T19058] ? __x64_sys_getsockopt+0xbd/0x160 [ 1357.121321][T19058] __x64_sys_getsockopt+0xbd/0x160 [ 1357.121343][T19058] ? do_syscall_64+0x90/0x870 [ 1357.121365][T19058] ? lockdep_hardirqs_on+0x78/0x100 [ 1357.121388][T19058] do_syscall_64+0x115/0x870 [ 1357.121408][T19058] ? clear_bhb_loop+0x40/0x90 [ 1357.121430][T19058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.121447][T19058] RIP: 0033:0x7f8041f9ce59 [ 1357.121463][T19058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.121479][T19058] RSP: 002b:00007f8042e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1357.121497][T19058] RAX: ffffffffffffffda RBX: 00007f8042215fa0 RCX: 00007f8041f9ce59 [ 1357.121508][T19058] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 1357.121518][T19058] RBP: 00007f8042e6e090 R08: 0000200000000000 R09: 0000000000000000 [ 1357.121528][T19058] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1357.121539][T19058] R13: 00007f8042216038 R14: 00007f8042215fa0 R15: 00007ffd1772d4b8 [ 1357.121561][T19058] [ 1357.149385][ T30] audit: type=1400 audit(2000524845.827:1187): avc: denied { ioctl } for pid=19037 comm="syz.1.3392" path="/86/file0" dev="tmpfs" ino=510 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1357.476190][T19061] fuse: fd is not a fuse device [ 1361.336417][ T29] usb 6-1: unable to read config index 0 descriptor/all [ 1361.349645][ T29] usb 6-1: can't read configurations, error -71 [ 1363.170301][T14605] kworker/1:12 (14605) used greatest stack depth: 19744 bytes left [ 1364.889140][T19083] netlink: 'syz.0.3396': attribute type 1 has an invalid length. [ 1365.041149][T19083] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1365.111309][T19086] bond6: entered promiscuous mode [ 1365.116539][T19086] bond6: entered allmulticast mode [ 1365.684891][T19095] netlink: 'syz.5.3403': attribute type 1 has an invalid length. [ 1365.693103][T19095] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3403'. [ 1365.708510][T19087] SELinux: failed to load policy [ 1365.745506][T19107] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1368.789306][ T29] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1368.930708][ T5712] IPVS: starting estimator thread 0... [ 1369.197428][ T10] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 1369.250336][T19130] IPVS: using max 43 ests per chain, 103200 per kthread [ 1369.372905][ T29] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1369.470862][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1369.519599][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1369.575789][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1369.645830][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1369.709418][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1369.780225][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1369.858486][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1369.916492][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1370.014209][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1370.090369][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1370.177125][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1370.218202][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1370.274558][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.285794][ T29] usb 5-1: config 0 descriptor?? [ 1370.302339][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1370.345532][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1370.392762][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1370.426757][T19141] netlink: 'syz.3.3415': attribute type 1 has an invalid length. [ 1370.437852][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1370.451653][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1370.474542][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.485959][T19141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1370.496083][ T29] cp210x 5-1:0.0: cp210x converter detected [ 1370.525889][T19143] bond2: entered promiscuous mode [ 1370.556032][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1370.570508][T19143] bond2: entered allmulticast mode [ 1370.723782][ T29] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1370.731295][ T29] cp210x 5-1:0.0: querying part number failed [ 1370.739821][ T29] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1370.756072][ T29] usb 5-1: USB disconnect, device number 37 [ 1370.763681][T19132] SELinux: failed to load policy [ 1370.780207][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1370.789649][ T29] cp210x 5-1:0.0: device disconnected [ 1370.929566][ T5726] usb 1-1: USB disconnect, device number 31 [ 1371.134334][T19154] netlink: 'syz.1.3418': attribute type 1 has an invalid length. [ 1371.144947][T19154] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1371.192370][T15061] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1371.361117][T19165] usb usb8: usbfs: process 19165 (syz.5.3414) did not claim interface 3 before use [ 1371.867500][ T5726] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1372.038336][T19169] xt_hashlimit: size too large, truncated to 1048576 [ 1372.522870][T19182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3425'. [ 1373.229104][T15061] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1373.236610][T15061] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1373.247813][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1373.258693][T15061] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1373.270598][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1373.281952][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1373.293230][T15061] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1373.306660][T15061] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1373.683490][T15061] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1373.691763][T15061] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1373.702983][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1373.713916][T15061] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1373.725779][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1373.737123][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1373.748411][T15061] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1373.761849][T15061] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1373.829730][T19190] netlink: 'syz.0.3426': attribute type 2 has an invalid length. [ 1374.142337][T15061] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1374.149826][T15061] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1374.166251][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1375.793889][T15061] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1375.805760][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1375.817047][T15061] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1375.896284][T15061] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1375.909731][T15061] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1376.130061][T16967] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1376.199445][T15061] usb 4-1: string descriptor 0 read error: -71 [ 1376.206449][T15061] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1376.215489][T15061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.298139][T15061] usb 4-1: can't set config #168, error -71 [ 1376.306095][T15061] usb 4-1: USB disconnect, device number 31 [ 1376.332433][ T30] audit: type=1400 audit(2000524863.553:1188): avc: denied { write } for pid=19197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1376.402327][T16967] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1376.418583][T16967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.456759][T16967] usb 5-1: config 0 descriptor?? [ 1376.467414][T16967] cp210x 5-1:0.0: cp210x converter detected [ 1376.479246][ T30] audit: type=1400 audit(2000524863.710:1189): avc: denied { write } for pid=19222 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1376.691671][T16967] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1376.712458][T16967] cp210x 5-1:0.0: querying part number failed [ 1376.787528][T16967] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1376.973453][T15061] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 1377.283885][T19231] netlink: 'syz.5.3435': attribute type 1 has an invalid length. [ 1377.358552][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1377.417772][T19236] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1377.431266][T19231] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1378.292326][T15061] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1378.299730][T15061] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1378.819926][T15061] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1378.860692][T15061] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1378.872026][T15061] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1379.942066][ T5726] usb 5-1: USB disconnect, device number 38 [ 1380.006632][ T5726] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1380.014613][ T5726] cp210x 5-1:0.0: device disconnected [ 1380.033358][T19237] bond5: entered promiscuous mode [ 1380.038435][T19237] bond5: entered allmulticast mode [ 1380.202466][T19246] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 1380.311305][T19246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1380.446081][T19253] fuse: fd is not a fuse device [ 1381.406437][T15061] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 1381.415056][T19248] bond3: (slave veth0_to_bond): making interface the new active one [ 1381.746556][T15061] usb 4-1: can't read configurations, error -71 [ 1381.803873][T19248] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1382.366412][ T30] audit: type=1400 audit(2000524869.138:1190): avc: denied { write } for pid=19241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1382.579795][ T5726] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1382.615119][ T30] audit: type=1400 audit(2000524869.350:1191): avc: denied { write } for pid=19270 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.554353][ T5726] usb 5-1: device descriptor read/all, error -71 [ 1385.619039][ T5712] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1385.936861][T19307] netlink: 'syz.1.3453': attribute type 1 has an invalid length. [ 1386.061470][T19307] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1386.092163][T19309] bond6: (slave veth0_to_bond): making interface the new active one [ 1386.106658][T19309] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1386.479166][ T5712] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1387.503286][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.514804][T19309] bond6: entered promiscuous mode [ 1387.519838][T19309] veth0_to_bond: entered promiscuous mode [ 1387.525662][T19309] bond6: entered allmulticast mode [ 1387.530747][T19309] veth0_to_bond: entered allmulticast mode [ 1387.572070][ T5712] usb 4-1: config 0 descriptor?? [ 1387.589713][ T5712] usb 4-1: can't set config #0, error -71 [ 1387.601271][ T5712] usb 4-1: USB disconnect, device number 34 [ 1388.437321][T19313] SELinux: failed to load policy [ 1389.419645][T19343] netlink: 'syz.1.3465': attribute type 4 has an invalid length. [ 1389.435680][T19344] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1389.696420][T19349] netlink: 'syz.5.3467': attribute type 4 has an invalid length. [ 1389.845710][ T5726] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1389.865424][T19332] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1390.059160][T19360] netlink: 'syz.5.3469': attribute type 1 has an invalid length. [ 1390.072522][T19332] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1390.096399][T19332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.124424][T19332] usb 4-1: config 0 descriptor?? [ 1390.174311][T19360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1390.200399][T19332] cp210x 4-1:0.0: cp210x converter detected [ 1390.201382][T19362] bond6: (slave veth0_to_bond): making interface the new active one [ 1390.227535][T19362] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1390.413194][T19332] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1390.856991][T19363] bond6: entered promiscuous mode [ 1390.875164][T19363] veth0_to_bond: entered promiscuous mode [ 1390.883126][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 1390.900601][T19363] bond6: entered allmulticast mode [ 1390.926034][T19363] veth0_to_bond: entered allmulticast mode [ 1392.111294][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.121768][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1392.132643][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1392.142374][ T5726] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1392.172088][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1392.222224][T14606] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1392.571421][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1392.580498][ T5726] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1392.591503][ T5726] usb 1-1: Manufacturer: syz [ 1392.640582][ T5726] usb 1-1: config 0 descriptor?? [ 1392.799097][ T5726] usb 1-1: can't set config #0, error -71 [ 1392.809932][ T5726] usb 1-1: USB disconnect, device number 33 [ 1392.918502][T14606] usb 5-1: Using ep0 maxpacket: 8 [ 1393.071378][T14603] usb 4-1: USB disconnect, device number 35 [ 1393.102487][T14603] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1393.206500][T14603] cp210x 4-1:0.0: device disconnected [ 1393.269540][T19390] FAULT_INJECTION: forcing a failure. [ 1393.269540][T19390] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.284525][T19390] CPU: 0 UID: 0 PID: 19390 Comm: syz.0.3477 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.284551][T19390] Tainted: [L]=SOFTLOCKUP [ 1393.284557][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1393.284567][T19390] Call Trace: [ 1393.284574][T19390] [ 1393.284580][T19390] dump_stack_lvl+0x100/0x190 [ 1393.284604][T19390] should_fail_ex.cold+0x5/0xa [ 1393.284627][T19390] should_failslab+0xc2/0x120 [ 1393.284648][T19390] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1393.284681][T19390] ? dst_alloc+0x99/0x1a0 [ 1393.284708][T19390] dst_alloc+0x99/0x1a0 [ 1393.284732][T19390] rt_dst_alloc+0x35/0x3a0 [ 1393.284755][T19390] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1393.284790][T19390] ip_route_output_key_hash+0x118/0x2b0 [ 1393.284818][T19390] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1393.284856][T19390] tcp_v4_connect+0x86b/0x1b40 [ 1393.284887][T19390] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1393.284911][T19390] ? __lock_acquire+0x4a5/0x2630 [ 1393.284936][T19390] __inet_stream_connect+0x208/0xfa0 [ 1393.284966][T19390] ? __pfx___inet_stream_connect+0x10/0x10 [ 1393.284991][T19390] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1393.285021][T19390] ? __local_bh_enable_ip+0x9e/0x120 [ 1393.285049][T19390] inet_stream_connect+0x57/0xa0 [ 1393.285074][T19390] kernel_connect+0x107/0x160 [ 1393.285093][T19390] ? __pfx_kernel_connect+0x10/0x10 [ 1393.285122][T19390] ? __local_bh_enable_ip+0x9e/0x120 [ 1393.285149][T19390] smc_connect+0x394/0x750 [ 1393.285173][T19390] ? __pfx_smc_connect+0x10/0x10 [ 1393.285190][T19390] __sys_connect_file+0x141/0x1a0 [ 1393.285218][T19390] __sys_connect+0x141/0x170 [ 1393.285241][T19390] ? __pfx___sys_connect+0x10/0x10 [ 1393.285262][T19390] ? __fget_files+0x21f/0x3d0 [ 1393.285292][T19390] ? __pfx_ksys_write+0x10/0x10 [ 1393.285317][T19390] __x64_sys_connect+0x72/0xb0 [ 1393.285338][T19390] ? lockdep_hardirqs_on+0x78/0x100 [ 1393.285360][T19390] do_syscall_64+0x115/0x870 [ 1393.285381][T19390] ? clear_bhb_loop+0x40/0x90 [ 1393.285403][T19390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.285420][T19390] RIP: 0033:0x7fc6d479ce59 [ 1393.285437][T19390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.285453][T19390] RSP: 002b:00007fc6d56ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1393.285470][T19390] RAX: ffffffffffffffda RBX: 00007fc6d4a16090 RCX: 00007fc6d479ce59 [ 1393.285482][T19390] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 1393.285492][T19390] RBP: 00007fc6d56ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.285503][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.285513][T19390] R13: 00007fc6d4a16128 R14: 00007fc6d4a16090 R15: 00007ffdbb5e7478 [ 1393.285538][T19390] [ 1393.461351][T19380] SELinux: failed to load policy [ 1393.482775][T19332] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1393.598980][ T30] audit: type=1400 audit(2000524879.413:1192): avc: denied { ioctl } for pid=19386 comm="syz.3.3478" path="/dev/input/mouse0" dev="devtmpfs" ino=949 ioctlcmd=0x5666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1393.698960][T14606] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1393.707333][T14606] usb 5-1: config 179 has no interface number 0 [ 1393.713896][T14606] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1393.739724][T14606] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1393.753561][T14606] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1393.765007][T14606] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1393.839716][T14606] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1393.891177][T14606] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1393.934173][T14606] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1393.962294][T14606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.201982][T19399] netlink: 'syz.5.3482': attribute type 4 has an invalid length. [ 1394.331341][T14603] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1395.409244][T14606] usb 5-1: can't set config #179, error -71 [ 1395.424989][T14606] usb 5-1: USB disconnect, device number 41 [ 1395.789377][T19411] usb usb8: usbfs: process 19411 (syz.4.3486) did not claim interface 3 before use [ 1396.048287][T19409] netlink: 'syz.1.3485': attribute type 1 has an invalid length. [ 1396.767154][T19409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1396.821280][T19413] bond6: (slave veth0_to_bond): Releasing active interface [ 1396.839716][T19413] veth0_to_bond: left promiscuous mode [ 1396.967822][T19413] veth0_to_bond: left allmulticast mode [ 1397.397357][T14603] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1397.404980][T14603] usb 4-1: can't read configurations, error -71 [ 1397.673406][T19413] bond7: (slave veth0_to_bond): making interface the new active one [ 1397.723587][T19413] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1397.783245][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1397.829746][T19428] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 1397.875829][ T29] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1397.894470][T19434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3490'. [ 1397.974715][T19428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1397.982713][ T10] usb 6-1: device descriptor read/64, error -71 [ 1398.062117][ T29] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1398.072100][T19436] bond4: entered promiscuous mode [ 1398.077148][T19436] bond4: entered allmulticast mode [ 1398.307052][ T30] audit: type=1400 audit(2000524883.826:1193): avc: denied { accept } for pid=19431 comm="syz.1.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1399.552771][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1399.723515][ T10] usb 6-1: device descriptor read/64, error -71 [ 1399.798278][T14606] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1399.898963][ T10] usb usb6-port1: attempt power cycle [ 1400.285386][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1400.452787][ T10] usb 6-1: device descriptor read/8, error -71 [ 1401.780882][T19462] fuse: fd is not a fuse device [ 1401.793121][T19463] netlink: 'syz.1.3499': attribute type 4 has an invalid length. [ 1402.684909][T19475] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 1402.733299][T19475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1402.811447][T19471] FAULT_INJECTION: forcing a failure. [ 1402.811447][T19471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1402.921710][T19471] CPU: 1 UID: 0 PID: 19471 Comm: syz.3.3498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1402.921741][T19471] Tainted: [L]=SOFTLOCKUP [ 1402.921747][T19471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1402.921758][T19471] Call Trace: [ 1402.921765][T19471] [ 1402.921773][T19471] dump_stack_lvl+0x100/0x190 [ 1402.921800][T19471] should_fail_ex.cold+0x5/0xa [ 1402.921825][T19471] _copy_from_user+0x2e/0xd0 [ 1402.921849][T19471] __sys_bpf+0x243/0x4b90 [ 1402.921879][T19471] ? __pfx___sys_bpf+0x10/0x10 [ 1402.921904][T19471] ? proc_fail_nth_write+0x9f/0x220 [ 1402.921924][T19471] ? find_held_lock+0x2b/0x80 [ 1402.921945][T19471] ? find_held_lock+0x2b/0x80 [ 1402.921961][T19471] ? ksys_write+0x190/0x250 [ 1402.921980][T19471] ? ksys_write+0x190/0x250 [ 1402.922004][T19471] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1402.922029][T19471] ? kernel_write+0x6b3/0x6c0 [ 1402.922062][T19471] ? fput+0x79/0x100 [ 1402.922086][T19471] ? ksys_write+0x1ac/0x250 [ 1402.922105][T19471] ? __pfx_ksys_write+0x10/0x10 [ 1402.922129][T19471] __x64_sys_bpf+0x7b/0xc0 [ 1402.922146][T19471] ? lockdep_hardirqs_on+0x78/0x100 [ 1402.922169][T19471] do_syscall_64+0x115/0x870 [ 1402.922191][T19471] ? clear_bhb_loop+0x40/0x90 [ 1402.922213][T19471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.922232][T19471] RIP: 0033:0x7f8041f9ce59 [ 1402.922249][T19471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.922265][T19471] RSP: 002b:00007f8042e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1402.922283][T19471] RAX: ffffffffffffffda RBX: 00007f8042216090 RCX: 00007f8041f9ce59 [ 1402.922295][T19471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1402.922305][T19471] RBP: 00007f8042e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.922316][T19471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1402.922326][T19471] R13: 00007f8042216128 R14: 00007f8042216090 R15: 00007ffd1772d4b8 [ 1402.922350][T19471] [ 1404.137098][T19475] bond1: (slave veth0_to_bond): making interface the new active one [ 1404.150609][T19475] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1404.225829][T19477] bond1: entered promiscuous mode [ 1404.244630][T19477] veth0_to_bond: entered promiscuous mode [ 1404.367099][T19477] bond1: entered allmulticast mode [ 1404.403104][T19477] veth0_to_bond: entered allmulticast mode [ 1404.636203][T19490] blktrace: Concurrent blktraces are not allowed on sg0 [ 1405.277433][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3506'. [ 1405.863918][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1405.910643][T19506] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1405.912499][T19504] blktrace: Concurrent blktraces are not allowed on sg0 [ 1405.970345][T19506] syzkaller0: entered promiscuous mode [ 1405.977194][T19506] syzkaller0: entered allmulticast mode [ 1406.044176][ T30] audit: type=1400 audit(2000524891.009:1194): avc: denied { write } for pid=19505 comm="syz.4.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1406.080266][ T30] audit: type=1400 audit(2000524891.009:1195): avc: denied { relabelfrom } for pid=19505 comm="syz.4.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1406.113055][ T30] audit: type=1400 audit(2000524891.009:1196): avc: denied { relabelto } for pid=19505 comm="syz.4.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1406.135259][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1406.152791][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.170465][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1406.181682][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1406.191630][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1406.201567][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1406.217102][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1406.227947][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1406.236247][ T10] usb 4-1: Manufacturer: syz [ 1406.245419][ T10] usb 4-1: config 0 descriptor?? [ 1406.330354][ T1222] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1406.437820][ T5712] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1406.600215][ T10] rc_core: IR keymap rc-hauppauge not found [ 1406.608582][ T10] Registered IR keymap rc-empty [ 1406.635394][ T1222] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1406.650076][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1406.665348][ T1222] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1406.690114][ T1222] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1406.703563][ T1222] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1406.710428][ T1222] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1406.720653][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 1406.726645][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1406.793148][ T1222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.804678][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1406.817266][ T5712] usb 1-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 1406.832721][ T1222] usb 2-1: config 0 descriptor?? [ 1406.919022][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1406.931112][ T5712] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1406.975243][T19510] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1407.006491][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input107 [ 1407.022030][ T5712] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1407.047228][ T5712] usb 1-1: config 1 interface 2 has no altsetting 0 [ 1407.056894][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.090927][ T5712] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 1407.108415][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.130750][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.140754][ T5712] usb 1-1: Product: syz [ 1407.146817][ T5712] usb 1-1: Manufacturer: syz [ 1407.165449][ T5712] usb 1-1: SerialNumber: syz [ 1407.183891][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.245552][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.293465][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.359240][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.412672][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.456057][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.510492][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1407.586145][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1408.736109][ T10] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 1408.750716][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1408.830500][T19497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1409.847323][ T5712] usb 1-1: USB disconnect, device number 34 [ 1410.637867][T19332] usb 4-1: USB disconnect, device number 39 [ 1411.008500][ T1222] usbhid 2-1:0.0: can't add hid device: -71 [ 1411.015531][ T1222] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1411.085569][T19535] netlink: 'syz.3.3516': attribute type 4 has an invalid length. [ 1411.105704][ T1222] usb 2-1: USB disconnect, device number 27 [ 1412.631247][T19544] netlink: 'syz.1.3518': attribute type 4 has an invalid length. [ 1414.155776][T19548] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1414.296113][T19553] overlay: Unknown parameter 'smackfsdef' [ 1417.022500][T14603] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1417.559500][T19596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1417.963306][ T1222] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1418.180063][T19332] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1418.224153][ T1222] usb 2-1: Using ep0 maxpacket: 32 [ 1418.257320][ T1222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.340497][T14603] usb 6-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1418.351406][T14603] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1418.375425][ T1222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.457962][T19332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1418.518189][ T1222] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1418.554086][T19332] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1418.639099][ T1222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.758672][ T1222] usb 2-1: config 0 descriptor?? [ 1418.766762][T19332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1418.822729][ T1222] hub 2-1:0.0: USB hub found [ 1418.823200][T19610] netlink: 'syz.4.3536': attribute type 4 has an invalid length. [ 1418.842115][T19332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1418.870638][T19332] usb 1-1: SerialNumber: syz [ 1419.112864][ T1222] hub 2-1:0.0: 1 port detected [ 1419.154247][T19332] hub 1-1:1.0: bad descriptor, ignoring hub [ 1419.193382][T19332] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1419.412326][T19332] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1420.012221][ T1222] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1420.073629][ T1222] usb 2-1: USB disconnect, device number 28 [ 1420.085541][ T36] usb 2-1: Failed to suspend device, error -71 [ 1420.349453][T14603] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1420.362584][T14603] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1420.369375][T14603] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1420.378470][T14603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.450903][T14603] usb 6-1: config 0 descriptor?? [ 1420.514138][T19332] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1420.536890][T14603] usb 6-1: can't set config #0, error -71 [ 1420.546520][T14603] usb 6-1: USB disconnect, device number 25 [ 1420.590342][T19332] usb 1-1: USB disconnect, device number 35 [ 1421.642276][T14603] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1421.753128][T19621] blktrace: Concurrent blktraces are not allowed on sg0 [ 1424.252686][T14603] usb 6-1: device descriptor read/all, error -71 [ 1424.365369][T15061] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1424.845536][T15061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1425.059079][T15061] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1425.078134][T15061] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1425.163631][T15061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.177629][T19644] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1425.201957][T15061] usb 1-1: config 0 descriptor?? [ 1425.376679][T19648] netlink: 'syz.4.3548': attribute type 4 has an invalid length. [ 1425.826841][T19629] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3541'. [ 1425.840753][ T5726] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1426.835330][T14603] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1427.159831][T19662] netlink: 'syz.4.3550': attribute type 1 has an invalid length. [ 1427.171217][ T5726] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1427.182127][ T5726] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1427.190765][T19662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1427.193069][ T5726] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1427.193100][ T5726] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1427.219301][ T5726] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1427.225584][T19662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3550'. [ 1427.228333][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.606286][T14603] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1427.702168][T14603] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1427.719705][T19664] bond2: entered promiscuous mode [ 1427.720876][ T5726] usb 2-1: config 0 descriptor?? [ 1427.737630][T19664] bond2: entered allmulticast mode [ 1427.889546][T19646] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1428.328354][ T5733] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1428.680938][ T5733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1429.686486][T14603] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.708671][T14603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1429.716710][T14603] usb 6-1: SerialNumber: syz [ 1431.109625][T15061] usbhid 1-1:0.0: can't add hid device: -71 [ 1431.115647][T15061] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1431.125693][T15061] usb 1-1: USB disconnect, device number 36 [ 1431.233465][ T5733] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1431.336182][T14603] usb 6-1: can't set config #1, error -71 [ 1431.343336][T14603] usb 6-1: USB disconnect, device number 28 [ 1431.451741][ T5726] usbhid 2-1:0.0: can't add hid device: -71 [ 1431.457730][ T5726] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1431.622150][ T5733] usb 5-1: string descriptor 0 read error: -71 [ 1431.709941][ T5733] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1431.728295][ T5726] usb 2-1: USB disconnect, device number 29 [ 1431.753981][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1432.667592][ T5733] usb 5-1: can't set config #1, error -71 [ 1432.930992][ T5733] usb 5-1: USB disconnect, device number 42 [ 1433.346024][T14603] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1433.603576][T19698] netlink: 'syz.3.3560': attribute type 4 has an invalid length. [ 1433.660776][T14603] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1433.698312][T19701] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3561'. [ 1433.823566][T14603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.852713][T14603] usb 2-1: config 0 descriptor?? [ 1433.874334][T19708] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1434.030998][T14603] cp210x 2-1:0.0: cp210x converter detected [ 1435.376675][T14603] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1435.384187][T14603] cp210x 2-1:0.0: querying part number failed [ 1435.612555][T14603] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1435.870001][ T1222] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1436.270240][T14603] usb 2-1: USB disconnect, device number 30 [ 1436.303678][T14603] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1436.311888][T14603] cp210x 2-1:0.0: device disconnected [ 1436.370244][ T1222] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1436.398543][ T1222] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1436.419321][ T1222] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1436.451850][ T1222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1436.463838][ T1222] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1436.484323][ T1222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.539231][ T1222] usb 5-1: config 0 descriptor?? [ 1436.555432][T19718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1436.585932][ T30] audit: type=1400 audit(2000524919.212:1197): avc: denied { write } for pid=19710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1436.834902][ T30] audit: type=1400 audit(2000524919.406:1198): avc: denied { write } for pid=19728 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1439.201433][T19757] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1440.241576][T19764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1440.472539][ T1222] usbhid 5-1:0.0: can't add hid device: -71 [ 1440.478603][ T1222] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1440.589182][ T1222] usb 5-1: USB disconnect, device number 43 [ 1441.075387][ T30] audit: type=1400 audit(2000524923.348:1199): avc: denied { write } for pid=19743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1441.317028][ T30] audit: type=1400 audit(2000524923.570:1200): avc: denied { write } for pid=19781 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1441.422604][ T30] audit: type=1400 audit(2000524923.616:1201): avc: denied { bind } for pid=19784 comm="syz.1.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1442.399312][ T30] audit: type=1400 audit(2000524923.653:1202): avc: denied { listen } for pid=19784 comm="syz.1.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1442.419001][ T30] audit: type=1400 audit(2000524923.690:1203): avc: denied { accept } for pid=19784 comm="syz.1.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1442.454884][ T30] audit: type=1400 audit(2000524923.736:1204): avc: denied { read } for pid=19784 comm="syz.1.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1442.828401][T19801] kernel profiling enabled (shift: 5) [ 1443.026233][T15061] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1443.353854][ T29] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1443.468017][T19805] netlink: 'syz.5.3578': attribute type 1 has an invalid length. [ 1443.475763][T19805] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3578'. [ 1443.595649][T15061] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1443.626891][T15061] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1443.637577][T15061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.647750][T15061] usb 5-1: Product: syz [ 1443.652003][T15061] usb 5-1: Manufacturer: syz [ 1443.656654][T15061] usb 5-1: SerialNumber: syz [ 1443.667068][T19814] fuse: fd is not a fuse device [ 1443.875115][T15061] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1445.436799][ T29] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1445.447749][ T29] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1445.458702][ T29] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1445.471736][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1445.478357][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1445.487391][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.555358][ T29] usb 4-1: config 0 descriptor?? [ 1445.660722][T19803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1445.769549][T15061] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1446.252898][T19828] wg1 speed is unknown, defaulting to 1000 [ 1446.797576][ T5802] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1447.794671][ T5802] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1447.802250][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1447.824271][ T5802] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1447.855795][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1447.888080][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1447.917197][ T5802] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1447.933147][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1447.959916][ T5802] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1447.994279][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1448.018565][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1448.045895][ T5802] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1448.072774][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1448.084353][T15061] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1448.093402][T15061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.104099][T15061] usb 1-1: config 0 descriptor?? [ 1448.120303][ T5802] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1448.158561][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1448.170347][ T5802] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1448.203898][ T5802] usb 2-1: string descriptor 0 read error: -22 [ 1448.222934][ T5802] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1448.234789][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.278254][ T5802] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1448.322795][T15061] cp210x 1-1:0.0: cp210x converter detected [ 1448.393749][ T5726] usb 5-1: USB disconnect, device number 44 [ 1448.537744][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 1448.543727][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1448.945992][ T29] usb 4-1: USB disconnect, device number 40 [ 1449.936743][T15061] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1449.977655][T15061] cp210x 1-1:0.0: querying part number failed [ 1450.023062][T15061] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1450.053211][T15061] usb 1-1: USB disconnect, device number 37 [ 1450.411463][ T5802] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1450.486204][T14603] usb 2-1: USB disconnect, device number 31 [ 1450.559580][T15061] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1450.579995][T15061] cp210x 1-1:0.0: device disconnected [ 1450.589252][T19854] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1450.688980][T19838] SELinux: failed to load policy [ 1450.730104][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.776676][ T5802] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1450.800866][ T5802] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1450.814685][T19859] FAULT_INJECTION: forcing a failure. [ 1450.814685][T19859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.826780][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.828141][T19859] CPU: 1 UID: 0 PID: 19859 Comm: syz.4.3600 Tainted: G L syzkaller #0 PREEMPT(full) [ 1450.828165][T19859] Tainted: [L]=SOFTLOCKUP [ 1450.828170][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1450.828180][T19859] Call Trace: [ 1450.828186][T19859] [ 1450.828192][T19859] dump_stack_lvl+0x100/0x190 [ 1450.828216][T19859] should_fail_ex.cold+0x5/0xa [ 1450.828238][T19859] _copy_from_iter+0x1f4/0x1690 [ 1450.828261][T19859] ? __asan_memset+0x23/0x50 [ 1450.828284][T19859] ? __pfx__copy_from_iter+0x10/0x10 [ 1450.828303][T19859] ? __pfx___alloc_skb+0x10/0x10 [ 1450.828333][T19859] netlink_sendmsg+0x808/0xda0 [ 1450.828358][T19859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.828376][T19859] ? __might_fault+0xa0/0x140 [ 1450.828405][T19859] ____sys_sendmsg+0x9e1/0xb70 [ 1450.828423][T19859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.828444][T19859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1450.828471][T19859] ___sys_sendmsg+0x190/0x1e0 [ 1450.828498][T19859] ? __pfx____sys_sendmsg+0x10/0x10 [ 1450.828542][T19859] __sys_sendmsg+0x170/0x220 [ 1450.828566][T19859] ? __pfx___sys_sendmsg+0x10/0x10 [ 1450.828598][T19859] ? rcu_is_watching+0x12/0xc0 [ 1450.828623][T19859] do_syscall_64+0x115/0x870 [ 1450.828644][T19859] ? clear_bhb_loop+0x40/0x90 [ 1450.828664][T19859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.828680][T19859] RIP: 0033:0x7f61ce39ce59 [ 1450.828694][T19859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.828708][T19859] RSP: 002b:00007f61cf2ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.828723][T19859] RAX: ffffffffffffffda RBX: 00007f61ce615fa0 RCX: 00007f61ce39ce59 [ 1450.828734][T19859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1450.828743][T19859] RBP: 00007f61cf2ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.828752][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.828761][T19859] R13: 00007f61ce616038 R14: 00007f61ce615fa0 R15: 00007ffd9a071928 [ 1450.828782][T19859] [ 1451.235151][ T5802] usb 6-1: Product: syz [ 1451.261114][ T5802] usb 6-1: Manufacturer: syz [ 1451.265759][ T5802] usb 6-1: SerialNumber: syz [ 1451.275100][ T5802] cdc_mbim 6-1:1.0: skipping garbage [ 1451.315795][T14603] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1451.515089][T19847] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1451.647785][T14606] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1451.757740][T15061] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1451.942028][T19884] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1453.027753][T14603] usb 2-1: device not accepting address 32, error -71 [ 1453.351752][T19847] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1453.359217][ T5802] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 1453.373046][ T5802] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1453.432658][ T5802] wwan wwan0: port wwan0mbim0 attached [ 1453.456562][T15061] usb 1-1: Using ep0 maxpacket: 32 [ 1453.471779][T19882] SELinux: failed to load policy [ 1453.478347][ T5802] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 36:53:ec:bb:62:3b [ 1454.039535][T14606] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1454.050425][T14606] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1454.257681][ T30] audit: type=1400 audit(2000524935.516:1205): avc: denied { write } for pid=19893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.371681][T15061] usb 1-1: unable to read config index 0 descriptor/all [ 1454.378680][T15061] usb 1-1: can't read configurations, error -71 [ 1454.456399][T14606] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1456.226291][T14606] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1456.232946][T14606] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1456.249938][T14606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.297248][T14606] usb 5-1: config 0 descriptor?? [ 1456.358705][T14606] usb 5-1: can't set config #0, error -71 [ 1456.464201][ T1222] usb 6-1: USB disconnect, device number 29 [ 1456.481146][ T1222] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1456.521511][T14606] usb 5-1: USB disconnect, device number 45 [ 1456.543832][ T30] audit: type=1400 audit(2000524937.547:1206): avc: denied { write } for pid=19914 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1457.469493][T19928] netlink: 'syz.3.3616': attribute type 1 has an invalid length. [ 1457.642962][T19929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3616'. [ 1458.278717][ T1222] wwan wwan0: port wwan0mbim0 disconnected [ 1458.279566][T19928] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1458.359157][T19934] bond5: entered promiscuous mode [ 1458.364277][T19934] bond5: entered allmulticast mode [ 1458.533139][T19943] fuse: Bad value for 'user_id' [ 1458.553282][T19943] fuse: Bad value for 'user_id' [ 1458.988593][ T5733] IPVS: starting estimator thread 0... [ 1459.006535][ T30] audit: type=1400 audit(2000524939.901:1207): avc: denied { write } for pid=19930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.154739][ T30] audit: type=1400 audit(2000524940.049:1208): avc: denied { write } for pid=19956 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.382791][T19954] IPVS: using max 51 ests per chain, 122400 per kthread [ 1459.438547][ T5733] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 1459.733455][ T5733] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1459.749345][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1459.778614][ T5733] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1459.805318][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1459.827301][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1459.854203][ T5733] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1459.861851][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1459.879413][ T5733] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1459.908899][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1459.931094][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1459.956216][ T5733] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1459.967177][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1459.986467][T19962] SELinux: failed to load policy [ 1460.000340][ T5733] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1460.054470][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1460.083449][ T5733] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1460.212242][T19967] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1460.232089][ T5733] usb 5-1: string descriptor 0 read error: -22 [ 1460.239606][ T5733] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1460.758634][T19973] usb usb8: usbfs: process 19973 (syz.0.3623) did not claim interface 3 before use [ 1461.061746][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.088695][ T5733] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1461.408072][T14606] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1461.586987][T19978] FAULT_INJECTION: forcing a failure. [ 1461.586987][T19978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.633291][T19978] CPU: 1 UID: 0 PID: 19978 Comm: syz.3.3625 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.633321][T19978] Tainted: [L]=SOFTLOCKUP [ 1461.633327][T19978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1461.633338][T19978] Call Trace: [ 1461.633344][T19978] [ 1461.633351][T19978] dump_stack_lvl+0x100/0x190 [ 1461.633377][T19978] should_fail_ex.cold+0x5/0xa [ 1461.633402][T19978] _copy_from_user+0x2e/0xd0 [ 1461.633424][T19978] __sys_bpf+0x243/0x4b90 [ 1461.633456][T19978] ? __pfx___sys_bpf+0x10/0x10 [ 1461.633480][T19978] ? proc_fail_nth_write+0x9f/0x220 [ 1461.633500][T19978] ? find_held_lock+0x2b/0x80 [ 1461.633520][T19978] ? find_held_lock+0x2b/0x80 [ 1461.633536][T19978] ? ksys_write+0x190/0x250 [ 1461.633555][T19978] ? ksys_write+0x190/0x250 [ 1461.633577][T19978] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1461.633601][T19978] ? kernel_write+0x6b3/0x6c0 [ 1461.633619][T19978] ? __fget_files+0x215/0x3d0 [ 1461.633653][T19978] ? fput+0x79/0x100 [ 1461.633676][T19978] ? ksys_write+0x1ac/0x250 [ 1461.633695][T19978] ? __pfx_ksys_write+0x10/0x10 [ 1461.633719][T19978] __x64_sys_bpf+0x7b/0xc0 [ 1461.633735][T19978] ? lockdep_hardirqs_on+0x78/0x100 [ 1461.633756][T19978] do_syscall_64+0x115/0x870 [ 1461.633778][T19978] ? clear_bhb_loop+0x40/0x90 [ 1461.633801][T19978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.633818][T19978] RIP: 0033:0x7f8041f9ce59 [ 1461.633832][T19978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.633849][T19978] RSP: 002b:00007f8042e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1461.633866][T19978] RAX: ffffffffffffffda RBX: 00007f8042215fa0 RCX: 00007f8041f9ce59 [ 1461.633877][T19978] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1461.633887][T19978] RBP: 00007f8042e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.633897][T19978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.633907][T19978] R13: 00007f8042216038 R14: 00007f8042215fa0 R15: 00007ffd1772d4b8 [ 1461.633930][T19978] [ 1461.729979][ T5733] usb 5-1: USB disconnect, device number 46 [ 1463.370346][ T5733] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1463.421056][T14606] usb 6-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1463.431986][T14606] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1463.587971][ T5712] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1465.394609][T14606] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1465.407899][T14606] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1465.414674][T14606] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1465.423868][T14606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.464970][T14606] usb 6-1: config 0 descriptor?? [ 1465.483870][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1465.495283][T14606] usb 6-1: can't set config #0, error -71 [ 1465.496599][T14606] usb 6-1: USB disconnect, device number 30 [ 1465.574063][ T5712] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1465.656510][ T5712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.687063][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1465.706137][ T5712] usb 4-1: SerialNumber: syz [ 1465.787742][T20010] openvswitch: netlink: Flow key attr not present in new flow. [ 1465.811507][T20006] netlink: 'syz.4.3635': attribute type 1 has an invalid length. [ 1465.819261][ T30] audit: type=1800 audit(2000524946.170:1209): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3635" name="file1" dev="tmpfs" ino=505 res=0 errno=0 [ 1465.881457][ T5712] hub 4-1:1.0: bad descriptor, ignoring hub [ 1465.904372][ T5712] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1465.939811][ T5712] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1465.955442][T20006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1466.118793][T20006] bond3: (slave dummy0): making interface the new active one [ 1466.121519][T20009] SELinux: failed to load policy [ 1466.164213][T20006] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1466.212346][ T5712] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1466.251683][ T5712] usb 4-1: USB disconnect, device number 41 [ 1466.322991][ T30] audit: type=1400 audit(2000524946.650:1210): avc: denied { shutdown } for pid=20014 comm="syz.4.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1466.855661][ T5802] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1467.114338][T20028] ip6gre1: entered promiscuous mode [ 1467.119708][T20028] ip6gre1: entered allmulticast mode [ 1467.154929][T20028] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 1468.803626][T14603] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1468.812321][ T5802] usb 1-1: Using ep0 maxpacket: 32 [ 1468.893352][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1468.927000][ T5802] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1468.957847][ T5802] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1468.970586][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1468.982337][ T5802] usb 1-1: Product: syz [ 1468.992935][ T5802] usb 1-1: Manufacturer: syz [ 1469.020748][T20037] netlink: 'syz.1.3636': attribute type 1 has an invalid length. [ 1469.028938][ T5802] usb 1-1: SerialNumber: syz [ 1469.041118][ T5802] usb 1-1: config 0 descriptor?? [ 1469.047912][T20020] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1469.176756][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3636'. [ 1469.214180][T20037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1469.241547][T20041] bond8: entered promiscuous mode [ 1469.244607][T20042] xt_hashlimit: size too large, truncated to 1048576 [ 1469.246614][T20041] bond8: entered allmulticast mode [ 1469.482423][T20049] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 1469.940799][T14606] usb 1-1: USB disconnect, device number 40 [ 1470.240875][T20049] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1470.462051][T20052] bond7: (slave veth0_to_bond): Releasing active interface [ 1470.997551][T20052] bond9: (slave veth0_to_bond): making interface the new active one [ 1471.093473][T20052] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1471.197835][T20054] bond9: entered promiscuous mode [ 1471.230475][T20054] veth0_to_bond: entered promiscuous mode [ 1471.298105][T20054] bond9: entered allmulticast mode [ 1471.318861][T20054] veth0_to_bond: entered allmulticast mode [ 1471.505078][ T5733] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1471.508992][T20068] netlink: 'syz.3.3648': attribute type 1 has an invalid length. [ 1471.592469][T20068] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1471.662733][T20072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3648'. [ 1471.766161][ T5733] usb 6-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1471.807261][T20072] bond6: entered promiscuous mode [ 1471.812303][T20072] bond6: entered allmulticast mode [ 1471.823008][ T5733] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1471.850578][ T5733] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1471.948698][ T5733] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1471.992952][T20079] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3650'. [ 1472.003672][ T5733] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1472.034246][ T30] audit: type=1400 audit(2000524951.894:1211): avc: denied { connect } for pid=20073 comm="syz.4.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1472.070763][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.101081][ T5733] usb 6-1: config 0 descriptor?? [ 1472.133771][T20066] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1472.319151][T14606] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1472.680402][T20085] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1473.850102][T14603] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1474.019709][T14606] usb 4-1: Using ep0 maxpacket: 16 [ 1476.575485][ T5733] usbhid 6-1:0.0: can't add hid device: -71 [ 1476.649775][ T5733] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1476.738687][ T5733] usb 6-1: USB disconnect, device number 32 [ 1476.754590][T14606] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1476.762155][T14606] usb 4-1: can't read configurations, error -71 [ 1476.820297][T20099] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3656'. [ 1477.631445][T20108] netlink: 'syz.3.3659': attribute type 1 has an invalid length. [ 1477.724457][T20108] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1478.415425][T20108] bond3: (slave veth0_to_bond): Releasing active interface [ 1478.498267][T20115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3661'. [ 1478.662833][T20108] bond7: (slave veth0_to_bond): making interface the new active one [ 1478.681254][ T30] audit: type=1400 audit(2000524958.061:1212): avc: denied { read } for pid=20117 comm="syz.4.3658" dev="sockfs" ino=68700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1479.154555][T20108] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1479.192707][T20111] bond7: entered promiscuous mode [ 1479.205437][T20121] 9p: Bad value for 'rfdno' [ 1479.264393][T20111] veth0_to_bond: entered promiscuous mode [ 1479.271799][T20111] bond7: entered allmulticast mode [ 1479.277500][T20111] veth0_to_bond: entered allmulticast mode [ 1479.720981][T20129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=20129 comm=syz.5.3663 [ 1479.734035][ T30] audit: type=1400 audit(2000524959.002:1213): avc: denied { getopt } for pid=20128 comm="syz.5.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1481.401809][T15061] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1481.436510][T20140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3668'. [ 1481.459095][ T10] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1481.839981][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1481.851095][ T10] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1481.862446][ T10] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1481.888774][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1481.908386][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1481.962840][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.008775][ T10] usb 1-1: config 0 descriptor?? [ 1482.042620][T20131] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1482.177544][T15061] usb 5-1: device not accepting address 48, error -71 [ 1482.195183][T20156] FAULT_INJECTION: forcing a failure. [ 1482.195183][T20156] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.242689][T20156] CPU: 0 UID: 0 PID: 20156 Comm: syz.1.3671 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.242722][T20156] Tainted: [L]=SOFTLOCKUP [ 1482.242729][T20156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1482.242740][T20156] Call Trace: [ 1482.242747][T20156] [ 1482.242754][T20156] dump_stack_lvl+0x100/0x190 [ 1482.242782][T20156] should_fail_ex.cold+0x5/0xa [ 1482.242808][T20156] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1482.242835][T20156] should_failslab+0xc2/0x120 [ 1482.242856][T20156] __kmalloc_noprof+0xe0/0x850 [ 1482.242882][T20156] ? kfree+0x1dd/0x6c0 [ 1482.242909][T20156] tomoyo_realpath_from_path+0xb6/0x690 [ 1482.242942][T20156] tomoyo_path_number_perm+0x23c/0x580 [ 1482.242966][T20156] ? tomoyo_path_number_perm+0x22e/0x580 [ 1482.242992][T20156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1482.243041][T20156] ? find_held_lock+0x2b/0x80 [ 1482.243058][T20156] ? __fget_files+0x215/0x3d0 [ 1482.243080][T20156] ? hook_file_ioctl_common+0x149/0x410 [ 1482.243099][T20156] ? __fget_files+0x215/0x3d0 [ 1482.243125][T20156] ? __fget_files+0x21f/0x3d0 [ 1482.243152][T20156] security_file_ioctl+0xd3/0x230 [ 1482.243181][T20156] __x64_sys_ioctl+0xb7/0x210 [ 1482.243202][T20156] do_syscall_64+0x115/0x870 [ 1482.243225][T20156] ? clear_bhb_loop+0x40/0x90 [ 1482.243248][T20156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.243272][T20156] RIP: 0033:0x7f6f97f9ce59 [ 1482.243289][T20156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.243305][T20156] RSP: 002b:00007f6f98ef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1482.243323][T20156] RAX: ffffffffffffffda RBX: 00007f6f98216090 RCX: 00007f6f97f9ce59 [ 1482.243335][T20156] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1482.243346][T20156] RBP: 00007f6f98ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.243356][T20156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.243366][T20156] R13: 00007f6f98216128 R14: 00007f6f98216090 R15: 00007ffeb8efd878 [ 1482.243391][T20156] [ 1482.243467][T20156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1482.627790][T15061] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1483.672488][T14603] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 1484.261823][T15061] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1484.271326][ T30] audit: type=1326 audit(2000524963.214:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20163 comm="syz.5.3673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa57a19ce59 code=0x0 [ 1484.529128][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1484.536135][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1484.550468][ T10] usb 1-1: USB disconnect, device number 42 [ 1484.587699][T14603] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1484.601969][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1484.618257][T15061] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.637355][T14603] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1484.649016][T15061] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1484.685183][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1485.156250][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1485.288235][T20173] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 1485.313157][T20173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1485.679395][T20173] bond7: (slave veth0_to_bond): making interface the new active one [ 1485.692291][T20173] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1485.728771][T14603] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1485.736400][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1485.755547][T14603] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1485.789849][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1485.890173][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1486.766830][T14603] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1486.774401][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1486.785098][T14603] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1486.809185][T20173] bond7: entered promiscuous mode [ 1486.814700][T20173] veth0_to_bond: entered promiscuous mode [ 1486.866798][T20173] bond7: entered allmulticast mode [ 1486.874342][T20173] veth0_to_bond: entered allmulticast mode [ 1486.920655][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1487.015910][T15061] usb 5-1: string descriptor 0 read error: -71 [ 1488.483429][T15061] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1488.526088][T15061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.564730][T14603] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1488.683784][T15061] usb 5-1: can't set config #1, error -71 [ 1488.691070][T15061] usb 5-1: USB disconnect, device number 49 [ 1488.812321][T14603] usb 4-1: string descriptor 0 read error: -71 [ 1488.819731][T14603] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1488.831260][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.230749][T20198] tipc: Started in network mode [ 1489.237132][T20198] tipc: Node identity 1e4173561c2c, cluster identity 4711 [ 1489.244463][T20198] tipc: Enabled bearer , priority 0 [ 1489.253093][T20198] syzkaller0: entered promiscuous mode [ 1489.258606][T20198] syzkaller0: entered allmulticast mode [ 1489.290012][ T30] audit: type=1400 audit(2000524967.562:1215): avc: denied { mount } for pid=20189 comm="syz.1.3679" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1489.385841][T14603] usb 4-1: can't set config #168, error -71 [ 1489.399113][T14603] usb 4-1: USB disconnect, device number 44 [ 1489.703317][T14604] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1489.759948][T20197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1489.795362][T20192] tipc: Resetting bearer [ 1489.889651][T20204] netlink: 'syz.5.3680': attribute type 1 has an invalid length. [ 1489.902752][T20192] tipc: Disabling bearer [ 1490.149813][T20204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1490.374556][T20203] bond6: (slave veth0_to_bond): Releasing active interface [ 1490.391605][T20203] veth0_to_bond: left promiscuous mode [ 1490.398043][T20203] veth0_to_bond: left allmulticast mode [ 1490.484352][T20203] bond7: (slave veth0_to_bond): making interface the new active one [ 1490.518922][T20203] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1490.882830][T20204] bond7: entered promiscuous mode [ 1490.887973][T20204] veth0_to_bond: entered promiscuous mode [ 1490.894664][T20204] bond7: entered allmulticast mode [ 1490.899798][T20204] veth0_to_bond: entered allmulticast mode [ 1491.073598][T14604] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1491.082702][T14604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.093127][T14604] usb 2-1: config 0 descriptor?? [ 1491.300597][T14604] cp210x 2-1:0.0: cp210x converter detected [ 1491.468289][ T5733] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1491.644378][ T30] audit: type=1400 audit(2000524970.027:1216): avc: denied { write } for pid=20215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.739535][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 1491.754749][T15061] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1491.769072][ T5733] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1491.780244][ T5733] usb 4-1: config 0 has no interface number 0 [ 1491.786569][ T30] audit: type=1400 audit(2000524970.119:1217): avc: denied { write } for pid=20229 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.839018][ T5733] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1491.891135][ T5733] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1491.900391][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.926524][ T5733] usb 4-1: Product: syz [ 1491.938849][ T5733] usb 4-1: Manufacturer: syz [ 1491.950068][ T5733] usb 4-1: SerialNumber: syz [ 1491.989507][ T5733] usb 4-1: config 0 descriptor?? [ 1492.007089][ T5733] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1492.030737][ T5733] em28xx 4-1:0.132: Video interface 132 found: [ 1492.285239][ T30] audit: type=1400 audit(2000524970.600:1218): avc: denied { write } for pid=20233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.535952][ T5733] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1492.845946][T14604] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1492.853455][T14604] cp210x 2-1:0.0: querying part number failed [ 1492.876138][ T30] audit: type=1400 audit(2000524971.135:1219): avc: denied { write } for pid=20247 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.905074][T14604] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1492.974428][T14604] usb 2-1: USB disconnect, device number 34 [ 1493.059310][T14604] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1493.067836][T14604] cp210x 2-1:0.0: device disconnected [ 1493.109182][T15061] usb 6-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1493.120095][T15061] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1493.219377][T15061] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1493.232445][T15061] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1493.239055][T15061] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1493.248087][T15061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.322912][ T5802] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1493.339554][ T5733] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1493.548909][ T5733] em28xx 4-1:0.132: board has no eeprom [ 1493.623104][T15061] usb 6-1: config 0 descriptor?? [ 1493.660207][T20219] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1493.688996][T20257] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1493.700018][T20257] SELinux: failed to load policy [ 1493.720805][ T5733] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1493.729285][ T5733] em28xx 4-1:0.132: analog set to bulk mode. [ 1493.736105][ T5712] em28xx 4-1:0.132: Registering V4L2 extension [ 1493.764332][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 1493.771365][ T5802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.782300][T20259] netlink: 'syz.4.3690': attribute type 11 has an invalid length. [ 1493.790101][T20259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1493.820858][ T5733] usb 4-1: USB disconnect, device number 45 [ 1493.836241][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1493.880945][ T5733] em28xx 4-1:0.132: Disconnecting em28xx [ 1493.886708][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1493.912102][ T5802] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1493.929102][ T5802] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.959782][ T5802] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1493.993701][ T5802] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1494.015390][ T5712] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1494.034108][ T5712] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1494.042760][ T5802] usb 1-1: Manufacturer: syz [ 1494.048325][ T5712] em28xx 4-1:0.132: No AC97 audio processor [ 1494.058025][ T5802] usb 1-1: config 0 descriptor?? [ 1495.432956][T14604] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1497.423694][ T5712] usb 4-1: Decoder not found [ 1497.429150][ T5712] em28xx 4-1:0.132: failed to create media graph [ 1497.623053][ T5712] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1497.832059][T15061] usbhid 6-1:0.0: can't add hid device: -71 [ 1497.839724][T15061] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1497.867455][T15061] usb 6-1: USB disconnect, device number 33 [ 1497.912986][ T5802] rc_core: IR keymap rc-hauppauge not found [ 1498.094629][T20289] usb usb8: usbfs: process 20289 (syz.5.3697) did not claim interface 3 before use [ 1498.110348][T20289] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3697'. [ 1498.295666][ T5802] Registered IR keymap rc-empty [ 1498.302936][ T5802] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1498.387700][T20273] ================================================================== [ 1498.395796][T20273] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 1498.403002][T20273] Read of size 4 at addr ffff888038bbc860 by task v4l_id/20273 [ 1498.410545][T20273] [ 1498.412868][T20273] CPU: 0 UID: 0 PID: 20273 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.412893][T20273] Tainted: [L]=SOFTLOCKUP [ 1498.412900][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1498.412911][T20273] Call Trace: [ 1498.412918][T20273] [ 1498.412925][T20273] dump_stack_lvl+0x100/0x190 [ 1498.412948][T20273] print_report+0x13d/0x4b0 [ 1498.412973][T20273] ? __virt_addr_valid+0x239/0x430 [ 1498.412993][T20273] ? v4l2_open+0x351/0x490 [ 1498.413020][T20273] kasan_report+0xdf/0x1d0 [ 1498.413040][T20273] ? v4l2_open+0x351/0x490 [ 1498.413064][T20273] v4l2_open+0x351/0x490 [ 1498.413086][T20273] ? __pfx_v4l2_open+0x10/0x10 [ 1498.413108][T20273] chrdev_open+0x234/0x6a0 [ 1498.413129][T20273] ? __pfx_chrdev_open+0x10/0x10 [ 1498.413150][T20273] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1498.413177][T20273] do_dentry_open+0x6ab/0x14d0 [ 1498.413197][T20273] ? __pfx_chrdev_open+0x10/0x10 [ 1498.413220][T20273] vfs_open+0x82/0x3f0 [ 1498.413245][T20273] path_openat+0x208c/0x31a0 [ 1498.413271][T20273] ? __pfx_path_openat+0x10/0x10 [ 1498.413296][T20273] do_file_open+0x20e/0x430 [ 1498.413319][T20273] ? __pfx_do_file_open+0x10/0x10 [ 1498.413348][T20273] ? alloc_fd+0x476/0x790 [ 1498.413371][T20273] ? do_getname+0x191/0x390 [ 1498.413397][T20273] do_sys_openat2+0x10d/0x1e0 [ 1498.413421][T20273] ? __pfx_do_sys_openat2+0x10/0x10 [ 1498.413450][T20273] __x64_sys_openat+0x12d/0x210 [ 1498.413474][T20273] ? __pfx___x64_sys_openat+0x10/0x10 [ 1498.413501][T20273] ? rcu_is_watching+0x12/0xc0 [ 1498.413527][T20273] do_syscall_64+0x115/0x870 [ 1498.413549][T20273] ? clear_bhb_loop+0x40/0x90 [ 1498.413568][T20273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.413586][T20273] RIP: 0033:0x7f04c0ea7407 [ 1498.413601][T20273] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1498.413619][T20273] RSP: 002b:00007ffc93ec9040 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1498.413637][T20273] RAX: ffffffffffffffda RBX: 00007f04c15f6880 RCX: 00007f04c0ea7407 [ 1498.413649][T20273] RDX: 0000000000000000 RSI: 00007ffc93ec9f1a RDI: ffffffffffffff9c [ 1498.413660][T20273] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1498.413670][T20273] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1498.413680][T20273] R13: 00007ffc93ec9290 R14: 00007f04c175d000 R15: 00005614c43d54d8 [ 1498.413697][T20273] [ 1498.413704][T20273] [ 1498.540056][T20285] netlink: 'syz.1.3696': attribute type 1 has an invalid length. [ 1498.542755][T20273] Allocated by task 5712: [ 1498.547940][T20285] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3696'. [ 1498.552758][T20273] kasan_save_stack+0x30/0x50 [ 1498.680840][T20273] kasan_save_track+0x14/0x30 [ 1498.685492][T20273] __kasan_kmalloc+0xaa/0xb0 [ 1498.690049][T20273] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1498.695456][T20273] em28xx_init_extension+0x13a/0x200 [ 1498.700716][T20273] request_module_async+0x61/0x80 [ 1498.705715][T20273] process_one_work+0xa0e/0x1980 [ 1498.710635][T20273] worker_thread+0x5ef/0xe50 [ 1498.715196][T20273] kthread+0x370/0x450 [ 1498.719236][T20273] ret_from_fork+0x72b/0xd50 [ 1498.723797][T20273] ret_from_fork_asm+0x1a/0x30 [ 1498.728545][T20273] [ 1498.730849][T20273] Freed by task 5712: [ 1498.734795][T20273] kasan_save_stack+0x30/0x50 [ 1498.739462][T20273] kasan_save_track+0x14/0x30 [ 1498.744105][T20273] kasan_save_free_info+0x3b/0x70 [ 1498.749110][T20273] __kasan_slab_free+0x5f/0x80 [ 1498.753846][T20273] kfree+0x223/0x6c0 [ 1498.757735][T20273] kref_put.isra.0+0x53/0x75 [ 1498.762311][T20273] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1498.767680][T20273] em28xx_init_extension+0x13a/0x200 [ 1498.772976][T20273] request_module_async+0x61/0x80 [ 1498.777989][T20273] process_one_work+0xa0e/0x1980 [ 1498.782907][T20273] worker_thread+0x5ef/0xe50 [ 1498.787467][T20273] kthread+0x370/0x450 [ 1498.791506][T20273] ret_from_fork+0x72b/0xd50 [ 1498.796066][T20273] ret_from_fork_asm+0x1a/0x30 [ 1498.800802][T20273] [ 1498.803097][T20273] The buggy address belongs to the object at ffff888038bbc000 [ 1498.803097][T20273] which belongs to the cache kmalloc-8k of size 8192 [ 1498.817119][T20273] The buggy address is located 2144 bytes inside of [ 1498.817119][T20273] freed 8192-byte region [ffff888038bbc000, ffff888038bbe000) [ 1498.831060][T20273] [ 1498.833362][T20273] The buggy address belongs to the physical page: [ 1498.839738][T20273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38bb8 [ 1498.848464][T20273] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1498.856927][T20273] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1498.864443][T20273] page_type: f5(slab) [ 1498.868416][T20273] raw: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 1498.877010][T20273] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1498.885595][T20273] head: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 1498.894241][T20273] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1498.902879][T20273] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1498.911516][T20273] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1498.920152][T20273] page dumped because: kasan: bad access detected [ 1498.926529][T20273] page_owner tracks the page as allocated [ 1498.932213][T20273] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5615, tgid 5615 (syz-executor), ts 62097680366, free_ts 58830269240 [ 1498.952938][T20273] post_alloc_hook+0xfd/0x120 [ 1498.957592][T20273] get_page_from_freelist+0x11a6/0x3410 [ 1498.963123][T20273] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1498.968989][T20273] new_slab+0xa6/0x6c0 [ 1498.973045][T20273] refill_objects+0x277/0x420 [ 1498.977700][T20273] __pcs_replace_empty_main+0x375/0x650 [ 1498.983243][T20273] __kmalloc_noprof+0x688/0x850 [ 1498.988097][T20273] batadv_hash_new+0x74/0x2e0 [ 1498.992768][T20273] batadv_tt_init+0x278/0x350 [ 1498.997435][T20273] batadv_mesh_init+0x4e3/0x910 [ 1499.002270][T20273] batadv_meshif_init_late+0xbed/0xf50 [ 1499.007702][T20273] register_netdevice+0x685/0x24b0 [ 1499.012782][T20273] batadv_meshif_newlink+0x8f/0xc0 [ 1499.017867][T20273] rtnl_newlink+0x1499/0x2380 [ 1499.022519][T20273] rtnetlink_rcv_msg+0x95e/0xe90 [ 1499.027424][T20273] netlink_rcv_skb+0x159/0x420 [ 1499.032158][T20273] page last free pid 5602 tgid 5602 stack trace: [ 1499.038459][T20273] __free_frozen_pages+0x794/0x10a0 [ 1499.043640][T20273] __folio_put+0x3b4/0x5f0 [ 1499.048032][T20273] skb_release_data+0x649/0x8e0 [ 1499.052867][T20273] __kfree_skb+0x4f/0x70 [ 1499.057083][T20273] tcp_ack+0x2086/0x7670 [ 1499.061308][T20273] tcp_rcv_established+0x1132/0x3910 [ 1499.066581][T20273] tcp_v4_do_rcv+0xbb6/0x1260 [ 1499.071230][T20273] __release_sock+0x35a/0x440 [ 1499.075891][T20273] release_sock+0x1e5/0x280 [ 1499.080378][T20273] tcp_sendmsg+0x38/0x50 [ 1499.084604][T20273] inet_sendmsg+0xb9/0x140 [ 1499.088995][T20273] sock_write_iter+0x4ea/0x5a0 [ 1499.093737][T20273] vfs_write+0x6ac/0x1070 [ 1499.098056][T20273] ksys_write+0x1f8/0x250 [ 1499.102375][T20273] do_syscall_64+0x115/0x870 [ 1499.106972][T20273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.112878][T20273] [ 1499.115194][T20273] Memory state around the buggy address: [ 1499.120820][T20273] ffff888038bbc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.128877][T20273] ffff888038bbc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.136923][T20273] >ffff888038bbc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.144951][T20273] ^ [ 1499.152110][T20273] ffff888038bbc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.160141][T20273] ffff888038bbc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.168169][T20273] ================================================================== [ 1499.178498][ T5712] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1499.189204][ T5802] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1499.233551][ T5733] em28xx 4-1:0.132: Closing input extension [ 1499.267618][ T5802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1499.282041][ T5802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input108 [ 1499.445822][ T5802] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1499.467403][ T5733] em28xx 4-1:0.132: Freeing device [ 1499.548748][ T5802] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1499.559098][T20273] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1499.566315][T20273] CPU: 0 UID: 0 PID: 20273 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.576906][T20273] Tainted: [L]=SOFTLOCKUP [ 1499.581228][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1499.591287][T20273] Call Trace: [ 1499.594569][T20273] [ 1499.597494][T20273] dump_stack_lvl+0x100/0x190 [ 1499.602161][T20273] vpanic+0x552/0x970 [ 1499.606147][T20273] ? __pfx_vpanic+0x10/0x10 [ 1499.610625][T20273] ? v4l2_open+0x351/0x490 [ 1499.615015][T20273] panic+0xd1/0xe0 [ 1499.618707][T20273] ? __pfx_panic+0x10/0x10 [ 1499.623094][T20273] ? v4l2_open+0x351/0x490 [ 1499.627485][T20273] ? preempt_schedule_common+0x42/0xc0 [ 1499.632918][T20273] ? check_panic_on_warn+0x1f/0x90 [ 1499.638004][T20273] check_panic_on_warn.cold+0x19/0x34 [ 1499.643347][T20273] end_report.part.0+0x3a/0x90 [ 1499.648095][T20273] kasan_report.cold+0xe/0x18 [ 1499.652771][T20273] ? v4l2_open+0x351/0x490 [ 1499.657187][T20273] v4l2_open+0x351/0x490 [ 1499.661429][T20273] ? __pfx_v4l2_open+0x10/0x10 [ 1499.666219][T20273] chrdev_open+0x234/0x6a0 [ 1499.670627][T20273] ? __pfx_chrdev_open+0x10/0x10 [ 1499.675549][T20273] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1499.681873][T20273] do_dentry_open+0x6ab/0x14d0 [ 1499.686641][T20273] ? __pfx_chrdev_open+0x10/0x10 [ 1499.691582][T20273] vfs_open+0x82/0x3f0 [ 1499.695641][T20273] path_openat+0x208c/0x31a0 [ 1499.700216][T20273] ? __pfx_path_openat+0x10/0x10 [ 1499.705140][T20273] do_file_open+0x20e/0x430 [ 1499.709628][T20273] ? __pfx_do_file_open+0x10/0x10 [ 1499.714643][T20273] ? alloc_fd+0x476/0x790 [ 1499.718956][T20273] ? do_getname+0x191/0x390 [ 1499.723451][T20273] do_sys_openat2+0x10d/0x1e0 [ 1499.728113][T20273] ? __pfx_do_sys_openat2+0x10/0x10 [ 1499.733300][T20273] __x64_sys_openat+0x12d/0x210 [ 1499.738134][T20273] ? __pfx___x64_sys_openat+0x10/0x10 [ 1499.743503][T20273] ? rcu_is_watching+0x12/0xc0 [ 1499.748282][T20273] do_syscall_64+0x115/0x870 [ 1499.752875][T20273] ? clear_bhb_loop+0x40/0x90 [ 1499.757539][T20273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.763416][T20273] RIP: 0033:0x7f04c0ea7407 [ 1499.767819][T20273] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1499.787421][T20273] RSP: 002b:00007ffc93ec9040 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1499.795840][T20273] RAX: ffffffffffffffda RBX: 00007f04c15f6880 RCX: 00007f04c0ea7407 [ 1499.803791][T20273] RDX: 0000000000000000 RSI: 00007ffc93ec9f1a RDI: ffffffffffffff9c [ 1499.811742][T20273] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1499.819690][T20273] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1499.827639][T20273] R13: 00007ffc93ec9290 R14: 00007f04c175d000 R15: 00005614c43d54d8 [ 1499.835593][T20273] [ 1499.838784][T20273] Kernel Offset: disabled [ 1499.843080][T20273] Rebooting in 86400 seconds..