last executing test programs: 14m48.552067371s ago: executing program 0 (id=124): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000100)={0x0, 0x0, 0x8001}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000140)={0x9, 0x2, r2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc46, 0x8000, 0x1, 0x3c7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bc9, 0x1000, 0x1, 0x356, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b9f, 0x200, 0x1, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c93, 0x0, 0x3, 0x174}}], 0x4, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setscheduler(r5, 0x7, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000180)={0x7, 0x3, 0x9, 0x9, 0x4}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 14m48.252118232s ago: executing program 0 (id=125): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x929b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x401, 0x4) sendto$inet(r2, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(0x0, 0x0, &(0x7f0000000480)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b6579305930", 0xcc, 0xfffffffffffffffd) close(r3) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x5) accept4$unix(r4, &(0x7f00000010c0), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) recvmsg(0xffffffffffffffff, 0x0, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e001000000000000000000600900151605000115160500", @ANYRES32=r8], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 14m43.632189214s ago: executing program 0 (id=137): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e24, @local}], 0x2c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000b00)="0f", 0x1}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) write$nbd(r1, &(0x7f0000000840)=ANY=[], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x49, 0xffff1896, 0x100, 0x25, 0xfffffffc}, 0x9c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x6, 0x83}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 14m43.415536922s ago: executing program 0 (id=139): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000600000200000000", @ANYRES32, @ANYBLOB="050000000000020000001cea00006d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="e00100001a00330600000000fddbdf25fe8000000000000000000000000000aaffffffff000000000000000000000000000340044e2480010000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000006c00000000000009000000000000000000000001270300000000000001000080000000000000000000000000c00000000000ff000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000200000000000000000000000000000000000000003500000a0005030000000000000000e4000600ac1414bb000000000000000000000000fe8800000000000000000000000000414e2100034e21009d0a00008032000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d26c00000000000000000000000000000000000000ffffff7f00000000040000000000000008000000000000000d00000000000000000000000000000008000000000000000500000000000000a64c000000000000b7a00000000000000500000000000000ff7f00000000000005000000000000000900000006000000300f00002bbd7000000000000a0003084a00000000000000050021000200000004002600"], 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 14m42.364025639s ago: executing program 0 (id=141): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0x6a855000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) (fail_nth: 4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x2c) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r4 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xf) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r9, 0x0) tkill(r8, 0x18) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0}) 14m42.009787121s ago: executing program 0 (id=144): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100"], 0x8, 0x0) msgctl$IPC_RMID(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000019300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000019640)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x20048811}, 0x4) 14m26.903398213s ago: executing program 32 (id=144): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100"], 0x8, 0x0) msgctl$IPC_RMID(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000019300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000019640)=ANY=[@ANYBLOB="c000000002090500000000018800020000000340000006000000140001800800010064010100f3fd0200e0000001010008000200e00000022c00018014000300fe800000000000000000000000000012140004000000000000000000000000000000000106000340000200000c00028005000100880000000600034000030000080005400000001700080000000000000000090000000000000005400000001721b93589ee6aeb642381f0d4551e6ebb8376cd0a7ac14720432f36f4316fdb4331b04b3c45fdf8bfd1481ab8dd28618af44d5385af79695b5e05b0f55b751bd2b01b457b5e2c751ff5fb8882703d8a3d376867de7e726298ad11135fe16422cb32a84e1745f3a566760c7872505b4e27afaaab655e28546ce5362f7dba9e4907e9a7cc92810c97c68b9b2ce4958304c537163b370a3200dd4f55d73a8e1f223f216f3bb178f2ebbc8fbcd699f661a5740ee511b734e2b9729027920ffd55f99e9a25d2f1dd752b9cbb382cf57752f91affb6057adcf2d3f9de298507a592d522bc8edc66f701095b8b55e5aeafbb358645cf7e866d2908a0f8d22c80d7a771feb0257cf21b1e4a9872560aa7e9596ffe51c462cb5f4311be7af7af3eae15817973b1c36dbc5294c26e16b8dca60352f67948a0e2d69ddb1f8f7572916b5f40f36b2ba173f69b295d8be92f532a75e170b2909d2d17a2063a192ce79c395174cf942e51684343570dc786786dc5d4c745566c283f8900bc5a7fd7accfb30dd0d7879908f393736747fb2219cc499f3e5092486d20a2e417d4e5eb2dc1c698af0054271aece140143944554b84d3"], 0xc0}, 0x1, 0x0, 0x0, 0x20048811}, 0x4) 14m0.121433435s ago: executing program 5 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56d41, 0x82000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x6f575620ad41a027}, @TCA_TBF_BURST={0x8, 0x6, 0x40}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x0, 0x8, 0xfffc, 0x1, 0x1000}, {0x3, 0x2, 0x3, 0x0, 0x2, 0x9}, 0x3, 0x1, 0xb02}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r7, r8, r9, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r5, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0xc, 0xf, 0xa, 0x0, 0x1}, {}, {}, {0x0, 0xfffffffd}}}}) r10 = open$dir(&(0x7f0000019080)='./sys\x00', 0x10041, 0x108) clock_gettime(0x0, &(0x7f0000019100)={0x0, 0x0}) utimensat(r10, &(0x7f00000190c0)='./sys\x00', &(0x7f0000019180)={{r11, r12/1000+10000}, {0x0, 0xea60}}, 0x100) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="69aa060000000000002545000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x6) 13m58.451917392s ago: executing program 5 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x1000}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x50, 0x0, &(0x7f0000000500)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m56.521249821s ago: executing program 5 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)={@empty, @dev, 0x0}, &(0x7f0000000240)=0xc) sendmsg$xdp(r6, &(0x7f0000000980)={&(0x7f0000000280)={0x2c, 0x3, r7, 0x25}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000540)="db36b1637460db9bd909d2319123e03063c073289647d68ac53dd8d0aec4c5059344a1afda34b1e9de5ce6481a11dbacff4b1e6e6abf94242b2c8ae3618a4e734fb96f7e95d5ce", 0x47}, {&(0x7f00000005c0)="ee0fb036f706daa1778254d9b13a27b7cfc621a038c87158d641b51b338e3a691618283ef36f0c4ebf779ae2d38d4416c0fe9a6e10f4cd73a29fab649008b9c450ddf88fd14157e7e0441ab3b795eee6b2949f9d08af", 0x56}, {&(0x7f0000000640)="4101c5f28a24c607c05b3a8f44a766eb6114b662ab33bd125d563e2e7958da7d1d99e8e6cfa7275966c822a6c3b8cb41c48c2e230090551762f60f94a16479f92b3669831bf2b4f3b41348d67588277de259e46d9af362eb347494b25c5512adbd7d3870c0c893c663310d0bf9acde2ecabf9750bdf57225daa18b92d6b78a75fbec42d5c40b22f07ed04e340922ba0261cf9682326eb13d9d63572affcdb4ac800a4395e1f5e5a578924acc04167ebd900448fa59b893005e308163c9d118329e269eae045db1a9833fdb312be9472d786eeb5312a366a2c98871a5419ed30abf8be5b535044ff57674bfe95232", 0xee}, {&(0x7f0000000740)="ceb2513d53ff3d96f17d21ac97cd3ce44ef4b69a35f473c7e982d00d2713f784b50e00409354354b13f1ce506bba858ae8d6105f65c70142839db8d96653470c6f79695ec63a9c465e752e4f4195ffddac30093915eeae8004eb92c96b8ccb45cfb557db209b19dac7e8a308af12f438c779104f8c269d44d198c0e831f0ecc06f2a7c56013d5097c101bc29c9d34a932a1c3b4c685db43db69b5b83a353ec8dd041f5f307ca82525d7b52d03f3f278e4799", 0xb2}, {&(0x7f0000000800)="1f7a0c15496af346f41d76fb00cdf13352c3bd3cb092a83bc7e232f0e0e3d3638bc5918111b1c78a4440c9e5fd2974413582584705e1c5708af708ad1fd4326f89afbcda631ea58dbd41747e1f09e0628f335600c333390ca1044c889c3b8f93420fedcce883fb4d0f5091be002edd5205ba9568214a4165fd55aca0e89d3baaa96d5d8a0661db9e2b31206cbc64547525c69bb19392864c09f3f371ff8122221617", 0xa2}, {&(0x7f00000008c0)="b6863721d91a9164c5f81fc8834e1e0c9bf3725acdcc0bc13f7ca1285c7415562c4b6e9a7308ef2924440d9f84f383", 0x2f}], 0x6, 0x0, 0x0, 0x4004010}, 0x8000) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x4, @empty, 0x4}, 0x4d) 13m53.104792511s ago: executing program 5 (id=238): syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a25dd5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x40002}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r2, 0x0, 0x0, 0x4048044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sendmmsg$inet_sctp(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0xb, @local}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000002c0)="1db41b80e259f26f5aaf68a6182d0aa68f462fd2f158af55a0eb76144736adf4f5523b42eda5fed486a0acc0dc3eccbe1926b41ee4757aaa2b06ed76512ac54960bbf54290e5190ef3626b1e8ade9c552a47b6639188d4186b27ce8f4f1160f7b2f04708da7fa30da9f3faee48d22e88173f204e384d14235204803cd2615bf93282be347bb838552e1e2af3b1b3b3fabca7dbb1c8aa49c1c462336381cd6fd4fbb44db15d063663101d2ebc6183923d5920e10e2311220944de454bf2e821", 0xbf}, {&(0x7f0000000380)="ce570f96a517fe4f09839e4788cdda7cc0d2dd14befbc3e4f203d8a65a6cace6647db71775e59c4895e60173383d86c4c301039ef2cb28562f8768917e6c404fd4a3f9441af7fdc03e921a901b8982694b443c", 0x53}, {&(0x7f0000000400)="6de1f12738fd94234c88d7df2e97899994c6304f073c72bc549c7c4f6f79fdfef0f53981e54e7c909387d9d677641905f0c936c9e373998633a8660c32682c476dc4f3801424b844902009e8b5cb7a5e61c8050cc0186ad4861d6c677d4788699a7f02b4", 0x64}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x8080) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x5c975000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) 13m51.800667914s ago: executing program 5 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x1000}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m50.843353813s ago: executing program 5 (id=242): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)=ANY=[]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 13m35.51234931s ago: executing program 33 (id=242): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)=ANY=[]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 23.6257488s ago: executing program 6 (id=2990): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4050000) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800) syz_open_dev$evdev(0x0, 0xff, 0x0) ppoll(&(0x7f0000008040)=[{0xffffffffffffffff, 0x90}], 0x1, 0x0, 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f00000002c0)=""/167, &(0x7f0000000380)=0xa7) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040) 20.229952886s ago: executing program 6 (id=3002): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) r1 = fsopen(&(0x7f00000002c0)='gfs2\x00', 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r1) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x50, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) 19.519786822s ago: executing program 6 (id=3007): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) r1 = io_uring_setup(0x4a86, &(0x7f0000000240)={0x0, 0x51fd, 0x400, 0x3, 0x112}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x1000, r4}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000e40)={0x0, 0x0}) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000100)={@loopback, 0x49, r11}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003880), r9) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003900)={0x1c, r12, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xcb8450c67063538}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040090) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r13 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2800c2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r13, 0x80304d65, &(0x7f0000000100)) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000140)=0x10) 18.483926886s ago: executing program 6 (id=3010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r5, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000025bd7000fbdbdf25093b1486d03d4264b32c5d4b19de5fbb607e"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x20, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x20}}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f00000003c0)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffff800, 0x7, 0xffffffffffffffff, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x3a) 17.584424671s ago: executing program 6 (id=3013): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x8c, 0x400180) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbdf2512000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x7, &(0x7f0000000280)={0xc, 0x6, 0x4}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0xc0085111, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x100000000000000, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000340), 0x4) 13.655157627s ago: executing program 6 (id=3026): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000001b80)={0x0, &(0x7f0000000b80)="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", 0x1000}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000400)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x3, 0x7, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=bind=satic:,']) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000000a40)={0x0, &(0x7f0000000080), 0x40}) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000001b80)={0x0, &(0x7f0000000b80)="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", 0x1000}) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000400)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x3, 0x7, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=bind=satic:,']) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000000a40)={0x0, &(0x7f0000000080), 0x40}) (async) 10.626412878s ago: executing program 3 (id=3033): write(0xffffffffffffffff, &(0x7f00000000c0)="0f46f6e1f92d05b8fa9cbd3fbbd8df4c06955735cb181f02f427cbc238997d8a9d4dfd3bcb47bfb4969339877061b6cfddd20ddc574e65ce503dc05bb49d13a5b85ef6f2fbe7372b1eca2ed5a7e4df36d31e1e847b5d8666bea50f5cac1f07c76d3837034800344abb3d40a714b97ca62ab79c8aaf95701b6ebdc53985d4a30296e3578ee287b3987422ddb783a1fd33e630e39377ad1cc6d8fb6f", 0x9b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 10.091767139s ago: executing program 3 (id=3037): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 8.551592956s ago: executing program 3 (id=3040): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="0173ab1ef4a2a694985c8291d9d8"], 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000300)={@broadcast, @local, @void, {@arp={0x8808, @generic={0x200, 0x890d, 0x6, 0x0, 0x2, @remote, "", @multicast}}}}, 0x0) 8.455265663s ago: executing program 4 (id=3041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000306010100000000000000000200000105000100070000000900020073797a30000000000900020073"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 8.327946746s ago: executing program 1 (id=3042): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x123581, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1f7) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000000d40)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @ldst={0x2, 0x2, 0x2, 0x3, 0xb, 0xc, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ldst={0x1, 0x1, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x8, 0x4, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25791, r11}, 0x94) 8.119643585s ago: executing program 4 (id=3043): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904"], 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) listen(r3, 0x5) listen(r3, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r7, 0x0, 0x0) 7.223930104s ago: executing program 1 (id=3044): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x110, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r2, 0x400455c8, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xc0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x2, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 6.04532053s ago: executing program 2 (id=3048): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x9) connect(r1, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) write$nbd(r1, 0x0, 0x14) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x200, 0x1, {}, {0x0, 0xc}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x8) write$P9_RLERRORu(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$tcp_congestion(r5, &(0x7f0000000100)='illinois\x00', 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000002140)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000040)=0x2) 5.7081347s ago: executing program 3 (id=3049): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 5.707553851s ago: executing program 4 (id=3050): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="050000000000000000002500000008000300", @ANYRES32=r3, @ANYBLOB="080026006c090000080026008a090000050019010c0000000800a100f7ffffff0a00340001010101010100000a0034000202020202020000"], 0x54}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000005c1d650ed6b734352a958362ccc4447d0fac36a9f8d9687de3d854b14dc2493d2f218819d6fd6ad47776741d3ecac9bc8496af3d095ce4dc19cba4e", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="04003400"], 0x20}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x8d, &(0x7f00000000c0)=[{0xcf84, 0x7, 0xa9, 0x1}, {0xa247, 0x2, 0x6, 0x2}]}) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00') r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi3\x00', 0x40441, 0x0) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f00000005c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4.654994466s ago: executing program 2 (id=3051): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80202, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) r4 = dup2(r2, r3) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb08004504003000000000fb019078ac1e0001ac1414aa03009078030100004500fffc00010000000100087f000001ac1414bb2098861d2d999af17dd2c13296373b8bdac3eee58f0d31d6f3e3be2263190547458667ac5b88505ee2ed860b0e57fb509b5d98c1e7300882c20d355e7b8e47cc74455d"], 0x0) r6 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@deltfilter={0x4dc, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10, 0xfff2}, {0xffe1, 0xc}, {0xd, 0xfffc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x48c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_POLICE={0x450, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000000, 0x7, 0xda, 0x0, 0x4, 0x705, 0xc, 0x40100, 0x200, 0x7eab5121, 0x0, 0x0, 0x5, 0x2, 0x400, 0x65fd, 0x527a, 0x39fb9ba9, 0x10, 0x1, 0xa, 0x3ff, 0x3, 0x9, 0xfffffff7, 0x10, 0x2, 0xffffffff, 0x3, 0x0, 0x34ad6ca5, 0x8b, 0x0, 0x9, 0xfffffc01, 0x3, 0x8, 0x0, 0x401, 0x3ba7, 0x1, 0x1, 0x10, 0x79d2, 0xfffffffd, 0x7, 0xa5, 0x2, 0xc5c6, 0x2, 0x2, 0x2, 0x1, 0x1, 0x78a1, 0x4, 0x6, 0x7, 0x0, 0x0, 0x200, 0x3, 0x8, 0x0, 0x7, 0x8001, 0x6, 0x6, 0x8, 0x1ff, 0x80, 0x2, 0x41, 0x6, 0xfffffffa, 0x2, 0x8, 0x1, 0x57, 0xffffdebb, 0x40, 0x82, 0x52, 0x7fff, 0x3, 0xffff31db, 0x7, 0x1, 0xfffffffd, 0x81c1, 0x4, 0xfff, 0x2, 0x6, 0x44c, 0xb, 0x8001, 0x0, 0x1, 0x7fffffff, 0x5, 0x70a, 0x6b3, 0x32b, 0xffff, 0x7f, 0x5, 0x9, 0x81, 0x4, 0x4, 0x8, 0x7, 0x4, 0x3, 0x8001, 0xfffffffe, 0xfffffffb, 0x5, 0x100, 0x4, 0x4, 0x5, 0x5, 0x8, 0xfffffffc, 0x10, 0xfffffffd, 0x8, 0x6, 0x4, 0x60, 0x2, 0x5, 0x9, 0x53584154, 0x4, 0x49c, 0x9, 0x5, 0xfa, 0x75b4, 0x3, 0xf, 0xfffffff8, 0x2, 0x3, 0x39b, 0x5, 0x200, 0x7, 0x42, 0x7fff, 0x80000000, 0x9, 0xffff, 0x7, 0x5, 0x9, 0x1, 0x3, 0x9, 0xfff, 0x1000, 0x80000000, 0x8, 0x9, 0x0, 0x3, 0x80, 0x2d, 0x2, 0x0, 0x82, 0x4, 0x7, 0x8000, 0x6, 0x7, 0x2, 0x2, 0xc81, 0x8, 0x7f, 0x93, 0x6, 0x7, 0x3, 0x3, 0x9, 0x5, 0xb7, 0x1ff, 0x8a4, 0x5, 0x7, 0xb73c, 0x0, 0xa2f, 0x5, 0x80000001, 0x9b, 0x1, 0x1ff, 0x4, 0x2, 0x5, 0x1, 0x74, 0x8, 0x8, 0x3, 0x0, 0x9, 0x0, 0x9, 0x8, 0x3f2, 0xde000000, 0x1, 0x3, 0x8000, 0x1, 0x1c0e, 0x6, 0x8, 0x8, 0x8, 0x5, 0xda, 0x4, 0x952, 0x0, 0x0, 0x511, 0x5, 0x9, 0x7, 0x7f, 0x43f4a43c, 0x2, 0xb, 0x1, 0x7, 0x7, 0xc8, 0x2, 0xff, 0x5, 0xfffffff8, 0xeaf, 0x1, 0x5fec, 0xf, 0xd4600000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x18000000, 0x10000000, 0x9, 0x9, 0x4, {0x5, 0x1, 0x7, 0x10, 0x6, 0x9}, {0x4, 0x0, 0x3, 0x1, 0xfff, 0x8}, 0xffffc585, 0x1, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd1a}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x81}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0x7}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e817}, @TCA_FLOW_KEYS={0x8, 0x1, 0x199a5}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0xfa4}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x20005891}, 0x4850) syz_usb_control_io$lan78xx(r6, &(0x7f0000000300)={0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="0006ad000000ad30d1f2c87f3ddf1ab3a2f4d939e904b1c4df2eae4070f75be75b2c3f780fd5516a20a0e5311dea3f6261cd9ee438d46e6775d2654bb7b6a278c3d6db2840f72a4da913e15664bfa1a4e2ea54a8f1202a40c9aa9747c890594c5a0152c0b9b3198dcc069534f1ac75e2cb9c2843a72c735ac697a28980f9f044ee9306dcd3b5834713aa9b774387aab18cc72e6b1eb9f5afe96e7c5b99c958c6c06ec8e7f84f9d3cd568b336bdfbb354"], &(0x7f00000002c0)=ANY=[@ANYBLOB="00030100000000000000"]}, &(0x7f0000000500)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="3716560000004cb07f1005dac87ecdbd3831cde47c7970846cb1d8269b8f8f4219957349b825aa9063a6552a00b04f5bba81a470653ef5ed987005e42cd5627454ea2413a1f0c01962df1a6c3cd4ca60cd56419ccc010030362b8f89acf883483ce3cfdc1571b95a6e5343e3714b1f9f3d60a78d03144bbc40b910e88816e695410400000000000000254b96a54a239df6a790c7bed340c268bfab1967b80f64922f332acf6b79ee1fd1a74a2d49f3dd34fd4f6ae7d803066e4144c5d196b8e1bef1997f"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0xfff}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x8}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "4aa68b2ad451065d4bc038ed2650b3c14ba3691a1b89e9587b38eac2f82c6389391c8f7b13bc43e51ef356ce99be5b"}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x22a1d, 0xffb3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r9, 0x0, &(0x7f0000001700)=@udp}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000280), &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000025300)=""/102392, 0x18ff8) 3.890220206s ago: executing program 3 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000306010100000000000000000200000105000100070000000900020073797a30000000000900020073"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 3.774765052s ago: executing program 4 (id=3053): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x123581, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1f7) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000000d40)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @ldst={0x2, 0x2, 0x2, 0x3, 0xb, 0xc, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ldst={0x1, 0x1, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x8, 0x4, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25791, r11}, 0x94) 3.033573998s ago: executing program 1 (id=3054): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "efc7554deb6d780b05e80f4724852cff"}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001440)={{r0}, {@val={r1}, @max}}) 2.75774527s ago: executing program 1 (id=3055): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x28) mkdirat(r4, 0x0, 0x100) listen(r2, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000007c0)={'macvlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x400004, 0x3b, 0x5, 0x83, 0xd, 0xec, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x9, 0x9, 0x12]}}) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r7 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101840, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.756614219s ago: executing program 4 (id=3056): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100"], 0x8, 0x0) msgctl$IPC_RMID(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019640)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x20048811}, 0x4) 2.624206234s ago: executing program 2 (id=3057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xe8, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x50) 2.48056312s ago: executing program 2 (id=3058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.768667551s ago: executing program 2 (id=3059): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000340)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x5d, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef2a70f793503000000b8b242714e0f23d035100000090f23f8b8908a00000f23d00f21f835200000020f23f80f01c4c16a5532b805000000b90e0000000f8201d9d98004101fcc0fc71800800000ba000000000f300f801b14032d", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x4000800) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r12, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0500000000d7daeef9e87f000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="03000000020000000400"/28], 0x50) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="950000000000000095000000190000001811000058d20bda17b34ae86d9255f76c29172be0b71f7bceade9b37bfcbbe793c0edbbb0b1e14565fe0760e987", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000005000000000000000900000018190000", @ANYRES32, @ANYBLOB="00000000000000001800000004000000252353a5f7c9fd6b8a23a25a", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x48, &(0x7f00000005c0)=""/72, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0xe, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r10, r11, r12, r13, r14], 0x0, 0x10, 0xb}, 0x94) accept4(r7, &(0x7f0000000380)=@l2, &(0x7f0000000240)=0x80, 0x80000) 1.698779416s ago: executing program 1 (id=3060): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0xab9f, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 1.634469847s ago: executing program 4 (id=3061): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x2004c040) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000010c0)=0x0) syz_open_procfs(r0, &(0x7f0000001100)='net/rt_cache\x00') sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x80800) sysfs$2(0x2, 0x817fff, 0x0) 770.928143ms ago: executing program 3 (id=3062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001901000000000000000000001c150000fe00000100001000"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) syz_open_dev$MSR(&(0x7f00000000c0), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x4000, 0x8) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='65536', 0x5) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x804c}, 0x20004800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write(r4, &(0x7f0000000580)='1:0', 0x3) r12 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r12, 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r13, &(0x7f0000000a40)='active', 0x6) 220.362745ms ago: executing program 2 (id=3063): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0x4000, 0x17, &(0x7f00000001c0)=""/23}, {0xd000, 0x3d, &(0x7f0000000340)=""/61}, {0x1ff8, 0x56, &(0x7f0000000380)=""/86}, {0x70000, 0x35, &(0x7f0000000440)=""/53}, {0x58000, 0x24, &(0x7f00000004c0)=""/36}, {0x3ff8, 0x9b, &(0x7f0000000600)=""/155}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000906050000000000000000000a00000005000100070000000900020073797a30000000001c000780180001805400024000000000000000000000000000000000be16300a5d4a6054ea79489fb48d08f4646ea4"], 0x44}}, 0x0) 0s ago: executing program 1 (id=3064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0) kernel console output (not intermixed with test programs): 7751][T15056] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2527'. [ 886.750001][T15057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.828052][T15061] FAULT_INJECTION: forcing a failure. [ 886.828052][T15061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.828088][T15061] CPU: 1 UID: 0 PID: 15061 Comm: syz.2.2530 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.828116][T15061] Tainted: [L]=SOFTLOCKUP [ 886.828123][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.828136][T15061] Call Trace: [ 886.828143][T15061] [ 886.828151][T15061] dump_stack_lvl+0x100/0x190 [ 886.828186][T15061] should_fail_ex.cold+0x5/0xa [ 886.828214][T15061] _copy_from_iter+0x1f4/0x1690 [ 886.828244][T15061] ? __asan_memset+0x23/0x50 [ 886.828266][T15061] ? __pfx__copy_from_iter+0x10/0x10 [ 886.828290][T15061] ? __pfx___alloc_skb+0x10/0x10 [ 886.828315][T15061] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 886.828340][T15061] ? sock_has_perm+0x25a/0x2f0 [ 886.828361][T15061] ? __pfx_sock_has_perm+0x10/0x10 [ 886.828388][T15061] netlink_sendmsg+0x808/0xda0 [ 886.828419][T15061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.828454][T15061] ? selinux_socket_sendmsg+0x198/0x2f0 [ 886.828483][T15061] ____sys_sendmsg+0xa4d/0xbe0 [ 886.828503][T15061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.828530][T15061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.828558][T15061] ? lock_acquire+0x1d1/0x380 [ 886.828581][T15061] ? get_pid_task+0x2a/0x250 [ 886.828610][T15061] ___sys_sendmsg+0x190/0x1e0 [ 886.828633][T15061] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.828656][T15061] ? get_pid_task+0x106/0x250 [ 886.828692][T15061] ? find_held_lock+0x2b/0x80 [ 886.828735][T15061] __sys_sendmsg+0x160/0x210 [ 886.828763][T15061] ? __pfx___sys_sendmsg+0x10/0x10 [ 886.828806][T15061] do_syscall_64+0x123/0x790 [ 886.828829][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.828850][T15061] RIP: 0033:0x7f09bdd9e159 [ 886.828865][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.828883][T15061] RSP: 002b:00007f09bbff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.828903][T15061] RAX: ffffffffffffffda RBX: 00007f09be025fa0 RCX: 00007f09bdd9e159 [ 886.828917][T15061] RDX: 0000000020000004 RSI: 00002000000007c0 RDI: 0000000000000004 [ 886.828929][T15061] RBP: 00007f09bbff6090 R08: 0000000000000000 R09: 0000000000000000 [ 886.828941][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.828953][T15061] R13: 00007f09be026038 R14: 00007f09be025fa0 R15: 00007fff5170b238 [ 886.828981][T15061] [ 886.956699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.190993][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'. [ 887.192134][T15063] ip_tables: iptables: counters copy to user failed while replacing table [ 887.216585][T15063] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2531'. [ 887.371556][ T31] audit: type=1400 audit(2000000230.859:1908): avc: denied { map } for pid=15064 comm="syz.2.2532" path="socket:[49600]" dev="sockfs" ino=49600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 887.371610][ T31] audit: type=1400 audit(2000000230.859:1909): avc: denied { read } for pid=15064 comm="syz.2.2532" path="socket:[49600]" dev="sockfs" ino=49600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 887.582750][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 1028 jiffies old. [ 888.063843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.300650][T13573] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 888.330027][ T31] audit: type=1400 audit(2000000231.747:1910): avc: denied { map } for pid=15082 comm="syz.2.2536" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 888.330302][ T31] audit: type=1400 audit(2000000231.747:1911): avc: denied { execute } for pid=15082 comm="syz.2.2536" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 888.410110][T15068] bridge0: port 1(syz_tun) entered disabled state [ 888.468583][T13573] usb 4-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 888.480134][T13573] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 888.498110][T13573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.498136][T13573] usb 4-1: Product: syz [ 888.498150][T13573] usb 4-1: Manufacturer: syz [ 888.498164][T13573] usb 4-1: SerialNumber: syz [ 888.528598][T13573] r8152-cfgselector 4-1: Unknown version 0x0000 [ 889.175660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.056591][T15068] tipc: Resetting bearer [ 890.081787][T13559] syz2: Port: 1 Link DOWN [ 890.093715][T15106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.095199][ T3662] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.095229][ T3662] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 33701 - 0 [ 890.095257][ T3662] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.095279][ T3662] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 33701 - 0 [ 890.095310][ T3662] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.095334][ T3662] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 33701 - 0 [ 890.095366][ T3662] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.095389][ T3662] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 33701 - 0 [ 890.128124][T15106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.214862][T15109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.287485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.938054][T13573] r8152-cfgselector 4-1: Unknown version 0x0000 [ 890.952525][T13573] r8152-cfgselector 4-1: USB disconnect, device number 97 [ 891.017027][T15117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.023350][T15117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.399296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.511119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.842693][T15139] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2553'. [ 892.842956][T15140] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2553'. [ 893.131349][T13552] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 893.308044][T13552] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 893.309947][T13552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.326267][T13552] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 098 [ 893.622940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.652148][T15158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 893.652413][T15158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 893.696778][T15158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 893.696871][T15158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 893.838288][T13552] (null): failure reading functionality [ 893.839597][T13552] i2c i2c-1: failure reading functionality [ 893.842537][T13552] i2c i2c-1: connected i2c-tiny-usb device [ 893.887612][T13552] usb 4-1: USB disconnect, device number 98 [ 894.194289][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2562'. [ 894.194365][T15173] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 894.546614][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.548796][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.734823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.880494][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.880905][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.899334][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.899747][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.846598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.847155][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 895.847188][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 895.861953][T10648] Bluetooth: hci3: command 0x0406 tx timeout [ 896.958417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.083791][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'. [ 897.083974][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'. [ 897.258545][T15229] netlink: 'syz.4.2581': attribute type 1 has an invalid length. [ 897.341057][T15229] bond1: entered promiscuous mode [ 897.365146][T15229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 897.374293][T15237] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 898.046713][T15236] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 898.046740][T15236] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 898.046757][T15236] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 898.070250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.073195][T10648] Bluetooth: hci3: command 0x0406 tx timeout [ 898.380972][T15253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.381353][T15253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.406712][T15229] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 898.406741][T15229] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 898.451007][T15255] F2FS-fs: Conflicting test_dummy_encryption options [ 898.569962][T15251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2585'. [ 898.583052][T15251] ipvlan0: entered promiscuous mode [ 898.592966][T15251] ipvlan0: left promiscuous mode [ 899.182065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.153730][T15277] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 900.161889][T15277] syzkaller1: group set to 0 [ 900.293893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.582548][T13558] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 900.764854][T13558] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a8.b8 [ 900.765725][T13558] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 900.765741][T13558] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 900.767541][T13558] usb 4-1: New USB device strings: Mfr=8, Product=69, SerialNumber=3 [ 900.767558][T13558] usb 4-1: Product: syz [ 900.767567][T13558] usb 4-1: Manufacturer: syz [ 900.767577][T13558] usb 4-1: SerialNumber: syz [ 900.773173][T13558] usb 4-1: config 0 descriptor?? [ 901.035937][T13558] usb 4-1: USB disconnect, device number 99 [ 901.405743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.311273][T15299] ip_tables: iptables: counters copy to user failed while replacing table [ 902.517526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.786180][T15296] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2601'. [ 902.793589][T15304] overlayfs: missing 'workdir' [ 903.629421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.201917][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 904.225097][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 904.227084][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 904.242565][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 904.252856][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 904.741219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.810595][T13573] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 904.967448][T13573] usb 4-1: Using ep0 maxpacket: 32 [ 904.968219][T13573] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 904.969152][T13573] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 904.969195][T13573] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 904.969222][T13573] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.969250][T13573] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 904.971139][T13573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.971164][T13573] usb 4-1: Product: syz [ 904.971179][T13573] usb 4-1: Manufacturer: syz [ 904.971194][T13573] usb 4-1: SerialNumber: syz [ 904.994929][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 905.001927][T13573] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input46 [ 905.309806][T13573] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 905.309829][T13573] (id 0x00) [ 905.375521][T15349] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2616'. [ 905.439630][T13573] rc_core: IR keymap rc-imon-pad not found [ 905.439649][T13573] Registered IR keymap rc-empty [ 905.439722][T13573] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 905.439741][T13573] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 905.526083][T13573] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 905.562830][T13573] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input47 [ 905.576451][T13573] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:100> initialized [ 905.853001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.910839][T15359] ip_tables: iptables: counters copy to user failed while replacing table [ 905.912403][T15359] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2619'. [ 906.176267][T15370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.176704][T15370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.222080][T15373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.230503][T15373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.616834][ T5614] Bluetooth: hci5: command tx timeout [ 906.964858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.990649][T15386] imon:send_packet: task interrupted [ 906.990669][T15386] imon:send_packet: packet tx failed (-512) [ 906.990707][T15386] imon:vfd_write: send packet #0 failed [ 906.991156][T15386] imon:send_packet: task interrupted [ 906.991169][T15386] imon:send_packet: packet tx failed (-512) [ 906.992002][T15386] imon:vfd_write: send packet #0 failed [ 906.992337][T15386] imon:send_packet: task interrupted [ 906.992349][T15386] imon:send_packet: packet tx failed (-512) [ 906.992381][T15386] imon:vfd_write: send packet #0 failed [ 907.069090][T15386] imon:send_packet: task interrupted [ 907.069110][T15386] imon:send_packet: packet tx failed (-512) [ 907.069152][T15386] imon:vfd_write: send packet #0 failed [ 907.069508][T15386] imon:send_packet: task interrupted [ 907.069537][T15386] imon:send_packet: packet tx failed (-512) [ 907.069570][T15386] imon:vfd_write: send packet #0 failed [ 907.069873][T15386] imon:send_packet: task interrupted [ 907.069884][T15386] imon:send_packet: packet tx failed (-512) [ 907.069910][T15386] imon:vfd_write: send packet #0 failed [ 907.070289][T15386] imon:send_packet: task interrupted [ 907.070302][T15386] imon:send_packet: packet tx failed (-512) [ 907.070341][T15386] imon:vfd_write: send packet #0 failed [ 907.070643][T15386] imon:send_packet: task interrupted [ 907.070655][T15386] imon:send_packet: packet tx failed (-512) [ 907.070687][T15386] imon:vfd_write: send packet #0 failed [ 907.070994][T15386] imon:send_packet: task interrupted [ 907.071005][T15386] imon:send_packet: packet tx failed (-512) [ 907.071036][T15386] imon:vfd_write: send packet #0 failed [ 907.071457][T15386] imon:send_packet: task interrupted [ 907.071470][T15386] imon:send_packet: packet tx failed (-512) [ 907.071517][T15386] imon:vfd_write: send packet #0 failed [ 907.421265][T15321] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.421546][T15321] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.421975][T15321] bridge_slave_0: entered allmulticast mode [ 907.423704][T15321] bridge_slave_0: entered promiscuous mode [ 907.430523][T15321] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.430664][T15321] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.430794][T15321] bridge_slave_1: entered allmulticast mode [ 907.439413][T15321] bridge_slave_1: entered promiscuous mode [ 907.508085][T15321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.513213][T15321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.554742][T15321] team0: Port device team_slave_0 added [ 907.557766][T15321] team0: Port device team_slave_1 added [ 907.597698][T15321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.597717][T15321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.597740][T15321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.599965][T15321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.599981][T15321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.600004][T15321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.681624][T15321] hsr_slave_0: entered promiscuous mode [ 907.682633][T15321] hsr_slave_1: entered promiscuous mode [ 908.076650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.249390][T13573] usb 4-1: USB disconnect, device number 100 [ 908.422725][T15321] team0: Port device netdevsim1 removed [ 908.565091][T15404] ip_tables: iptables: counters copy to user failed while replacing table [ 908.568087][T15404] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2631'. [ 908.630995][T15406] FAULT_INJECTION: forcing a failure. [ 908.630995][T15406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.631024][T15406] CPU: 1 UID: 0 PID: 15406 Comm: syz.3.2630 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.631046][T15406] Tainted: [L]=SOFTLOCKUP [ 908.631051][T15406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 908.631059][T15406] Call Trace: [ 908.631064][T15406] [ 908.631070][T15406] dump_stack_lvl+0x100/0x190 [ 908.631093][T15406] should_fail_ex.cold+0x5/0xa [ 908.631113][T15406] _copy_to_iter+0x5a4/0x1720 [ 908.631132][T15406] ? __pfx__copy_to_iter+0x10/0x10 [ 908.631146][T15406] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 908.631171][T15406] ? m_stop+0x333/0x530 [ 908.631191][T15406] seq_read_iter+0xdab/0x1270 [ 908.631214][T15406] seq_read+0x344/0x4d0 [ 908.631229][T15406] ? __pfx_seq_read+0x10/0x10 [ 908.631244][T15406] ? lock_acquire+0x1d1/0x380 [ 908.631260][T15406] ? avc_policy_seqno+0x9/0x20 [ 908.631281][T15406] ? selinux_file_permission+0x8f/0x6d0 [ 908.631308][T15406] ? rw_verify_area+0xce/0x6d0 [ 908.631320][T15406] ? __pfx_seq_read+0x10/0x10 [ 908.631336][T15406] vfs_read+0x1e4/0xb40 [ 908.631358][T15406] ? lock_acquire+0x1d1/0x380 [ 908.631380][T15406] ? __fget_files+0x34/0x3d0 [ 908.631407][T15406] ? __pfx_vfs_read+0x10/0x10 [ 908.631423][T15406] ? find_held_lock+0x2b/0x80 [ 908.631440][T15406] ? __fget_files+0x215/0x3d0 [ 908.631458][T15406] ? __fget_files+0x21f/0x3d0 [ 908.631479][T15406] ksys_read+0x12a/0x250 [ 908.631492][T15406] ? __pfx_ksys_read+0x10/0x10 [ 908.631510][T15406] do_syscall_64+0x123/0x790 [ 908.631524][T15406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.631537][T15406] RIP: 0033:0x7fb06079e159 [ 908.631549][T15406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.631560][T15406] RSP: 002b:00007fb0616d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.631573][T15406] RAX: ffffffffffffffda RBX: 00007fb060a25fa0 RCX: 00007fb06079e159 [ 908.631581][T15406] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 908.631589][T15406] RBP: 00007fb06083506b R08: 0000000000000000 R09: 0000000000000000 [ 908.631597][T15406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.631604][T15406] R13: 00007fb060a26038 R14: 00007fb060a25fa0 R15: 00007fff10d99788 [ 908.631622][T15406] [ 908.659380][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2632'. [ 908.774972][T15408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 908.855236][ T5614] Bluetooth: hci5: command tx timeout [ 909.085794][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2635'. [ 909.089398][T15418] ip_tables: iptables: counters copy to user failed while replacing table [ 909.103916][T15418] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2635'. [ 909.174287][T15420] ip_tables: iptables: counters copy to user failed while replacing table [ 909.188684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.200747][T15321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 909.217865][T15321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.218602][T15321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 909.222856][T15321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.223685][T15321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 909.256193][T15321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.257212][T15321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 909.259195][T15321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.297688][T15421] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2636'. [ 909.342643][T15321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.357512][T15321] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.372497][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.372568][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.379022][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.379107][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.472478][T15321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 909.472514][T15321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.556417][ T31] audit: type=1400 audit(2000000251.606:1912): avc: denied { bind } for pid=15428 comm="syz.2.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 909.708613][T15434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.708840][T15434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.725964][T15434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.729815][T15434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.732348][T15438] ip_tables: iptables: counters copy to user failed while replacing table [ 909.871450][T15445] ip_tables: iptables: counters copy to user failed while replacing table [ 909.882272][T15445] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2641'. [ 910.137726][T15457] xt_TCPMSS: Only works on TCP SYN packets [ 910.300595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.070604][ T5614] Bluetooth: hci5: command tx timeout [ 911.092990][T15485] ip_tables: iptables: counters copy to user failed while replacing table [ 911.117473][T15485] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2651'. [ 911.412391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.526271][T15321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.787040][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.787437][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.060510][T15321] veth0_vlan: entered promiscuous mode [ 912.080367][T15321] veth1_vlan: entered promiscuous mode [ 912.142033][T15321] veth0_macvtap: entered promiscuous mode [ 912.161650][T15321] veth1_macvtap: entered promiscuous mode [ 912.202126][T15321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.224053][T15321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.243930][T15511] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 912.333304][ T3662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.334090][ T3662] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.412847][ T3662] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.413117][ T3662] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.523959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.626607][T13545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.626624][T13545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.849387][ T3701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.849409][ T3701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.138513][ T31] audit: type=1800 audit(2000000254.955:1913): pid=15518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2659" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 913.220254][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.293762][ T5614] Bluetooth: hci5: command tx timeout [ 913.375595][T15530] ip_tables: iptables: counters copy to user failed while replacing table [ 913.377275][T15530] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2664'. [ 913.699977][ T5697] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 913.829572][T15543] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5616] was attempted by ""[15543] [ 913.840828][T15543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.903420][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 913.906892][ T5697] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 914.205516][ T5697] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 914.205543][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.205562][ T5697] usb 5-1: config 0 has no interface number 0 [ 914.205597][ T5697] usb 5-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 914.205623][ T5697] usb 5-1: config 0 interface 196 has no altsetting 0 [ 914.207441][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.207468][ T5697] usb 5-1: Product: syz [ 914.207484][ T5697] usb 5-1: Manufacturer: syz [ 914.207498][ T5697] usb 5-1: SerialNumber: syz [ 914.259818][ T5697] usb 5-1: config 0 descriptor?? [ 914.292310][ T5697] ipheth 5-1:0.196: Unable to find endpoints [ 914.624800][T13576] usb 5-1: USB disconnect, device number 15 [ 914.747592][ C1] net_ratelimit: 1 callbacks suppressed [ 914.747616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.008071][T15551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.012251][T15551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.859414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.119029][T13574] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 916.214129][T15563] sctp: [Deprecated]: syz.1.2675 (pid 15563) Use of int in maxseg socket option. [ 916.214129][T15563] Use struct sctp_assoc_value instead [ 916.270575][T15567] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5603] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15567] [ 916.276386][T13574] usb 5-1: Using ep0 maxpacket: 32 [ 916.277147][T13574] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 916.278926][T13574] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 916.278969][T13574] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 916.278996][T13574] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.279022][T13574] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 916.280928][T13574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.280951][T13574] usb 5-1: Product: syz [ 916.280965][T13574] usb 5-1: Manufacturer: syz [ 916.280980][T13574] usb 5-1: SerialNumber: syz [ 916.328470][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 916.341122][T13574] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input48 [ 916.555220][T13574] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 916.555237][T13574] (id 0x00) [ 916.597173][T15570] xt_MASQUERADE: bad rangesize 20224 [ 916.707505][T13574] rc_core: IR keymap rc-imon-pad not found [ 916.707519][T13574] Registered IR keymap rc-empty [ 916.707562][T13574] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 916.707573][T13574] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 916.780669][T13574] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 916.817413][T13574] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input49 [ 916.833504][T13574] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:16> initialized [ 916.971269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.441335][T15580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.444004][T15580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.543569][T15580] send_packet: 10 callbacks suppressed [ 917.543598][T15580] imon:send_packet: task interrupted [ 917.543605][T15580] send_packet: 11 callbacks suppressed [ 917.543612][T15580] imon:send_packet: packet tx failed (-512) [ 917.543637][T15580] vfd_write: 11 callbacks suppressed [ 917.543644][T15580] imon:vfd_write: send packet #0 failed [ 917.546156][T15580] imon:send_packet: task interrupted [ 917.546168][T15580] imon:send_packet: packet tx failed (-512) [ 917.546203][T15580] imon:vfd_write: send packet #0 failed [ 917.546451][T15580] imon:send_packet: task interrupted [ 917.546465][T15580] imon:send_packet: packet tx failed (-512) [ 917.546500][T15580] imon:vfd_write: send packet #0 failed [ 917.551096][T15580] imon:send_packet: packet tx failed (-32) [ 917.551135][T15580] imon:vfd_write: send packet #0 failed [ 917.661542][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 917.664077][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 917.664240][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 917.667339][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 917.667514][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 918.060582][T15586] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2677'. [ 918.083216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.798453][T15592] netlink: 'syz.3.2683': attribute type 2 has an invalid length. [ 918.798505][T15592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2683'. [ 919.194886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.220130][ T5697] usb 5-1: USB disconnect, device number 16 [ 919.432028][T15599] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 919.532052][T15601] FAULT_INJECTION: forcing a failure. [ 919.532052][T15601] name failslab, interval 1, probability 0, space 0, times 0 [ 919.532087][T15601] CPU: 1 UID: 0 PID: 15601 Comm: syz.2.2685 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.532115][T15601] Tainted: [L]=SOFTLOCKUP [ 919.532122][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 919.532135][T15601] Call Trace: [ 919.532142][T15601] [ 919.532150][T15601] dump_stack_lvl+0x100/0x190 [ 919.532185][T15601] should_fail_ex.cold+0x5/0xa [ 919.532209][T15601] ? __netlink_lookup+0x652/0x900 [ 919.532235][T15601] should_failslab+0xc2/0x120 [ 919.532262][T15601] kmem_cache_alloc_noprof+0x92/0x6a0 [ 919.532287][T15601] ? skb_clone+0x190/0x400 [ 919.532318][T15601] skb_clone+0x190/0x400 [ 919.532344][T15601] netlink_deliver_tap+0xaed/0xcc0 [ 919.532375][T15601] netlink_unicast+0x62b/0x850 [ 919.532403][T15601] ? __pfx_netlink_unicast+0x10/0x10 [ 919.532428][T15601] ? __pfx_sock_has_perm+0x10/0x10 [ 919.532456][T15601] netlink_sendmsg+0x8b0/0xda0 [ 919.532488][T15601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.532516][T15601] ? selinux_socket_sendmsg+0x198/0x2f0 [ 919.532544][T15601] ____sys_sendmsg+0xa4d/0xbe0 [ 919.532563][T15601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.532590][T15601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 919.532617][T15601] ? lock_acquire+0x1d1/0x380 [ 919.532639][T15601] ? get_pid_task+0x2a/0x250 [ 919.532667][T15601] ___sys_sendmsg+0x190/0x1e0 [ 919.532690][T15601] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.532710][T15601] ? get_pid_task+0x106/0x250 [ 919.532746][T15601] ? find_held_lock+0x2b/0x80 [ 919.532791][T15601] __sys_sendmsg+0x160/0x210 [ 919.532817][T15601] ? __pfx___sys_sendmsg+0x10/0x10 [ 919.532870][T15601] do_syscall_64+0x123/0x790 [ 919.532893][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.532914][T15601] RIP: 0033:0x7f09bdd9e159 [ 919.532930][T15601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.532947][T15601] RSP: 002b:00007f09bbfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.532966][T15601] RAX: ffffffffffffffda RBX: 00007f09be026090 RCX: 00007f09bdd9e159 [ 919.532980][T15601] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 919.532992][T15601] RBP: 00007f09bbfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 919.533003][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.533014][T15601] R13: 00007f09be026128 R14: 00007f09be026090 R15: 00007fff5170b238 [ 919.533043][T15601] [ 920.306934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.970252][T15607] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 921.155098][ T31] audit: type=1400 audit(2000000262.457:1914): avc: denied { write } for pid=15611 comm="syz.2.2691" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 921.269120][ T5697] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 921.418580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.438223][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 921.443769][ T5697] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 921.444719][ T5697] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 921.444745][ T5697] usb 5-1: config 179 has no interface number 0 [ 921.444783][ T5697] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 921.444808][ T5697] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 921.444836][ T5697] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 921.444857][ T5697] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 921.444895][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.504283][T13574] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 921.510296][T15599] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 921.653964][T13574] usb 4-1: device descriptor read/64, error -71 [ 921.993669][T15599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.996591][T15599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.122743][ T5697] usb 5-1: USB disconnect, device number 17 [ 922.324138][T13574] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 922.530387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.553129][T13574] usb 4-1: device descriptor read/64, error -71 [ 922.669644][T13574] usb usb4-port1: attempt power cycle [ 923.166469][T13574] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 923.168798][T13573] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 923.193491][T13574] usb 4-1: device descriptor read/8, error -71 [ 923.301095][T13573] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 923.449794][T13574] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 923.493914][T13574] usb 4-1: device descriptor read/8, error -71 [ 923.610428][T13574] usb usb4-port1: unable to enumerate USB device [ 923.642227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.725770][T15629] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 924.754018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.770496][T13574] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 925.865829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.931947][T13574] usb 4-1: Using ep0 maxpacket: 16 [ 926.242430][T15624] kvm: pic: level sensitive irq not supported [ 926.242604][T15624] kvm: pic: non byte read [ 926.250094][T15624] kvm: pic: non byte read [ 926.988337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.756848][T13574] usb 4-1: unable to get BOS descriptor or descriptor too short [ 927.756900][T13574] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 927.756934][T13574] usb 4-1: no configurations [ 927.756946][T13574] usb 4-1: can't read configurations, error -22 [ 927.824005][T15667] fuse: fd is not a fuse device [ 928.076899][T15675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.077307][T15675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.100163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.275368][ T31] audit: type=1400 audit(2000000269.117:1915): avc: denied { connect } for pid=15682 comm="syz.4.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 929.201300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.566601][T15696] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2714'. [ 930.313160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.576514][ T31] audit: type=1400 audit(2000000270.800:1916): avc: denied { execute } for pid=15695 comm="syz.4.2713" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 931.414291][T13574] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 931.424946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.587403][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.608830][T13574] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 931.609881][T13574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.609903][T13574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.609917][T13574] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.609941][T13574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.612349][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.614855][T13574] usb 4-1: config 0 descriptor?? [ 932.013095][T13573] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 932.175516][T13573] usb 5-1: Using ep0 maxpacket: 32 [ 932.180129][T13573] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 932.182660][T13573] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 932.182679][T13573] usb 5-1: config 0 has no interface number 0 [ 932.182701][T13573] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 932.182718][T13573] usb 5-1: config 0 interface 85 has no altsetting 0 [ 932.185017][T13573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.185041][T13573] usb 5-1: Product: syz [ 932.185056][T13573] usb 5-1: Manufacturer: syz [ 932.185071][T13573] usb 5-1: SerialNumber: syz [ 932.199735][T13573] usb 5-1: config 0 descriptor?? [ 932.243227][T15704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.243725][T15704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.257610][T15704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.258122][T15704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.285594][T13574] usbhid 4-1:0.0: can't add hid device: -71 [ 932.285722][T13574] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 932.301168][T13574] usb 4-1: USB disconnect, device number 107 [ 932.536791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.643114][T13573] appletouch 5-1:0.85: Geyser mode initialized. [ 932.652781][T13573] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input51 [ 932.785193][T15726] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2721'. [ 932.865722][T13573] usb 5-1: USB disconnect, device number 18 [ 932.899673][T13573] appletouch 5-1:0.85: input: appletouch disconnected [ 933.648590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.702093][T13574] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 933.841134][T13574] usb 4-1: device descriptor read/64, error -71 [ 934.090288][T15744] fuse: fd is not a fuse device [ 934.097919][T13574] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 934.236702][T13574] usb 4-1: device descriptor read/64, error -71 [ 934.336895][T15747] bridge_slave_0: left allmulticast mode [ 934.336923][T15747] bridge_slave_0: left promiscuous mode [ 934.337043][T15747] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.342507][T15747] bridge_slave_1: left allmulticast mode [ 934.342526][T15747] bridge_slave_1: left promiscuous mode [ 934.342634][T15747] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.356268][T13574] usb usb4-port1: attempt power cycle [ 934.370007][T15747] bond0: (slave bond_slave_0): Releasing backup interface [ 934.380882][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2729'. [ 934.406632][T15747] bond0: (slave bond_slave_1): Releasing backup interface [ 934.425849][T15747] team0: Port device team_slave_0 removed [ 934.440964][ T31] audit: type=1400 audit(2000000274.888:1917): avc: denied { write } for pid=15746 comm="syz.4.2729" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 934.442419][T15749] random: crng reseeded on system resumption [ 934.444899][T15747] team0: Port device team_slave_1 removed [ 934.447301][T15747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.447316][T15747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.484287][T15747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.484311][T15747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.518384][T15747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 934.718039][T13574] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 934.740169][T13574] usb 4-1: device descriptor read/8, error -71 [ 934.760421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.305936][T13574] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 935.328363][T13574] usb 4-1: device descriptor read/8, error -71 [ 935.525024][T13574] usb usb4-port1: unable to enumerate USB device [ 935.882923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.345180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056077c00: rx timeout, send abort [ 936.348157][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056077c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 936.546992][ T31] audit: type=1400 audit(2000000276.843:1918): avc: denied { read } for pid=4955 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 936.547377][ T31] audit: type=1400 audit(2000000276.852:1919): avc: denied { search } for pid=4955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.547929][ T31] audit: type=1400 audit(2000000276.852:1920): avc: denied { write search } for pid=4955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.557248][ T31] audit: type=1400 audit(2000000276.852:1921): avc: denied { add_name } for pid=4955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.557292][ T31] audit: type=1400 audit(2000000276.852:1922): avc: denied { create } for pid=4955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 936.660297][ T31] audit: type=1400 audit(2000000276.937:1923): avc: denied { append open } for pid=4955 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 936.660346][ T31] audit: type=1400 audit(2000000276.937:1924): avc: denied { getattr } for pid=4955 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 936.984056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.134129][T13574] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 937.183151][T15768] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2733'. [ 937.307527][T13574] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 937.310270][T13574] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 937.310312][T13574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.608337][T15764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.608753][T15764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.061125][T15779] fuse: Bad value for 'fd' [ 938.095914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.645166][T15790] fuse: fd is not a fuse device [ 938.683924][T13576] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 938.732818][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 938.848578][T15764] SELinux: failed to load policy [ 938.874892][T13576] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 938.901900][T13576] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.901937][T13576] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 938.901965][T13576] usb 5-1: config 0 interface 0 has no altsetting 0 [ 938.902026][T13576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.959918][T13576] usb 5-1: config 0 descriptor?? [ 939.046993][T13574] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -71 [ 939.118355][T13574] usb 4-1: USB disconnect, device number 112 [ 939.208407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.339852][T15807] smc: removing ib device syz2 [ 939.369188][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.369556][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.434303][T13576] input: HID 12ba:0100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:12BA:0100.0010/input/input52 [ 939.632974][ T31] audit: type=1400 audit(2000000279.734:1925): avc: denied { shutdown } for pid=15781 comm="syz.4.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 939.672325][T13576] sony 0003:12BA:0100.0010: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.4-1/input0 [ 940.030294][T15807] smbdirect: ib_dev[syz2] removed [ 940.040778][T15824] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2746'. [ 940.319534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.370026][T13558] usb 5-1: USB disconnect, device number 19 [ 940.786653][T15829] ip_tables: iptables: counters copy to user failed while replacing table [ 941.107889][T15828] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2747'. [ 941.304375][T15838] xt_MASQUERADE: bad rangesize 20224 [ 941.431358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.541052][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.541481][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.543179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.624094][ T31] audit: type=1400 audit(2000000282.091:1926): avc: denied { watch watch_reads } for pid=15842 comm="syz.2.2752" path="/517" dev="tmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 945.059115][T15871] xt_MASQUERADE: bad rangesize 20224 [ 945.602687][T13576] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 945.762675][T13576] usb 4-1: Using ep0 maxpacket: 8 [ 945.763175][T13576] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 945.764293][T13576] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.764319][T13576] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 945.764337][T13576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.768744][T13576] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 945.768761][T13576] usb 4-1: Product: syz [ 945.768770][T13576] usb 4-1: Manufacturer: syz [ 945.768778][T13576] usb 4-1: SerialNumber: syz [ 945.868971][T13576] usb 4-1: config 0 descriptor?? [ 945.974871][T13576] rc_core: IR keymap rc-imon-rsc not found [ 945.974889][T13576] Registered IR keymap rc-empty [ 945.975937][T13576] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 945.983281][T13576] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 946.162631][T15893] ip_tables: iptables: counters copy to user failed while replacing table [ 946.178057][T15893] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2769'. [ 947.246697][T15905] ip_tables: iptables: counters copy to user failed while replacing table [ 947.576893][T13558] usb 4-1: USB disconnect, device number 113 [ 947.697081][ T5614] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 947.730833][T15912] xt_MASQUERADE: bad rangesize 20224 [ 948.252932][T15932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.253337][T15932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.254802][T15932] netlink: 'syz.2.2777': attribute type 10 has an invalid length. [ 948.572146][T15942] 9p: Bad value for 'rfdno' [ 948.586331][T15946] 9p: Bad value for 'rfdno' [ 948.646568][T15948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2783'. [ 948.893675][ T5614] Bluetooth: hci1: Malformed LE Event: 0x0d [ 949.324447][ T31] audit: type=1400 audit(2000000288.807:1927): avc: denied { map } for pid=15953 comm="syz.3.2785" path="socket:[54288]" dev="sockfs" ino=54288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 949.673852][T13558] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 949.906385][T13576] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 949.919470][T13558] usb 4-1: unable to get BOS descriptor or descriptor too short [ 949.919518][T13558] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice=e1.40 [ 949.928257][T13558] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 949.928284][T13558] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.950312][T13558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.950339][T13558] usb 4-1: Product: syz [ 949.950355][T13558] usb 4-1: Manufacturer: syz [ 949.950370][T13558] usb 4-1: SerialNumber: syz [ 950.069848][T13576] usb 5-1: Using ep0 maxpacket: 8 [ 950.072622][T13576] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 950.076198][T13576] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 950.076312][T13576] usb 5-1: config 0 has no interface number 0 [ 950.076628][T13576] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 950.076705][T13576] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 950.076789][T13576] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 950.076924][T13576] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 950.077049][T13576] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.387958][T13576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.387989][T13576] usb 5-1: Product: syz [ 950.388006][T13576] usb 5-1: Manufacturer: syz [ 950.388022][T13576] usb 5-1: SerialNumber: syz [ 950.431399][T13576] usb 5-1: config 0 descriptor?? [ 950.455898][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 950.455936][T15954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2785'. [ 950.459499][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 950.459535][T15954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2785'. [ 950.796186][T13576] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 950.896493][T15970] SELinux: DCCP has been removed, pid=15970 comm=syz.6.2791 [ 950.911722][T15968] xt_MASQUERADE: bad rangesize 20224 [ 950.940301][T13558] usb 4-1: 0:1 : does not exist [ 950.940369][T13558] usb 4-1: BAAD GENERIC IO: no channels? [ 951.032699][T13559] usb 5-1: USB disconnect, device number 20 [ 951.101214][T13558] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 951.110328][T13558] usb 4-1: USB disconnect, device number 114 [ 951.131129][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.789806][T15981] md: personality for level is not loaded! [ 951.837260][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.837736][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.842094][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.842514][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.170315][ T31] audit: type=1400 audit(2000000292.408:1928): avc: denied { create } for pid=15985 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 953.173955][ T31] audit: type=1400 audit(2000000292.408:1929): avc: denied { write } for pid=15985 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 953.174535][ T31] audit: type=1400 audit(2000000292.408:1930): avc: denied { read } for pid=15985 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 953.291321][T15986] netlink: Invalid conntrack timeout [ 953.291352][T15986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.432164][T15999] xt_MASQUERADE: bad rangesize 20224 [ 953.683664][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 953.907382][T13576] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 953.948393][T16018] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 953.956989][T16018] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 954.047976][T16011] block nbd3: shutting down sockets [ 954.069956][T13576] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 954.070819][T13576] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 954.070836][T13576] usb 5-1: config 0 has no interface number 0 [ 954.070856][T13576] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 954.070871][T13576] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 954.070886][T13576] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 954.072164][T13576] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 954.072191][T13576] usb 5-1: Product: syz [ 954.072207][T13576] usb 5-1: SerialNumber: syz [ 954.074093][T13576] usb 5-1: config 0 descriptor?? [ 954.077857][T13576] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 954.096986][T13576] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input54 [ 954.522761][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 955.026745][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 955.026961][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 955.027152][T13576] usb 5-1: USB disconnect, device number 21 [ 955.027162][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 955.027185][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 955.092992][T13576] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 955.187626][T13559] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 955.308237][T16046] xt_MASQUERADE: bad rangesize 20224 [ 955.361501][T13559] usb 4-1: Using ep0 maxpacket: 8 [ 955.362489][T13559] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 955.363447][T13559] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 955.363494][T13559] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 955.363517][T13559] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 955.363543][T13559] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 955.363565][T13559] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.363603][T13559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.380111][T13559] usbtmc 4-1:16.0: bulk endpoints not found [ 956.305046][T16063] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 957.067447][T16076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.067856][T16076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.072674][T13576] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 957.086215][T16076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.088521][T16076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.150863][T16078] xt_MASQUERADE: bad rangesize 20224 [ 957.318230][T13576] usb 5-1: Using ep0 maxpacket: 32 [ 957.319165][T13576] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 957.320095][T13576] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 957.320136][T13576] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 957.320163][T13576] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.320191][T13576] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 957.322036][T13576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.322060][T13576] usb 5-1: Product: syz [ 957.322076][T13576] usb 5-1: Manufacturer: syz [ 957.322092][T13576] usb 5-1: SerialNumber: syz [ 957.335501][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 957.340613][T13576] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input55 [ 957.873525][T13576] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 957.873548][T13576] (id 0x00) [ 957.928952][T13576] rc_core: IR keymap rc-imon-pad not found [ 957.928974][T13576] Registered IR keymap rc-empty [ 957.929563][T13576] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 957.929575][T13576] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 957.949438][T13576] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 957.952116][T13576] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input56 [ 957.958492][T13576] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:22> initialized [ 958.080005][T13559] usb 4-1: USB disconnect, device number 115 [ 958.230585][T13576] libceph: connect (1)[c::]:6789 error -101 [ 958.231824][T13576] libceph: mon0 (1)[c::]:6789 connect error [ 958.272986][T16093] ceph: No mds server is up or the cluster is laggy [ 958.441504][ T31] audit: type=1400 audit(2000000297.338:1931): avc: denied { mount } for pid=16101 comm="syz.6.2836" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 958.517804][T16108] ip_tables: iptables: counters copy to user failed while replacing table [ 958.576046][T16109] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2838'. [ 958.611199][T13559] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 958.644335][T16086] imon:send_packet: task interrupted [ 958.644350][T16086] imon:send_packet: packet tx failed (-512) [ 958.644373][T16086] imon:vfd_write: send packet #0 failed [ 958.644657][T16086] imon:send_packet: task interrupted [ 958.644666][T16086] imon:send_packet: packet tx failed (-512) [ 958.644685][T16086] imon:vfd_write: send packet #0 failed [ 958.644954][T16086] imon:send_packet: task interrupted [ 958.644961][T16086] imon:send_packet: packet tx failed (-512) [ 958.644982][T16086] imon:vfd_write: send packet #0 failed [ 958.645294][T16086] imon:send_packet: task interrupted [ 958.645306][T16086] imon:send_packet: packet tx failed (-512) [ 958.645365][T16086] imon:vfd_write: send packet #0 failed [ 958.645798][T16086] imon:send_packet: task interrupted [ 958.645811][T16086] imon:send_packet: packet tx failed (-512) [ 958.645846][T16086] imon:vfd_write: send packet #0 failed [ 958.646140][T16086] imon:send_packet: task interrupted [ 958.646151][T16086] imon:send_packet: packet tx failed (-512) [ 958.646184][T16086] imon:vfd_write: send packet #0 failed [ 958.646485][T16086] imon:send_packet: task interrupted [ 958.646498][T16086] imon:send_packet: packet tx failed (-512) [ 958.646530][T16086] imon:vfd_write: send packet #0 failed [ 958.646882][T16086] imon:send_packet: task interrupted [ 958.646895][T16086] imon:send_packet: packet tx failed (-512) [ 958.646928][T16086] imon:vfd_write: send packet #0 failed [ 958.647189][T16086] imon:send_packet: task interrupted [ 958.647201][T16086] imon:send_packet: packet tx failed (-512) [ 958.647235][T16086] imon:vfd_write: send packet #0 failed [ 958.647535][T16086] imon:send_packet: task interrupted [ 958.647546][T16086] imon:send_packet: packet tx failed (-512) [ 958.647583][T16086] imon:vfd_write: send packet #0 failed [ 958.837443][T13559] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 958.839527][T13559] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.839575][T13559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.313653][T13559] wacom 0003:056A:033B.0011: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 959.320826][T13559] wacom 0003:056A:033B.0011: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 959.324172][T13559] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0011/input/input57 [ 959.555046][T13559] usb 4-1: USB disconnect, device number 116 [ 959.588418][T16113] fido_id[16113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 960.022526][T13559] usb 5-1: USB disconnect, device number 22 [ 960.439049][T16130] FAULT_INJECTION: forcing a failure. [ 960.439049][T16130] name failslab, interval 1, probability 0, space 0, times 0 [ 960.441581][T16130] CPU: 0 UID: 0 PID: 16130 Comm: syz.3.2845 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.441614][T16130] Tainted: [L]=SOFTLOCKUP [ 960.441622][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 960.441634][T16130] Call Trace: [ 960.441643][T16130] [ 960.441652][T16130] dump_stack_lvl+0x100/0x190 [ 960.441687][T16130] should_fail_ex.cold+0x5/0xa [ 960.441716][T16130] should_failslab+0xc2/0x120 [ 960.441744][T16130] __kmalloc_noprof+0xfc/0x840 [ 960.441769][T16130] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 960.441807][T16130] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 960.441843][T16130] genl_family_rcv_msg_doit+0xc7/0x300 [ 960.441874][T16130] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 960.441914][T16130] ? bpf_lsm_capable+0x9/0x10 [ 960.441932][T16130] ? security_capable+0x80/0x260 [ 960.441960][T16130] genl_rcv_msg+0x560/0x800 [ 960.441992][T16130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 960.442020][T16130] ? __lock_acquire+0x5c0/0x1f40 [ 960.442043][T16130] ? __pfx_ieee802154_llsec_del_key+0x10/0x10 [ 960.442077][T16130] netlink_rcv_skb+0x159/0x420 [ 960.442103][T16130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 960.442132][T16130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 960.442177][T16130] ? __pfx_genl_rcv+0x10/0x10 [ 960.442207][T16130] genl_rcv+0x28/0x40 [ 960.442231][T16130] netlink_unicast+0x585/0x850 [ 960.442262][T16130] ? __pfx_netlink_unicast+0x10/0x10 [ 960.442296][T16130] netlink_sendmsg+0x8b0/0xda0 [ 960.442327][T16130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.442356][T16130] ? selinux_socket_sendmsg+0x198/0x2f0 [ 960.442385][T16130] ____sys_sendmsg+0xa4d/0xbe0 [ 960.442405][T16130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.442433][T16130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 960.442461][T16130] ? find_held_lock+0x2b/0x80 [ 960.442489][T16130] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 960.442519][T16130] ___sys_sendmsg+0x190/0x1e0 [ 960.442544][T16130] ? __pfx____sys_sendmsg+0x10/0x10 [ 960.442567][T16130] ? rcu_is_watching+0x13/0xc0 [ 960.442607][T16130] ? find_held_lock+0x2b/0x80 [ 960.442655][T16130] __sys_sendmsg+0x160/0x210 [ 960.442683][T16130] ? __pfx___sys_sendmsg+0x10/0x10 [ 960.442728][T16130] do_syscall_64+0x123/0x790 [ 960.442752][T16130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.442774][T16130] RIP: 0033:0x7fb06079e159 [ 960.442792][T16130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.442811][T16130] RSP: 002b:00007fb0616b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.442831][T16130] RAX: ffffffffffffffda RBX: 00007fb060a26090 RCX: 00007fb06079e159 [ 960.442846][T16130] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 960.442859][T16130] RBP: 00007fb0616b1090 R08: 0000000000000000 R09: 0000000000000000 [ 960.442872][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.442885][T16130] R13: 00007fb060a26128 R14: 00007fb060a26090 R15: 00007fff10d99788 [ 960.442916][T16130] [ 961.083955][ T5923] tipc: Disabling bearer [ 961.205977][T10648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.216316][T10648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.230457][T10648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 961.231683][T10648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 961.232842][T10648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 962.189091][ T8242] syz_tun (unregistering): left allmulticast mode [ 962.189118][ T8242] syz_tun (unregistering): left promiscuous mode [ 962.189190][ T8242] bridge0: port 1(syz_tun) entered disabled state [ 962.385057][T13576] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 962.545611][T13559] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 962.554072][T13576] usb 4-1: Using ep0 maxpacket: 32 [ 962.559916][T13576] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 962.572310][T13576] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 962.572538][T13576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.605415][T13576] usb 4-1: config 0 descriptor?? [ 962.631580][T16165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.636245][T16165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.723790][T13559] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 962.724764][T13559] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.724788][T13559] usb 5-1: config 0 has no interfaces? [ 962.724815][T13559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.727633][T13559] usb 5-1: config 0 descriptor?? [ 963.528619][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2854'. [ 963.534789][T10648] Bluetooth: hci4: command tx timeout [ 963.673384][T16190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3860 sclass=netlink_route_socket pid=16190 comm=syz.3.2850 [ 963.884038][T16142] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.884125][T16142] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.884338][T16142] bridge_slave_0: entered allmulticast mode [ 963.889206][T16142] bridge_slave_0: entered promiscuous mode [ 963.920434][T16142] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.920557][T16142] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.920765][T16142] bridge_slave_1: entered allmulticast mode [ 963.922043][T16142] bridge_slave_1: entered promiscuous mode [ 963.992347][T16142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.999665][T16142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.116708][T16142] team0: Port device team_slave_0 added [ 964.123348][T16142] team0: Port device team_slave_1 added [ 964.173292][T16142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.173346][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.173361][T16142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.177422][T16142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.177434][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.177449][T16142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.387654][T16142] hsr_slave_0: entered promiscuous mode [ 964.390788][T16142] hsr_slave_1: entered promiscuous mode [ 964.391580][T16142] debugfs: 'hsr0' already exists in 'hsr' [ 964.391599][T16142] Cannot create hsr debugfs directory [ 964.402308][T16184] block device autoloading is deprecated and will be removed. [ 964.771537][T16198] kAFS: unable to lookup cell 'ÿ' [ 964.868989][T13559] usb 4-1: USB disconnect, device number 117 [ 965.720641][T10648] Bluetooth: hci4: command tx timeout [ 965.813105][T13572] usb 5-1: USB disconnect, device number 23 [ 965.976695][T16209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=16209 comm=syz.6.2860 [ 966.177326][T16212] ip_tables: iptables: counters copy to user failed while replacing table [ 966.307135][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2860'. [ 966.396375][T16217] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2860'. [ 967.596439][T16215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 967.596529][T16215] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 967.596592][T16215] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 967.676627][T16215] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 967.728333][T16207] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2859'. [ 967.733582][T16215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 967.733644][T16215] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 967.747549][T16215] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 968.013743][T15041] IPVS: starting estimator thread 0... [ 968.104457][T16237] IPVS: using max 55 ests per chain, 132000 per kthread [ 968.350278][T16142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 968.355385][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.356321][T16142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 968.362291][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 968.372358][T16142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 968.400994][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 968.403241][T16142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 968.438474][T16142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.468011][T13558] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 968.628536][T13558] usb 5-1: Using ep0 maxpacket: 16 [ 968.629835][T13558] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 968.630754][T13558] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 968.630789][T13558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 968.632737][T13558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.632761][T13558] usb 5-1: Product: syz [ 968.632776][T13558] usb 5-1: Manufacturer: syz [ 968.632792][T13558] usb 5-1: SerialNumber: syz [ 968.635326][T13558] usb 5-1: config 0 descriptor?? [ 968.650165][T13558] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 968.650201][T13558] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 968.670670][T16142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.768005][T16250] FAULT_INJECTION: forcing a failure. [ 968.768005][T16250] name failslab, interval 1, probability 0, space 0, times 0 [ 968.768041][T16250] CPU: 1 UID: 0 PID: 16250 Comm: syz.2.2869 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.768069][T16250] Tainted: [L]=SOFTLOCKUP [ 968.768077][T16250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 968.768090][T16250] Call Trace: [ 968.768099][T16250] [ 968.768107][T16250] dump_stack_lvl+0x100/0x190 [ 968.768143][T16250] should_fail_ex.cold+0x5/0xa [ 968.768170][T16250] should_failslab+0xc2/0x120 [ 968.768197][T16250] kmem_cache_alloc_noprof+0x92/0x6a0 [ 968.768222][T16250] ? mas_preallocate+0xc22/0xee0 [ 968.768252][T16250] mas_preallocate+0xc22/0xee0 [ 968.768280][T16250] ? __pfx_mas_preallocate+0x10/0x10 [ 968.768313][T16250] ? anon_vma_name+0x5a/0x250 [ 968.768345][T16250] __split_vma+0x2f8/0x1de0 [ 968.768380][T16250] ? __pfx___split_vma+0x10/0x10 [ 968.768407][T16250] ? __lock_acquire+0x5c0/0x1f40 [ 968.768441][T16250] vms_gather_munmap_vmas+0x1d2/0x1720 [ 968.768472][T16250] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 968.768492][T16250] ? mtree_range_walk+0x72b/0xb70 [ 968.768540][T16250] ? mas_walk+0x260/0x310 [ 968.768566][T16250] __mmap_region+0x4cc/0x32e0 [ 968.768590][T16250] ? lock_acquire+0x1d1/0x380 [ 968.768612][T16250] ? is_bpf_text_address+0x25/0x1a0 [ 968.768641][T16250] ? __pfx___mmap_region+0x10/0x10 [ 968.768661][T16250] ? is_bpf_text_address+0x8a/0x1a0 [ 968.768689][T16250] ? is_bpf_text_address+0x8a/0x1a0 [ 968.768723][T16250] ? __lock_acquire+0x5c0/0x1f40 [ 968.768760][T16250] ? __lock_acquire+0x5c0/0x1f40 [ 968.768805][T16250] ? lock_acquire+0x1d1/0x380 [ 968.768827][T16250] ? is_bpf_text_address+0x25/0x1a0 [ 968.768855][T16250] ? find_held_lock+0x2b/0x80 [ 968.768885][T16250] ? is_bpf_text_address+0x8a/0x1a0 [ 968.768912][T16250] ? is_bpf_text_address+0x8a/0x1a0 [ 968.768940][T16250] ? bpf_ksym_find+0x128/0x1c0 [ 968.768961][T16250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 968.768986][T16250] ? is_bpf_text_address+0x94/0x1a0 [ 968.769014][T16250] ? kernel_text_address+0x8d/0x100 [ 968.769081][T16250] ? alloc_file_clone+0x5f/0x110 [ 968.769125][T16250] mmap_region+0x3db/0x6d0 [ 968.769153][T16250] ? __pfx_mmap_region+0x10/0x10 [ 968.769176][T16250] ? shmem_mapping+0xd/0x50 [ 968.769199][T16250] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 968.769231][T16250] ? bpf_lsm_mmap_addr+0x9/0x30 [ 968.769260][T16250] ? security_mmap_addr+0x71/0x1e0 [ 968.769288][T16250] ? __get_unmapped_area+0x255/0x3e0 [ 968.769324][T16250] do_mmap+0x12c7/0x1c30 [ 968.769367][T16250] ? lock_acquire+0x1d1/0x380 [ 968.769390][T16250] ? __pfx_do_mmap+0x10/0x10 [ 968.769420][T16250] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 968.769441][T16250] ? security_current_getlsmprop_subj+0x6e/0x130 [ 968.769481][T16250] ? __pfx_down_write_killable+0x10/0x10 [ 968.769514][T16250] do_shmat+0x111f/0x14a0 [ 968.769553][T16250] ? __pfx_do_shmat+0x10/0x10 [ 968.769582][T16250] ? __x64_sys_futex+0x34f/0x4d0 [ 968.769611][T16250] ? __x64_sys_futex+0x358/0x4d0 [ 968.769645][T16250] __x64_sys_shmat+0xd7/0x170 [ 968.769675][T16250] ? __pfx___x64_sys_shmat+0x10/0x10 [ 968.769705][T16250] ? do_syscall_64+0xae/0x790 [ 968.769728][T16250] do_syscall_64+0x123/0x790 [ 968.769752][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.769774][T16250] RIP: 0033:0x7f09bdd9e159 [ 968.769794][T16250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.769816][T16250] RSP: 002b:00007f09bbff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 968.769838][T16250] RAX: ffffffffffffffda RBX: 00007f09be025fa0 RCX: 00007f09bdd9e159 [ 968.769853][T16250] RDX: 0000000000007000 RSI: 0000200000ffd000 RDI: 0000000000000000 [ 968.769866][T16250] RBP: 00007f09bde3506b R08: 0000000000000000 R09: 0000000000000000 [ 968.769880][T16250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.769892][T16250] R13: 00007f09be026038 R14: 00007f09be025fa0 R15: 00007fff5170b238 [ 968.769925][T16250] [ 968.793021][T16142] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.825617][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.825723][T15040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.853015][T15040] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.853108][T15040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.320341][T13558] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 969.320787][T13558] em28xx 5-1:0.0: Config register raw data: 0x96 [ 969.536024][T13558] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 969.536048][T13558] em28xx 5-1:0.0: No AC97 audio processor [ 969.567698][T13558] usb 5-1: USB disconnect, device number 24 [ 969.571803][T13558] em28xx 5-1:0.0: Disconnecting em28xx [ 969.579537][T13558] em28xx: Freeing device [ 969.740261][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 969.740327][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 970.278535][T10648] Bluetooth: hci4: command 0x0419 tx timeout [ 970.349781][T13561] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 970.510265][T13561] usb 4-1: Using ep0 maxpacket: 8 [ 970.511033][T13561] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 970.512051][T13561] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 970.512099][T13561] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 970.512124][T13561] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 970.512149][T13561] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 970.512170][T13561] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.512206][T13561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.519979][T13561] usbtmc 4-1:16.0: bulk endpoints not found [ 970.810504][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.813460][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.840523][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.840927][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.854260][T16142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.964120][T16142] veth0_vlan: entered promiscuous mode [ 970.972065][T16142] veth1_vlan: entered promiscuous mode [ 971.007503][T16142] veth0_macvtap: entered promiscuous mode [ 971.011847][T16142] veth1_macvtap: entered promiscuous mode [ 971.026087][T16142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.038657][T16142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.111918][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.115765][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.115802][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.115829][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.194519][T13576] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 971.210999][T15040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.211023][T15040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.296563][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.296585][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.356274][T13576] usb 5-1: Using ep0 maxpacket: 8 [ 971.359269][T13576] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 971.363022][T13576] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 971.363077][T13576] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 971.363093][T13576] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 971.363108][T13576] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 971.363120][T13576] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 971.363134][T13576] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.363164][T13576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.395910][T13576] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 971.554194][T16293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.554559][T16293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.736691][T16300] ip_tables: iptables: counters copy to user failed while replacing table [ 971.774289][T16300] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2883'. [ 971.965246][T10648] Bluetooth: hci5: command 0x0c1a tx timeout [ 972.116341][T16303] FAULT_INJECTION: forcing a failure. [ 972.116341][T16303] name failslab, interval 1, probability 0, space 0, times 0 [ 972.116374][T16303] CPU: 0 UID: 0 PID: 16303 Comm: syz.1.2884 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.116403][T16303] Tainted: [L]=SOFTLOCKUP [ 972.116411][T16303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 972.116424][T16303] Call Trace: [ 972.116432][T16303] [ 972.116441][T16303] dump_stack_lvl+0x100/0x190 [ 972.116468][T16303] should_fail_ex.cold+0x5/0xa [ 972.116487][T16303] should_failslab+0xc2/0x120 [ 972.116504][T16303] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 972.116520][T16303] ? __d_alloc+0x35/0xa50 [ 972.116542][T16303] __d_alloc+0x35/0xa50 [ 972.116561][T16303] d_alloc_parallel+0x105/0x14c0 [ 972.116582][T16303] ? lock_acquire+0x1d1/0x380 [ 972.116597][T16303] ? __d_lookup+0x73/0x4a0 [ 972.116611][T16303] ? __pfx_d_alloc_parallel+0x10/0x10 [ 972.116625][T16303] ? __d_lookup+0x25c/0x4a0 [ 972.116640][T16303] ? __d_lookup+0x266/0x4a0 [ 972.116657][T16303] lookup_open+0x6bb/0x1990 [ 972.116677][T16303] path_openat+0xa2c/0x2440 [ 972.116696][T16303] ? __pfx_path_openat+0x10/0x10 [ 972.116717][T16303] do_file_open+0x20e/0x430 [ 972.116734][T16303] ? __pfx_do_file_open+0x10/0x10 [ 972.116761][T16303] ? _raw_spin_unlock+0x28/0x50 [ 972.116778][T16303] ? alloc_fd+0x471/0x7a0 [ 972.116799][T16303] do_sys_openat2+0x10f/0x1e0 [ 972.116818][T16303] ? __pfx_do_sys_openat2+0x10/0x10 [ 972.116835][T16303] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 972.116856][T16303] __x64_sys_openat+0x12d/0x210 [ 972.116874][T16303] ? __pfx___x64_sys_openat+0x10/0x10 [ 972.116897][T16303] do_syscall_64+0x123/0x790 [ 972.116911][T16303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.116924][T16303] RIP: 0033:0x7fe09515e98e [ 972.116934][T16303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.116946][T16303] RSP: 002b:00007fe095fa0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 972.116958][T16303] RAX: ffffffffffffffda RBX: 00007fe095fa16c0 RCX: 00007fe09515e98e [ 972.116966][T16303] RDX: 0000000000000800 RSI: 00007fe095fa0c00 RDI: ffffffffffffff9c [ 972.116974][T16303] RBP: 00007fe095fa0c00 R08: 0000000000000000 R09: 0000000000000000 [ 972.116982][T16303] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 972.116990][T16303] R13: 00007fe095426038 R14: 00007fe095425fa0 R15: 00007ffc344a6848 [ 972.117008][T16303] [ 972.477014][T10648] Bluetooth: hci4: command 0x0419 tx timeout [ 972.587879][T16313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.772551][T13561] usb 4-1: USB disconnect, device number 118 [ 973.940170][T16325] FAULT_INJECTION: forcing a failure. [ 973.940170][T16325] name fail_futex, interval 1, probability 0, space 0, times 0 [ 973.940210][T16325] CPU: 0 UID: 0 PID: 16325 Comm: syz.3.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 973.940237][T16325] Tainted: [L]=SOFTLOCKUP [ 973.940244][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 973.940257][T16325] Call Trace: [ 973.940264][T16325] [ 973.940271][T16325] dump_stack_lvl+0x100/0x190 [ 973.940303][T16325] should_fail_ex.cold+0x5/0xa [ 973.940331][T16325] get_futex_key+0xf72/0x14f0 [ 973.940369][T16325] ? __pfx_get_futex_key+0x10/0x10 [ 973.940395][T16325] ? __mutex_unlock_slowpath+0x35d/0x930 [ 973.940423][T16325] futex_wake+0xf4/0x5e0 [ 973.940446][T16325] ? __pfx_futex_wake+0x10/0x10 [ 973.940468][T16325] ? lock_acquire+0x1d1/0x380 [ 973.940488][T16325] ? detach_task_ctx_data+0x83/0x490 [ 973.940532][T16325] do_futex+0x2b2/0x440 [ 973.940561][T16325] ? __pfx_do_futex+0x10/0x10 [ 973.940584][T16325] ? __might_fault+0xc5/0x140 [ 973.940608][T16325] mm_exit_exec_release+0x256/0x2f0 [ 973.940634][T16325] do_exit+0x707/0x2a50 [ 973.940663][T16325] ? __pfx_do_exit+0x10/0x10 [ 973.940688][T16325] ? do_raw_spin_lock+0x128/0x260 [ 973.940712][T16325] ? find_held_lock+0x2b/0x80 [ 973.940739][T16325] ? get_signal+0x7e0/0x21e0 [ 973.940764][T16325] do_group_exit+0xd5/0x2a0 [ 973.940792][T16325] get_signal+0x1ec7/0x21e0 [ 973.940820][T16325] ? rcu_is_watching+0x13/0xc0 [ 973.940849][T16325] ? __pfx_get_signal+0x10/0x10 [ 973.940873][T16325] ? do_futex+0x190/0x440 [ 973.940903][T16325] arch_do_signal_or_restart+0x91/0x7e0 [ 973.940933][T16325] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 973.940975][T16325] exit_to_user_mode_loop+0x139/0x700 [ 973.941001][T16325] ? rcu_is_watching+0x13/0xc0 [ 973.941026][T16325] do_syscall_64+0x661/0x790 [ 973.941042][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.941055][T16325] RIP: 0033:0x7fb06079e159 [ 973.941066][T16325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.941077][T16325] RSP: 002b:00007fb0616900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 973.941089][T16325] RAX: fffffffffffffe00 RBX: 00007fb060a26188 RCX: 00007fb06079e159 [ 973.941097][T16325] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb060a26188 [ 973.941104][T16325] RBP: 00007fb060a26180 R08: 0000000000000000 R09: 0000000000000000 [ 973.941111][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.941118][T16325] R13: 00007fb060a26218 R14: 00007fff10d996a0 R15: 00007fff10d99788 [ 973.941134][T16325] [ 974.173301][T13559] usb 5-1: USB disconnect, device number 25 [ 974.193439][T10648] Bluetooth: hci5: command 0x0c1a tx timeout [ 974.445531][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2895'. [ 975.176005][T10648] Bluetooth: hci4: command 0x0419 tx timeout [ 975.337406][T16340] netlink: 'syz.4.2897': attribute type 33 has an invalid length. [ 975.609714][T13558] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 976.009798][T13558] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 976.013059][T13558] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.013105][T13558] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.013129][T13558] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 976.013154][T13558] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 976.016204][T13558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.016232][T13558] usb 4-1: Product: syz [ 976.016247][T13558] usb 4-1: Manufacturer: syz [ 976.016263][T13558] usb 4-1: SerialNumber: syz [ 976.244288][T13558] usb 4-1: Limiting number of CPorts to U8_MAX [ 976.245097][T13558] usb 4-1: Not enough endpoints found in device, aborting! [ 976.333517][T16365] ip_tables: iptables: counters copy to user failed while replacing table [ 976.338077][T16365] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2905'. [ 976.375466][T16367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.388454][T16367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.401011][T16369] netlink: 'syz.4.2908': attribute type 1 has an invalid length. [ 976.428733][T16369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 976.448578][T16369] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 976.466841][T13559] usb 4-1: USB disconnect, device number 119 [ 976.484439][ T31] audit: type=1400 audit(2000000314.203:1932): avc: denied { listen } for pid=16368 comm="syz.4.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 976.817319][T13572] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 976.924306][T13559] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 976.977693][T13572] usb 5-1: Using ep0 maxpacket: 16 [ 976.978474][T13572] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 976.980324][T13572] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 976.980354][T13572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 976.983538][T13572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.983555][T13572] usb 5-1: Product: syz [ 976.983564][T13572] usb 5-1: Manufacturer: syz [ 976.983573][T13572] usb 5-1: SerialNumber: syz [ 976.987382][T13572] usb 5-1: config 0 descriptor?? [ 977.110994][T13572] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 977.111032][T13572] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 977.138115][T13559] usb 2-1: Using ep0 maxpacket: 8 [ 977.138944][T13559] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 977.140482][T13559] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.140506][T13559] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 977.140547][T13559] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 977.140575][T13559] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 977.140605][T13559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.154453][T13559] hub 2-1:1.0: bad descriptor, ignoring hub [ 977.154482][T13559] hub 2-1:1.0: probe with driver hub failed with error -5 [ 977.154956][T13559] cdc_wdm 2-1:1.0: skipping garbage [ 977.154973][T13559] cdc_wdm 2-1:1.0: skipping garbage [ 977.188698][T13559] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 977.188719][T13559] cdc_wdm 2-1:1.0: Unknown control protocol [ 977.301984][T16381] FAULT_INJECTION: forcing a failure. [ 977.301984][T16381] name failslab, interval 1, probability 0, space 0, times 0 [ 977.302020][T16381] CPU: 0 UID: 0 PID: 16381 Comm: syz.2.2915 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.302047][T16381] Tainted: [L]=SOFTLOCKUP [ 977.302054][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 977.302067][T16381] Call Trace: [ 977.302074][T16381] [ 977.302082][T16381] dump_stack_lvl+0x100/0x190 [ 977.302116][T16381] should_fail_ex.cold+0x5/0xa [ 977.302144][T16381] ? __pfx_sel_write_member+0x10/0x10 [ 977.302167][T16381] should_failslab+0xc2/0x120 [ 977.302192][T16381] ? __pfx_sel_write_member+0x10/0x10 [ 977.302209][T16381] __kmalloc_cache_noprof+0x91/0x6d0 [ 977.302229][T16381] ? simple_transaction_get+0x82/0x1a0 [ 977.302260][T16381] ? __pfx_sel_write_member+0x10/0x10 [ 977.302280][T16381] simple_transaction_get+0x82/0x1a0 [ 977.302308][T16381] selinux_transaction_write+0xcd/0x1a0 [ 977.302351][T16381] vfs_write+0x2aa/0x1050 [ 977.302376][T16381] ? __pfx_selinux_transaction_write+0x10/0x10 [ 977.302396][T16381] ? lock_acquire+0x1d1/0x380 [ 977.302416][T16381] ? __fget_files+0x34/0x3d0 [ 977.302440][T16381] ? __pfx_vfs_write+0x10/0x10 [ 977.302460][T16381] ? find_held_lock+0x2b/0x80 [ 977.302487][T16381] ? __fget_files+0x215/0x3d0 [ 977.302517][T16381] ? __fget_files+0x21f/0x3d0 [ 977.302550][T16381] ksys_write+0x12a/0x250 [ 977.302572][T16381] ? __pfx_ksys_write+0x10/0x10 [ 977.302603][T16381] do_syscall_64+0x123/0x790 [ 977.302629][T16381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.302648][T16381] RIP: 0033:0x7f09bdd9e159 [ 977.302665][T16381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.302683][T16381] RSP: 002b:00007f09bbff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 977.302703][T16381] RAX: ffffffffffffffda RBX: 00007f09be025fa0 RCX: 00007f09bdd9e159 [ 977.302717][T16381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 977.302728][T16381] RBP: 00007f09bbff6090 R08: 0000000000000000 R09: 0000000000000000 [ 977.302740][T16381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.302752][T16381] R13: 00007f09be026038 R14: 00007f09be025fa0 R15: 00007fff5170b238 [ 977.302781][T16381] [ 977.352955][ T5614] Bluetooth: hci4: command 0x0419 tx timeout [ 977.798758][T13572] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 977.808748][T13572] em28xx 5-1:0.0: Config register raw data: 0x96 [ 978.026793][T13572] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 978.026900][T13572] em28xx 5-1:0.0: No AC97 audio processor [ 978.277062][T13572] usb 5-1: USB disconnect, device number 26 [ 978.376552][T13572] em28xx 5-1:0.0: Disconnecting em28xx [ 978.897105][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.206720][T13572] em28xx: Freeing device [ 980.247788][T16388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.516340][T13561] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 981.240336][T13561] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 981.254043][T13561] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 981.254071][T13561] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 981.254965][T16406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.255290][T16406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.260730][T13561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.260791][T13561] usb 5-1: Product: syz [ 981.260830][T13561] usb 5-1: Manufacturer: syz [ 981.260857][T13561] usb 5-1: SerialNumber: syz [ 981.431262][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2924'. [ 981.672169][T16395] block nbd4: shutting down sockets [ 981.682448][T13561] usb 5-1: Limiting number of CPorts to U8_MAX [ 981.781631][ T31] audit: type=1400 audit(2000000319.170:1933): avc: denied { connect } for pid=16419 comm="syz.6.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 981.810705][T13572] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 981.820026][T16376] cdc_wdm 2-1:1.0: Error autopm - -16 [ 981.822414][T13559] usb 2-1: USB disconnect, device number 47 [ 981.971422][T13572] usb 4-1: Using ep0 maxpacket: 8 [ 981.971952][T13572] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 981.973473][T13572] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.973514][T13572] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 981.973540][T13572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 981.977928][T13572] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 981.977954][T13572] usb 4-1: Product: syz [ 981.977970][T13572] usb 4-1: Manufacturer: syz [ 981.977985][T13572] usb 4-1: SerialNumber: syz [ 982.019959][T13572] usb 4-1: config 0 descriptor?? [ 982.201580][T16427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.204809][T16427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.231913][T16426] nftables ruleset with unbound chain [ 982.241433][T13561] usb 5-1: failed to set cport flags for port 0 [ 982.241497][T13561] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 982.262673][T13572] rc_core: IR keymap rc-imon-rsc not found [ 982.262690][T13572] Registered IR keymap rc-empty [ 982.966331][T13572] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 982.968941][T13572] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 983.014188][T13561] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 983.501775][T13558] usb 5-1: USB disconnect, device number 27 [ 983.784663][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.785066][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.805118][T16440] md: personality for level is not loaded! [ 983.923267][T13558] usb 4-1: USB disconnect, device number 120 [ 984.860364][ T31] audit: type=1800 audit(2000000322.023:1934): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2944" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 985.009825][T16462] md: personality for level is not loaded! [ 985.974588][T16473] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 985.991281][ T31] audit: type=1400 audit(2000000323.089:1935): avc: denied { read } for pid=16468 comm="syz.1.2946" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 985.991619][ T31] audit: type=1400 audit(2000000323.089:1936): avc: denied { open } for pid=16468 comm="syz.1.2946" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 987.257771][T16479] ipvlan3: entered allmulticast mode [ 987.280692][T16479] batman_adv: batadv0: Adding interface: ipvlan3 [ 987.280712][T16479] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.282113][T16479] batman_adv: batadv0: Interface activated: ipvlan3 [ 990.023910][T16505] fuse: Bad value for 'fd' [ 990.277018][T13574] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 990.320522][T16511] ip_tables: iptables: counters copy to user failed while replacing table [ 990.999137][T16513] netlink: 'syz.1.2958': attribute type 33 has an invalid length. [ 991.084092][T13574] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 991.094584][T13574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.146965][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 991.152318][T13574] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 028 [ 991.384598][ T31] audit: type=1400 audit(2000000328.150:1937): avc: denied { accept } for pid=16520 comm="syz.3.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 991.751589][T13574] (null): failure reading functionality [ 992.091271][ T31] audit: type=1400 audit(2000000328.805:1938): avc: denied { bind } for pid=16541 comm="syz.2.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 992.118996][ T31] audit: type=1400 audit(2000000328.814:1939): avc: denied { setopt } for pid=16541 comm="syz.2.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 992.267889][T16546] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 992.267918][T16546] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 992.272426][T16546] vhci_hcd vhci_hcd.0: Device attached [ 992.290845][T16547] usbip_core: unknown command [ 992.290864][T16547] vhci_hcd: unknown pdu 0 [ 992.290875][T16547] usbip_core: unknown command [ 992.314888][ T60] vhci_hcd vhci_hcd.1: stop threads [ 992.329012][ T60] vhci_hcd vhci_hcd.1: release socket [ 992.329078][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 992.371096][T16546] binder: 16544:16546 ioctl c00c620f 200000000080 returned -22 [ 992.614941][T16555] netlink: 'syz.6.2971': attribute type 2 has an invalid length. [ 992.615561][T16555] netlink: 'syz.6.2971': attribute type 7 has an invalid length. [ 993.504580][T13574] i2c i2c-1: failure reading functionality [ 993.507651][T13572] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 993.553940][T13574] i2c i2c-1: connected i2c-tiny-usb device [ 993.569521][T13574] usb 5-1: USB disconnect, device number 28 [ 993.686348][T13572] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 993.699010][T13572] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.699037][T13572] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 993.699071][T13572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.206404][T13574] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 994.333857][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2980'. [ 994.374375][T13574] usb 5-1: Using ep0 maxpacket: 8 [ 994.383065][T13574] usb 5-1: unable to get BOS descriptor or descriptor too short [ 994.383417][T13574] usb 5-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 994.410678][T13574] usb 5-1: config 1 has an invalid interface number: 122 but max is 0 [ 994.410738][T13574] usb 5-1: config 1 has no interface number 0 [ 994.410930][T13574] usb 5-1: config 1 interface 122 altsetting 15 bulk endpoint 0x2 has invalid maxpacket 1024 [ 994.410988][T13574] usb 5-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 994.411048][T13574] usb 5-1: config 1 interface 122 has no altsetting 0 [ 994.522335][T13574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.522363][T13574] usb 5-1: Product: syz [ 994.522379][T13574] usb 5-1: Manufacturer: syz [ 994.522402][T13574] usb 5-1: SerialNumber: syz [ 994.528949][T16569] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 994.629069][T16580] batadv0: entered promiscuous mode [ 994.645329][T16580] macvtap1: entered promiscuous mode [ 994.678357][T16580] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 994.694694][T16580] batadv0: left promiscuous mode [ 994.736228][ T31] audit: type=1400 audit(2000000331.283:1940): avc: denied { map } for pid=16590 comm="syz.2.2981" path="pipe:[4494]" dev="pipefs" ino=4494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 994.824492][T13574] ti_usb_3410_5052 5-1:1.122: TI USB 5052 2 port adapter converter detected [ 994.835472][T16593] netlink: 456 bytes leftover after parsing attributes in process `syz.2.2982'. [ 994.864460][T13574] usb 5-1: USB disconnect, device number 29 [ 995.376862][T16598] sctp: [Deprecated]: syz.3.2983 (pid 16598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 995.376862][T16598] Use struct sctp_sack_info instead [ 996.346232][T13574] usb 2-1: USB disconnect, device number 48 [ 996.755886][T13574] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 996.917923][T13574] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 996.918916][T13574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.935711][T13574] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 049 [ 997.010567][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2990'. [ 997.027978][ T31] audit: type=1400 audit(2000000333.425:1941): avc: denied { bind } for pid=16613 comm="syz.4.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 997.164151][ T31] audit: type=1400 audit(2000000333.556:1942): avc: denied { write } for pid=16613 comm="syz.4.2991" path="socket:[57001]" dev="sockfs" ino=57001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 997.392181][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 997.498793][T13574] (null): failure reading functionality [ 997.516873][T13574] i2c i2c-1: failure reading functionality [ 997.569050][T13574] i2c i2c-1: connected i2c-tiny-usb device [ 997.584170][T13574] usb 2-1: USB disconnect, device number 49 [ 997.687253][ T31] audit: type=1400 audit(2000000334.043:1943): avc: denied { ioctl } for pid=16631 comm="syz.2.2987" path="/565/trace/trace" dev="tracefs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 999.280329][T13574] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 999.438926][T13574] usb 4-1: Using ep0 maxpacket: 32 [ 999.439658][T13574] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 999.441594][T13574] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 999.441620][T13574] usb 4-1: config 0 has no interface number 0 [ 999.441658][T13574] usb 4-1: config 0 interface 12 has no altsetting 0 [ 999.446981][T13574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.446997][T13574] usb 4-1: Product: syz [ 999.447006][T13574] usb 4-1: Manufacturer: syz [ 999.447016][T13574] usb 4-1: SerialNumber: syz [ 999.452801][T13574] usb 4-1: config 0 descriptor?? [ 999.684968][T13573] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 999.844944][T13573] usb 5-1: Using ep0 maxpacket: 32 [ 999.846822][T13573] usb 5-1: unable to get BOS descriptor or descriptor too short [ 999.846857][T13573] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e3.2a [ 999.847802][T13573] usb 5-1: config 7 has an invalid interface number: 143 but max is 0 [ 999.847820][T13573] usb 5-1: config 7 has no interface number 0 [ 999.847837][T13573] usb 5-1: config 7 interface 143 has no altsetting 0 [ 999.855066][T13573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.855092][T13573] usb 5-1: Product: syz [ 999.855109][T13573] usb 5-1: Manufacturer: syz [ 999.855123][T13573] usb 5-1: SerialNumber: syz [ 1000.119039][T13573] viperboard 5-1:7.143: version 0.00 found at bus 005 address 030 [ 1000.158864][T16662] IPv6: NLM_F_CREATE should be specified when creating new route [ 1000.231639][T13574] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1000.231693][T13574] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1000.231712][T13574] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1000.231782][T13574] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1000.245162][T13574] usb 4-1: USB disconnect, device number 121 [ 1000.382227][T13573] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1000.382260][T13573] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1000.419961][T13573] usb 5-1: USB disconnect, device number 30 [ 1000.743591][T16673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1000.808384][T13558] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1001.295845][T13558] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1001.300639][T13558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.553081][T13558] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 050 [ 1001.797374][ T31] audit: type=1400 audit(2000000337.869:1944): avc: denied { lock } for pid=16688 comm="syz.2.3009" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1001.888230][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.891472][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.892628][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.893154][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.918397][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.918946][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.950994][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.013685][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.014787][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.028829][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.031528][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.050886][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.335471][T16698] veth0: left allmulticast mode [ 1002.335497][T16698] veth0: left promiscuous mode [ 1002.335810][T16698] bridge0: port 3(veth0) entered disabled state [ 1002.339356][T13558] (null): failure reading functionality [ 1002.352424][T16698] batman_adv: batadv0: Adding interface: veth0 [ 1002.352442][T16698] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.352493][T16698] batman_adv: batadv0: Interface activated: veth0 [ 1002.360016][T16698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.360039][T16698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.362284][T13558] i2c i2c-1: failure reading functionality [ 1002.367648][T16698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.367671][T16698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.380482][T13558] i2c i2c-1: connected i2c-tiny-usb device [ 1002.409824][T13558] usb 2-1: USB disconnect, device number 50 [ 1002.422489][T16698] batman_adv: batadv0: Interface deactivated: veth0 [ 1002.422513][T16698] batman_adv: batadv0: Removing interface: veth0 [ 1004.447652][T16733] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1004.452043][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3016'. [ 1004.565966][ T31] audit: type=1400 audit(2000000340.478:1945): avc: denied { append } for pid=16736 comm="syz.3.3018" name="sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1005.262147][ T31] audit: type=1400 audit(2000000341.124:1946): avc: denied { watch_mount } for pid=16747 comm="syz.2.3021" path="/570" dev="tmpfs" ino=3155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1006.382142][T16763] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5616] was attempted by ""[16763] [ 1006.397878][T16763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.296233][T16769] ip_tables: iptables: counters copy to user failed while replacing table [ 1007.339074][T13574] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1007.504058][T16784] batman_adv: batadv0: Interface deactivated: veth0 [ 1007.504218][T16784] batman_adv: batadv0: Removing interface: veth0 [ 1007.520851][T13574] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1007.525670][T13574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.562888][T13574] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 122 [ 1007.795926][T16784] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1007.795954][T16784] batman_adv: batadv0: Removing interface: ipvlan3 [ 1007.973354][T16795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3029'. [ 1008.155405][T10648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.177537][T10648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.183052][T10648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.204600][T10648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.212569][T10648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1008.391673][T13574] (null): failure reading functionality [ 1008.474016][T16773] block nbd3: shutting down sockets [ 1008.507007][T13574] i2c i2c-1: failure reading functionality [ 1008.770730][T13574] i2c i2c-1: connected i2c-tiny-usb device [ 1008.866796][T13574] usb 4-1: USB disconnect, device number 122 [ 1009.325650][T16805] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 1009.560042][T16805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1009.703897][ T31] audit: type=1400 audit(2000000345.286:1947): avc: denied { unmount } for pid=15321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1009.832135][T16808] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1010.074627][T16816] ipvlan2: entered promiscuous mode [ 1010.075428][T16816] bridge0: port 1(ipvlan2) entered blocking state [ 1010.075523][T16816] bridge0: port 1(ipvlan2) entered disabled state [ 1010.075657][T16816] ipvlan2: entered allmulticast mode [ 1010.121026][T16816] bridge0: entered allmulticast mode [ 1010.143608][T16816] ipvlan2: left allmulticast mode [ 1010.143632][T16816] bridge0: left allmulticast mode [ 1010.636517][T10648] Bluetooth: hci1: command tx timeout [ 1012.031434][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3041'. [ 1012.845351][T10648] Bluetooth: hci1: command tx timeout [ 1013.071465][ T5697] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1013.269628][ T5697] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1013.286177][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.305145][ T5697] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 031 [ 1013.367307][ T7503] bridge0: port 4(syz_tun) entered disabled state [ 1013.414528][ T7503] syz_tun (unregistering): left allmulticast mode [ 1013.414584][ T7503] syz_tun (unregistering): left promiscuous mode [ 1013.414653][ T7503] bridge0: port 4(syz_tun) entered disabled state [ 1013.463174][T16862] cgroup: Name too long [ 1013.821176][ T5697] (null): failure reading functionality [ 1013.822782][T16854] block nbd4: shutting down sockets [ 1013.907974][ T5697] i2c i2c-1: failure reading functionality [ 1013.918817][ T5697] i2c i2c-1: connected i2c-tiny-usb device [ 1013.938040][ T5697] usb 5-1: USB disconnect, device number 31 [ 1014.451730][T16881] syz_tun: Device is already in use. [ 1015.078269][T10648] Bluetooth: hci1: command tx timeout [ 1015.835650][T16899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.847108][T16899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.864379][T16890] bridge0: port 1(netdevsim0) entered blocking state [ 1015.864466][T16890] bridge0: port 1(netdevsim0) entered disabled state [ 1015.930551][T16899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.932787][T16899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.932954][T16890] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1016.006431][T16890] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1016.054653][T16890] bridge0: port 1(netdevsim0) entered blocking state [ 1016.054771][T16890] bridge0: port 1(netdevsim0) entered forwarding state [ 1016.181754][T16794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.182341][T16794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.182478][T16794] bridge_slave_0: entered allmulticast mode [ 1016.186976][T16794] bridge_slave_0: entered promiscuous mode [ 1016.227043][T16794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.227674][T16794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.228043][T16794] bridge_slave_1: entered allmulticast mode [ 1016.233436][T16794] bridge_slave_1: entered promiscuous mode [ 1016.457255][T16794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.490942][T16794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.242428][T16794] team0: Port device team_slave_0 added [ 1017.258207][T16794] team0: Port device team_slave_1 added [ 1017.292705][T10648] Bluetooth: hci1: command tx timeout [ 1017.391293][T16794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.391307][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.391322][T16794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.398519][T16794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.398536][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.398558][T16794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.679159][T16794] hsr_slave_0: entered promiscuous mode [ 1017.680076][T16794] hsr_slave_1: entered promiscuous mode [ 1017.680683][T16794] debugfs: 'hsr0' already exists in 'hsr' [ 1017.680703][T16794] Cannot create hsr debugfs directory [ 1017.771296][T16909] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 1018.052054][T16916] ip_tables: iptables: counters copy to user failed while replacing table [ 1018.304379][T16916] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3056'. [ 1018.390373][T16909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.469920][T16915] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1018.713775][T16922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.721138][T16922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.358386][T16794] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.499384][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3052'. [ 1019.649828][T16794] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.650866][T16936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=281 sclass=netlink_route_socket pid=16936 comm=syz.3.3062 [ 1020.002157][T16794] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.154516][T16936] md/raid:md0: not clean -- starting background reconstruction [ 1020.155807][T16936] md/raid:md0: device ram0 operational as raid disk 0 [ 1020.280730][T16794] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.347915][T16936] md/raid:md0: raid level 5 active with 1 out of 1 devices, algorithm 0 [ 1020.378522][T16936] ------------[ cut here ]------------ [ 1020.378539][T16936] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 1020.378561][T16936] shift exponent 64 is too large for 64-bit type 'long unsigned int' [ 1020.378580][T16936] CPU: 1 UID: 0 PID: 16936 Comm: syz.3.3062 Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.378612][T16936] Tainted: [L]=SOFTLOCKUP [ 1020.378621][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1020.378635][T16936] Call Trace: [ 1020.378642][T16936] [ 1020.378651][T16936] dump_stack_lvl+0x100/0x190 [ 1020.378690][T16936] ubsan_epilogue+0xa/0x30 [ 1020.378723][T16936] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 1020.378769][T16936] raid5_set_limits+0x310/0x53c [ 1020.378802][T16936] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 1020.378833][T16936] ? __pfx_raid5_set_limits+0x10/0x10 [ 1020.378898][T16936] raid5_run.cold+0x55e/0xd51 [ 1020.378946][T16936] md_run+0xc2f/0x2510 [ 1020.378979][T16936] ? __pfx_md_run+0x10/0x10 [ 1020.379010][T16936] ? set_disk_ro+0x1b7/0x210 [ 1020.379044][T16936] ? __pfx_set_disk_ro+0x10/0x10 [ 1020.379080][T16936] do_md_run+0x36/0x660 [ 1020.379105][T16936] array_state_store+0x9c5/0xcf0 [ 1020.379133][T16936] md_attr_store+0x1c5/0x330 [ 1020.379163][T16936] ? __pfx_md_attr_store+0x10/0x10 [ 1020.379191][T16936] sysfs_kf_write+0xf2/0x150 [ 1020.379219][T16936] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1020.379242][T16936] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1020.379273][T16936] vfs_write+0x6af/0x1050 [ 1020.379299][T16936] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1020.379328][T16936] ? __pfx_vfs_write+0x10/0x10 [ 1020.379350][T16936] ? find_held_lock+0x2b/0x80 [ 1020.379401][T16936] ksys_write+0x12a/0x250 [ 1020.379425][T16936] ? __pfx_ksys_write+0x10/0x10 [ 1020.379459][T16936] do_syscall_64+0x123/0x790 [ 1020.379486][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.379509][T16936] RIP: 0033:0x7fb06079e159 [ 1020.379534][T16936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.379556][T16936] RSP: 002b:00007fb0616d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.379578][T16936] RAX: ffffffffffffffda RBX: 00007fb060a25fa0 RCX: 00007fb06079e159 [ 1020.379594][T16936] RDX: 0000000000000006 RSI: 0000200000000a40 RDI: 000000000000000e [ 1020.379608][T16936] RBP: 00007fb06083506b R08: 0000000000000000 R09: 0000000000000000 [ 1020.379619][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.379631][T16936] R13: 00007fb060a26038 R14: 00007fb060a25fa0 R15: 00007fff10d99788 [ 1020.379663][T16936] [ 1020.380880][T16936] ---[ end trace ]--- [ 1020.380910][T16936] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1020.645797][T16936] CPU: 1 UID: 0 PID: 16936 Comm: syz.3.3062 Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.656755][T16936] Tainted: [L]=SOFTLOCKUP [ 1020.661068][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1020.671111][T16936] Call Trace: [ 1020.674378][T16936] [ 1020.677297][T16936] dump_stack_lvl+0x100/0x190 [ 1020.681977][T16936] vpanic+0x553/0x970 [ 1020.685950][T16936] ? __pfx_vpanic+0x10/0x10 [ 1020.690439][T16936] ? irqentry_exit+0x24d/0xa10 [ 1020.695196][T16936] ? lockdep_hardirqs_on+0x7d/0x110 [ 1020.700386][T16936] ? irqentry_exit+0x24d/0xa10 [ 1020.705139][T16936] panic+0xd1/0xe0 [ 1020.708854][T16936] ? __pfx_panic+0x10/0x10 [ 1020.713263][T16936] ? dump_stack_lvl+0x176/0x190 [ 1020.718114][T16936] check_panic_on_warn.cold+0x19/0x34 [ 1020.723474][T16936] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 1020.729896][T16936] raid5_set_limits+0x310/0x53c [ 1020.734748][T16936] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 1020.740292][T16936] ? __pfx_raid5_set_limits+0x10/0x10 [ 1020.745683][T16936] raid5_run.cold+0x55e/0xd51 [ 1020.750386][T16936] md_run+0xc2f/0x2510 [ 1020.754476][T16936] ? __pfx_md_run+0x10/0x10 [ 1020.758991][T16936] ? set_disk_ro+0x1b7/0x210 [ 1020.763591][T16936] ? __pfx_set_disk_ro+0x10/0x10 [ 1020.768533][T16936] do_md_run+0x36/0x660 [ 1020.772682][T16936] array_state_store+0x9c5/0xcf0 [ 1020.777616][T16936] md_attr_store+0x1c5/0x330 [ 1020.782201][T16936] ? __pfx_md_attr_store+0x10/0x10 [ 1020.787308][T16936] sysfs_kf_write+0xf2/0x150 [ 1020.791893][T16936] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1020.797167][T16936] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1020.802363][T16936] vfs_write+0x6af/0x1050 [ 1020.806688][T16936] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1020.812488][T16936] ? __pfx_vfs_write+0x10/0x10 [ 1020.817240][T16936] ? find_held_lock+0x2b/0x80 [ 1020.821928][T16936] ksys_write+0x12a/0x250 [ 1020.826250][T16936] ? __pfx_ksys_write+0x10/0x10 [ 1020.831097][T16936] do_syscall_64+0x123/0x790 [ 1020.835677][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.841559][T16936] RIP: 0033:0x7fb06079e159 [ 1020.845967][T16936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.865560][T16936] RSP: 002b:00007fb0616d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.873964][T16936] RAX: ffffffffffffffda RBX: 00007fb060a25fa0 RCX: 00007fb06079e159 [ 1020.881922][T16936] RDX: 0000000000000006 RSI: 0000200000000a40 RDI: 000000000000000e [ 1020.889878][T16936] RBP: 00007fb06083506b R08: 0000000000000000 R09: 0000000000000000 [ 1020.897836][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.905790][T16936] R13: 00007fb060a26038 R14: 00007fb060a25fa0 R15: 00007fff10d99788 [ 1020.913765][T16936] [ 1020.917001][T16936] Kernel Offset: disabled [ 1020.921312][T16936] Rebooting in 86400 seconds..