last executing test programs: 8m28.990044288s ago: executing program 2 (id=343): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r3, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x24, 0x66, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0xd}, {0x1, 0xfff1}, {0xc, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000881}, 0x49090) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="8c00009b00", @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf250400000020000380060004000400000014000600ff01000000000000000000000000000150000280080006000400000008000500faffffff06000e004e2000001400010000000000000000000000000000000000080005008dffffff080009000104000006000b000000000006000b000a0000000800040000000080"], 0x8c}, 0x1, 0x0, 0x0, 0x20060041}, 0x24000001) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500ee7707ff0000fd119078000000000000000000004e2000649078020000000000000003000000cfea6df7491fb4163e1c5bdd590af7b4c312957c1a7e2db3b549c8041639b9c4c00f1b29a62d948884a37326b06dde37e4ac6acd794994841e35aeaa42b29dd9aba8ea548f64c79f7034b13592d8d069"], 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r8, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r9, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) (async) bind$tipc(r9, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) (async, rerun: 32) bind$tipc(r9, 0x0, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 8m28.889608388s ago: executing program 2 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r3 = socket(0x10, 0x803, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x3c) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22242, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000006800e97800000000ffdbdf250a0000000000000004000b000400040006000700020000002c000c80"], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x204000, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1d0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x7) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7f}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffe, @loopback, 0x9}, 0x1c) 8m27.356884769s ago: executing program 2 (id=350): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f00000000c0)="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") 8m26.758973926s ago: executing program 2 (id=354): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20004044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)=0x0) sendmsg$alg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="c3b9da367494632152ddef80ad5e75af", 0x10}], 0x1, 0x0, 0x0, 0x24040004}, 0x24000090) io_submit(r4, 0x0, &(0x7f0000000740)) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x44045) r6 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xd, 0x20002ff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 8m26.298895301s ago: executing program 2 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 8m24.81232678s ago: executing program 2 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_connect$cdc_ecm(0x0, 0x75, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x7, 0x40, 0xa, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "e52e2cba34ac"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x0, 0x33}, [@obex={0x5, 0x24, 0x15, 0x3ef4}, @country_functional={0x10, 0x24, 0x7, 0xfc, 0xce, [0x38, 0x79, 0x2, 0xff46, 0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xcf}, @mbim_extended={0x8, 0x24, 0x1c, 0xfec, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0xe, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x68, 0x6, 0x7, 0x80}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x20, 0x8, 0xd5, 0x20, 0x9}, 0x12, &(0x7f00000004c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x1, 0x5}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1401}}, {0xc9, &(0x7f00000005c0)=@string={0xc9, 0x3, "a3c10e2e2fae57c456bfd00482967526ef7ad0255951322bd4ead14290479403b53c7f4a78e42004687028307a14c3b863904b01d88660acfc626335bdd28da5e0a3904d25a6e067d222225f2e2a177d01f588a164117a14bb28fa05161bdaab8f8e57d06576d5f72a0b9ac80d8cbe6c628d38fa02c639376561a381e0c5746a251d4ee598c5eb81c5d786d45c96a797dadf7d66e781c034842f78854195d0c4aabaca3fa9466d555e1015a97f73c1edd20fcbe8055f8f8562d72076d51792436da43770a07b7a"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0xc9, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x499, 0x500d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x0, 0x60, 0xfc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x87ec, 0x2e}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x4, 0xfc, 0x200, 0x9, 0x6f}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x0, 0xa, "9942d259e9"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x2fc, 0x6, 0x5, 0x6, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0xd5, 0x0, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xb, 0x6, 0xb}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0xb4d1, 0xc, "036b"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x2, '6H_1'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x7, 0x2e, {0x7, 0x25, 0x1, 0x0, 0x5, 0xd8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x73, 0x6, {0x7, 0x25, 0x1, 0xc, 0x5, 0x1}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0x81, 0x5, 0xc, 0xff, 0x6}, 0x42, &(0x7f00000009c0)={0x5, 0xf, 0x42, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x9, 0xd, 0x21cc, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x3, 0x6ab1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0x16, 0x7686}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "7da7c9e0bd2c047305a430c96d85bfd4"}]}, 0x1, [{0xa1, &(0x7f0000000a40)=@string={0xa1, 0x3, "3594f0310b7275c3269a957f2bb2481dd68bf5a9676bed4b8cc20fd201b63bee945bc1b390a2753a4debfb9527346102364477f747f4c2b3c4334e003adf03a01464090cc9b53ed8d7080c95b3d91f80de02d9ec9d74c74b706893f9602ad93a39689c19c22c5aadb595362dc5b8f41a202f7650c771d32df38482b465a5e4e6f861aae3ae3cfa4e41f33ad760807b66fcc0e77ad7f04f9e9d81cebc488007"}}]}) syz_usb_control_io$lan78xx(r7, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x30, 0xfa, {0xfa, 0x23, "ed5bdbf612d2c7cf6a063eaff4ec206e37f94fbef15fa7cac2327a072f48addac7f521fbcb4c8bda1c7819fc286a670b83c7aface3383d1d6879f4bd42520f1a0f3ed44c8b6efaf1b002d66fe9c6015a2ab79bf47442497dc13eda3259fddaebd390dbe97e1ef1bf82f7baf4f5bd2a722af17f2a3862754395f4ac549ac3d0946bbfc3776366378befbb19486717773d6b76af3a9e3b9edfaa92d2506f21f7869d99ed15338fb9fc7f8fabefb78f4f3ee98d61c81a7e70c5ac85ca2053599cb86124bf483dd32876bf84ed95e3be9fe3fc5b2693f7f221f26165f554b8641d0ce6178cedd3b2893bc5389cb2e1f3183e8ba1e17415985ba3"}}, &(0x7f00000001c0)={0x0, 0x3, 0x35, @string={0x35, 0x3, "b4b4ba7231a92391fdcf81a112410ddbffb74dc467cde9f1c255ff7bb73edcbb841668d9e474f01febd12886cc408add0f9bd4"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="4007490000003115f5b61ff168e4e3f72c392e0b7ea1ad30dee954aca212bce41b71c9ba24e9086714d2307cfb9790e87eb6dcd4fb0000000000003d977c05118ad07d27d7ac131282bd171683d4e68b5707cfd9034d33095b78d0802b7c56ddcf3da6b8d08e650c9cbdf1d763d11a10dbd76d9bbd7672db1de0ae04ead641d3d4c564491a2a26dd0f24e319d131f6050255dab358ad0423b205b3a72c0f81e3bb388f490ba4dcde4864e98cc25246b7"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "86842deabc2cdc1606c0bc00162c6e8a22bdc02a44a8d7790b681b5a0bba3ede8cadd45ebd25dadc091fb9e0da23d2"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8m24.326009973s ago: executing program 32 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_connect$cdc_ecm(0x0, 0x75, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x7, 0x40, 0xa, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "e52e2cba34ac"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x0, 0x33}, [@obex={0x5, 0x24, 0x15, 0x3ef4}, @country_functional={0x10, 0x24, 0x7, 0xfc, 0xce, [0x38, 0x79, 0x2, 0xff46, 0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xcf}, @mbim_extended={0x8, 0x24, 0x1c, 0xfec, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0xe, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x68, 0x6, 0x7, 0x80}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x20, 0x8, 0xd5, 0x20, 0x9}, 0x12, &(0x7f00000004c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x1, 0x5}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1401}}, {0xc9, &(0x7f00000005c0)=@string={0xc9, 0x3, "a3c10e2e2fae57c456bfd00482967526ef7ad0255951322bd4ead14290479403b53c7f4a78e42004687028307a14c3b863904b01d88660acfc626335bdd28da5e0a3904d25a6e067d222225f2e2a177d01f588a164117a14bb28fa05161bdaab8f8e57d06576d5f72a0b9ac80d8cbe6c628d38fa02c639376561a381e0c5746a251d4ee598c5eb81c5d786d45c96a797dadf7d66e781c034842f78854195d0c4aabaca3fa9466d555e1015a97f73c1edd20fcbe8055f8f8562d72076d51792436da43770a07b7a"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0xc9, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x499, 0x500d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x0, 0x60, 0xfc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x87ec, 0x2e}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x4, 0xfc, 0x200, 0x9, 0x6f}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x0, 0xa, "9942d259e9"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x2fc, 0x6, 0x5, 0x6, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0xd5, 0x0, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xb, 0x6, 0xb}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0xb4d1, 0xc, "036b"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x2, '6H_1'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x7, 0x2e, {0x7, 0x25, 0x1, 0x0, 0x5, 0xd8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x73, 0x6, {0x7, 0x25, 0x1, 0xc, 0x5, 0x1}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0x81, 0x5, 0xc, 0xff, 0x6}, 0x42, &(0x7f00000009c0)={0x5, 0xf, 0x42, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x9, 0xd, 0x21cc, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x3, 0x6ab1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0x16, 0x7686}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7b, "7da7c9e0bd2c047305a430c96d85bfd4"}]}, 0x1, [{0xa1, &(0x7f0000000a40)=@string={0xa1, 0x3, "3594f0310b7275c3269a957f2bb2481dd68bf5a9676bed4b8cc20fd201b63bee945bc1b390a2753a4debfb9527346102364477f747f4c2b3c4334e003adf03a01464090cc9b53ed8d7080c95b3d91f80de02d9ec9d74c74b706893f9602ad93a39689c19c22c5aadb595362dc5b8f41a202f7650c771d32df38482b465a5e4e6f861aae3ae3cfa4e41f33ad760807b66fcc0e77ad7f04f9e9d81cebc488007"}}]}) syz_usb_control_io$lan78xx(r7, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x30, 0xfa, {0xfa, 0x23, "ed5bdbf612d2c7cf6a063eaff4ec206e37f94fbef15fa7cac2327a072f48addac7f521fbcb4c8bda1c7819fc286a670b83c7aface3383d1d6879f4bd42520f1a0f3ed44c8b6efaf1b002d66fe9c6015a2ab79bf47442497dc13eda3259fddaebd390dbe97e1ef1bf82f7baf4f5bd2a722af17f2a3862754395f4ac549ac3d0946bbfc3776366378befbb19486717773d6b76af3a9e3b9edfaa92d2506f21f7869d99ed15338fb9fc7f8fabefb78f4f3ee98d61c81a7e70c5ac85ca2053599cb86124bf483dd32876bf84ed95e3be9fe3fc5b2693f7f221f26165f554b8641d0ce6178cedd3b2893bc5389cb2e1f3183e8ba1e17415985ba3"}}, &(0x7f00000001c0)={0x0, 0x3, 0x35, @string={0x35, 0x3, "b4b4ba7231a92391fdcf81a112410ddbffb74dc467cde9f1c255ff7bb73edcbb841668d9e474f01febd12886cc408add0f9bd4"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="4007490000003115f5b61ff168e4e3f72c392e0b7ea1ad30dee954aca212bce41b71c9ba24e9086714d2307cfb9790e87eb6dcd4fb0000000000003d977c05118ad07d27d7ac131282bd171683d4e68b5707cfd9034d33095b78d0802b7c56ddcf3da6b8d08e650c9cbdf1d763d11a10dbd76d9bbd7672db1de0ae04ead641d3d4c564491a2a26dd0f24e319d131f6050255dab358ad0423b205b3a72c0f81e3bb388f490ba4dcde4864e98cc25246b7"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "86842deabc2cdc1606c0bc00162c6e8a22bdc02a44a8d7790b681b5a0bba3ede8cadd45ebd25dadc091fb9e0da23d2"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m8.951250128s ago: executing program 3 (id=1270): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000240)="7e26309cedb2123af445f51b4abb9f4842e5a6fff031050293e9d974786360b53d77d6d9c0f652246b0b00fa75852fd949cff419e47e5b4ce5063f25b4b2588719bc1d1dac0e1c047b214f2364388eba5d6b49b0258fda42219d24eace427214dacc3ec4764f3dd5794166d9696692517c66", 0x72}, {&(0x7f00000003c0)="08e8921bd8cd1d68f754c5a683c82284e0e3cab432e2852ad2938215b416b387fef3d8c470c5c715487ba74265e1b224b7612cdf79cc0667768a3cc6639cd4cd0ccb7465aa12692f72ce550ed3cf81322c2b1617655832ad441708b9d888d89a8125bccc4186cbde3d5f67941e794785362ba3f9b3a997e99a96c58a031d53ef4205d266b9f845f57403c16af517688f5ce4888207134e2f82797fe4c470a92527254f83c10c44492753a5fa399325ec9580feb6eb260105f4e4533a04", 0xbd}, {&(0x7f0000000480)="f1fbc154e2d46702a612e1be1ccc0dceee74dd1a960e76bd78c471774344d969b09079d2257fc614a1d6b933c60b5952c1eba9418a2ffb94", 0x38}, {&(0x7f00000004c0)="158ee1cbea7c9e5268fa18d7390acbe7df", 0x11}, {&(0x7f0000000500)="848bd5457ac727384cda7867c5c8bee82e232671b9a682cc21d1c1e4a57f2116745b839818ab639348662dd9351675ca43a07bd6c655ea125979136cbb149d7fcb1e", 0x42}], 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x80, 0x2, 0x4, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x65, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x5}, {[@ssrr={0x89, 0x3, 0x7b}]}}}}}) getsockname$llc(r3, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m7.730593544s ago: executing program 3 (id=1272): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x6dc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}}, 0x80, 0x0}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x583b00) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffe4b) 4m7.496476552s ago: executing program 3 (id=1273): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xceda21f8a491f6e3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 4m6.993267016s ago: executing program 3 (id=1277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1c, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x75e3}}, @call={0x85, 0x0, 0x0, 0xb1}]}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x8, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000780)=[{0x1, 0x4, 0x0, 0x2a0bc45be703dbf9}, {0x5, 0x5, 0x7, 0x8}, {0x0, 0x2, 0x1, 0xa}], 0x10, 0x7a}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 4m6.728951927s ago: executing program 3 (id=1279): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000180)=0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) 4m6.549877027s ago: executing program 3 (id=1280): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000044cef0084c05c3061d9b010203010902240001000000000904"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)={@local, @loopback}, 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x0, 0x6, &(0x7f0000000640)}, {0x3, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x4100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2a, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x100001, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40009, 0x0}]}) syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0xc20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r10 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x208602, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000380)={'geneve0\x00', @random="de134a4803b6"}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000011) 3m51.056750806s ago: executing program 33 (id=1280): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000044cef0084c05c3061d9b010203010902240001000000000904"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)={@local, @loopback}, 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x0, 0x6, &(0x7f0000000640)}, {0x3, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x4100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2a, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x100001, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40009, 0x0}]}) syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0xc20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r10 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x208602, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000380)={'geneve0\x00', @random="de134a4803b6"}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000011) 14.720780243s ago: executing program 0 (id=2121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000e40)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r6 = userfaultfd(0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/40, 0x28}, {0x0}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) dup2(r8, r8) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fsync(r9) fchdir(r9) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 10.25948155s ago: executing program 6 (id=2130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303044da3030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x20040044) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) syz_emit_ethernet(0x26, &(0x7f00000007c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa0000d2899078ac1e0001ffffffff8f84e8eb"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000045724f0180b34a5f00000000000000000a48000000060a0b040000000000000000020000001c00049018000180080001006c6f67000c00068008000540000000090900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x4048010) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa007, 0x201, {0x8, 0x9, 0x6, 0x7d, 0x2, 0x3f45, 0xc05, 0x6, 0xd, 0x2000, 0x0, 0x0, r3, 0xe6f, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019300)={{r6, 0xffffffffffffffff}, &(0x7f0000019280), &(0x7f00000192c0)=r6}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000019100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="350000001d000000", @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="b61ffdfbef6958e08f28cc9fa5786b1607b40dbf2d971373b76c66e79ffeaba4d33d7a445f768ce995a84aae363d43f39eccdf5ed66e1fd5a0df705d8f66b4afdb1f3f083b70fc08742b6195a5efe722f6a2c6788b32c10bc743479671ffe42d6acdc28224fae6a0669dc265f28d959a5c76bfe6e892aa5b03891640032ee33e62280f2e4b137bdab3077e556b8ab6377fbe67bbfa2a818767eddea9e7c25bdd01df69f6226f5c3bfa1309777f04033da55bf6610d4d8d729d36861d5db8be6a6c8d34d20f20797bd647ce36f8012cf028a93d3932133e2f9a776da9e1ac389b1423", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) 9.494480873s ago: executing program 6 (id=2135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x18, 0x5e, 0x1}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x8, 0x670, 0x800, 0x34, 0x3, 0xfffffff8, 0x6b, 0x7, 0x5]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x293}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x678}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5de}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x37}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf453}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff40}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc6c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7e7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3235, 0x5, 0x9, 0x6, 0x401, 0x1ffe00]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f0000002580)=[{&(0x7f0000000180)=""/127, 0x7f}], 0x1, 0xa3, 0xf9f) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) 9.44193612s ago: executing program 0 (id=2136): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4004001}, 0x4002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0xf, 0x24, 0x65, 0x0, 0x3c, 0x21, 0x0, @broadcast, @loopback}, {{0x4e23, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x5, 0x1, "1bdfcc", 0x0, "f431a8"}}}}}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x22}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r3, &(0x7f00000004c0)="0431", &(0x7f0000000600)}, 0x20) 9.077601873s ago: executing program 6 (id=2138): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4000, 0x100, 0x39}, 0x18) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8001, 0x8, {0x0}, {0xffffffffffffffff}, 0x5, 0xa}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchown(r0, r2, r4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xcde, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x800, 0x8}, &(0x7f0000000240)=0x90) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/52, 0x34}], 0x4, &(0x7f0000000440)}, 0x8e0}, {{&(0x7f0000000480)=@rc={0x1f, @none}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/51, 0x33}, {&(0x7f0000000840)=""/129, 0x81}], 0x6, &(0x7f0000000980)=""/113, 0x71}, 0x6}, {{&(0x7f0000000a00)=@alg, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/90, 0x5a}, {&(0x7f0000000b00)=""/183, 0xb7}, {&(0x7f0000000bc0)=""/21, 0x15}, {&(0x7f0000000c00)=""/52, 0x34}, {&(0x7f0000000c40)=""/243, 0xf3}, {&(0x7f0000000d40)=""/164, 0xa4}], 0x6, &(0x7f0000000e80)=""/130, 0x82}, 0xfffffff0}, {{&(0x7f0000000f40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/208, 0xd0}, {&(0x7f00000010c0)=""/139, 0x8b}], 0x2, &(0x7f00000011c0)=""/140, 0x8c}, 0x1}], 0x4, 0x10042, &(0x7f0000001380)={0x0, 0x989680}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000001440)) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000014c0)={0x7ff, 0x0, 0x7, 0x92, 0x8, 0x0, 0x7}) syz_clone3(&(0x7f00000017c0)={0x20004100, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)=0x0, {0x3f}, &(0x7f0000001640)=""/57, 0x39, &(0x7f0000001680)=""/219, &(0x7f0000001780)=[r3, r3, r3, r3, r1, r3, r1, r1], 0x8}, 0x58) sendmsg$AUDIT_SET(r0, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x3c, 0x3e9, 0x20, 0x70bd29, 0x25dfdbfd, {0x30, 0x0, 0x2, r6, 0x5a8d, 0x8, 0x5, 0x3, 0x0, 0x7, 0xf}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001900), 0x2, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) splice(r7, &(0x7f0000001940)=0xc48, r8, &(0x7f0000001980)=0xe3, 0x6, 0x8) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000001b00)={0x2, &(0x7f0000001ac0)=[{0x7c13, 0x9, &(0x7f00000019c0)="d116d8896f95b384df", 0x1, 0x1}, {0x2, 0xb4, &(0x7f0000001a00)="6e25056af35cbb203dc8d51ff7e5b274a53f7f458e91dac4812b352771953d4475b00c63a92db5d8d1e9a21a139535737bc8612dfd40e199b74e0c24b24103b55515e9daded3779c6755eb8cab3b631d4bb9a12d6c5113c33369d6f4bdaddf07ab379bf704476025a1154ad79d8376a82d081691a78cc708c4d563f746c45fc42b1eb60716ce26ed1df2f55f0d8064dd744ffb536b2390add236c2b4af6929fbfa159e16a1b6e11902d1af03671358da7d4d2072", 0x0, 0x1}]}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) accept4$unix(r0, &(0x7f0000001b40)=@abs, &(0x7f0000001bc0)=0x6e, 0x80800) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x90, 0xa9, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8c, 0xd7, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000002000)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x300, 0x7, 0xd, 0x7, 0xff, 0x8}, 0xef, &(0x7f0000001c80)={0x5, 0xf, 0xef, 0x5, [@generic={0x9f, 0x10, 0xb, "73e0745df57d38696fdca0f9041817da2be7fc7829f64e25e57db9f25c00d0b85bd7669bebb1614b495d362d6c589d81eee9470a5e1e382f9d49398c41b9f06f03125de4a4bdae3a798307ef3b93c7e98644111754e385aa0a35f718227b7b01a93eccc45ecab6ee843600e58fb91d41f3f72fb71015e15f12485a6bd69e7aa93e5ab83e5b76060debf58ef72eded40866d0dc22c1a19dc11fd62fe1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x6, 0x0, 0x1ff, 0xb}, @ssp_cap={0x18, 0x10, 0xa, 0x9e, 0x3, 0xc, 0xf000, 0x9, [0x0, 0x3fc0, 0xc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x4, 0xff1e, 0xfffb, [0x0, 0xc0cf, 0xfe417f, 0x0]}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x9, 0xf000, 0x688b}]}, 0x3, [{0x102, &(0x7f0000001d80)=@string={0x102, 0x3, "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"}}, {0xcd, &(0x7f0000001ec0)=@string={0xcd, 0x3, "d41400f90b41b555a088b76e748178b71877c6522524cfc30e69295825978a1ef9702dc7a65abc02f5a88e15fb3a6ca6de0235b2f6ce2a7a2ba74e90229842f813eb987fc1edbca4565d2ac89b952b8aff0136cb7d11df432a91b9e45151da304a7f6bbb8213e9d9ed54e60d5f377c843eada65f8fc86b0c39caea4b786c75a209fef0c38dddd9665e94e77dcb1e6b7f7d08093c46dafcd9370bf0ce4bf468e97e5ff744b8855c04280170de7b31bc3345e3710714ee823db8cebea1c160d960d8d56d08b2ed0a85ecc586"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x82c}}]}) ioctl$FE_DISEQC_SEND_BURST(0xffffffffffffffff, 0x6f41, &(0x7f0000002040)=0x1) move_mount(r0, &(0x7f0000002080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x201) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002100), 0x90082, 0x0) read(0xffffffffffffffff, &(0x7f0000002140)=""/128, 0x80) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000021c0)={r5, 0x6, 0x9}, 0x8) ioctl$XFS_IOC_BULKSTAT(r9, 0x8040587f, &(0x7f0000002380)={{0x4, 0x2, 0x3, 0x7, 0x8}, &(0x7f0000002200)=[{}, {}]}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000002440), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, r10, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) bind$alg(r0, &(0x7f0000002540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000025c0)={{0x7f, 0x9}, 0x2}, 0x10) 8.384612959s ago: executing program 0 (id=2141): bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_init(0x4b, 0x800) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x60000, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x600, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1a000000000000f3f20000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000007500000000000000000000000000000000000000000000000000000000000008000000ffffffff00"/144]}, 0x108) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070605000000000000000000010000020800064000000006090040000000010500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, 0x0}, 0x20) setuid(0xee00) setgroups(0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f00000002c0)=r4, 0x57) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x12, &(0x7f0000000080)=0x10, 0x4) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @pic={0xd, 0xb, 0x7, 0x4, 0x9, 0xa, 0x3, 0x7f, 0x6, 0x8, 0x3, 0x0, 0x8, 0x3, 0xa}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r10}) openat$full(0xffffffffffffff9c, 0x0, 0x40082, 0x0) 7.455604034s ago: executing program 5 (id=2142): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x20002, 0x2, {0x0, 0x8}, 0x6, 0x6}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) 7.37608281s ago: executing program 4 (id=2143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f844", 0x3a}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg(r2, &(0x7f0000004900)={0x0, 0x0, 0x0}, 0x40012103) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='X', 0x34000, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$input_event(r4, &(0x7f0000000080)={{0x77359400}, 0x10, 0x2, 0x8}, 0x18) creat(0x0, 0x4b) syz_open_dev$dri(0x0, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001000), 0xdab01, 0x0) 7.169261904s ago: executing program 0 (id=2144): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xa418e400, 0x0, 0x26, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) 7.164981675s ago: executing program 1 (id=2145): mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x80000, 0x1) r1 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000002100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f00000002c0)='GPL\x00', 0x5}, 0x94) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x894b, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$notify(r1, 0x402, 0x80000030) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.662282464s ago: executing program 1 (id=2146): inotify_init() r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80000000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x1, @private2, 0x81}}}, 0x108) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0416fcf55bdb42a1deb543def29d78e7340ec972efb79acd9efd1b4292406eda3119e851ba35f809258d48660de36db6fe36c50316ad5ec6afc3d5ddc4cb73c14794753c640bc11382f4e17670d6c159e3b76a5eec601dc6d43b5a8e7cf4fd315a7543fb82111ce025877786b3864de673ad0eb84c38e23888bd3749f8672647a4173ef8e1b2b7582a8541c164e06ff5da184533f9405ad8ea8d29b7fabad9696256561523ebde1a7c3d04195a4aa1fdea3cd6c5483c3834a8603b75b000000000000", @ANYRES16=r2, @ANYBLOB="290e26bd7000fddbdf2527000000"], 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) 6.42692979s ago: executing program 4 (id=2147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.991300389s ago: executing program 1 (id=2148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000308010200000000080000000500000305000300880000000c000480"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) bind$inet(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r5, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x8, &(0x7f0000000200)=0x3) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004010, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.950064095s ago: executing program 6 (id=2149): syz_usb_connect$lan78xx(0x2, 0x9b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f00000000c0), 0x8000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="010328df2504"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, @l2tp={0x2, 0x0, @broadcast, 0xfffffffe}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x3}) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) close(0x3) 5.886838765s ago: executing program 4 (id=2150): syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffbb6ce3e10c154dd368d3bb7b3241aa6000"], 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044804) (async, rerun: 32) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) (rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_create1(0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0x2, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x30, 0x3ffe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xfffffffffffffdea}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) (rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x202181, 0x0) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async, rerun: 64) shutdown(r3, 0x1) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x3, 0xffffffffffffffff, 0x9, 0x4, 0xd, 0x8}, 0x0, 0x0) 4.470181947s ago: executing program 1 (id=2151): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000300", @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf052700"], 0x20}}, 0x20040000) 3.843683278s ago: executing program 0 (id=2152): syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x9, 0x0, 0x9}, {0x9, 0x5, 0x8, 0x2, 0x40, 0x7f, 0x6, 0x7}, {0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0x80, 0x9}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/220, 0xdc, 0x4009) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(r6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) 3.535467645s ago: executing program 1 (id=2153): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0003, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8, 0x1, 0x8129, 0x1}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0xebfb60cbc8fb3d3b) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005000000000005000400000000000c00078005001500030000000d000303006173683a6d616300000000"], 0x54}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000100)={0x1c, 0x27, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) kcmp(r7, r7, 0x4, r9, r9) accept4(r5, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 3.266385039s ago: executing program 6 (id=2154): r0 = syz_io_uring_setup(0xefd, &(0x7f0000000700)={0x0, 0xaa32, 0x10000, 0x5, 0x59}, &(0x7f0000000100)=0x0, &(0x7f00000000c0), &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setrlimit(0x8, &(0x7f00000001c0)={0x10001, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000240)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x4, 0x86f, 0x0, 0x0, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f00000002c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r4, 0xc, 0x4) fstat(r4, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x24, 0x0, 0x401, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xd080}, 0x814) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000500)={'\x00', 0xb014, 0x2, 0x400, 0xab5, 0xfffffffffffffad6}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000009}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="000029bd7000fbdbdf2531000000080001002900000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4081}, 0x4000) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0x89) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r12, &(0x7f00000040c0)={0x2020}, 0x2020) epoll_create(0x7) 3.217098675s ago: executing program 5 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_setup(0x512e, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000001c0)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) 2.359833029s ago: executing program 6 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x88, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x200, 0xa, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="5fb068", @ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001ec0)={0x84, &(0x7f0000001900)={0x20, 0x16, 0x8, "74c6011e11f03975"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x1, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) unshare(0x68040000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x2, 0xff7fb5b2, 0x3a8e5b6c, 0x40000, 0x9]}, &(0x7f0000000000)=0x78) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x9, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0)="2c1c7aa03d572de3eb385a7a", 0xc) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r7, 0x80084523, 0x0) 2.177886786s ago: executing program 4 (id=2157): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000100000008510000006"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000180)="27031c00160514000200", 0xa}, {&(0x7f0000000100)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc15569532313f864706eb6c7c630188f93cd9b27d05e2a4b699d4abe50200f2cae8ffbf4899b288f3f504171f464b692ba34ac06f61065ee28cd2ea04f0020000008a5b224966d95f14471ceab9e10a6d", 0x6e}, {&(0x7f00000001c0)="829b6a1717f5a9bd47444b3eed7c35491af7203564b2e2f7d460b558bedd8ff945574c70c0b1286c87efb4230419129ca25deeee33e1509ee00420af64735900cf5fa804b1995c6154fc86e5116b3bd3a9df7b0d90e62b59914e592caf82cce1b8a8627069536acc1cc5f09f8f824a445f4a03ff40f8b9a97fc910f59a47cbc4f2143a06088a04c0f67ad83df711d4e7b297f478a2d39b89caa534bb7baf910b808c8b3d99d7c7983cae70878a288710a175083cc6209fedba40416b1cc021bdbbbc7c6a3f5c4bbe4a456d857c393b9cee7e33c63edd24ecf2e2df", 0xdb}, {&(0x7f00000002c0)="722f091c1c13f33c40a41209fb2b1e90c8f8830304192eca2a006ceb0034ba608dc4fd0ffef56b736767145ea89e34590de0f7b3fed9b336ddff076584b293695d043d2ba480afc01dfb5709d1fb31d74dab9ff06c69464929c0235426ae4f5e302a3aa0bdb5c9e61f2c9a3665dfcd1e78ee", 0x72}, {&(0x7f0000000800)="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", 0x370}], 0x5}, 0x40080c8) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000005600911000dd00000000004a07"], 0xfe33) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x240, 0x300, 0x3f, 0x32, 0x1, 0x3e, 0x400000, {}, {0x40000, 0x2}, {0x0, 0x3}, {0x0, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @loopback}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000200)=@ethtool_coalesce={0xe, 0xff, 0xff, 0x7, 0x7f, 0x77, 0x1, 0xc, 0x7, 0x0, 0x7, 0x7, 0xa, 0x8, 0xc806, 0xa, 0xe, 0x7fff, 0x4, 0x10002, 0x0, 0xb28, 0x1}}) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x122}}, 0x141) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080000000000db9af0ff41000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000", @ANYRES32=r7, @ANYBLOB="180000ff508d0000000000b2ffffff181100002b804baf509676c5991448df3aa67fd586454ad6f59d98c5cb6188986759351ef95c5c3bef1b4c4d696357b95134d6370c72d4821fd665169dc66e0b872ea4b90c35858b66bc386ee7df400f12a9654811a2a5305ae73e003f85dfa1c5b86560e06a2fe55945494a824830cbb3d9641a615f36c2269defc17f1edd6c1d", @ANYRESHEX=r8], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x204000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.903644047s ago: executing program 4 (id=2158): inotify_init() r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80000000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x1, @private2, 0x81}}}, 0x108) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0416fcf55bdb42a1deb543def29d78e7340ec972efb79acd9efd1b4292406eda3119e851ba35f809258d48660de36db6fe36c50316ad5ec6afc3d5ddc4cb73c14794753c640bc11382f4e17670d6c159e3b76a5eec601dc6d43b5a8e7cf4fd315a7543fb82111ce025877786b3864de673ad0eb84c38e23888bd3749f8672647a4173ef8e1b2b7582a8541c164e06ff5da184533f9405ad8ea8d29b7fabad9696256561523ebde1a7c3d04195a4aa1fdea3cd6c5483c3834a8603b75b000000000000", @ANYRES16=r2, @ANYBLOB="290e26bd7000fddbdf2527000000"], 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) 1.806950911s ago: executing program 5 (id=2159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0xc9ffff}, {}, {0x7}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) 1.765199376s ago: executing program 5 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.376181291s ago: executing program 4 (id=2161): memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00', 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x1000) move_mount(r5, 0x0, r5, 0x0, 0x156) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x3}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r7) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="290e29bd7000fbdbdf052700"], 0x20}}, 0x20040000) 1.224429695s ago: executing program 5 (id=2162): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18) 283.834556ms ago: executing program 5 (id=2163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000010000)={0xfffffffffffffecf, r5, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x57, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x474}, @NL80211_ATTR_FREQ_RANGE_START={0x0, 0x2, 0x1}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000851}, 0x4004000) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x13, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r10, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 108.648777ms ago: executing program 0 (id=2164): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000019300)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000019340)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x4147, 0x0) r3 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x41, 0x2, r3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x9bf, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x5, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x6, 0x2, 0xfffffffffffffffc, 0x10000000000f48, 0x8, 0x25}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=0x0, @ANYBLOB='\x00\x00V\x00'], 0x28}, 0x0) 0s ago: executing program 1 (id=2165): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc073}) kernel console output (not intermixed with test programs): 552.042107][ T29] audit: type=1400 audit(1784356590.885:1199): avc: denied { accept } for pid=12429 comm="syz.6.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 552.066451][T12434] sit0: left promiscuous mode [ 552.426199][ T29] audit: type=1400 audit(1784356591.265:1200): avc: denied { write } for pid=12435 comm="syz.5.1727" lport=49243 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 552.452696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.485518][T12439] uprobe: syz.4.1726:12439 failed to unregister, leaking uprobe [ 552.508547][T12439] uprobe: syz.4.1726:12439 failed to unregister, leaking uprobe [ 552.521788][T12434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 552.691372][ T4626] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 552.851392][ T4626] usb 5-1: Using ep0 maxpacket: 16 [ 552.865816][ T4626] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.893797][ T4626] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.950503][ T4626] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 553.011851][ T4626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.078014][ T4626] usb 5-1: SerialNumber: syz [ 553.181871][ T4626] usb 5-1: 0:2 : does not exist [ 553.471845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.696692][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.819285][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.970943][ T4626] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 554.135074][ T29] audit: type=1400 audit(1784356592.935:1201): avc: denied { read write } for pid=12456 comm="syz.6.1732" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 554.245146][ T29] audit: type=1400 audit(1784356592.935:1202): avc: denied { open } for pid=12456 comm="syz.6.1732" path="/dev/sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 554.362765][T12465] syzkaller0: entered promiscuous mode [ 554.377893][T12465] syzkaller0: entered allmulticast mode [ 554.419837][ T4626] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 554.442089][ T4626] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 554.494943][ T4626] usb 5-1: USB disconnect, device number 72 [ 554.633729][ T6266] udevd[6266]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.660089][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 554.742608][T12470] x_tables: duplicate underflow at hook 3 [ 554.759491][T12467] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 554.768280][T12471] x_tables: duplicate underflow at hook 3 [ 554.815686][T12467] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 555.265374][ T7752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.556390][T12478] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1740'. [ 556.515937][T12487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.526923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.569047][T12479] syz.6.1738 (12479): drop_caches: 2 [ 556.576085][T12487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.579004][T12489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12489 comm=syz.1.1741 [ 556.584629][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.622920][T12486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.634360][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.735001][T12489] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 556.994061][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1744'. [ 557.794520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.809137][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.816364][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.916581][ T29] audit: type=1400 audit(1784356596.754:1203): avc: denied { accept } for pid=12499 comm="syz.6.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 559.571972][ T46] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 559.841900][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 559.856060][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 559.856407][ T29] audit: type=1400 audit(1784356598.694:1204): avc: denied { ioctl } for pid=12521 comm="syz.6.1754" path="socket:[44744]" dev="sockfs" ino=44744 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 559.876576][ T46] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 559.908215][T12522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.929391][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.940655][ T46] usb 5-1: config 0 descriptor?? [ 560.100515][T12528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12528 comm=syz.0.1758 [ 560.154148][T12531] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 560.175095][ T5699] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 560.258210][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 560.337590][ T29] audit: type=1400 audit(1784356599.164:1205): avc: denied { ioctl } for pid=12533 comm="syz.1.1757" path="socket:[45592]" dev="sockfs" ino=45592 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 560.367414][T12543] 0x0000000000fd-0x000000020000 : "" [ 560.374361][T12542] fuse: Bad value for 'rootmode' [ 560.386200][ T5699] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.405927][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x0 [ 560.424462][ T5699] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.438956][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.455676][ T29] audit: type=1400 audit(1784356599.164:1206): avc: denied { write } for pid=12533 comm="syz.1.1757" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 560.481423][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.490658][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.497659][ T5699] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.503894][T12543] ftl_cs: FTL header corrupt! [ 560.506906][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.520571][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.527497][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.534925][ T29] audit: type=1400 audit(1784356599.164:1207): avc: denied { open } for pid=12533 comm="syz.1.1757" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 560.559083][ T5699] usb 7-1: SerialNumber: syz [ 560.563733][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.572163][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.579902][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.595431][ T29] audit: type=1400 audit(1784356599.164:1208): avc: denied { ioctl } for pid=12533 comm="syz.1.1757" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 560.625306][ T46] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3 [ 560.633206][ T46] ntrig 0003:1B96:000F.0007: item fetching failed at offset 35/37 [ 560.641427][ T46] ntrig 0003:1B96:000F.0007: parse failed [ 560.647263][ T46] ntrig 0003:1B96:000F.0007: probe with driver ntrig failed with error -22 [ 560.802378][ T5699] usb 7-1: 0:2 : does not exist [ 560.807311][ T5699] usb 7-1: unit 5 not found! [ 560.835687][ T5698] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 560.856813][ T5699] usb 7-1: USB disconnect, device number 23 [ 560.865482][ T29] audit: type=1400 audit(1784356599.684:1209): avc: denied { watch } for pid=12546 comm="syz.1.1762" path="/344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 560.935205][ T29] audit: type=1400 audit(1784356599.684:1210): avc: denied { watch_sb watch_reads } for pid=12546 comm="syz.1.1762" path="/344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 560.994993][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.126099][ T29] audit: type=1400 audit(1784356599.964:1211): avc: denied { open } for pid=12550 comm="syz.0.1764" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 561.173119][ T5698] usb 6-1: Using ep0 maxpacket: 16 [ 561.189145][ T5698] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.203229][ T5698] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 561.224242][ T5698] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 561.234259][T12552] team0: Port device syz_tun removed [ 561.239172][T12552] bridge_slave_1: left allmulticast mode [ 561.240786][ T5698] usb 6-1: config 1 interface 1 has no altsetting 0 [ 561.266030][T12552] bridge_slave_1: left promiscuous mode [ 561.268846][ T5698] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 561.272037][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.285580][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.326793][ T5698] usb 6-1: Product: syz [ 561.331403][ T5698] usb 6-1: Manufacturer: syz [ 561.337179][ T5698] usb 6-1: SerialNumber: syz [ 561.339148][T12552] bond0: (slave bond_slave_0): Releasing backup interface [ 561.369771][T12552] bond0: (slave bond_slave_1): Releasing backup interface [ 561.398516][T12552] team0: Port device team_slave_0 removed [ 561.424172][T12552] team0: Port device team_slave_1 removed [ 561.434827][T12552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.442926][T12552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.452529][T12552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 561.536000][T12554] geneve2: entered promiscuous mode [ 561.551391][T12554] geneve2: entered allmulticast mode [ 561.572881][T12554] batman_adv: batadv0: Adding interface: geneve2 [ 561.580992][ T29] audit: type=1400 audit(1784356600.414:1212): avc: denied { bind } for pid=12558 comm="syz.6.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 561.606779][T12554] batman_adv: batadv0: Interface activated: geneve2 [ 561.652124][T10042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.800667][T12542] netlink: 'syz.5.1761': attribute type 1 has an invalid length. [ 561.851980][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1761'. [ 562.145569][ T5699] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 562.210438][T10042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.343222][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 563.001089][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 563.013079][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 563.026459][T12542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.043394][ T5699] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 563.066853][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.095058][ T5699] usb 2-1: Product: syz [ 563.106786][ T5699] usb 2-1: Manufacturer: syz [ 563.111670][ T5699] usb 2-1: SerialNumber: syz [ 563.126801][ T5698] usb 6-1: selecting invalid altsetting 0 [ 563.137223][ T5699] usb 2-1: config 0 descriptor?? [ 563.200745][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 563.200760][ T29] audit: type=1400 audit(1784356602.034:1214): avc: denied { bind } for pid=12573 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.241830][ T29] audit: type=1400 audit(1784356602.064:1215): avc: denied { setopt } for pid=12573 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.262123][ T29] audit: type=1400 audit(1784356602.064:1216): avc: denied { listen } for pid=12573 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.282534][T10042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.283034][ T5698] usb 6-1: USB disconnect, device number 53 [ 563.303676][T10042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.364873][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.384307][ T5699] usb 2-1: USB disconnect, device number 74 [ 563.405325][ T29] audit: type=1400 audit(1784356602.064:1217): avc: denied { connect } for pid=12573 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.517972][ T29] audit: type=1400 audit(1784356602.074:1218): avc: denied { write } for pid=12573 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.538120][ T29] audit: type=1400 audit(1784356602.124:1219): avc: denied { read } for pid=12573 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.598110][T12580] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1770'. [ 564.109893][T12592] macsec1: entered promiscuous mode [ 564.233334][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 564.265586][T12598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.316139][ T5699] usb 5-1: USB disconnect, device number 73 [ 565.942546][ T5699] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 566.102601][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 566.136437][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 566.162364][ T5699] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 566.180517][ T5699] usb 5-1: can't read configurations, error -71 [ 566.767721][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.941486][T12621] dns_resolver: Unsupported content type (152) [ 566.949487][T12621] comedi comedi3: multiq3: I/O base address not correctly aligned [ 567.142703][ T46] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 567.149555][T12627] syzkaller0: entered promiscuous mode [ 567.155922][T12627] syzkaller0: entered allmulticast mode [ 567.342215][ T29] audit: type=1400 audit(1784356606.143:1220): avc: denied { map } for pid=12629 comm="syz.0.1786" path="socket:[44962]" dev="sockfs" ino=44962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 567.407634][ T29] audit: type=1400 audit(1784356606.143:1221): avc: denied { accept } for pid=12629 comm="syz.0.1786" path="socket:[44962]" dev="sockfs" ino=44962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 567.432751][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 567.462900][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.489737][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.532681][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 567.550579][T12638] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 567.576629][T12638] CIFS mount error: No usable UNC path provided in device string! [ 567.576629][T12638] [ 567.586730][T12638] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 567.615710][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.636939][ T46] usb 2-1: config 0 descriptor?? [ 567.674279][ T46] hub 2-1:0.0: USB hub found [ 567.708684][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 567.870778][ T29] audit: type=1400 audit(1784356606.703:1222): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 567.909669][ T46] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 567.980865][T12647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1791'. [ 568.035455][ T5796] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 568.104543][ T29] audit: type=1400 audit(1784356606.943:1223): avc: denied { bind } for pid=12618 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 568.204785][ T5796] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 568.214398][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.235943][ T5796] usb 5-1: config 0 descriptor?? [ 568.332226][ T46] hid_parser_main: 6 callbacks suppressed [ 568.332244][ T46] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 568.362387][ T46] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 568.685681][ T5796] ath6kl: Failed to submit usb control message: -71 [ 568.692404][ T5796] ath6kl: unable to send the bmi data to the device: -71 [ 568.710629][T12652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.719054][ T5796] ath6kl: Unable to send get target info: -71 [ 568.736665][ T5796] ath6kl: Failed to init ath6kl core: -71 [ 568.755204][ T5796] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 568.764216][T12652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.786839][ T5796] usb 5-1: USB disconnect, device number 76 [ 568.848620][ T9] usb 2-1: USB disconnect, device number 75 [ 569.408028][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 569.572879][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 569.580291][ T9] usb 2-1: no configurations [ 569.586574][ T9] usb 2-1: can't read configurations, error -22 [ 569.733062][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 569.892935][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 569.900504][ T9] usb 2-1: no configurations [ 569.912889][ T9] usb 2-1: can't read configurations, error -22 [ 569.926779][ T9] usb usb2-port1: attempt power cycle [ 570.504730][T12664] futex_wake_op: syz.4.1795 tries to shift op by 36; fix this program [ 570.525676][ T29] audit: type=1400 audit(1784356609.363:1224): avc: denied { ioctl } for pid=12660 comm="syz.4.1795" path="socket:[45939]" dev="sockfs" ino=45939 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 571.139811][T12668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.321154][T12680] syzkaller0: entered promiscuous mode [ 572.327438][T12680] syzkaller0: entered allmulticast mode [ 572.465255][ T29] audit: type=1400 audit(1784356611.303:1225): avc: denied { mount } for pid=12674 comm="syz.0.1798" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 572.514033][ T7752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.710045][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1802'. [ 572.796735][T12702] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 572.876471][T12703] FAULT_INJECTION: forcing a failure. [ 572.876471][T12703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.927694][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.4.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.927723][T12703] Tainted: [L]=SOFTLOCKUP [ 572.927730][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 572.927740][T12703] Call Trace: [ 572.927747][T12703] [ 572.927755][T12703] dump_stack_lvl+0x100/0x190 [ 572.927782][T12703] should_fail_ex.cold+0x5/0xa [ 572.927806][T12703] _copy_to_user+0x32/0xd0 [ 572.927831][T12703] simple_read_from_buffer+0xcb/0x170 [ 572.927863][T12703] proc_fail_nth_read+0x1af/0x230 [ 572.927890][T12703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.927918][T12703] ? rw_verify_area+0xce/0x6d0 [ 572.927941][T12703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.927972][T12703] vfs_read+0x1e4/0xb40 [ 572.928001][T12703] ? __pfx_vfs_read+0x10/0x10 [ 572.928026][T12703] ? __fget_files+0x215/0x3d0 [ 572.928060][T12703] ? __fget_files+0x21f/0x3d0 [ 572.928095][T12703] ksys_read+0x12a/0x250 [ 572.928120][T12703] ? __pfx_ksys_read+0x10/0x10 [ 572.928154][T12703] do_syscall_64+0x115/0x870 [ 572.928181][T12703] ? clear_bhb_loop+0x40/0x90 [ 572.928203][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.928221][T12703] RIP: 0033:0x7f651495e6ce [ 572.928237][T12703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 572.928254][T12703] RSP: 002b:00007f6515911fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.928272][T12703] RAX: ffffffffffffffda RBX: 00007f65159126c0 RCX: 00007f651495e6ce [ 572.928284][T12703] RDX: 000000000000000f RSI: 00007f65159120a0 RDI: 0000000000000008 [ 572.928296][T12703] RBP: 00007f6515912090 R08: 0000000000000000 R09: 0000000000000000 [ 572.928307][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.928319][T12703] R13: 00007f6514c26128 R14: 00007f6514c26090 R15: 00007fff8df0a7e8 [ 572.928344][T12703] [ 573.462834][ T29] audit: type=1400 audit(1784356612.293:1226): avc: denied { append } for pid=12707 comm="syz.6.1806" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 574.281404][ T29] audit: type=1400 audit(1784356613.113:1227): avc: denied { setopt } for pid=12719 comm="syz.1.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.344659][ T29] audit: type=1400 audit(1784356613.133:1228): avc: denied { bind } for pid=12719 comm="syz.1.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.470732][ T29] audit: type=1400 audit(1784356613.143:1229): avc: denied { watch watch_reads } for pid=12719 comm="syz.1.1809" path="/353/file0" dev="tmpfs" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 574.628006][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.636689][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.675167][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.701575][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.721335][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.795750][T12724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.827782][T12724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.183541][ T5699] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 575.343365][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 575.361002][ T5699] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.402238][ T5699] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 575.433460][ T5699] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 575.457103][ T29] audit: type=1400 audit(1784356614.272:1230): avc: denied { ioctl } for pid=12737 comm="syz.1.1815" path="socket:[46134]" dev="sockfs" ino=46134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 575.496255][ T5699] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 575.546011][ T5699] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 575.596570][ T5699] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.651681][ T5699] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.696710][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.948345][ T5699] usb 5-1: GET_CAPABILITIES returned 0 [ 575.963458][ T5796] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 575.975831][ T5699] usbtmc 5-1:16.0: can't read capabilities [ 576.143575][ T5796] usb 6-1: Using ep0 maxpacket: 32 [ 576.177997][ T5796] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 576.214100][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.223326][T12733] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 576.255270][ T5796] usb 6-1: config 0 descriptor?? [ 576.281193][ T46] usb 5-1: USB disconnect, device number 77 [ 576.670642][ T29] audit: type=1400 audit(1784356615.502:1231): avc: denied { getopt } for pid=12743 comm="syz.0.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 576.709651][ T5796] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 576.742033][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.761834][ T5796] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 576.772118][ T5796] usb 6-1: media controller created [ 576.861828][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.986020][T12751] binder: 12750:12751 ioctl 4018620d 0 returned -22 [ 577.239953][T12759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12759 comm=syz.4.1820 [ 577.357524][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 577.830672][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.983805][ T5796] az6027: usb out operation failed. (-71) [ 578.053290][ T5796] az6027: usb out operation failed. (-71) [ 578.059247][ T5796] stb0899_attach: Driver disabled by Kconfig [ 578.065664][ T5796] az6027: no front-end attached [ 578.065664][ T5796] [ 578.073037][ T5796] az6027: usb out operation failed. (-71) [ 578.078845][ T5796] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 578.087695][ T5796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 578.110826][ T5796] dvb-usb: schedule remote query interval to 400 msecs. [ 578.123720][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 578.124336][T12760] fuse: Bad value for 'rootmode' [ 578.137876][ T5796] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 578.165514][ T5796] usb 6-1: USB disconnect, device number 54 [ 578.291284][ T5796] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 578.304915][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 578.399348][T12772] fuse: Bad value for 'rootmode' [ 578.543797][ T5719] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 578.780629][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 578.789807][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.813674][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 578.819691][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.820999][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.840218][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 578.840876][ T5719] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 578.850390][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.875803][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 578.902458][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.916196][ T5719] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 578.942250][ T5719] usb 2-1: config 1 interface 1 has no altsetting 0 [ 578.955563][T12782] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 578.958972][ T5719] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 578.963193][T12782] audit: out of memory in audit_log_start [ 578.979003][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.987659][ T5719] usb 2-1: Product: syz [ 578.995488][ T5719] usb 2-1: Manufacturer: syz [ 579.000124][ T5719] usb 2-1: SerialNumber: syz [ 579.505853][T12785] syz.0.1831 (12785): drop_caches: 2 [ 579.512584][ T4626] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 579.809694][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 579.815746][ T9] usbtmc 7-1:16.0: can't read capabilities [ 579.844489][T12760] netlink: 'syz.1.1822': attribute type 1 has an invalid length. [ 579.864050][ T5698] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 579.872966][T12760] 8021q: adding VLAN 0 to HW filter on device bond15 [ 579.885076][ T4626] usb 5-1: Using ep0 maxpacket: 16 [ 579.897113][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 579.904195][ T4626] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.917961][ T5719] usb 2-1: selecting invalid altsetting 0 [ 579.939950][ T4626] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 579.957593][ T5719] usb 2-1: USB disconnect, device number 79 [ 579.972925][ T4626] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.993776][ T4626] usb 5-1: config 1 interface 1 has no altsetting 0 [ 580.008923][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.040724][ T5698] usb 6-1: Using ep0 maxpacket: 8 [ 580.071768][ T5698] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 580.089589][ T4626] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 580.100212][ T5698] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.112630][ T4626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.136610][ T5698] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.148806][ T4626] usb 5-1: Product: syz [ 580.153156][ T4626] usb 5-1: Manufacturer: syz [ 580.159400][ T5698] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 580.172466][ T4626] usb 5-1: SerialNumber: syz [ 580.180274][ T5698] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.198758][ T5698] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 580.233621][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.247118][T12757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.360060][ T5719] usb 7-1: USB disconnect, device number 24 [ 580.414710][T12772] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 580.475343][ T5698] usb 6-1: GET_CAPABILITIES returned 0 [ 580.486326][T12772] 8021q: adding VLAN 0 to HW filter on device bond16 [ 580.493332][ T5698] usbtmc 6-1:16.0: can't read capabilities [ 580.506809][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1826'. [ 580.567336][ T4626] usb 5-1: selecting invalid altsetting 0 [ 580.610824][T12809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12809 comm=syz.0.1836 [ 580.658905][T12809] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 580.668761][ T4626] usb 5-1: USB disconnect, device number 78 [ 580.691052][ T9] usb 6-1: USB disconnect, device number 55 [ 580.818321][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.549459][ T29] audit: type=1400 audit(1784356620.392:1232): avc: denied { associate } for pid=12818 comm="syz.1.1837" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 581.779643][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1841'. [ 581.810129][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1841'. [ 582.081805][T12825] batman_adv: batadv0: Adding interface: dummy0 [ 582.139113][T12825] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.226552][T12842] FAULT_INJECTION: forcing a failure. [ 582.226552][T12842] name failslab, interval 1, probability 0, space 0, times 0 [ 582.240923][T12842] CPU: 0 UID: 0 PID: 12842 Comm: syz.1.1842 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.240951][T12842] Tainted: [L]=SOFTLOCKUP [ 582.240958][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 582.240969][T12842] Call Trace: [ 582.240975][T12842] [ 582.240982][T12842] dump_stack_lvl+0x100/0x190 [ 582.241009][T12842] should_fail_ex.cold+0x5/0xa [ 582.241030][T12842] ? __lock_acquire+0x49f/0x1a40 [ 582.241053][T12842] should_failslab+0xc2/0x120 [ 582.241075][T12842] kmem_cache_alloc_noprof+0x91/0x6a0 [ 582.241096][T12842] ? dst_alloc+0x99/0x1a0 [ 582.241128][T12842] dst_alloc+0x99/0x1a0 [ 582.241153][T12842] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 582.241179][T12842] rt_dst_alloc+0x35/0x3a0 [ 582.241207][T12842] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 582.241237][T12842] ip_route_output_key_hash+0x118/0x2b0 [ 582.241260][T12842] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 582.241296][T12842] ip_route_output_flow+0x27/0x150 [ 582.241319][T12842] tcp_v4_connect+0x8e8/0x1b40 [ 582.241348][T12842] ? __pfx_tcp_v4_connect+0x10/0x10 [ 582.241366][T12842] ? mptcp_token_new_connect+0x1e4/0x620 [ 582.241403][T12842] mptcp_connect+0x4c6/0xaf0 [ 582.241431][T12842] __inet_stream_connect+0x208/0xfa0 [ 582.241450][T12842] ? irqentry_exit+0x24d/0xa00 [ 582.241477][T12842] ? irqentry_exit+0x24d/0xa00 [ 582.241505][T12842] ? __pfx___inet_stream_connect+0x10/0x10 [ 582.241537][T12842] tcp_sendmsg_fastopen+0x3ed/0x750 [ 582.241564][T12842] mptcp_sendmsg+0x1641/0x2210 [ 582.241590][T12842] ? reacquire_held_locks+0xce/0x1e0 [ 582.241616][T12842] ? selinux_netlbl_socket_connect+0x30/0x40 [ 582.241642][T12842] ? find_held_lock+0x2b/0x80 [ 582.241668][T12842] ? selinux_netlbl_socket_connect+0x30/0x40 [ 582.241693][T12842] ? selinux_netlbl_socket_connect+0x30/0x40 [ 582.241719][T12842] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 582.241745][T12842] ? __local_bh_enable_ip+0x9e/0x120 [ 582.241769][T12842] ? __local_bh_enable_ip+0x9e/0x120 [ 582.241790][T12842] ? selinux_netlbl_socket_connect+0x30/0x40 [ 582.241817][T12842] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 582.241845][T12842] inet_sendmsg+0x11c/0x140 [ 582.241865][T12842] ____sys_sendmsg+0x9c9/0xbe0 [ 582.241887][T12842] ? __pfx_inet_sendmsg+0x10/0x10 [ 582.241909][T12842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.241936][T12842] ? rcu_is_watching+0x12/0xc0 [ 582.241961][T12842] ? trace_sched_exit_tp+0x120/0x160 [ 582.241987][T12842] ? __schedule+0x126e/0x6730 [ 582.242014][T12842] ___sys_sendmsg+0x190/0x1e0 [ 582.242041][T12842] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.242078][T12842] ? find_held_lock+0x2b/0x80 [ 582.242120][T12842] __sys_sendmmsg+0x20c/0x440 [ 582.242143][T12842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 582.242161][T12842] ? ksys_write+0x190/0x250 [ 582.242206][T12842] ? fput+0x79/0x100 [ 582.242224][T12842] ? ksys_write+0x1ac/0x250 [ 582.242249][T12842] ? __pfx_ksys_write+0x10/0x10 [ 582.242273][T12842] ? trace_hardirqs_off+0x70/0x170 [ 582.242299][T12842] __x64_sys_sendmmsg+0x9c/0x100 [ 582.242318][T12842] ? lockdep_hardirqs_on+0x78/0x100 [ 582.242344][T12842] do_syscall_64+0x115/0x870 [ 582.242369][T12842] ? clear_bhb_loop+0x40/0x90 [ 582.242397][T12842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.242415][T12842] RIP: 0033:0x7f176ab9de99 [ 582.242431][T12842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.242448][T12842] RSP: 002b:00007f1768dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 582.242466][T12842] RAX: ffffffffffffffda RBX: 00007f176ae26180 RCX: 00007f176ab9de99 [ 582.242478][T12842] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 582.242489][T12842] RBP: 00007f1768dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 582.242500][T12842] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 582.242511][T12842] R13: 00007f176ae26218 R14: 00007f176ae26180 R15: 00007fff0cc34a98 [ 582.242536][T12842] [ 582.369228][T12825] batman_adv: batadv0: Interface activated: dummy0 [ 582.636381][ T5719] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 582.703645][T12846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.712008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.720296][T12846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.994158][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 583.054520][T12843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.075521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.098476][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.106664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.121010][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 583.152006][ T5719] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 583.208499][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.209808][T12856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12856 comm=syz.1.1848 [ 583.243517][ T5719] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 583.251242][T12841] batadv0: mtu less than device minimum [ 583.259824][T12856] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 583.262940][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.268737][T12841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.278033][ T5719] usb 6-1: Product: syz [ 583.287433][T12841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.306598][T12841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.317343][T12841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.376649][ T5719] usb 6-1: Manufacturer: syz [ 583.387169][ T5719] usb 6-1: SerialNumber: syz [ 583.387993][ T29] audit: type=1400 audit(1784356622.222:1233): avc: denied { bind } for pid=12859 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.404930][ T5719] usb 6-1: config 0 descriptor?? [ 583.918792][ T5719] gs_usb 6-1:0.0: Configuring for 15 interfaces [ 584.789543][T12875] syzkaller0: entered promiscuous mode [ 584.795102][T12875] syzkaller0: entered allmulticast mode [ 585.017028][T12883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.256915][ T5719] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 585.273796][ T5719] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 585.285445][ T5719] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 586.663167][ T5719] usb 6-1: USB disconnect, device number 56 [ 587.944441][ T29] audit: type=1400 audit(1784356626.751:1234): avc: denied { listen } for pid=12888 comm="syz.0.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 588.652161][T12894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12894 comm=syz.6.1859 [ 588.676962][T12894] net_ratelimit: 16 callbacks suppressed [ 588.676984][T12894] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 588.712655][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1860'. [ 588.722762][T12896] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 588.848533][T12898] fuse: Bad value for 'rootmode' [ 589.087507][ T29] audit: type=1400 audit(1784356627.931:1235): avc: denied { write } for pid=12899 comm="syz.5.1862" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 589.134220][T12903] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1863'. [ 589.155095][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.160893][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 589.227411][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 589.654465][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 590.837560][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.863252][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 590.873085][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 590.884824][ T9] usb 7-1: config 1 interface 1 has no altsetting 0 [ 590.895763][ T9] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 590.906387][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.915128][ T9] usb 7-1: Product: syz [ 590.919696][ T9] usb 7-1: Manufacturer: syz [ 590.924773][ T9] usb 7-1: SerialNumber: syz [ 591.502429][T12898] netlink: 'syz.6.1861': attribute type 1 has an invalid length. [ 591.553534][T12898] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.687141][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1861'. [ 591.703534][T12926] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1868'. [ 591.760858][T12930] syzkaller0: entered promiscuous mode [ 591.767916][T12930] syzkaller0: entered allmulticast mode [ 591.771440][ T9] usb 7-1: selecting invalid altsetting 0 [ 591.815847][T12930] tipc: Started in network mode [ 591.836271][T12930] tipc: Node identity ee8df4195e1a, cluster identity 4711 [ 591.860643][T12930] tipc: Enabled bearer , priority 0 [ 591.927115][T12936] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 591.964975][ T9] usb 7-1: USB disconnect, device number 25 [ 592.008994][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.059330][T12929] tipc: Resetting bearer [ 592.138442][T12929] tipc: Disabling bearer [ 592.248268][T12928] kvm: pic: non byte read [ 592.252784][T12928] kvm: pic: level sensitive irq not supported [ 592.252834][T12928] kvm: pic: non byte read [ 592.465486][ T29] audit: type=1400 audit(1784356631.301:1236): avc: denied { read } for pid=12951 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 592.628295][T12962] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1876'. [ 592.660067][T12962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12962 comm=syz.6.1876 [ 594.071122][T12982] netlink: 'syz.6.1882': attribute type 2 has an invalid length. [ 594.085338][ T5719] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 594.207923][T12987] macsec1: entered promiscuous mode [ 594.270609][ T5719] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 594.288451][ T7752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.390433][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.477500][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.326227][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.369830][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.404292][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.446445][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.466040][T12994] trusted_key: encrypted_key: insufficient parameters specified [ 595.481070][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.511754][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.547755][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.575925][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.588318][ T29] audit: type=1400 audit(1784356634.431:1237): avc: denied { kexec_image_load } for pid=12995 comm="syz.0.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 595.623628][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.656343][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.675721][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.690305][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.714353][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.736866][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.754264][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.781344][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.798677][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.807911][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.818944][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.826569][ T5719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.839442][ T5719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 595.851411][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.861407][ T5719] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 595.870723][ T5719] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 595.883402][ T5719] usb 2-1: Product: syz [ 595.887934][ T5719] usb 2-1: Manufacturer: syz [ 595.892593][ T5719] usb 2-1: SerialNumber: syz [ 595.971997][ T5719] usb 2-1: config 0 descriptor?? [ 595.988631][ T5719] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 596.024849][ T46] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 596.165682][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 596.175846][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 596.182890][ T46] usb 6-1: config index 0 descriptor too short (expected 30768, got 72) [ 596.191501][ T46] usb 6-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 596.200667][ T46] usb 6-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 596.211084][ T46] usb 6-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 596.222658][ T46] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 596.231953][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.239976][ T46] usb 6-1: Product: syz [ 596.244219][ T46] usb 6-1: Manufacturer: syz [ 596.248916][ T46] usb 6-1: SerialNumber: syz [ 596.468890][ T29] audit: type=1400 audit(1784356635.311:1238): avc: denied { bind } for pid=12999 comm="syz.5.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 596.555012][ T46] usb 6-1: USB disconnect, device number 57 [ 597.242894][ T5744] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 597.267140][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 597.278087][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 597.289254][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.306523][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 597.323283][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 597.333604][ T9] usb 5-1: Product: syz [ 597.338615][ T9] usb 5-1: Manufacturer: syz [ 597.343764][ T9] usb 5-1: SerialNumber: syz [ 597.395995][ T5744] usb 7-1: device descriptor read/64, error -71 [ 598.026950][ T9] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 598.085881][ T9] usb 5-1: USB disconnect, device number 79 [ 598.119392][ T9] usblp1: removed [ 598.213391][ T5744] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 598.459489][ T29] audit: type=1400 audit(1784356637.301:1239): avc: denied { write } for pid=13021 comm="syz.4.1894" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 598.477888][ T5698] usb 2-1: USB disconnect, device number 80 [ 598.485237][T13023] random: crng reseeded on system resumption [ 598.514998][ T5744] usb 7-1: device descriptor read/64, error -71 [ 598.538906][ T5698] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 598.579490][ T29] audit: type=1400 audit(1784356637.331:1240): avc: denied { open } for pid=13021 comm="syz.4.1894" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 598.595114][T13024] netlink: 'syz.4.1894': attribute type 7 has an invalid length. [ 598.688185][ T5744] usb usb7-port1: attempt power cycle [ 600.087869][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.379501][T13039] 9p: Bad value for 'rfdno' [ 600.623685][T13049] orangefs_devreq_open: device cannot be opened in blocking mode [ 600.628017][ T29] audit: type=1400 audit(1784356639.461:1241): avc: denied { read } for pid=13045 comm="syz.6.1901" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 600.830301][ T29] audit: type=1400 audit(1784356639.471:1242): avc: denied { create } for pid=13047 comm="syz.5.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 601.025238][ T5698] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 601.112796][ T29] audit: type=1400 audit(1784356639.611:1243): avc: denied { write } for pid=13052 comm="syz.1.1902" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 601.225732][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 601.239885][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.254265][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.269209][ T5698] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 601.280058][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.303845][ T5698] usb 2-1: config 0 descriptor?? [ 601.373255][T13046] orangefs_mount: mount request failed with -4 [ 601.447588][T13063] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 601.531014][ T46] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 601.576389][T13063] /dev/nullb0: Can't lookup blockdev [ 601.736472][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 601.806553][ T5698] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 601.820512][ T5698] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 601.820714][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.851885][ T46] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 601.867534][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.876504][ T46] usb 5-1: Product: syz [ 601.880746][ T46] usb 5-1: Manufacturer: syz [ 601.885646][ T46] usb 5-1: SerialNumber: syz [ 601.899280][ T46] usb 5-1: config 0 descriptor?? [ 601.912924][ T46] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 602.046471][ T5698] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 602.232538][T13073] binder: 13072:13073 ioctl c0306201 0 returned -14 [ 602.254538][ T5698] ft260 0003:0403:6030.0009: failed to retrieve system status [ 602.282029][ T5698] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -32 [ 602.503930][T13061] unsupported nlmsg_type 40 [ 602.518362][ T46] usb 5-1: qt2_attach - failed to power on unit: -71 [ 602.530515][ T46] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 602.551726][ T46] usb 5-1: USB disconnect, device number 80 [ 602.696355][T13084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.879508][ T29] audit: type=1400 audit(1784356642.721:1244): avc: denied { shutdown } for pid=13093 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 604.341976][ T46] usb 2-1: USB disconnect, device number 81 [ 605.796266][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.943558][T13111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36368 sclass=netlink_route_socket pid=13111 comm=syz.1.1917 [ 607.041550][T13123] input: syz0 as /devices/virtual/input/input45 [ 607.505743][ T5796] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 608.285590][ T5744] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 608.316413][ T29] audit: type=1400 audit(1784356647.160:1245): avc: denied { listen } for pid=13141 comm="syz.0.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 608.367277][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 608.445540][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 608.468225][ T5796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 608.482696][ T5796] usb 2-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 608.495642][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.495741][ T5744] usb 6-1: device descriptor read/64, error -71 [ 608.531815][T13150] overlay: Unknown parameter 'obj_user' [ 608.586979][ T5796] usb 2-1: config 0 descriptor?? [ 608.895640][ T5744] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 609.101381][ T5744] usb 6-1: device descriptor read/64, error -71 [ 609.120570][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x0 [ 609.134503][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.328080][ T5744] usb usb6-port1: attempt power cycle [ 609.361180][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.413186][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.452305][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.491815][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.531462][ T29] audit: type=1400 audit(1784356648.360:1246): avc: denied { write } for pid=13156 comm="syz.6.1931" name="file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 609.684458][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.692910][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.711039][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.745671][ T5744] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 609.760175][ T5796] ntrig 0003:1B96:000F.000A: unknown main item tag 0x3 [ 609.776363][ T29] audit: type=1400 audit(1784356648.360:1247): avc: denied { open } for pid=13156 comm="syz.6.1931" path="/102/file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 609.820857][ T5796] ntrig 0003:1B96:000F.000A: item fetching failed at offset 35/37 [ 609.869967][ T5744] usb 6-1: device descriptor read/8, error -71 [ 609.880832][ T5796] ntrig 0003:1B96:000F.000A: parse failed [ 609.903870][ T5796] ntrig 0003:1B96:000F.000A: probe with driver ntrig failed with error -22 [ 609.918970][ T29] audit: type=1400 audit(1784356648.540:1248): avc: denied { ioctl } for pid=13156 comm="syz.6.1931" path="/102/file0" dev="tmpfs" ino=568 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 610.249923][T13169] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 610.277019][ T5744] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 610.318444][ T5744] usb 6-1: device descriptor read/8, error -71 [ 610.367656][ T29] audit: type=1400 audit(1784356649.210:1249): avc: denied { write } for pid=13178 comm="syz.5.1934" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 610.399968][ T29] audit: type=1400 audit(1784356649.210:1250): avc: denied { open } for pid=13178 comm="syz.5.1934" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 610.427921][ T29] audit: type=1400 audit(1784356649.210:1251): avc: denied { ioctl } for pid=13178 comm="syz.5.1934" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 610.459527][ T5744] usb usb6-port1: unable to enumerate USB device [ 610.936011][ T5744] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 610.971700][ T29] audit: type=1400 audit(1784356649.810:1252): avc: denied { read append } for pid=13187 comm="syz.4.1936" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 611.085730][ T5699] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 611.102441][ T29] audit: type=1400 audit(1784356649.810:1253): avc: denied { ioctl open } for pid=13187 comm="syz.4.1936" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 611.130559][ T5744] usb 6-1: Using ep0 maxpacket: 8 [ 611.163495][ T5744] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 611.173100][ T5744] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 611.189616][ T5744] usb 6-1: Product: syz [ 611.199731][ T5744] usb 6-1: Manufacturer: syz [ 611.205764][ T4626] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 611.219925][ T5744] usb 6-1: SerialNumber: syz [ 611.258031][ T5744] usb 6-1: config 0 descriptor?? [ 611.302574][ T5744] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 611.356543][ T4626] usb 5-1: Using ep0 maxpacket: 16 [ 611.380900][ T4626] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.391843][ T4626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.395668][ T5699] usb 7-1: Using ep0 maxpacket: 32 [ 611.410217][ T4626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 611.468520][ T5699] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 611.479311][ T4626] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 611.494224][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.504664][ T4626] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.512800][ T5699] usb 7-1: config 0 descriptor?? [ 611.560542][T13192] xt_hashlimit: size too large, truncated to 1048576 [ 611.600489][ T4626] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 611.620084][ T4626] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 611.620351][T10043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.650862][ T4626] usb 5-1: Manufacturer: syz [ 611.657289][ T4626] usb 5-1: config 0 descriptor?? [ 611.794589][ T5699] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 611.807773][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 611.817745][ T5699] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 611.824957][ T5699] usb 7-1: media controller created [ 611.843702][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.953616][ T5744] gspca_zc3xx: reg_r err -71 [ 611.959329][ T5744] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 611.979812][ T5744] usb 6-1: USB disconnect, device number 62 [ 612.126348][ T4626] rc_core: IR keymap rc-hauppauge not found [ 612.132740][ T4626] Registered IR keymap rc-empty [ 612.138544][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.165789][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.186743][ T4626] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 612.204949][ T4626] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input46 [ 612.212788][ T5699] az6027: usb out operation failed. (-71) [ 612.229407][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.229551][ T5699] az6027: usb out operation failed. (-71) [ 612.243788][ T5699] stb0899_attach: Driver disabled by Kconfig [ 612.250032][ T5699] az6027: no front-end attached [ 612.250032][ T5699] [ 612.258465][ T5699] az6027: usb out operation failed. (-71) [ 612.264157][ T5699] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 612.274150][ T5699] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input47 [ 612.286633][ T5699] dvb-usb: schedule remote query interval to 400 msecs. [ 612.294238][ T5699] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 612.304743][ T5699] usb 7-1: USB disconnect, device number 29 [ 612.338476][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.378648][ T5699] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 612.381432][ T5744] usb 2-1: USB disconnect, device number 82 [ 612.441927][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.480380][T13199] netlink: 'syz.0.1939': attribute type 2 has an invalid length. [ 612.553149][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.673667][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.689900][ T29] audit: type=1400 audit(1784356651.530:1254): avc: denied { write } for pid=13200 comm="syz.1.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 612.735207][T13206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.735826][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.785394][T13206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.872389][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 612.970281][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 613.135846][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 613.975888][ T4626] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 614.020520][ T4626] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 614.112442][ T4626] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 614.126785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.267817][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 614.279274][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 614.288493][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 614.299157][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 614.308439][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 614.343088][ T4626] usb 5-1: USB disconnect, device number 81 [ 614.485811][ T5796] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 616.708440][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.850323][ T5796] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 616.912532][ T5796] usb 7-1: config 1 has no interface number 0 [ 616.943945][ T5796] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 616.987162][ T5796] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 617.022828][ T5796] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.078957][ T5796] usb 7-1: string descriptor 0 read error: -71 [ 617.122965][ T5796] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 617.191598][ T5796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.196073][ T4626] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 617.245910][ T5796] usb 7-1: can't set config #1, error -71 [ 617.264803][ T5796] usb 7-1: USB disconnect, device number 30 [ 617.475943][ T4626] usb 2-1: Using ep0 maxpacket: 8 [ 617.492480][ T4626] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 617.510578][ T4626] usb 2-1: config 0 has no interface number 0 [ 617.560551][ T4626] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 617.598408][ T29] audit: type=1400 audit(1784356656.420:1255): avc: denied { setopt } for pid=13251 comm="syz.5.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 617.625698][ T4626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.645899][ T4626] usb 2-1: Product: syz [ 617.650070][ T4626] usb 2-1: Manufacturer: syz [ 617.654660][ T4626] usb 2-1: SerialNumber: syz [ 617.669601][ T4626] usb 2-1: config 0 descriptor?? [ 617.687642][ T29] audit: type=1400 audit(1784356656.520:1256): avc: denied { cmd } for pid=13258 comm="iou-wrk-13259" path="socket:[48520]" dev="sockfs" ino=48520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 617.729376][ T4626] usb 2-1: selecting invalid altsetting 1 [ 617.744255][ T4626] dvb_ttusb_budget: ttusb_init_controller: error [ 617.776613][ T4626] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 617.817966][T13264] IPVS: Scheduler module ip_vs_ not found [ 617.857096][ T5796] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 617.915718][ T4626] DVB: Unable to find symbol stv0299_attach() [ 617.940806][ T4626] DVB: Unable to find symbol tda8083_attach() [ 617.946911][ T4626] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 618.041353][ T5744] usb 2-1: USB disconnect, device number 83 [ 618.060466][ T5796] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 618.077658][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 618.112561][ T5796] usb 6-1: Product: syz [ 618.152273][ T5796] usb 6-1: config 0 descriptor?? [ 618.168247][ T5796] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 618.189189][ T5796] usb 6-1: Detected FT232H [ 618.369508][ T5796] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 618.861164][ T5796] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 618.957190][ T46] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 619.130164][ T46] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 619.155961][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.156038][ T5744] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 619.187072][ T46] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 619.203471][ T46] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 619.213420][ T29] audit: type=1400 audit(1784356658.050:1257): avc: denied { bind } for pid=13282 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 619.221687][ T46] usb 2-1: Manufacturer: syz [ 619.239997][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.247208][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.251509][ T46] usb 2-1: config 0 descriptor?? [ 619.336074][ T5744] usb 7-1: Using ep0 maxpacket: 16 [ 619.344808][ T5744] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 619.353452][T13290] syzkaller0: entered promiscuous mode [ 619.358994][ T5744] usb 7-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 619.363729][T13290] syzkaller0: entered allmulticast mode [ 619.373535][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.379729][ T46] rc_core: IR keymap rc-hauppauge not found [ 619.399232][ T5744] usb 7-1: config 0 descriptor?? [ 619.399948][ T46] Registered IR keymap rc-empty [ 619.421239][ T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 619.445511][ T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 619.621398][T13295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13295 comm=syz.4.1964 [ 619.639494][T13295] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 619.667663][T13295] 8021q: adding VLAN 0 to HW filter on device bond17 [ 619.700202][T13295] vlan2: entered allmulticast mode [ 619.705626][T13295] veth0_to_bond: entered allmulticast mode [ 619.720347][T13295] bond17: (slave vlan2): making interface the new active one [ 619.732865][T13295] bond17: (slave vlan2): Enslaving as an active interface with an up link [ 619.820003][ T5744] hid_parser_main: 6 callbacks suppressed [ 619.820029][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x0 [ 619.844214][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.853271][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.861578][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.862216][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 619.868436][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.881692][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.888553][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.895407][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.902289][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.909142][ T5744] ntrig 0003:1B96:000F.000B: unknown main item tag 0x3 [ 619.916043][ T5744] ntrig 0003:1B96:000F.000B: item fetching failed at offset 35/37 [ 619.924279][ T5744] ntrig 0003:1B96:000F.000B: parse failed [ 619.930208][ T5744] ntrig 0003:1B96:000F.000B: probe with driver ntrig failed with error -22 [ 620.086076][ T46] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 620.171848][ T29] audit: type=1400 audit(1784356659.010:1258): avc: denied { create } for pid=13303 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 620.199423][ T29] audit: type=1400 audit(1784356659.030:1259): avc: denied { write } for pid=13303 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 620.256811][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 620.264512][ T46] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 620.275017][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 620.287252][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 620.301424][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 620.319466][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 620.328884][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.337144][ T46] usb 5-1: Product: syz [ 620.341465][ T46] usb 5-1: Manufacturer: syz [ 620.346501][ T46] usb 5-1: SerialNumber: syz [ 620.354907][ T46] usb 5-1: config 0 descriptor?? [ 620.525350][ T5796] usb 6-1: USB disconnect, device number 63 [ 620.618282][ T5796] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 620.664741][ T46] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 620.687328][ T5796] ftdi_sio 6-1:0.0: device disconnected [ 620.705100][ T46] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 621.317855][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 621.478247][ T5796] usb 5-1: USB disconnect, device number 82 [ 621.704019][ T5744] usb 2-1: USB disconnect, device number 84 [ 622.436988][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.648002][T13342] netlink: 'syz.0.1975': attribute type 19 has an invalid length. [ 622.856124][ T46] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 623.029099][ T5744] usb 7-1: USB disconnect, device number 31 [ 623.345984][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 623.383706][ T46] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 623.412375][ T46] usb 5-1: can't read configurations, error -71 [ 623.549619][T13349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1978'. [ 624.765463][T13368] IPv6: NLM_F_REPLACE set, but no existing node found! [ 624.834673][ T29] audit: type=1400 audit(1784356663.670:1260): avc: denied { accept } for pid=13367 comm="syz.4.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 625.108002][T13374] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 625.396218][ T5796] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 625.576217][ T5796] usb 7-1: Using ep0 maxpacket: 8 [ 625.731407][ T5796] usb 7-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 625.774602][ T5796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.801296][ T5796] usb 7-1: Product: syz [ 625.823103][ T5796] usb 7-1: Manufacturer: syz [ 625.848109][ T5796] usb 7-1: SerialNumber: syz [ 626.187264][T13384] input: syz1 as /devices/virtual/input/input49 [ 627.251093][T13376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.322575][T13376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.350410][ T29] audit: type=1326 audit(1784356666.159:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13387 comm="syz.1.1988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f176ab9de99 code=0x0 [ 627.424375][ T5796] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 627.483326][ T29] audit: type=1400 audit(1784356666.319:1262): avc: denied { map } for pid=13391 comm="syz.4.1989" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 627.596966][T10039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.632232][ T5796] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 627.761795][ T5796] usb 7-1: USB disconnect, device number 32 [ 627.797865][ T6266] udevd[6266]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.978853][T13395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 628.254509][T13403] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 628.357604][ T29] audit: type=1400 audit(1784356667.189:1263): avc: denied { create } for pid=13404 comm="syz.6.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 628.457554][ T29] audit: type=1400 audit(1784356667.239:1264): avc: denied { read } for pid=13404 comm="syz.6.1993" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 628.686055][ T29] audit: type=1400 audit(1784356667.519:1265): avc: denied { create } for pid=13412 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 628.740236][ T29] audit: type=1400 audit(1784356667.519:1266): avc: denied { ioctl } for pid=13412 comm="syz.1.1994" path="socket:[48855]" dev="sockfs" ino=48855 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 628.825469][T13421] FAULT_INJECTION: forcing a failure. [ 628.825469][T13421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.841475][T13421] CPU: 1 UID: 0 PID: 13421 Comm: syz.4.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.841503][T13421] Tainted: [L]=SOFTLOCKUP [ 628.841510][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 628.841520][T13421] Call Trace: [ 628.841526][T13421] [ 628.841533][T13421] dump_stack_lvl+0x100/0x190 [ 628.841559][T13421] should_fail_ex.cold+0x5/0xa [ 628.841580][T13421] _copy_from_user+0x2e/0xd0 [ 628.841602][T13421] copy_msghdr_from_user+0x9f/0x4c0 [ 628.841628][T13421] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 628.841662][T13421] ___sys_sendmsg+0x106/0x1e0 [ 628.841686][T13421] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.841708][T13421] ? __lock_acquire+0x49f/0x1a40 [ 628.841727][T13421] ? get_pid_task+0x106/0x250 [ 628.841776][T13421] __sys_sendmsg+0x160/0x210 [ 628.841795][T13421] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.841825][T13421] do_syscall_64+0x115/0x870 [ 628.841850][T13421] ? clear_bhb_loop+0x40/0x90 [ 628.841871][T13421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.841888][T13421] RIP: 0033:0x7f651499de99 [ 628.841902][T13421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.841919][T13421] RSP: 002b:00007f6515933028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.841936][T13421] RAX: ffffffffffffffda RBX: 00007f6514c25fa0 RCX: 00007f651499de99 [ 628.841948][T13421] RDX: 00000000040080c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 628.841958][T13421] RBP: 00007f6515933090 R08: 0000000000000000 R09: 0000000000000000 [ 628.841969][T13421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.841980][T13421] R13: 00007f6514c26038 R14: 00007f6514c25fa0 R15: 00007fff8df0a7e8 [ 628.842003][T13421] [ 629.017854][ T5698] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 629.176385][ T46] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 629.176851][ T5698] usb 7-1: Using ep0 maxpacket: 16 [ 629.222859][T13428] /dev/nullb0: Can't lookup blockdev [ 629.255077][ T5698] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 629.278077][ T5698] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 629.307635][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 629.320088][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 629.336481][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 629.341599][ T5698] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 629.349694][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.356672][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.362539][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.371548][ T5698] usb 7-1: Product: syz [ 629.382719][ T46] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 629.393800][ T5698] usb 7-1: Manufacturer: syz [ 629.393835][ T5698] usb 7-1: SerialNumber: syz [ 629.405002][ T5698] usb 7-1: config 0 descriptor?? [ 629.407319][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.538698][ T46] usb 2-1: config 0 descriptor?? [ 629.607232][T13435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2001'. [ 629.750329][ T5698] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 629.965895][ T5698] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 630.004711][ T46] hid_parser_main: 6 callbacks suppressed [ 630.004729][ T46] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 630.062269][ T46] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 630.101965][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1995'. [ 630.202628][ T46] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 630.254605][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2004'. [ 630.381500][T13445] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 630.403121][ T46] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 630.509883][ T5796] usb 7-1: USB disconnect, device number 33 [ 630.596518][ T5744] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 630.616353][ T46] ft260 0003:0403:6030.000C: failed to retrieve status: -71, no wakeup [ 630.652922][ T46] ft260 0003:0403:6030.000C: failed to retrieve status: -71 [ 630.675504][ T46] ft260 0003:0403:6030.000C: failed to reset I2C controller: -71 [ 630.701239][T13449] syzkaller0: entered promiscuous mode [ 630.725844][T13449] syzkaller0: entered allmulticast mode [ 630.737055][ T46] usb 2-1: USB disconnect, device number 85 [ 631.008278][ T5744] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 631.028733][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.051183][ T5744] usb 6-1: config 0 descriptor?? [ 631.436501][ T46] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 631.444083][ T5699] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 631.490000][ T5698] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 631.708057][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 631.720317][ T46] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 631.735639][ T5699] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.746604][ T46] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 110, changing to 7 [ 631.758587][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 631.765567][ T5699] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 631.787971][ T46] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 631.803948][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.812120][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.831468][ T46] usb 7-1: Product: М [ 631.836079][ T5699] usb 2-1: config 0 descriptor?? [ 631.842408][ T46] usb 7-1: Manufacturer: ࠖ [ 631.846581][ T5698] usb 5-1: Using ep0 maxpacket: 16 [ 631.868789][ T5698] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 631.884320][ T5744] ath6kl: Failed to submit usb control message: -71 [ 631.891795][ T5698] usb 5-1: config 0 has no interface number 0 [ 631.899457][ T5744] ath6kl: unable to send the bmi data to the device: -71 [ 631.907625][ T5698] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 631.919395][ T5744] ath6kl: Unable to send get target info: -71 [ 631.927313][ T5698] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 631.942294][ T5744] ath6kl: Failed to init ath6kl core: -71 [ 631.955825][ T5744] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 631.974448][ T5698] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 631.994666][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.003911][ T5744] usb 6-1: USB disconnect, device number 64 [ 632.013741][ T5698] usb 5-1: Product: syz [ 632.020752][ T5698] usb 5-1: Manufacturer: syz [ 632.025655][ T5698] usb 5-1: SerialNumber: syz [ 632.033789][ T5698] usb 5-1: config 0 descriptor?? [ 632.041101][T13453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 632.051880][T13453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 632.081213][T13455] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 632.087718][T13455] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 632.096764][T13455] vhci_hcd vhci_hcd.0: Device attached [ 632.109265][T13462] vhci_hcd: cannot find a urb of seqnum 2 max seqnum 0 [ 632.118278][ T7752] vhci_hcd vhci_hcd.6: stop threads [ 632.124307][ T7752] vhci_hcd vhci_hcd.6: release socket [ 632.134751][ T7752] vhci_hcd vhci_hcd.6: disconnect device [ 632.142516][ T29] audit: type=1400 audit(1784356670.979:1267): avc: denied { setattr } for pid=13454 comm="syz.6.2008" name="cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 632.182523][ T46] usb 7-1: 1:1 : bogus bTerminalLink 9 [ 632.188559][ T46] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 632.239873][ T46] usb 7-1: USB disconnect, device number 34 [ 632.279144][T13453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 632.295880][T13453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 632.320098][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.320235][ T5699] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 632.512886][ T5698] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 632.582328][ T29] audit: type=1400 audit(1784356671.419:1268): avc: denied { watch } for pid=13467 comm="syz.0.2012" path="/501/file1" dev="tmpfs" ino=2682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 632.728944][ T5698] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 632.740058][ T5698] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 632.763726][ T5698] asix 5-1:0.34: probe with driver asix failed with error -61 [ 632.819958][ T5698] usb 2-1: USB disconnect, device number 86 [ 632.962242][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 633.056842][T13475] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2014'. [ 633.216590][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 633.242192][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 633.260758][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.282126][ T9] usb 6-1: Product: syz [ 633.293858][ T9] usb 6-1: Manufacturer: syz [ 633.303790][ T9] usb 6-1: SerialNumber: syz [ 633.463442][ T9] usb 6-1: config 0 descriptor?? [ 634.686976][ T9] airspy 6-1:0.0: usb_control_msg() failed -110 request 09 [ 634.699671][ T9] airspy 6-1:0.0: Could not detect board [ 634.705935][ T9] airspy 6-1:0.0: probe with driver airspy failed with error -110 [ 634.773927][ T5796] usb 5-1: USB disconnect, device number 85 [ 634.828149][ T46] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 634.889040][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.916035][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.946251][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.962262][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.008817][ T46] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 636.018020][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.026015][ T46] usb 7-1: Product: syz [ 636.030211][ T46] usb 7-1: Manufacturer: syz [ 636.034805][ T46] usb 7-1: SerialNumber: syz [ 636.050183][ T46] usb 7-1: config 0 descriptor?? [ 636.258067][ T5796] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 636.268272][ T46] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 636.343409][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 636.508514][ T9] usb 2-1: config 4 has an invalid interface number: 4 but max is 1 [ 636.523745][ T9] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 636.534036][ T9] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 636.548592][ T5796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 636.557009][ T5796] usb 5-1: not running at top speed; connect to a high speed hub [ 636.565911][ T5796] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 636.580232][ T5796] usb 5-1: string descriptor 0 read error: -22 [ 636.586583][ T5796] usb 5-1: New USB device found, idVendor=0499, idProduct=2000, bcdDevice= 0.40 [ 636.595636][ T9] usb 2-1: config 4 has an invalid interface number: 198 but max is 1 [ 636.595674][ T9] usb 2-1: config 4 has an invalid interface association descriptor of length 2, skipping [ 636.606821][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.625264][ T9] usb 2-1: config 4 has no interface number 0 [ 636.634274][ T9] usb 2-1: config 4 has no interface number 1 [ 636.722587][ T5796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 636.731972][ T5796] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 636.799763][ T5796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 636.810014][ T5796] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 637.113568][ T5796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 637.118650][ T9] usb 2-1: config 4 interface 4 altsetting 11 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 637.150500][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 637.174294][ T9] usb 2-1: config 4 interface 4 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 1023 [ 637.190428][ T5698] usb 6-1: USB disconnect, device number 65 [ 637.205079][ T5796] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 637.220462][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8C, skipping [ 637.234416][ T5796] usb 5-1: USB disconnect, device number 86 [ 637.275170][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 637.286895][ T9] usb 2-1: config 4 interface 4 altsetting 11 endpoint 0x8 has invalid maxpacket 38073, setting to 64 [ 637.297841][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 637.308424][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 637.323495][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 637.334087][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 637.344724][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 637.355373][ T9] usb 2-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 637.366069][ T9] usb 2-1: config 4 interface 198 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 637.376933][ T9] usb 2-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 637.395288][ T9] usb 2-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 637.407757][ T9] usb 2-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 637.420861][ T9] usb 2-1: config 4 interface 198 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 637.433641][ T9] usb 2-1: config 4 interface 4 has no altsetting 0 [ 637.441500][ T9] usb 2-1: config 4 interface 198 has no altsetting 0 [ 637.452178][ T9] usb 2-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=8b.d1 [ 637.462021][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.473545][ T9] usb 2-1: Product: syz [ 637.483914][ T9] usb 2-1: Manufacturer: syz [ 637.489059][ T9] usb 2-1: SerialNumber: syz [ 637.502137][T13503] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 637.511309][T13503] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 637.719205][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2025'. [ 637.727453][ T46] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 637.760336][ T46] usb 7-1: USB disconnect, device number 35 [ 637.787448][T13514] 9p: Bad value for 'wfdno' [ 637.980084][ T9] usb 2-1: USB disconnect, device number 87 [ 639.090355][T13522] binder: 13521:13522 ioctl c0306201 0 returned -14 [ 639.350522][T13536] fuse: Bad value for 'rootmode' [ 639.494626][ T29] audit: type=1400 audit(1784356678.319:1269): avc: denied { write } for pid=13538 comm="syz.1.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 639.535131][ T29] audit: type=1400 audit(1784356678.329:1270): avc: denied { read } for pid=13538 comm="syz.1.2033" lport=32651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 639.718654][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 639.890270][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 639.910665][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.930065][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 639.953126][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.984755][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 640.002909][ T9] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 640.026857][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.040366][ T9] usb 5-1: Product: syz [ 640.052264][ T9] usb 5-1: Manufacturer: syz [ 640.060489][ T9] usb 5-1: SerialNumber: syz [ 640.080110][T13554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2039'. [ 640.274764][T13537] netlink: 'syz.4.2026': attribute type 1 has an invalid length. [ 640.329087][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 640.776546][ T29] audit: type=1400 audit(1784356679.609:1271): avc: denied { remount } for pid=13573 comm="syz.1.2046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 641.042012][T13584] No source specified [ 641.646097][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.914157][T13537] 8021q: adding VLAN 0 to HW filter on device bond18 [ 642.270782][ T9] usb 5-1: selecting invalid altsetting 0 [ 642.301392][T13599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2057'. [ 642.425673][T13603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2058'. [ 642.464261][ T9] usb 5-1: USB disconnect, device number 87 [ 642.810620][ T29] audit: type=1400 audit(1784356681.569:1272): avc: denied { append } for pid=13601 comm="syz.1.2058" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 643.968219][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.349687][ T9] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 645.160394][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 645.176980][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 645.213909][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 645.235244][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.873375][T13635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.877210][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.714226][ T9] usb 5-1: low speed audio streaming not supported [ 647.737126][ T9] usb 5-1: low speed audio streaming not supported [ 647.883582][ T9] usb 5-1: selecting invalid altsetting 1 [ 647.897073][T13649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 647.913262][ T9] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 647.919870][ T9] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 648.238603][ T9] usb 5-1: USB disconnect, device number 88 [ 648.981786][ T29] audit: type=1400 audit(1784356687.819:1273): avc: denied { bind } for pid=13657 comm="syz.5.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 650.389931][T13673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.421131][ T29] audit: type=1400 audit(1784356689.246:1274): avc: denied { map } for pid=13674 comm="syz.6.2077" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 652.345644][T13702] FAULT_INJECTION: forcing a failure. [ 652.345644][T13702] name failslab, interval 1, probability 0, space 0, times 0 [ 652.354018][ T9092] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 652.373231][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 652.436329][T13702] CPU: 0 UID: 0 PID: 13702 Comm: syz.5.2085 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.436360][T13702] Tainted: [L]=SOFTLOCKUP [ 652.436367][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 652.436378][T13702] Call Trace: [ 652.436384][T13702] [ 652.436391][T13702] dump_stack_lvl+0x100/0x190 [ 652.436419][T13702] should_fail_ex.cold+0x5/0xa [ 652.436443][T13702] should_failslab+0xc2/0x120 [ 652.436465][T13702] __kmalloc_cache_noprof+0x91/0x6c0 [ 652.436492][T13702] ? _raw_read_unlock_irqrestore+0x3b/0x80 [ 652.436520][T13702] ? snd_pcm_attach_substream+0x436/0xd20 [ 652.436544][T13702] snd_pcm_attach_substream+0x436/0xd20 [ 652.436568][T13702] snd_pcm_open_substream+0x90/0x1850 [ 652.436598][T13702] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 652.436627][T13702] ? rcu_is_watching+0x12/0xc0 [ 652.436657][T13702] snd_pcm_open+0x2a3/0x710 [ 652.436693][T13702] ? __pfx_snd_pcm_open+0x10/0x10 [ 652.436724][T13702] ? __pfx_default_wake_function+0x10/0x10 [ 652.436754][T13702] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 652.436782][T13702] snd_pcm_playback_open+0x86/0xe0 [ 652.436810][T13702] snd_open+0x201/0x450 [ 652.436832][T13702] ? __pfx_snd_open+0x10/0x10 [ 652.436853][T13702] chrdev_open+0x234/0x6a0 [ 652.436870][T13702] ? __pfx_chrdev_open+0x10/0x10 [ 652.436889][T13702] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 652.436916][T13702] do_dentry_open+0x6ab/0x14d0 [ 652.436942][T13702] ? __pfx_chrdev_open+0x10/0x10 [ 652.436964][T13702] vfs_open+0x82/0x3f0 [ 652.436988][T13702] path_openat+0x2873/0x4280 [ 652.437016][T13702] ? __pfx_path_openat+0x10/0x10 [ 652.437040][T13702] do_file_open+0x20e/0x430 [ 652.437059][T13702] ? __pfx_do_file_open+0x10/0x10 [ 652.437094][T13702] ? alloc_fd+0x471/0x7a0 [ 652.437114][T13702] ? do_getname+0x191/0x390 [ 652.437137][T13702] do_sys_openat2+0x10f/0x1e0 [ 652.437157][T13702] ? __pfx_do_sys_openat2+0x10/0x10 [ 652.437178][T13702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 652.437206][T13702] ? __fget_files+0x21f/0x3d0 [ 652.437236][T13702] __x64_sys_openat+0x12d/0x210 [ 652.437257][T13702] ? __pfx___x64_sys_openat+0x10/0x10 [ 652.437277][T13702] ? ksys_write+0x1ac/0x250 [ 652.437310][T13702] do_syscall_64+0x115/0x870 [ 652.437335][T13702] ? clear_bhb_loop+0x40/0x90 [ 652.437358][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.437376][T13702] RIP: 0033:0x7f846e55e6ce [ 652.437391][T13702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 652.437408][T13702] RSP: 002b:00007f846f451b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 652.437425][T13702] RAX: ffffffffffffffda RBX: 00007f846f4526c0 RCX: 00007f846e55e6ce [ 652.437437][T13702] RDX: 0000000000000901 RSI: 00007f846f451c00 RDI: ffffffffffffff9c [ 652.437449][T13702] RBP: 00007f846f451c00 R08: 0000000000000000 R09: 0000000000000000 [ 652.437460][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 652.437471][T13702] R13: 00007f846e826038 R14: 00007f846e825fa0 R15: 00007ffe528955a8 [ 652.437497][T13702] [ 653.169706][T13714] netlink: 'syz.1.2087': attribute type 2 has an invalid length. [ 653.181965][ T7752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.200393][ T9092] usb 7-1: Using ep0 maxpacket: 32 [ 653.210952][ T9092] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.232709][ T9092] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.250763][ T9092] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 653.271779][ T9092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.301798][ T9092] usb 7-1: config 0 descriptor?? [ 653.549195][ T29] audit: type=1400 audit(1784356692.343:1275): avc: denied { bind } for pid=13713 comm="syz.1.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 654.344089][ T9092] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 654.352759][ T9092] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 654.360342][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 654.537520][ T9092] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 654.550192][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 654.562205][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 654.572139][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.583702][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 654.594720][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.607365][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 654.632979][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 654.649246][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.663692][ T24] usb 5-1: config 0 descriptor?? [ 654.744076][ T9092] ft260 0003:0403:6030.000E: failed to retrieve system status [ 654.923202][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.968103][T13734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.114266][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.191207][T13734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.675725][ T9092] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -71 [ 655.695492][ T9092] usb 7-1: USB disconnect, device number 36 [ 655.839132][T13743] ip6erspan2: entered allmulticast mode [ 657.170278][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 657.176341][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 657.854389][ T24] usb 5-1: USB disconnect, device number 89 [ 657.859893][T13759] veth1_macvtap: entered promiscuous mode [ 657.869461][T13759] macsec0: entered promiscuous mode [ 658.106013][T13759] veth1_macvtap: left promiscuous mode [ 658.544996][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2104'. [ 658.733441][T13774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2107'. [ 658.772057][T13774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2107'. [ 658.831356][T13774] loop4: detected capacity change from 0 to 2640 [ 658.875595][ T6266] Buffer I/O error on dev loop4, logical block 0, async page read [ 658.915157][ T6266] Buffer I/O error on dev loop4, logical block 0, async page read [ 658.993686][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.043114][ T6266] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.073051][ T6266] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.278381][ T6266] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.334291][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 659.921966][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 659.933273][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.976108][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.986519][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 660.009107][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.051644][ T24] usb 6-1: config 0 descriptor?? [ 660.202396][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2105'. [ 660.238205][T13792] FAULT_INJECTION: forcing a failure. [ 660.238205][T13792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.260123][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz.1.2113 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.260152][T13792] Tainted: [L]=SOFTLOCKUP [ 660.260158][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 660.260169][T13792] Call Trace: [ 660.260175][T13792] [ 660.260182][T13792] dump_stack_lvl+0x100/0x190 [ 660.260209][T13792] should_fail_ex.cold+0x5/0xa [ 660.260233][T13792] _copy_from_user+0x2e/0xd0 [ 660.260257][T13792] __sys_bpf+0x2f5/0x4e80 [ 660.260292][T13792] ? __pfx___sys_bpf+0x10/0x10 [ 660.260320][T13792] ? find_held_lock+0x2b/0x80 [ 660.260344][T13792] ? get_pid_task+0xfc/0x250 [ 660.260369][T13792] ? get_pid_task+0xfc/0x250 [ 660.260403][T13792] ? find_held_lock+0x2b/0x80 [ 660.260433][T13792] ? rcu_read_lock_any_held+0x6a/0xa0 [ 660.260459][T13792] ? find_held_lock+0x2b/0x80 [ 660.260481][T13792] ? ksys_write+0x190/0x250 [ 660.260503][T13792] ? ksys_write+0x190/0x250 [ 660.260545][T13792] ? fput+0x79/0x100 [ 660.260567][T13792] ? __x64_sys_bpf+0xce/0x140 [ 660.260582][T13792] __x64_sys_bpf+0xce/0x140 [ 660.260598][T13792] ? do_syscall_64+0x90/0x870 [ 660.260631][T13792] do_syscall_64+0x115/0x870 [ 660.260656][T13792] ? clear_bhb_loop+0x40/0x90 [ 660.260679][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.260697][T13792] RIP: 0033:0x7f176ab9de99 [ 660.260712][T13792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.260728][T13792] RSP: 002b:00007f176b998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.260745][T13792] RAX: ffffffffffffffda RBX: 00007f176ae25fa0 RCX: 00007f176ab9de99 [ 660.260755][T13792] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000009 [ 660.260766][T13792] RBP: 00007f176b998090 R08: 0000000000000000 R09: 0000000000000000 [ 660.260777][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.260787][T13792] R13: 00007f176ae26038 R14: 00007f176ae25fa0 R15: 00007fff0cc34a98 [ 660.260811][T13792] [ 660.412415][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2115'. [ 660.475400][T13794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13794 comm=syz.0.2115 [ 661.190047][ T24] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 661.211434][ T24] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 661.253649][T13807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=13807 comm=syz.6.2117 [ 661.278776][T13807] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 661.308498][ T24] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 661.511425][ T24] ft260 0003:0403:6030.000F: failed to retrieve system status [ 661.533715][ T24] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -71 [ 661.541288][T13821] kAFS: unable to lookup cell '' [ 661.554836][ T24] usb 6-1: USB disconnect, device number 66 [ 661.579283][ T5796] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 661.820856][ T5796] usb 5-1: Using ep0 maxpacket: 16 [ 661.829375][ T5796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 661.843351][ T5796] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 661.853014][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.870704][ T5796] usb 5-1: config 0 descriptor?? [ 662.665864][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x0 [ 662.685957][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x3 [ 662.696698][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x3 [ 662.703588][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x3 [ 662.712339][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x3 [ 662.721075][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x3 [ 662.745975][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x3 [ 662.778792][ T5796] ntrig 0003:1B96:000F.0010: unknown main item tag 0x3 [ 662.806956][ T5796] ntrig 0003:1B96:000F.0010: item fetching failed at offset 35/37 [ 663.203345][ T5796] ntrig 0003:1B96:000F.0010: parse failed [ 663.639566][ T5796] ntrig 0003:1B96:000F.0010: probe with driver ntrig failed with error -22 [ 664.163260][ T5712] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 664.393411][ T5712] usb 6-1: Using ep0 maxpacket: 16 [ 664.703761][ T5712] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 664.723324][ T5712] usb 6-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 664.733401][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.824069][ T5712] usb 6-1: config 0 descriptor?? [ 664.841453][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.976996][ T5712] usb 6-1: can't set config #0, error -71 [ 665.997632][ T5712] usb 6-1: USB disconnect, device number 67 [ 666.049136][T13849] fuse: Bad value for 'rootmode' [ 666.233085][T13854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=13854 comm=syz.5.2132 [ 666.422173][T13854] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 666.566585][T13858] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 666.701113][T13860] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 666.741240][ T7752] Bluetooth: hci2: Frame reassembly failed (-84) [ 666.989108][ T46] usb 5-1: USB disconnect, device number 90 [ 667.118532][T13868] tipc: Enabled bearer , priority 10 [ 667.602954][ T29] audit: type=1400 audit(1784356706.336:1276): avc: denied { ioctl } for pid=13870 comm="syz.6.2138" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 667.867370][ T29] audit: type=1400 audit(1784356706.606:1277): avc: denied { audit_write } for pid=13878 comm="syz.0.2141" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 667.944513][ T24] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 668.597194][ T5698] tipc: Node number set to 2962748441 [ 668.753709][T13884] lo speed is unknown, defaulting to 1000 [ 668.770997][T13884] lo speed is unknown, defaulting to 1000 [ 668.778576][ T5620] Bluetooth: hci2: command 0x1003 tx timeout [ 668.779119][T13885] netlink: 'syz.5.2142': attribute type 13 has an invalid length. [ 668.786522][ T5608] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 668.790600][ T24] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 668.795536][T13884] lo speed is unknown, defaulting to 1000 [ 668.800824][ T24] usb 7-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 668.868833][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 668.875973][ T24] usb 7-1: language id specifier not provided by device, defaulting to English [ 668.886307][ T24] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 668.896267][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.905078][ T24] usb 7-1: Product: ࠬ [ 668.910206][ T24] usb 7-1: Manufacturer: ᓔ豈䄋喵袠溷腴띸眘勆␥쏏椎堩霥Ẋ烹윭媦ʼꣵᖎ㫻Ꙭ˞눵컶稪ꜫ過頢羘꒼嵖젪閛訫ǿ쬶ᅽ䏟鄪兑ペ罊뭫ᎂ哭෦㝟葼괾徦좏౫쨹䯪汸ꉵ︉쏰曙鑞緧ị罫ࡽ㰉ଷ컰彾䓷薸ќĨㅻ㎼ݱ㶂캸ꆾ惁惙험࡭蔊여 [ 669.044482][ T24] usb 7-1: SerialNumber: syz [ 669.063343][T13871] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 669.071330][T13871] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 669.123241][T13885] gretap0: refused to change device tx_queue_len [ 669.201367][T13885] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 669.307884][ T24] usb 7-1: USB disconnect, device number 37 [ 669.517242][ T5698] lo speed is unknown, defaulting to 1000 [ 669.525657][ T5698] syz2: Port: 1 Link ACTIVE [ 669.530468][T13884] infiniband syz2: set active [ 669.535331][T13884] infiniband syz2: added lo [ 669.557669][T13884] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 669.572705][T13884] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 669.590256][T13884] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 669.619085][T13884] RDS/IB: syz2: added [ 669.623397][T13884] smc: adding ib device syz2 with port count 1 [ 669.640493][T13884] smc: ib device syz2 port 1 has no pnetid [ 669.648802][ T5698] lo speed is unknown, defaulting to 1000 [ 669.658310][T13884] lo speed is unknown, defaulting to 1000 [ 669.710129][T13909] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 669.929379][T13910] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2147'. [ 671.549003][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.673348][ T5712] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 671.804792][T13884] lo speed is unknown, defaulting to 1000 [ 671.853323][ T5698] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 672.182291][ T5712] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 672.190910][ T5712] usb 7-1: can't read configurations, error -71 [ 672.289226][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2152'. [ 672.303300][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 672.428091][T13884] lo speed is unknown, defaulting to 1000 [ 672.580631][T13884] lo speed is unknown, defaulting to 1000 [ 672.673085][T13884] lo speed is unknown, defaulting to 1000 [ 672.902420][ T5698] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 672.912384][ T5698] usb 5-1: config 0 has no interface number 0 [ 672.919816][ T5698] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 672.932664][ T5698] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.943315][ T5698] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 672.954265][ T5698] usb 5-1: config 0 interface 196 has no altsetting 0 [ 672.963278][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 672.975392][ T5698] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 672.985661][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.994733][ T5698] usb 5-1: Product: syz [ 673.003320][ T5698] usb 5-1: Manufacturer: syz [ 673.013015][ T5698] usb 5-1: SerialNumber: syz [ 673.034661][ T5698] usb 5-1: config 0 descriptor?? [ 673.047428][T13920] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 673.133445][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 673.163755][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.193669][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 673.204182][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.212671][ T9] usb 2-1: Product: syz [ 673.217924][ T9] usb 2-1: Manufacturer: syz [ 673.222889][ T9] usb 2-1: SerialNumber: syz [ 673.236132][ T9] usb 2-1: config 0 descriptor?? [ 673.247419][ T9] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 673.258486][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.270697][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.285121][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.306768][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.319882][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.330901][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.345434][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.356673][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.369458][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.381394][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.855631][ T5698] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 673.864745][ T5698] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 673.913641][ T5698] usb 5-1: USB disconnect, device number 91 [ 674.052871][ T29] audit: type=1400 audit(1784356712.786:1278): avc: denied { ioctl } for pid=13940 comm="syz.4.2157" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 674.097575][ T29] audit: type=1400 audit(1784356712.836:1279): avc: denied { getopt } for pid=13940 comm="syz.4.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 674.184260][ T46] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 674.236558][ T9] usb 2-1: qt2_attach - failed to power on unit: -71 [ 674.243348][ T9] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 674.280724][ T9] usb 2-1: USB disconnect, device number 88 [ 674.330998][T13950] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 674.373363][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 674.422568][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 674.435961][ T46] usb 7-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 674.441373][T13951] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2160'. [ 674.454842][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.509687][ T46] usb 7-1: config 0 descriptor?? [ 675.036165][ T46] hid_parser_main: 8 callbacks suppressed [ 675.036184][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x0 [ 675.048914][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.057341][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.068653][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.075596][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.082575][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.089570][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.096594][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.103544][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.110436][ T46] ntrig 0003:1B96:000F.0011: unknown main item tag 0x3 [ 675.117717][ T46] ntrig 0003:1B96:000F.0011: item fetching failed at offset 35/37 [ 675.127188][ T46] ntrig 0003:1B96:000F.0011: parse failed [ 675.170713][T13957] lo speed is unknown, defaulting to 1000 [ 675.610075][ T46] ntrig 0003:1B96:000F.0011: probe with driver ntrig failed with error -22 [ 675.639568][ T29] audit: type=1326 audit(1784356714.316:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2161" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651499de99 code=0x0 [ 675.755421][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 781.167371][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 781.174343][ C1] rcu: 0-...!: (1 GPs behind) idle=51f4/1/0x4000000000000000 softirq=71915/71916 fqs=0 [ 781.185104][ C1] rcu: (detected by 1, t=10506 jiffies, g=80541, q=394 ncpus=2) [ 781.192811][ C1] Sending NMI from CPU 1 to CPUs 0: [ 781.192836][ C0] NMI backtrace for cpu 0 [ 781.192852][ C0] CPU: 0 UID: 0 PID: 13956 Comm: syz.4.2161 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.192872][ C0] Tainted: [L]=SOFTLOCKUP [ 781.192877][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 781.192885][ C0] RIP: 0010:__lock_acquire+0x123/0x1a40 [ 781.192906][ C0] Code: c0 00 00 00 01 48 89 04 24 75 1f 48 8d b4 1d 78 0b 00 00 0f b7 46 20 25 ff 1f 00 00 44 39 e0 75 09 4d 85 f6 0f 85 87 05 00 00 <48> 8b 04 24 44 89 e2 66 81 e2 ff 1f 48 01 c3 0f b7 43 20 4c 89 5b [ 781.192919][ C0] RSP: 0018:ffffc90000007c18 EFLAGS: 00000002 [ 781.192932][ C0] RAX: 0000000000000075 RBX: 0000000000000028 RCX: 0000000000000000 [ 781.192940][ C0] RDX: 0000000000000000 RSI: ffff88807ae3d620 RDI: ffffffff9b9bfc18 [ 781.192950][ C0] RBP: ffff88807ae3ca80 R08: 0000000000000001 R09: 0000000000000001 [ 781.192958][ C0] R10: 0000000000000000 R11: ffffffff9b9bfc18 R12: 0000000000000000 [ 781.192967][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 781.192976][ C0] FS: 00007f65159126c0(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 781.192990][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.193000][ C0] CR2: 00007f4146227dac CR3: 0000000075837000 CR4: 00000000003526f0 [ 781.193009][ C0] Call Trace: [ 781.193015][ C0] [ 781.193022][ C0] ? __lock_acquire+0x49f/0x1a40 [ 781.193038][ C0] lock_acquire+0x1b9/0x370 [ 781.193052][ C0] ? debug_object_activate+0x144/0x4b0 [ 781.193070][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 781.193087][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 781.193106][ C0] ? debug_object_activate+0x144/0x4b0 [ 781.193122][ C0] debug_object_activate+0x144/0x4b0 [ 781.193139][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 781.193156][ C0] ? do_raw_spin_lock+0x128/0x260 [ 781.193175][ C0] enqueue_hrtimer+0x75/0x2f0 [ 781.193194][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 781.193215][ C0] hrtimer_interrupt+0x3e5/0x940 [ 781.193237][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 781.193257][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 781.193276][ C0] [ 781.193281][ C0] [ 781.193286][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 781.193301][ C0] RIP: 0010:lock_is_held_type+0x30/0x140 [ 781.193320][ C0] Code: 7a 02 69 05 b8 ff ff ff ff 85 c9 0f 84 ed 00 00 00 65 8b 15 d2 55 aa 08 85 d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 54 55 53 <48> 83 ec 08 65 48 8b 2d fc 0e aa 08 8b 95 9c 0b 00 00 85 d2 0f 85 [ 781.193333][ C0] RSP: 0018:ffffc9000d92f630 EFLAGS: 00000246 [ 781.193344][ C0] RAX: 00000000ffffffff RBX: 1ffff92001b25ecd RCX: 0000000000000001 [ 781.193353][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ebe6120 [ 781.193362][ C0] RBP: 0000000000000000 R08: ffffffff8a5ef7b5 R09: 0000000000000000 [ 781.193371][ C0] R10: ffffc9000d92f870 R11: 0000000000000000 R12: ffffffff8bcfc700 [ 781.193380][ C0] R13: 000000000000026f R14: dffffc0000000000 R15: 0000000000000000 [ 781.193391][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 781.193409][ C0] __might_resched+0x248/0x330 [ 781.193424][ C0] ? __pfx___might_resched+0x10/0x10 [ 781.193445][ C0] __mutex_lock+0x10e/0x1bd0 [ 781.193465][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 781.193478][ C0] ? __scm_recv_common.isra.0+0x12e/0x520 [ 781.193499][ C0] ? find_held_lock+0x2b/0x80 [ 781.193517][ C0] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 781.193530][ C0] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 781.193544][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 781.193564][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 781.193587][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 781.193600][ C0] __unix_dgram_recvmsg+0x255/0xc30 [ 781.193617][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 781.193632][ C0] ? irqentry_exit+0x24d/0xa00 [ 781.193653][ C0] ? iovec_from_user+0xda/0x140 [ 781.193671][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 781.193684][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 781.193698][ C0] ____sys_recvmsg+0x5eb/0x670 [ 781.193716][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 781.193736][ C0] ? rcu_is_watching+0x12/0xc0 [ 781.193755][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 781.193771][ C0] ? kfree+0x1e5/0x6c0 [ 781.193790][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 781.193808][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 781.193830][ C0] ? __pfx___might_resched+0x10/0x10 [ 781.193846][ C0] do_recvmmsg+0x2f3/0x740 [ 781.193864][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 781.193881][ C0] ? __pfx___sched_setaffinity+0x10/0x10 [ 781.193901][ C0] ? do_futex+0x190/0x440 [ 781.193921][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 781.193939][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 781.193954][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 781.193971][ C0] do_syscall_64+0x115/0x870 [ 781.193990][ C0] ? clear_bhb_loop+0x40/0x90 [ 781.194006][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.194019][ C0] RIP: 0033:0x7f651499de99 [ 781.194032][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.194044][ C0] RSP: 002b:00007f6515912028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 781.194057][ C0] RAX: ffffffffffffffda RBX: 00007f6514c26090 RCX: 00007f651499de99 [ 781.194066][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000004 [ 781.194075][ C0] RBP: 00007f6514a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 781.194083][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 781.194092][ C0] R13: 00007f6514c26128 R14: 00007f6514c26090 R15: 00007fff8df0a7e8 [ 781.194105][ C0] [ 781.194832][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g80541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 781.753477][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 781.763428][ C1] rcu: RCU grace-period kthread stack dump: [ 781.769296][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 781.782775][ C1] Call Trace: [ 781.786036][ C1] [ 781.788958][ C1] __schedule+0x125c/0x6730 [ 781.793471][ C1] ? __pfx___schedule+0x10/0x10 [ 781.798315][ C1] ? find_held_lock+0x2b/0x80 [ 781.802986][ C1] ? schedule+0x225/0x2c0 [ 781.807312][ C1] schedule+0xdd/0x2c0 [ 781.811372][ C1] schedule_timeout+0x127/0x280 [ 781.816213][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 781.821578][ C1] ? __pfx_process_timeout+0x10/0x10 [ 781.826862][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 781.832660][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 781.838111][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 781.842863][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 781.848143][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 781.853070][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 781.858254][ C1] ? rcu_is_watching+0x12/0xc0 [ 781.863010][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 781.868811][ C1] rcu_gp_kthread+0x179/0x230 [ 781.873476][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.878661][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 781.884460][ C1] ? __kthread_parkme+0x18c/0x230 [ 781.889482][ C1] ? kthread+0x13a/0x450 [ 781.893730][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.898914][ C1] kthread+0x370/0x450 [ 781.902980][ C1] ? __pfx_kthread+0x10/0x10 [ 781.907566][ C1] ret_from_fork+0x72b/0xd50 [ 781.912149][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 781.917254][ C1] ? __switch_to+0x800/0x10f0 [ 781.921932][ C1] ? __pfx_kthread+0x10/0x10 [ 781.926519][ C1] ret_from_fork_asm+0x1a/0x30 [ 781.931291][ C1] [ 781.934295][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 781.940603][ C1] CPU: 1 UID: 0 PID: 13962 Comm: syz.5.2163 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.951524][ C1] Tainted: [L]=SOFTLOCKUP [ 781.955829][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 781.965865][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 781.972528][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 781.992121][ C1] RSP: 0018:ffffc9000d8dfa78 EFLAGS: 00000246 [ 781.998173][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc900106c9000 [ 782.006127][ C1] RDX: 0000000000080000 RSI: ffffffff81fd46d7 RDI: ffff88801f35a540 [ 782.014084][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 782.022037][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 782.029992][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 782.037946][ C1] FS: 00007f846f4526c0(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 782.046861][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.053431][ C1] CR2: 00007f176b9556b8 CR3: 000000003bf0c000 CR4: 00000000003526f0 [ 782.061392][ C1] Call Trace: [ 782.064655][ C1] [ 782.067576][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 782.072599][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 782.078917][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 782.084291][ C1] ? __pfx___text_poke+0x10/0x10 [ 782.089223][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 782.094240][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 782.099343][ C1] ? __schedule+0xc0b/0x6730 [ 782.103923][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 782.109635][ C1] ? __schedule+0xc0b/0x6730 [ 782.114216][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 782.120447][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 782.126674][ C1] ? find_held_lock+0x2b/0x80 [ 782.131349][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 782.137316][ C1] jump_label_update+0x37a/0x550 [ 782.142248][ C1] static_key_slow_inc_cpuslocked+0x82/0x120 [ 782.148222][ C1] static_key_slow_inc+0x1a/0x30 [ 782.153145][ C1] kvm_dev_ioctl+0x104a/0x1a50 [ 782.157912][ C1] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 782.163025][ C1] ? selinux_file_ioctl+0x13b/0x290 [ 782.168214][ C1] ? selinux_file_ioctl+0xb6/0x290 [ 782.173321][ C1] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 782.178427][ C1] __x64_sys_ioctl+0x18e/0x210 [ 782.183188][ C1] do_syscall_64+0x115/0x870 [ 782.187772][ C1] ? clear_bhb_loop+0x40/0x90 [ 782.192440][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.198319][ C1] RIP: 0033:0x7f846e59de99 [ 782.202722][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.222313][ C1] RSP: 002b:00007f846f452028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.230712][ C1] RAX: ffffffffffffffda RBX: 00007f846e825fa0 RCX: 00007f846e59de99 [ 782.238668][ C1] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 782.246622][ C1] RBP: 00007f846e633eaf R08: 0000000000000000 R09: 0000000000000000 [ 782.254575][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.262530][ C1] R13: 00007f846e826038 R14: 00007f846e825fa0 R15: 00007ffe528955a8 [ 782.270501][ C1]