last executing test programs: 11.848141618s ago: executing program 3 (id=1165): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0xfff, 0xa1, 0x9, 0x4, 0xfffffff4, 0x0, 0x7, 0xffffa3d3}}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe000, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f00000001c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 8.804789679s ago: executing program 3 (id=1175): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da288a8", 0xe, 0x40030000000000, &(0x7f0000000080)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.391648717s ago: executing program 3 (id=1176): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="120110018e2f6b2037210100e50c010a030109021b001e030bc0020904ab6c013c3a0c03090501"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000020c0), 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f0000000200)=""/224, 0x94) r4 = epoll_create1(0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x2, "58b99c0c"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @global=@item_4={0x3, 0x1, 0x6, "1f576ab2"}, @local=@item_4={0x3, 0x2, 0x2, "8deb8e3f"}, @main=@item_012={0x2, 0x0, 0x8, "b2c7"}]}}, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd0, 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) read(r7, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x0, 0x83, 0x10001}) r8 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000001c0)={@local, @broadcast}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 8.248418955s ago: executing program 1 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7c152e54cf4a7365652fbca61e1134d5344b757ffb0b23324a6f46d44bc198b8fef8717c0cdb48f2468368cce7eb19d9b12148ac290d78d5eb28c52d853c2d68a7990979177a5e8ed511a5d4486e988aa026863bc5422790acfb184f36bbf57848a8380c981450720e4580725018076ffff"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0x0, 0xfffc}, {@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x32}, @in6=@private1, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a}}]}, 0x154}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40044) pselect6(0x40, &(0x7f0000000140)={0xfffffffffffffff7, 0x10001, 0x9, 0x3, 0x8, 0x8, 0x81, 0x8}, &(0x7f0000000440)={0x101, 0x98e8, 0x4, 0x1, 0x7, 0x1fe2, 0x1c000000, 0x7ff}, &(0x7f0000000480)={0xcb7, 0x400, 0x7, 0x4, 0x3, 0x6, 0x8000000000000001, 0x80000001}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500)={[0x185]}, 0x8}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000680)=@req={0x5, 0x6, 0x800, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 7.276996012s ago: executing program 2 (id=1182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'pimreg\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x0, 0xe, 0x4, {0x7, @ah_ip6_spec={@remote, @mcast2, 0x9, 0xa}, {0x0, @remote, 0xe2a, 0x3, [0xa49, 0xa4a]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x90d, 0x5}, {0x0, @local, 0x7, 0x0, [0xcf22, 0x1]}, 0x800, 0x29ea}, 0x8, [0x9, 0xfffffff9, 0x3, 0xe01, 0x3, 0x5, 0x9, 0xffffffcd]}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\fgroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0xd, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x10, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x248, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0xe0, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0xa4, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) umount2(&(0x7f0000000080)='./file0\x00', 0xb) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 6.597351119s ago: executing program 2 (id=1183): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) 6.313337501s ago: executing program 2 (id=1185): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0xfff, 0xa1, 0x9, 0x4, 0xfffffff4, 0x0, 0x7, 0xffffa3d3}}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe000, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f00000001c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 5.998161657s ago: executing program 3 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e00000000000000000008000500102700005c0003800400010054000380"], 0x90}}, 0x4000000) 5.978799513s ago: executing program 0 (id=1189): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) unshare(0x22020600) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, 0x0, 0x0) accept$unix(r6, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000380)="218768b0ec8fa62c25d0cb36b873f5d52df069b4c7ceafb1be8f1e3b4b76bf0dc197c97e883e6b60a6cf93c3510ea23ed7571f6786f5b099d6cd49bdd58d187a8f52417405d6b822c3ac5691570c4454e1a87f13c42b180e60ab78b369e76db1d7a41632b9b8ef70b96321e9ebc1602fec62988223e95cb3c51f43d0874fc39881", 0x81, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x7}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) bind$alg(r8, 0x0, 0x0) 5.839756194s ago: executing program 1 (id=1190): sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x90, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@obex={0x5, 0x24, 0x15, 0x2}, @mdlm={0x15, 0x24, 0x12, 0xa3}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa9}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048084}, 0x4000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r1]) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0903, 0x2, '\x00', @string=0x0}}) ptrace(0x10, r5) ptrace$peekuser(0x3, r5, 0x368) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x90, 0x1, 0x8000d, 0x7, 0x10, 0x1, 0x0, 0x810, 0x10, 0x1, 0x10, 0xe}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.622075213s ago: executing program 3 (id=1191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xa8, 0x6bf5, 0xfffffffffffffffe, 0x6, 0xf, 0x0, 0x8000, 0x0, 0x0, r4, 0x4ce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r5, 0x0, 0x2) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3d) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000000c0)) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc10c5541, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x6, 0x0) 4.469094651s ago: executing program 2 (id=1193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40f02) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x2) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4, 0x80, 0xffffffff, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x15, 0x0, r1, 0x0, 0x0, 0x20}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x400, 0x44}, 0x18) readlinkat(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/38, 0x26) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0xff02, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_getres(0x2, 0x0) 4.404088253s ago: executing program 0 (id=1194): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) unshare(0x22020600) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, 0x0, 0x0) accept$unix(r6, 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x7}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) 3.816665199s ago: executing program 4 (id=1195): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) 3.73325463s ago: executing program 4 (id=1196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x15, 0x0, r0, 0x0, 0x0, 0x20}) io_uring_enter(r0, 0x47bc, 0x4000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_getres(0x2, 0x0) 3.65600607s ago: executing program 4 (id=1197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r5, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0xf7c}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f04987972375a102e8d4b062ee0beb0fa90b1abb5f67fa6ca26a9880b7192f96825a883caed920c0c6498944adac8dc337446a3e530a522f8dee3777fc613cac6fd65732f4a3a8f4aa0226a6722f4aa53de83c7ebe61d3b108533abe6168f407180d4a48d42e3de6f7eab792caf42d4c0365b1f45c543537db13cb47aae51d27e486db1a19d7e8a62ad7e721bf375ac2b5bed94923793db0c9daa6c98f016546226876b94788b9f578a8ab0d0ccb8b92d971a0ba7136fcd25631f1633dc1d63de6f2f5e79240e90521c6d18ae5879f432e5e6d0156e863e62b2c5123395ca1f74d299", 0x124}, {0x0}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2.817758358s ago: executing program 1 (id=1198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r5, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0xf7c}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f04987972375a102e8d4b062ee0beb0fa90b1abb5f67fa6ca26a9880b7192f96825a883caed920c0c6498944adac8dc337446a3e530a522f8dee3777fc613cac6fd65732f4a3a8f4aa0226a6722f4aa53de83c7ebe61d3b108533abe6168f407180d4a48d42e3de6f7eab792caf42d4c0365b1f45c543537db13cb47aae51d27e486db1a19d7e8a62ad7e721bf375ac2b5bed94923793db0c9daa6c98f016546226876b94788b9f578a8ab0d0ccb8b92d971a0ba7136fcd25631f1633dc1d63de6f2f5e79240e90521c6d18ae5879f432e5e6d0156e863e62b2c5123395ca1f74d299", 0x124}, {0x0}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2.817101535s ago: executing program 0 (id=1199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getqdisc={0x30, 0x26, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0x5, 0xd}, {0xa, 0xa}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x1) syz_usb_connect(0x1, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x6e, 0xdb, 0x10, 0x8, 0x525, 0xa4a0, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x41, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x59, 0x71, 0x8, 0x20}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket$igmp(0x2, 0x3, 0x2) 2.686747425s ago: executing program 2 (id=1200): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x73}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000680)={'\x00', 0xfff, 0x15, 0xffff, 0x4, 0xe}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x310, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'wg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1f0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xff000000, 0xffffffff, 0x87fdedd74ac825a6], 0x4e23, 0x4e23, 0x4e24, 0x4e24, 0x2, 0x6, 0xfffff000, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x30, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x408) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES64], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x35a0, "b62105de37cb5f6f65750acba604004a8c03f2e1a733a040102005003746e989"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x4, "000000000000de6bd7e000000009000000f01800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x4, "a9780d4dc37a1d5c99c42eafb2723b49e4ed00a0172578e35bde00010000ff00", 0xffffffffffffffff}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_getoverrun(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x8, 0x0, 0x0, 0x7fff8010}]}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000140)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@ip_tos_int={{0xffffffffffffff4f, 0x0, 0x1, 0x9}}, @ip_retopts={{0x10}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xeb, [@multicast2, @private=0xa010102, @loopback]}, @lsrr={0x83, 0x13, 0xcf, [@local, @multicast1, @broadcast, @rand_addr=0x64010102]}, @end, @lsrr={0x83, 0x7, 0x61, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x1b, 0x0, 0x4, [0x1, 0x0, 0x7, 0x25b92d5a, 0x2]}]}}}], 0x58}}], 0x2, 0x24000801) timer_settime(r7, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000502, 0x0, &(0x7f0000000200)) unshare(0x42000400) 2.090048378s ago: executing program 3 (id=1201): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)="9170") 2.087094521s ago: executing program 2 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7c152e54cf4a7365652fbca61e1134d5344b757ffb0b23324a6f46d44bc198b8fef8717c0cdb48f2468368cce7eb19d9b12148ac290d78d5eb28c52d853c2d68a7990979177a5e8ed511a5d4486e988aa026863bc5422790acfb184f36bbf57848a8380c981450720e4580725018076ffff"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0x0, 0xfffc}, {@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x32}, @in6=@private1, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a}}]}, 0x154}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x4e21, 0x6e02, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="09f9e63e73dda0c8b6ca53", 0xb}, {&(0x7f0000000080)}], 0x2, &(0x7f00000001c0)=[@hopopts={{0x40, 0x29, 0x36, {0x6, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6d, 0x5a1, [0x8]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffda8}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x100, 0x29, 0x37, {0x8, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x1e6}, @generic={0x5, 0xe0, "e6b4c7715ea9ff5622b2682320693d6052bfd82887addb94ca53d95599d73740f71663d20100f16242835ed3161cd0cf65308bf4d1f7bdcb966b627a858864d91fc08ab2a2b057209b9464afcec8ff134ab9b2aad2cebc53948ee63761a1aefe2f35e934acf59fe41fa9beb764d1935570e904e71cbe3f9cc35f5f448842138dd5eee3d26f9a6b1fe5878a24912bdcd415cd8dcb24c3a2e18f6c2a3ec6758691226cc6f916c0129c3b654b5d2bf48979a788bccb28db69548cee5fe95c1718ab2e2b06485055e2fc0d8e1f6227c2b5513bd1624b03090f3d1426e714c1c3c7fb"}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x16, 0x2, 0x0, 0x80, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x5}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @flowinfo={{0x14}}], 0x208}, 0x40044) pselect6(0x40, &(0x7f0000000140)={0xfffffffffffffff7, 0x10001, 0x9, 0x3, 0x8, 0x8, 0x81, 0x8}, &(0x7f0000000440)={0x101, 0x98e8, 0x4, 0x1, 0x7, 0x1fe2, 0x1c000000, 0x7ff}, &(0x7f0000000480)={0xcb7, 0x400, 0x7, 0x4, 0x3, 0x6, 0x8000000000000001, 0x80000001}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500)={[0x185]}, 0x8}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000680)=@req={0x5, 0x6, 0x800, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 1.88826379s ago: executing program 4 (id=1203): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0xfff, 0xa1, 0x9, 0x4, 0xfffffff4, 0x0, 0x7, 0xffffa3d3}}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe000, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f00000001c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 839.881146ms ago: executing program 0 (id=1204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x5000000, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x0, 0x2, 0x7, 0x8}, {}, 0x0, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x1d, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb89}, {0x10, 0x1, 0x0, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb2ec73c59280986dd606410a60008000000000000000000000000ffff00000000fe9000000000000000000000000000aa3300010000000000"], 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) listen(r1, 0x0) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async, rerun: 64) socket(0x10, 0xa, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "100017", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 802.147013ms ago: executing program 0 (id=1205): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) unshare(0x2c020400) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xd92d, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x400, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xd0, r4, 0x800, 0x70bd2d, 0x25dfdbeb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x604}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x64081}, 0x1) 660.303837ms ago: executing program 1 (id=1206): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) 464.693106ms ago: executing program 1 (id=1207): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18, 0x2000000}}], 0x1, 0x810) 304.028819ms ago: executing program 1 (id=1208): socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x0, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) dup(0xffffffffffffffff) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x2c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 250.16897ms ago: executing program 4 (id=1209): semctl$SEM_INFO(0x0, 0x20000000000000, 0x13, &(0x7f00000001c0)=""/239) 220.929375ms ago: executing program 0 (id=1210): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x29, 0xb, 0x8, 0x0, 0x10, @local, @mcast2, 0x40, 0x80, 0x9, 0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000340)={0x1, 0x3, 0x802}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000380)={0x10000000, 0x8, 0x20000020000}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x21011, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x1004, 0x22108}}}}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x29, 0xb, 0x8, 0x0, 0x10, @local, @mcast2, 0x40, 0x80, 0x9, 0x2}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000340)={0x1, 0x3, 0x802}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000380)={0x10000000, 0x8, 0x20000020000}) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x21011, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x1004, 0x22108}}}}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) 0s ago: executing program 4 (id=1211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa00100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r5, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet(0x2, 0x3, 0x9) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r8, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r9 = fsmount(r7, 0x0, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): or of length 0, skipping remainder of the config [ 274.239487][ T5836] usb 4-1: config 0 has no interface number 0 [ 274.297378][ T5836] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 274.339008][ T5836] usb 4-1: config 0 interface 8 has no altsetting 0 [ 274.393697][ T5836] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 274.417973][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.418301][ T30] audit: type=1326 audit(1768626478.455:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f289432b829 code=0x7ffc0000 [ 274.467241][ T30] audit: type=1326 audit(1768626478.455:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 274.490171][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.500043][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.535029][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.535528][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.537669][ T5836] usb 4-1: Product: syz [ 274.571455][ T5836] usb 4-1: Manufacturer: syz [ 274.571487][ T5836] usb 4-1: SerialNumber: syz [ 274.586070][ T5836] usb 4-1: config 0 descriptor?? [ 274.744535][ T30] audit: type=1326 audit(1768626478.515:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 274.836720][ T8559] ipvlan2: entered promiscuous mode [ 274.844469][ T30] audit: type=1326 audit(1768626478.515:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 274.882227][ T8559] bridge0: port 3(ipvlan2) entered blocking state [ 274.896366][ T8559] bridge0: port 3(ipvlan2) entered disabled state [ 274.910587][ T8559] ipvlan2: entered allmulticast mode [ 274.936986][ T8559] bridge0: entered allmulticast mode [ 274.965130][ T8559] ipvlan2: left allmulticast mode [ 275.012397][ T8559] bridge0: left allmulticast mode [ 275.095424][ T5906] tipc: Node number set to 1915516319 [ 275.134015][ T5836] ath6kl: Failed to submit usb control message: -71 [ 275.152355][ T5836] ath6kl: unable to send the bmi data to the device: -71 [ 275.194124][ T5836] ath6kl: Unable to send get target info: -71 [ 275.255716][ T5836] ath6kl: Failed to init ath6kl core: -71 [ 275.336718][ T5836] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 275.411222][ T5836] usb 4-1: USB disconnect, device number 67 [ 275.533405][ T8587] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 275.614410][ T8587] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 276.428972][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 276.654514][ T5922] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 276.815507][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 276.826444][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.837791][ T5922] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.865234][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 276.890799][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.937884][ T5922] usb 4-1: config 0 descriptor?? [ 277.591890][ T8618] program syz.0.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.614024][ T8615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.659572][ T5922] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 277.976241][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.002105][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.057412][ T8622] ipvlan2: entered promiscuous mode [ 278.078088][ T8622] bridge0: port 3(ipvlan2) entered blocking state [ 278.095040][ T8622] bridge0: port 3(ipvlan2) entered disabled state [ 278.122748][ T8622] ipvlan2: entered allmulticast mode [ 278.138047][ T5898] usb 4-1: USB disconnect, device number 68 [ 278.161532][ T8622] bridge0: entered allmulticast mode [ 278.213905][ T8622] ipvlan2: left allmulticast mode [ 278.236397][ T8622] bridge0: left allmulticast mode [ 278.925196][ T8635] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 278.937729][ T8635] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 279.374932][ T8642] netlink: 'syz.3.763': attribute type 10 has an invalid length. [ 279.387257][ T8642] bond0: (slave wlan1): Opening slave failed [ 279.488347][ T30] audit: type=1326 audit(1768626484.355:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 279.554021][ T30] audit: type=1326 audit(1768626484.355:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 279.558481][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.619672][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.625889][ T30] audit: type=1326 audit(1768626484.395:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 279.739940][ T30] audit: type=1326 audit(1768626484.395:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 279.812761][ T30] audit: type=1326 audit(1768626484.395:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 279.814389][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 280.019528][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.044773][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.057967][ T30] audit: type=1326 audit(1768626484.395:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 280.106152][ T30] audit: type=1326 audit(1768626484.395:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 280.134872][ T30] audit: type=1326 audit(1768626484.395:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 280.157975][ T30] audit: type=1326 audit(1768626484.395:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f465ff8df90 code=0x7ffc0000 [ 280.180542][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 281.413868][ T30] audit: type=1326 audit(1768626484.395:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f465ff8f34b code=0x7ffc0000 [ 281.625781][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.634053][ T24] usb 1-1: config 0 has no interface number 0 [ 281.702827][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 281.717073][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.734275][ T24] usb 1-1: Product: syz [ 281.738515][ T24] usb 1-1: Manufacturer: syz [ 281.754783][ T24] usb 1-1: SerialNumber: syz [ 281.775283][ T24] usb 1-1: config 0 descriptor?? [ 281.785221][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 281.796898][ T24] usb 1-1: selecting invalid altsetting 1 [ 281.803527][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 281.841397][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.864885][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 281.884353][ T24] usb 1-1: media controller created [ 281.902232][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.080742][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.124807][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.246566][ T8669] veth4: entered promiscuous mode [ 282.252186][ T8669] veth4: entered allmulticast mode [ 282.296898][ T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 282.312932][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 282.354153][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 282.604803][ T24] usb 1-1: USB disconnect, device number 44 [ 282.765692][ T8683] vxcan1: tx drop: invalid sa for name 0x0000000000000401 [ 283.078122][ T8690] netlink: 'syz.0.778': attribute type 4 has an invalid length. [ 283.153108][ T8690] netlink: 'syz.0.778': attribute type 4 has an invalid length. [ 283.794455][ T5836] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 283.996730][ T5836] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 284.005516][ T5836] usb 3-1: config 0 has no interface number 0 [ 284.011829][ T5836] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 284.079333][ T5836] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 284.125534][ T5836] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 284.179893][ T5836] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 284.189429][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.210121][ T5836] usb 3-1: Product: syz [ 284.214589][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 284.279964][ T8712] FAULT_INJECTION: forcing a failure. [ 284.279964][ T8712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.354382][ T8712] CPU: 1 UID: 0 PID: 8712 Comm: syz.0.784 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.354422][ T8712] Tainted: [L]=SOFTLOCKUP [ 284.354429][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.354439][ T8712] Call Trace: [ 284.354446][ T8712] [ 284.354453][ T8712] dump_stack_lvl+0xe8/0x150 [ 284.354485][ T8712] should_fail_ex+0x414/0x560 [ 284.354510][ T8712] _copy_from_user+0x2d/0xb0 [ 284.354536][ T8712] ____sys_sendmsg+0x2fe/0x820 [ 284.354569][ T8712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.354604][ T8712] ? import_iovec+0x74/0xa0 [ 284.354640][ T8712] ___sys_sendmsg+0x21f/0x2a0 [ 284.354668][ T8712] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.354699][ T8712] ? kstrtouint+0x6e/0xe0 [ 284.354744][ T8712] ? __fget_files+0x2a/0x420 [ 284.354768][ T8712] ? __fget_files+0x3a0/0x420 [ 284.354803][ T8712] __sys_sendmmsg+0x227/0x430 [ 284.354834][ T8712] ? __pfx___sys_sendmmsg+0x10/0x10 [ 284.354857][ T8712] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 284.354908][ T8712] ? ksys_write+0x22a/0x250 [ 284.354930][ T8712] ? __pfx_ksys_write+0x10/0x10 [ 284.354957][ T8712] __x64_sys_sendmmsg+0xa0/0xc0 [ 284.354985][ T8712] do_syscall_64+0xec/0xf80 [ 284.355007][ T8712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.355026][ T8712] ? trace_irq_disable+0x37/0x100 [ 284.355051][ T8712] ? clear_bhb_loop+0x60/0xb0 [ 284.355074][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.355093][ T8712] RIP: 0033:0x7f8b5398f749 [ 284.355111][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.355129][ T8712] RSP: 002b:00007f8b548d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.355152][ T8712] RAX: ffffffffffffffda RBX: 00007f8b53be5fa0 RCX: 00007f8b5398f749 [ 284.355166][ T8712] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 284.355187][ T8712] RBP: 00007f8b548d7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.355200][ T8712] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 284.355211][ T8712] R13: 00007f8b53be6038 R14: 00007f8b53be5fa0 R15: 00007f8b53d0fa28 [ 284.355243][ T8712] [ 284.655597][ T5836] usb 3-1: Manufacturer: syz [ 284.660453][ T5836] usb 3-1: SerialNumber: syz [ 284.665296][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 284.665310][ T30] audit: type=1326 audit(1768626489.525:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 284.706062][ T5836] usb 3-1: config 0 descriptor?? [ 284.716310][ T8698] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 284.723923][ T8698] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 284.751544][ T30] audit: type=1326 audit(1768626489.615:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.036432][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.074422][ T30] audit: type=1326 audit(1768626489.615:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.114257][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.124084][ T24] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 285.145879][ T8694] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.184421][ T30] audit: type=1326 audit(1768626489.665:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.188758][ T8694] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.206681][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.255711][ T30] audit: type=1326 audit(1768626489.835:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.302569][ T24] usb 2-1: config 0 descriptor?? [ 285.415665][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.788'. [ 285.449051][ T5836] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 285.461198][ T30] audit: type=1326 audit(1768626489.855:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.494249][ T5898] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 285.518019][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.529471][ T30] audit: type=1326 audit(1768626489.865:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.551940][ T30] audit: type=1326 audit(1768626489.865:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.734301][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 285.802909][ T30] audit: type=1326 audit(1768626489.885:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 285.805073][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.858630][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.020343][ T30] audit: type=1326 audit(1768626489.895:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 286.155495][ T5898] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 286.194325][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.357090][ T5898] usb 1-1: Product: syz [ 286.472983][ T5898] usb 1-1: Manufacturer: syz [ 286.544537][ T5898] usb 1-1: SerialNumber: syz [ 286.576640][ T5898] usb 1-1: config 0 descriptor?? [ 286.595931][ T5898] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 286.805035][ T5906] usb 1-1: USB disconnect, device number 45 [ 287.258733][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 287.270639][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 287.314732][ T24] usb 2-1: USB disconnect, device number 47 [ 287.363972][ T5906] usb 3-1: USB disconnect, device number 40 [ 287.922107][ T8742] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 287.973468][ T8744] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 288.044675][ T6319] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 288.204307][ T6319] usb 1-1: Using ep0 maxpacket: 16 [ 288.229120][ T6319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.274368][ T6319] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 288.309420][ T6319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.344960][ T6319] usb 1-1: config 0 descriptor?? [ 289.003676][ T6319] usbhid 1-1:0.0: can't add hid device: -71 [ 289.037144][ T6319] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 289.058320][ T6319] usb 1-1: USB disconnect, device number 46 [ 289.522120][ T5906] IPVS: starting estimator thread 0... [ 289.554601][ T8771] loop2: detected capacity change from 0 to 7 [ 289.573688][ T8771] Dev loop2: unable to read RDB block 7 [ 289.579807][ T8771] loop2: unable to read partition table [ 289.588890][ T8771] loop2: partition table beyond EOD, truncated [ 289.615469][ T8771] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.624943][ T8772] IPVS: using max 28 ests per chain, 67200 per kthread [ 290.174650][ T5906] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 290.234691][ T8783] netlink: 84 bytes leftover after parsing attributes in process `syz.1.808'. [ 290.259843][ T8783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.808'. [ 290.334302][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 290.359548][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.442341][ T5906] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 290.472507][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.512214][ T5906] usb 1-1: config 0 descriptor?? [ 290.626568][ T8787] netlink: 'syz.1.809': attribute type 4 has an invalid length. [ 290.735650][ T8787] netlink: 'syz.1.809': attribute type 4 has an invalid length. [ 290.764343][ T6319] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 290.924302][ T6319] usb 3-1: Using ep0 maxpacket: 16 [ 290.934079][ T6319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.952691][ T6319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.964828][ T6319] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 290.985189][ T6319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.013001][ T6319] usb 3-1: config 0 descriptor?? [ 291.074771][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 291.167515][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 291.174438][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 291.216469][ T5906] usb 1-1: USB disconnect, device number 47 [ 291.258353][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.285115][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.312963][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.337480][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.364304][ T24] usb 4-1: SerialNumber: syz [ 291.457932][ T6319] hid-corsair-void 0003:1B1C:0A55.0026: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.2-1/input0 [ 291.616779][ T24] usb 4-1: 0:2 : does not exist [ 291.759075][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.769365][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.798988][ T24] usb 4-1: USB disconnect, device number 69 [ 291.941248][ T5906] usb 3-1: USB disconnect, device number 41 [ 291.941682][ T5836] hid-corsair-void 0003:1B1C:0A55.0026: failed to request battery (reason: -71) [ 291.957873][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.977699][ T6319] hid-corsair-void 0003:1B1C:0A55.0026: failed to request firmware (reason: -71) [ 291.991755][ T8803] fido_id[8803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 292.950006][ T8820] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 292.950913][ T8821] netlink: 156 bytes leftover after parsing attributes in process `syz.2.820'. [ 292.985230][ T6319] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 293.021685][ T8821] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 293.021872][ T8820] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 293.164428][ T6319] usb 4-1: Using ep0 maxpacket: 32 [ 293.187184][ T6319] usb 4-1: config 3 has an invalid interface number: 171 but max is 29 [ 293.211782][ T6319] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 293.245212][ T6319] usb 4-1: config 3 has no interface number 0 [ 293.271606][ T6319] usb 4-1: config 3 interface 171 altsetting 108 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 293.335509][ T6319] usb 4-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 293.364313][ T6319] usb 4-1: config 3 interface 171 has no altsetting 0 [ 293.372763][ T8828] netlink: 52 bytes leftover after parsing attributes in process `syz.1.821'. [ 293.396321][ T6319] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 293.412605][ T6319] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 293.440248][ T6319] usb 4-1: Product: syz [ 293.455805][ T6319] usb 4-1: Manufacturer: syz [ 293.472743][ T6319] usb 4-1: SerialNumber: syz [ 293.497801][ T8814] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 293.825320][ T6319] as10x_usb: device has been detected [ 293.842735][ T6319] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 293.905413][ T6319] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 293.982894][ T6319] as10x_usb: error during firmware upload part1 [ 294.004395][ T6319] Registered device Sky IT Digital Key (green led) [ 294.040504][ T6319] usb 4-1: USB disconnect, device number 70 [ 294.146695][ T6319] Unregistered device Sky IT Digital Key (green led) [ 294.155060][ T6319] as10x_usb: device has been disconnected [ 294.160949][ T5828] IPVS: starting estimator thread 0... [ 294.285844][ T8839] IPVS: using max 28 ests per chain, 67200 per kthread [ 295.153018][ T3074] IPVS: stop unused estimator thread 0... [ 295.191436][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.414580][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.493605][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.502388][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.919490][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 296.340843][ T8880] netlink: 'syz.0.838': attribute type 4 has an invalid length. [ 296.366524][ T8880] netlink: 'syz.0.838': attribute type 4 has an invalid length. [ 297.086967][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 298.617988][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.660375][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.696609][ T5828] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 298.740483][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.749183][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.867333][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.894506][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.915946][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.955959][ T5828] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.974299][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.005706][ T5828] usb 1-1: config 0 descriptor?? [ 299.221048][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'. [ 299.478433][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 299.582003][ T5828] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 299.924706][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 299.934506][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 299.964903][ T8936] syzkaller0: entered promiscuous mode [ 299.970403][ T8936] syzkaller0: entered allmulticast mode [ 300.285349][ T6319] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 300.564299][ T6319] usb 2-1: Using ep0 maxpacket: 32 [ 300.587729][ T6319] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 300.614297][ T6319] usb 2-1: config 0 has no interface number 0 [ 300.636692][ T6319] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.670834][ T6319] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 300.710947][ T6319] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 300.727396][ T6319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.752990][ T6319] usb 2-1: Product: syz [ 300.766008][ T6319] usb 2-1: Manufacturer: syz [ 300.782445][ T6319] usb 2-1: SerialNumber: syz [ 300.817070][ T6319] usb 2-1: config 0 descriptor?? [ 300.850601][ T6319] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 301.024446][ T5836] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [ 301.635051][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 301.669391][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.685768][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.768684][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.808187][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.848375][ T5922] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 301.878824][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.867'. [ 301.959806][ T6319] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 301.974305][ T5978] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 301.988590][ T6319] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 302.004353][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 302.020587][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.042728][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.100799][ T5922] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.111335][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.142582][ T5922] usb 4-1: config 0 descriptor?? [ 302.174023][ T5922] hub 4-1:0.0: USB hub found [ 302.180137][ T5978] usb 3-1: Using ep0 maxpacket: 16 [ 302.203626][ T5978] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 302.216261][ T24] usb 1-1: USB disconnect, device number 48 [ 302.277458][ T5978] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 302.319630][ T5978] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 302.343716][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 302.357587][ T5978] usb 3-1: config 8 has no interface number 0 [ 302.363980][ T5978] usb 3-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 302.395470][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.428407][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.869'. [ 302.466630][ T5978] usb 3-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 302.484927][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.492892][ T5978] usb 3-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.511299][ T5978] usb 3-1: config 8 interface 223 has no altsetting 0 [ 302.519912][ T5922] hub 4-1:0.0: 2 ports detected [ 302.530010][ T5978] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 302.549056][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.557622][ T5978] usb 3-1: Product: syz [ 302.698705][ T5978] usb 3-1: Manufacturer: syz [ 302.703807][ T5978] usb 3-1: SerialNumber: syz [ 302.783875][ T5922] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 302.795552][ T8963] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 302.811337][ T5922] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 302.857406][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 302.869091][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 302.928174][ T5922] usb 4-1: USB disconnect, device number 72 [ 303.024367][ T8961] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 303.044487][ T8963] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 303.065702][ T8982] netlink: 56 bytes leftover after parsing attributes in process `syz.0.871'. [ 303.076291][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.866'. [ 303.177400][ T8963] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 303.185514][ T8963] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 303.193117][ T8963] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.212751][ T8961] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.242319][ T5978] usb 3-1: USB disconnect, device number 42 [ 303.263874][ T5828] usb 2-1: USB disconnect, device number 48 [ 303.441862][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 303.441877][ T30] audit: type=1326 audit(1768626508.305:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b198f749 code=0x7ffc0000 [ 303.521847][ T30] audit: type=1326 audit(1768626508.355:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f17b198f749 code=0x7ffc0000 [ 303.568672][ T30] audit: type=1326 audit(1768626508.355:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b198f749 code=0x7ffc0000 [ 303.681176][ T30] audit: type=1326 audit(1768626508.355:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b198f749 code=0x7ffc0000 [ 303.732377][ T30] audit: type=1326 audit(1768626508.355:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17b198f749 code=0x7ffc0000 [ 303.814966][ T5828] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 303.866003][ T30] audit: type=1326 audit(1768626508.355:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b198f749 code=0x7ffc0000 [ 303.934135][ T30] audit: type=1326 audit(1768626508.355:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b198f749 code=0x7ffc0000 [ 304.024497][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 304.056811][ T5828] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.072913][ T5828] usb 2-1: config 0 has no interface number 0 [ 304.079642][ T30] audit: type=1326 audit(1768626508.355:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17b198df90 code=0x7ffc0000 [ 304.085588][ T5828] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 304.146488][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.169032][ T30] audit: type=1326 audit(1768626508.365:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 304.174409][ T5828] usb 2-1: Product: syz [ 304.254327][ T30] audit: type=1326 audit(1768626508.365:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b198f34b code=0x7ffc0000 [ 304.254358][ T5828] usb 2-1: Manufacturer: syz [ 304.383017][ T5828] usb 2-1: SerialNumber: syz [ 304.417532][ T5828] usb 2-1: config 0 descriptor?? [ 304.422152][ T8995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.482268][ T5828] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 304.496768][ T5828] usb 2-1: selecting invalid altsetting 1 [ 304.502898][ T5828] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 304.504658][ T8995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.513316][ T5828] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.530046][ T5828] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 304.551200][ T5828] usb 2-1: media controller created [ 304.556453][ T8995] binder: BINDER_SET_CONTEXT_MGR already set [ 304.562713][ T8995] binder: 8994:8995 ioctl 4018620d 2000000002c0 returned -16 [ 304.586050][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.134466][ T8984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.171515][ T8984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.186629][ T9011] __nla_validate_parse: 1 callbacks suppressed [ 305.186651][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 305.260626][ T5828] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 305.268511][ T5828] zl10353_read_register: readreg error (reg=127, ret==-71) [ 305.283861][ T5828] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 305.562033][ T5828] usb 2-1: USB disconnect, device number 49 [ 305.759513][ T5906] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 305.774619][ T5978] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 305.914608][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 305.923904][ T5906] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 305.934476][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 305.940004][ T5906] usb 3-1: config 0 has no interface number 0 [ 305.950631][ T5906] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 305.956750][ T5978] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 305.968541][ T5906] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 305.983443][ T5906] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 306.001955][ T5978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.012776][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.032439][ T5978] usb 1-1: config 0 has no interface number 0 [ 306.050590][ T5978] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 306.063272][ T5906] usb 3-1: Product: syz [ 306.070649][ T5906] usb 3-1: Manufacturer: syz [ 306.084769][ T5906] usb 3-1: SerialNumber: syz [ 306.099792][ T5978] usb 1-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 306.124467][ T5978] usb 1-1: config 0 interface 8 has no altsetting 0 [ 306.143352][ T5978] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 306.162484][ T5906] usb 3-1: config 0 descriptor?? [ 306.194805][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 306.278237][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.281975][ T5906] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 306.287861][ T5978] usb 1-1: Product: syz [ 306.301891][ T5978] usb 1-1: Manufacturer: syz [ 306.310466][ T5978] usb 1-1: SerialNumber: syz [ 306.326585][ T5978] usb 1-1: config 0 descriptor?? [ 306.351404][ T9022] netlink: 'syz.1.885': attribute type 4 has an invalid length. [ 306.378022][ T9022] netlink: 'syz.1.885': attribute type 4 has an invalid length. [ 306.546240][ T9016] tls_set_device_offload: netdev not found [ 306.567128][ T9016] ipvlan2: entered promiscuous mode [ 306.576390][ T9016] bridge0: port 3(ipvlan2) entered blocking state [ 306.590533][ T9016] bridge0: port 3(ipvlan2) entered disabled state [ 306.606647][ T9016] ipvlan2: entered allmulticast mode [ 306.618170][ T9016] bridge0: entered allmulticast mode [ 306.633296][ T9016] ipvlan2: left allmulticast mode [ 306.640135][ T9016] bridge0: left allmulticast mode [ 306.763164][ T5978] ath6kl: Failed to submit usb control message: -71 [ 306.779424][ T5978] ath6kl: unable to send the bmi data to the device: -71 [ 306.791957][ T5978] ath6kl: Unable to send get target info: -71 [ 306.808098][ T5978] ath6kl: Failed to init ath6kl core: -71 [ 306.867923][ T5978] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 306.886626][ T5978] usb 1-1: USB disconnect, device number 49 [ 307.099980][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 307.124347][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.147720][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.394510][ T5906] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 307.409207][ T5906] gspca_pac7302 3-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 307.454912][ T9035] netlink: 56 bytes leftover after parsing attributes in process `syz.1.888'. [ 307.991196][ T9049] netlink: 56 bytes leftover after parsing attributes in process `syz.3.892'. [ 308.844354][ T5898] usb 3-1: USB disconnect, device number 43 [ 309.267377][ T9060] syzkaller0: entered promiscuous mode [ 309.304936][ T9060] syzkaller0: entered allmulticast mode [ 309.916634][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'. [ 310.537128][ T5898] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 310.677307][ T9085] syzkaller0: entered promiscuous mode [ 310.696744][ T9085] syzkaller0: entered allmulticast mode [ 310.866838][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.921662][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.954541][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.002286][ T5898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.040182][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.072893][ T5898] usb 4-1: config 0 descriptor?? [ 311.544452][ T5906] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 311.584856][ T5898] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 311.726273][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 311.740902][ T5906] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 311.750621][ T5906] usb 3-1: config 0 has no interface number 0 [ 311.858277][ T9081] binder: BINDER_SET_CONTEXT_MGR already set [ 311.868701][ T9081] binder: 9080:9081 ioctl 4018620d 2000000002c0 returned -16 [ 311.876630][ T5906] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 312.025885][ T5906] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 312.039884][ T9101] veth2: entered promiscuous mode [ 312.049291][ T9101] veth2: entered allmulticast mode [ 312.061559][ T5906] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 312.148783][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.174538][ T5906] usb 3-1: Product: syz [ 312.188020][ T5906] usb 3-1: Manufacturer: syz [ 312.210331][ T9105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.908'. [ 312.249487][ T5906] usb 3-1: SerialNumber: syz [ 312.436550][ T5906] usb 3-1: config 0 descriptor?? [ 312.451363][ T5906] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 313.034424][ T5836] usb 4-1: reset high-speed USB device number 73 using dummy_hcd [ 313.372754][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.408029][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.644637][ T5906] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 313.654345][ T5906] gspca_pac7302 3-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 313.654432][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 313.834422][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 313.851115][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 313.867612][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.893268][ T24] usb 2-1: Product: syz [ 313.908064][ T24] usb 2-1: Manufacturer: syz [ 313.926692][ T24] usb 2-1: SerialNumber: syz [ 313.942438][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'. [ 314.041866][ T24] usb 2-1: config 0 descriptor?? [ 314.089352][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 314.145539][ T6319] usb 4-1: USB disconnect, device number 73 [ 314.453587][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'. [ 314.950521][ T6319] usb 3-1: USB disconnect, device number 44 [ 315.210339][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 315.234550][ T24] gspca_sq930x: ucbus_write failed -110 [ 315.414337][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 315.454479][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 315.461301][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 315.594317][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 315.601317][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 315.616093][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.627558][ T9] usb 1-1: config 0 has no interface number 0 [ 315.633947][ T9] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 315.684830][ T9] usb 1-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 315.836569][ T9] usb 1-1: config 0 interface 8 has no altsetting 0 [ 315.875006][ T9] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 315.903461][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.921416][ T9] usb 1-1: Product: syz [ 315.932041][ T9] usb 1-1: Manufacturer: syz [ 315.953363][ T9] usb 1-1: SerialNumber: syz [ 315.966829][ T9] usb 1-1: config 0 descriptor?? [ 316.184562][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 316.203100][ T9140] tls_set_device_offload: netdev not found [ 316.440333][ T9140] ipvlan2: entered promiscuous mode [ 316.571335][ T9140] bridge0: port 3(ipvlan2) entered blocking state [ 316.580972][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.599752][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.650616][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.655187][ T9140] bridge0: port 3(ipvlan2) entered disabled state [ 316.685880][ T5906] usb 2-1: USB disconnect, device number 50 [ 316.734472][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.746441][ T9140] ipvlan2: entered allmulticast mode [ 316.769040][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.786396][ T9140] bridge0: entered allmulticast mode [ 316.830869][ T9140] ipvlan2: left allmulticast mode [ 316.854515][ T24] usb 4-1: config 0 descriptor?? [ 316.854875][ T9140] bridge0: left allmulticast mode [ 317.136716][ T9] ath6kl: Failed to submit usb control message: -71 [ 317.143589][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 317.154316][ T5906] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 317.193083][ T9] ath6kl: Unable to send get target info: -71 [ 317.214260][ T9] ath6kl: Failed to init ath6kl core: -71 [ 317.229829][ T9] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 317.279453][ T9] usb 1-1: USB disconnect, device number 50 [ 317.295274][ T24] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 317.314622][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 317.325978][ T5906] usb 2-1: config 0 has an invalid interface number: 80 but max is 0 [ 317.338076][ T5906] usb 2-1: config 0 has no interface number 0 [ 317.351295][ T5906] usb 2-1: too many endpoints for config 0 interface 80 altsetting 74: 136, using maximum allowed: 30 [ 317.376071][ T5906] usb 2-1: config 0 interface 80 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.399882][ T5906] usb 2-1: config 0 interface 80 altsetting 74 has 2 endpoint descriptors, different from the interface descriptor's value: 136 [ 317.424287][ T5906] usb 2-1: config 0 interface 80 has no altsetting 0 [ 317.431138][ T5906] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 317.444717][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.451219][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.489431][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.515428][ T5906] usb 2-1: config 0 descriptor?? [ 317.575207][ T9155] binder: BINDER_SET_CONTEXT_MGR already set [ 317.581523][ T9155] binder: 9154:9155 ioctl 4018620d 2000000002c0 returned -16 [ 317.660268][ T5906] usb 4-1: USB disconnect, device number 74 [ 317.741820][ T9157] openvswitch: netlink: Flow actions attr not present in new flow. [ 317.877238][ T9169] netlink: 56 bytes leftover after parsing attributes in process `syz.4.926'. [ 318.094489][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 318.244281][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 318.251839][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.260775][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.275842][ T24] usb 3-1: config 0 has no interface number 0 [ 318.283518][ T24] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 318.297205][ T24] usb 3-1: config 0 interface 8 has no altsetting 0 [ 318.308133][ T24] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 318.317471][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.326117][ T24] usb 3-1: Product: syz [ 318.330583][ T24] usb 3-1: Manufacturer: syz [ 318.335900][ T24] usb 3-1: SerialNumber: syz [ 318.340717][ T5906] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 318.346315][ T24] usb 3-1: config 0 descriptor?? [ 318.524351][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 318.612844][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 318.624067][ T9165] ipvlan2: entered promiscuous mode [ 318.633254][ T9165] bridge0: port 3(ipvlan2) entered blocking state [ 318.641793][ T9165] bridge0: port 3(ipvlan2) entered disabled state [ 318.651768][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.652153][ T9165] ipvlan2: entered allmulticast mode [ 318.678334][ T9165] bridge0: entered allmulticast mode [ 318.678375][ T5906] usb 1-1: Product: syz [ 318.687828][ T9165] ipvlan2: left allmulticast mode [ 318.699042][ T9165] bridge0: left allmulticast mode [ 318.707911][ T5906] usb 1-1: Manufacturer: syz [ 318.724430][ T5906] usb 1-1: SerialNumber: syz [ 318.741155][ T5906] usb 1-1: config 0 descriptor?? [ 318.889359][ T24] ath6kl: Failed to submit usb control message: -71 [ 318.899321][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 318.909609][ T24] ath6kl: Unable to send get target info: -71 [ 318.916970][ T24] ath6kl: Failed to init ath6kl core: -71 [ 318.925436][ T24] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 318.933704][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.958639][ T5906] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 318.960214][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.977104][ T5906] b3 c1 69 eb 50 3d 29 15 [ 318.977663][ T24] usb 3-1: USB disconnect, device number 45 [ 318.987944][ T5906] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 319.085526][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.099046][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.161559][ T5922] usb 1-1: USB disconnect, device number 51 [ 319.257949][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 319.638845][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 319.638865][ T30] audit: type=1326 audit(1768626524.505:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.697054][ T30] audit: type=1326 audit(1768626524.535:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.746875][ T30] audit: type=1326 audit(1768626524.585:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.780864][ T30] audit: type=1326 audit(1768626524.585:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.803817][ T30] audit: type=1326 audit(1768626524.585:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.828862][ T30] audit: type=1326 audit(1768626524.585:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.881341][ T9] usb 2-1: USB disconnect, device number 51 [ 319.895229][ T30] audit: type=1326 audit(1768626524.585:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.924115][ T30] audit: type=1326 audit(1768626524.585:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289438f749 code=0x7ffc0000 [ 319.988011][ T30] audit: type=1326 audit(1768626524.585:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f289438df90 code=0x7ffc0000 [ 320.010652][ T30] audit: type=1326 audit(1768626524.595:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f289438f34b code=0x7ffc0000 [ 320.105510][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 320.264778][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 320.274038][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.283118][ T24] usb 3-1: config 0 has no interface number 0 [ 320.295496][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 320.305727][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.313836][ T24] usb 3-1: Product: syz [ 320.548360][ T24] usb 3-1: Manufacturer: syz [ 320.560543][ T24] usb 3-1: SerialNumber: syz [ 320.567569][ T24] usb 3-1: config 0 descriptor?? [ 320.578643][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 320.587901][ T24] usb 3-1: selecting invalid altsetting 1 [ 320.634771][ T5922] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 320.688172][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 320.698243][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 320.712277][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 320.726210][ T24] usb 3-1: media controller created [ 320.764634][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.842109][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.970767][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.971317][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.992557][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.006975][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.021131][ T5922] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.033692][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.058746][ T5922] usb 4-1: config 0 descriptor?? [ 321.367724][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 321.377243][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 321.400726][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 321.519409][ T5922] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 321.552385][ T24] usb 3-1: USB disconnect, device number 46 [ 322.120140][ T9216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.939'. [ 322.394407][ T5828] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 322.647896][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 322.662716][ T5828] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 322.688027][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.710858][ T5828] usb 3-1: config 0 has no interface number 0 [ 322.727452][ T5828] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 322.754445][ T5828] usb 3-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 322.792213][ T5828] usb 3-1: config 0 interface 8 has no altsetting 0 [ 322.818969][ T5828] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 322.841648][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.886550][ T5828] usb 3-1: Product: syz [ 322.890846][ T5828] usb 3-1: Manufacturer: syz [ 322.897970][ T5828] usb 3-1: SerialNumber: syz [ 322.913033][ T5828] usb 3-1: config 0 descriptor?? [ 322.918568][ T9] usb 4-1: reset high-speed USB device number 75 using dummy_hcd [ 323.234022][ T9220] tls_set_device_offload: netdev not found [ 323.282712][ T9220] ipvlan2: entered promiscuous mode [ 323.367358][ T9220] bridge0: port 3(ipvlan2) entered blocking state [ 323.384888][ T9220] bridge0: port 3(ipvlan2) entered disabled state [ 323.394954][ T9220] ipvlan2: entered allmulticast mode [ 323.408932][ T9220] bridge0: entered allmulticast mode [ 323.439995][ T9220] ipvlan2: left allmulticast mode [ 323.469833][ T9220] bridge0: left allmulticast mode [ 323.644918][ T5828] ath6kl: Failed to submit usb control message: -71 [ 323.662718][ T5828] ath6kl: unable to send the bmi data to the device: -71 [ 323.678470][ T5828] ath6kl: Unable to send get target info: -71 [ 323.704097][ T5828] ath6kl: Failed to init ath6kl core: -71 [ 323.717376][ T5828] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 323.766681][ T5828] usb 3-1: USB disconnect, device number 47 [ 323.888279][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'. [ 324.006105][ T5906] usb 4-1: USB disconnect, device number 75 [ 324.113034][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 324.264396][ T5906] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 324.527278][ T5906] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 324.545652][ T5906] usb 4-1: config 54 has no interface number 0 [ 324.606226][ T5906] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 324.621922][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.634469][ T5906] usb 4-1: Product: syz [ 324.638878][ T5906] usb 4-1: Manufacturer: syz [ 324.643625][ T5906] usb 4-1: SerialNumber: syz [ 325.034445][ T9255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 325.351609][ T5906] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 325.353199][ T6041] usb 4-1: Failed to submit usb control message: -71 [ 325.400353][ T5906] usb 4-1: USB disconnect, device number 76 [ 325.444274][ T6041] usb 4-1: unable to send the bmi data to the device: -71 [ 325.482999][ T6041] usb 4-1: unable to get target info from device [ 325.504534][ T6041] usb 4-1: could not get target info (-71) [ 325.510578][ T6041] usb 4-1: could not probe fw (-71) [ 326.034306][ T5906] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 326.224768][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 326.253152][ T5906] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 326.294468][ T5906] usb 2-1: config 0 has no interface number 0 [ 326.300644][ T5906] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.332624][ T5906] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 326.448349][ T5906] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 326.464502][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.493294][ T5906] usb 2-1: Product: syz [ 326.499382][ T5906] usb 2-1: Manufacturer: syz [ 326.506699][ T5906] usb 2-1: SerialNumber: syz [ 326.580890][ T5906] usb 2-1: config 0 descriptor?? [ 326.693200][ T5906] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 327.463830][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.962'. [ 327.679553][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.740653][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.834979][ T5906] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 327.842397][ T5906] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 329.280337][ T5898] usb 2-1: USB disconnect, device number 52 [ 330.033946][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 330.393797][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 330.410460][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.445070][ T24] usb 3-1: Product: syz [ 330.455904][ T24] usb 3-1: Manufacturer: syz [ 330.467837][ T24] usb 3-1: SerialNumber: syz [ 330.814052][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.825243][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.048581][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 331.062396][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 332.705265][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 332.723914][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 332.902486][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 332.950329][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 333.018362][ T24] usb 3-1: USB disconnect, device number 48 [ 333.474284][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 333.664302][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 333.673564][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 333.684925][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.731819][ T24] usb 3-1: config 0 has no interface number 0 [ 333.796206][ T24] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 333.843765][ T24] usb 3-1: config 0 interface 8 has no altsetting 0 [ 333.865405][ T24] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 333.878115][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.900487][ T24] usb 3-1: Product: syz [ 333.909405][ T24] usb 3-1: Manufacturer: syz [ 333.920469][ T24] usb 3-1: SerialNumber: syz [ 333.943079][ T24] usb 3-1: config 0 descriptor?? [ 334.384796][ T9356] ipvlan2: entered promiscuous mode [ 334.405888][ T9356] bridge0: port 3(ipvlan2) entered blocking state [ 334.426697][ T9356] bridge0: port 3(ipvlan2) entered disabled state [ 334.454744][ T9356] ipvlan2: entered allmulticast mode [ 334.473470][ T9356] bridge0: entered allmulticast mode [ 334.510037][ T9356] ipvlan2: left allmulticast mode [ 334.556891][ T9356] bridge0: left allmulticast mode [ 334.782626][ T24] ath6kl: Failed to submit usb control message: -71 [ 334.811796][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 334.814324][ T5906] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 334.845901][ T24] ath6kl: Unable to send get target info: -71 [ 334.867610][ T24] ath6kl: Failed to init ath6kl core: -71 [ 334.889549][ T24] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 334.931344][ T24] usb 3-1: USB disconnect, device number 49 [ 335.010499][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 335.031148][ T5906] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 335.065108][ T5906] usb 1-1: config 0 has no interface number 0 [ 335.082754][ T5906] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 335.121308][ T5906] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 335.138947][ T5906] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 335.166929][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.190579][ T5906] usb 1-1: Product: syz [ 335.201051][ T5906] usb 1-1: Manufacturer: syz [ 335.210643][ T5906] usb 1-1: SerialNumber: syz [ 335.231074][ T5906] usb 1-1: config 0 descriptor?? [ 335.251219][ T5906] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 335.777843][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.801716][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.825237][ T9395] ipvlan2: entered promiscuous mode [ 335.832461][ T9395] bridge0: port 3(ipvlan2) entered blocking state [ 335.844547][ T9395] bridge0: port 3(ipvlan2) entered disabled state [ 335.851386][ T9395] ipvlan2: entered allmulticast mode [ 335.862691][ T9395] bridge0: entered allmulticast mode [ 335.883036][ T9395] ipvlan2: left allmulticast mode [ 335.892043][ T9395] bridge0: left allmulticast mode [ 335.904693][ T24] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 335.917170][ T9399] FAULT_INJECTION: forcing a failure. [ 335.917170][ T9399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.947626][ T9399] CPU: 0 UID: 0 PID: 9399 Comm: syz.1.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.947661][ T9399] Tainted: [L]=SOFTLOCKUP [ 335.947668][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.947681][ T9399] Call Trace: [ 335.947689][ T9399] [ 335.947698][ T9399] dump_stack_lvl+0xe8/0x150 [ 335.947736][ T9399] should_fail_ex+0x414/0x560 [ 335.947762][ T9399] _copy_from_user+0x2d/0xb0 [ 335.947789][ T9399] __sys_sendto+0x25c/0x520 [ 335.947816][ T9399] ? __pfx___sys_sendto+0x10/0x10 [ 335.947837][ T9399] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 335.947874][ T9399] ? __fget_files+0x3a0/0x420 [ 335.947918][ T9399] ? ksys_write+0x22a/0x250 [ 335.947941][ T9399] ? __pfx_ksys_write+0x10/0x10 [ 335.947966][ T9399] __x64_sys_sendto+0xde/0x100 [ 335.947994][ T9399] do_syscall_64+0xec/0xf80 [ 335.948017][ T9399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.948036][ T9399] ? trace_irq_disable+0x37/0x100 [ 335.948062][ T9399] ? clear_bhb_loop+0x60/0xb0 [ 335.948085][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.948104][ T9399] RIP: 0033:0x7f17b198f749 [ 335.948122][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.948140][ T9399] RSP: 002b:00007f17afbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 335.948163][ T9399] RAX: ffffffffffffffda RBX: 00007f17b1be5fa0 RCX: 00007f17b198f749 [ 335.948177][ T9399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 335.948189][ T9399] RBP: 00007f17afbf6090 R08: 0000200000000200 R09: 0000000000000010 [ 335.948202][ T9399] R10: 00000000200408c4 R11: 0000000000000246 R12: 0000000000000001 [ 335.948215][ T9399] R13: 00007f17b1be6038 R14: 00007f17b1be5fa0 R15: 00007f17b1d0fa28 [ 335.948247][ T9399] [ 336.212880][ T9370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.223458][ T24] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 336.231953][ T24] usb 3-1: config 0 has no interface number 0 [ 336.239270][ T24] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 336.270935][ T9370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.310038][ T24] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 336.386653][ T5906] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 336.394887][ T5906] gspca_pac7302 1-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 336.417562][ T24] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=1d.a7 [ 336.437024][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.488471][ T24] usb 3-1: Product: syz [ 336.504339][ T24] usb 3-1: Manufacturer: syz [ 336.561825][ T24] usb 3-1: SerialNumber: syz [ 336.647863][ T24] usb 3-1: config 0 descriptor?? [ 336.695254][ T24] usb 3-1: Error in usbnet_get_endpoints (-22) [ 337.014138][ T9414] netlink: 488 bytes leftover after parsing attributes in process `syz.2.985'. [ 337.025446][ T9414] netlink: 488 bytes leftover after parsing attributes in process `syz.2.985'. [ 337.090836][ T5898] usb 3-1: USB disconnect, device number 50 [ 337.264554][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.273331][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.566591][ T24] usb 1-1: USB disconnect, device number 52 [ 338.874300][ T6319] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 339.044265][ T6319] usb 3-1: Using ep0 maxpacket: 32 [ 339.051289][ T6319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.300756][ T6319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.344591][ T6319] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.354120][ T6319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.374760][ T6319] usb 3-1: config 0 descriptor?? [ 339.388797][ T6319] hub 3-1:0.0: USB hub found [ 339.646310][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.655958][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.734320][ T6319] hub 3-1:0.0: 2 ports detected [ 340.365434][ T6319] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 340.371831][ T6319] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 340.554019][ T6319] usbhid 3-1:0.0: can't add hid device: -71 [ 340.570522][ T6319] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 340.629858][ T6319] usb 3-1: USB disconnect, device number 51 [ 340.680443][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.695309][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.733215][ T9469] tls_set_device_offload: netdev not found [ 340.800474][ T9469] ipvlan2: entered promiscuous mode [ 340.829405][ T9469] bridge0: port 3(ipvlan2) entered blocking state [ 340.849885][ T9469] bridge0: port 3(ipvlan2) entered disabled state [ 340.884731][ T9469] ipvlan2: entered allmulticast mode [ 340.890509][ T9469] bridge0: entered allmulticast mode [ 340.978436][ T9469] ipvlan2: left allmulticast mode [ 340.993523][ T9469] bridge0: left allmulticast mode [ 342.919881][ T9505] FAULT_INJECTION: forcing a failure. [ 342.919881][ T9505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.933238][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz.3.1018 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.933260][ T9505] Tainted: [L]=SOFTLOCKUP [ 342.933265][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.933272][ T9505] Call Trace: [ 342.933280][ T9505] [ 342.933287][ T9505] dump_stack_lvl+0xe8/0x150 [ 342.933308][ T9505] should_fail_ex+0x414/0x560 [ 342.933323][ T9505] _copy_from_user+0x2d/0xb0 [ 342.933339][ T9505] ___sys_recvmsg+0x12e/0x510 [ 342.933355][ T9505] ? get_pid_task+0x20/0x1f0 [ 342.933369][ T9505] ? get_pid_task+0x20/0x1f0 [ 342.933384][ T9505] ? __pfx____sys_recvmsg+0x10/0x10 [ 342.933402][ T9505] ? __fget_files+0x2a/0x420 [ 342.933425][ T9505] ? __fget_files+0x3a0/0x420 [ 342.933444][ T9505] __x64_sys_recvmsg+0x198/0x260 [ 342.933461][ T9505] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 342.933482][ T9505] ? __pfx_ksys_write+0x10/0x10 [ 342.933502][ T9505] do_syscall_64+0xec/0xf80 [ 342.933517][ T9505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.933528][ T9505] ? trace_irq_disable+0x37/0x100 [ 342.933542][ T9505] ? clear_bhb_loop+0x60/0xb0 [ 342.933556][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.933568][ T9505] RIP: 0033:0x7f009b98f749 [ 342.933580][ T9505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.933591][ T9505] RSP: 002b:00007f009c8e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 342.933605][ T9505] RAX: ffffffffffffffda RBX: 00007f009bbe5fa0 RCX: 00007f009b98f749 [ 342.933614][ T9505] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: 0000000000000004 [ 342.933621][ T9505] RBP: 00007f009c8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 342.933637][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.933644][ T9505] R13: 00007f009bbe6038 R14: 00007f009bbe5fa0 R15: 00007f009bd0fa28 [ 342.933662][ T9505] [ 343.517419][ T9513] FAULT_INJECTION: forcing a failure. [ 343.517419][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 343.537539][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.0.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.537564][ T9513] Tainted: [L]=SOFTLOCKUP [ 343.537576][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.537583][ T9513] Call Trace: [ 343.537589][ T9513] [ 343.537595][ T9513] dump_stack_lvl+0xe8/0x150 [ 343.537616][ T9513] should_fail_ex+0x414/0x560 [ 343.537632][ T9513] should_failslab+0xa8/0x100 [ 343.537648][ T9513] __kmalloc_noprof+0xdf/0x800 [ 343.537660][ T9513] ? kernfs_fop_write_iter+0x158/0x540 [ 343.537680][ T9513] kernfs_fop_write_iter+0x158/0x540 [ 343.537699][ T9513] vfs_write+0x5c9/0xb30 [ 343.537714][ T9513] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 343.537731][ T9513] ? __pfx_vfs_write+0x10/0x10 [ 343.537749][ T9513] ? __fget_files+0x2a/0x420 [ 343.537768][ T9513] ksys_write+0x145/0x250 [ 343.537781][ T9513] ? __pfx_ksys_write+0x10/0x10 [ 343.537799][ T9513] do_syscall_64+0xec/0xf80 [ 343.537813][ T9513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.537827][ T9513] ? trace_irq_disable+0x37/0x100 [ 343.537842][ T9513] ? clear_bhb_loop+0x60/0xb0 [ 343.537856][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.537867][ T9513] RIP: 0033:0x7f8b5398f749 [ 343.537880][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.537890][ T9513] RSP: 002b:00007f8b548d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.537905][ T9513] RAX: ffffffffffffffda RBX: 00007f8b53be5fa0 RCX: 00007f8b5398f749 [ 343.537913][ T9513] RDX: 0000000000000009 RSI: 0000200000000580 RDI: 0000000000000004 [ 343.537921][ T9513] RBP: 00007f8b548d7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.537928][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.537935][ T9513] R13: 00007f8b53be6038 R14: 00007f8b53be5fa0 R15: 00007f8b53d0fa28 [ 343.537954][ T9513] [ 344.053873][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 344.170532][ T5906] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 344.354612][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 344.484364][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.522705][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.584399][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.607854][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.654274][ T5906] usb 2-1: config 0 descriptor?? [ 344.697254][ T5906] hub 2-1:0.0: USB hub found [ 344.734435][ T5828] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 344.891919][ T9541] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 344.895774][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.899104][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 344.909004][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.925426][ T5906] hub 2-1:0.0: 2 ports detected [ 344.931360][ T5828] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 344.941071][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.953032][ T5828] usb 4-1: config 0 has no interface number 0 [ 344.976325][ T5828] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 345.183288][ T5906] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 345.199853][ T5906] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 345.210858][ T5828] usb 4-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 345.226250][ T5828] usb 4-1: config 0 interface 8 has no altsetting 0 [ 345.233980][ T5906] usbhid 2-1:0.0: can't add hid device: -71 [ 345.253006][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 345.267429][ T5828] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 345.285927][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.300019][ T5828] usb 4-1: Product: syz [ 345.307517][ T5906] usb 2-1: USB disconnect, device number 53 [ 345.316098][ T5828] usb 4-1: Manufacturer: syz [ 345.320828][ T5828] usb 4-1: SerialNumber: syz [ 345.341610][ T5828] usb 4-1: config 0 descriptor?? [ 345.560999][ T9536] tls_set_device_offload: netdev not found [ 345.572890][ T9536] ipvlan3: entered promiscuous mode [ 345.579689][ T9536] bridge0: port 3(ipvlan3) entered blocking state [ 345.590481][ T9536] bridge0: port 3(ipvlan3) entered disabled state [ 345.657781][ T9536] ipvlan3: entered allmulticast mode [ 345.700097][ T9536] bridge0: entered allmulticast mode [ 345.781401][ T9536] ipvlan3: left allmulticast mode [ 345.807323][ T9536] bridge0: left allmulticast mode [ 345.935405][ T9556] futex_wake_op: syz.1.1033 tries to shift op by 32; fix this program [ 346.056046][ T5828] ath6kl: Failed to submit usb control message: -71 [ 346.063733][ T5828] ath6kl: unable to send the bmi data to the device: -71 [ 346.074774][ T5828] ath6kl: Unable to send get target info: -71 [ 346.101649][ T5828] ath6kl: Failed to init ath6kl core: -71 [ 346.133721][ T5828] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 346.200212][ T5924] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 346.254489][ T5828] usb 4-1: USB disconnect, device number 77 [ 346.385934][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.414482][ T5924] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 346.423583][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.530574][ T9561] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 346.540111][ T9561] bond0: (slave wlan1): Opening slave failed [ 346.566927][ T5924] usb 2-1: config 0 descriptor?? [ 346.585774][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 346.990909][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 347.011456][ T5924] pwc: recv_control_msg error -32 req 02 val 2700 [ 347.042519][ T5924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 347.105353][ T5924] pwc: recv_control_msg error -32 req 04 val 1000 [ 347.137374][ T5924] pwc: recv_control_msg error -32 req 04 val 1300 [ 347.397584][ T9569] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1037'. [ 347.550089][ T24] hid_parser_main: 189 callbacks suppressed [ 347.550107][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.584026][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.607448][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.616441][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.635088][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.658092][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.697955][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.722699][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.917333][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.935360][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.954502][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 347.995897][ T5924] pwc: recv_control_msg error -71 req 02 val 2000 [ 348.010806][ T5924] pwc: recv_control_msg error -71 req 02 val 2100 [ 348.017418][ T24] hid-generic 0009:0007:0001.002B: unknown main item tag 0x0 [ 348.030295][ T5924] pwc: recv_control_msg error -71 req 04 val 1500 [ 348.078562][ T5924] pwc: recv_control_msg error -71 req 02 val 2500 [ 348.103283][ T24] hid-generic 0009:0007:0001.002B: hidraw0: HID v0.06 Device [syz0] on syz1 [ 348.117333][ T5924] pwc: recv_control_msg error -71 req 02 val 2400 [ 348.199245][ T5924] pwc: recv_control_msg error -71 req 02 val 2600 [ 348.218360][ T5924] pwc: recv_control_msg error -71 req 02 val 2900 [ 348.251701][ T5924] pwc: recv_control_msg error -71 req 02 val 2800 [ 348.261950][ T5924] pwc: recv_control_msg error -71 req 04 val 1100 [ 348.270292][ T5924] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.316781][ T5924] pwc: Registered as video103. [ 348.334136][ T5924] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 348.378556][ T5924] usb 2-1: USB disconnect, device number 54 [ 349.054943][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1043'. [ 349.064037][ T9592] netlink: 'syz.4.1043': attribute type 7 has an invalid length. [ 349.072247][ T9592] netlink: 'syz.4.1043': attribute type 8 has an invalid length. [ 349.106038][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 349.125593][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 349.149142][ T9592] team0: entered promiscuous mode [ 349.164327][ T9592] team_slave_0: entered promiscuous mode [ 349.170318][ T9592] team_slave_1: entered promiscuous mode [ 349.177795][ T9592] bond0: entered promiscuous mode [ 349.182947][ T9592] bond_slave_0: entered promiscuous mode [ 349.189137][ T9592] bond_slave_1: entered promiscuous mode [ 349.196264][ T9592] gretap0: entered promiscuous mode [ 349.203124][ T9592] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 349.465119][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 349.488491][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.521667][ T24] usb 2-1: Product: syz [ 349.526199][ T24] usb 2-1: Manufacturer: syz [ 349.543772][ T24] usb 2-1: SerialNumber: syz [ 350.336356][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 350.384386][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 350.533751][ T9605] ipvlan3: entered promiscuous mode [ 350.540806][ T9605] bridge0: port 3(ipvlan3) entered blocking state [ 350.574511][ T9605] bridge0: port 3(ipvlan3) entered disabled state [ 350.597754][ T9605] ipvlan3: entered allmulticast mode [ 350.633597][ T9605] bridge0: entered allmulticast mode [ 350.804062][ T9605] ipvlan3: left allmulticast mode [ 350.824970][ T9605] bridge0: left allmulticast mode [ 350.877305][ T5906] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 351.474583][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 351.483012][ T5906] usb 4-1: config 2 has an invalid interface number: 241 but max is 0 [ 351.491694][ T5906] usb 4-1: config 2 has no interface number 0 [ 351.499204][ T5906] usb 4-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.518213][ T5906] usb 4-1: config 2 interface 241 has no altsetting 0 [ 351.613658][ T5906] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 351.622987][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.635221][ T5906] usb 4-1: Product: syz [ 351.714115][ T5906] usb 4-1: Manufacturer: syz [ 351.724045][ T5906] usb 4-1: SerialNumber: syz [ 351.734807][ T5906] ti_usb_3410_5052 4-1:2.241: TI USB 3410 1 port adapter converter detected [ 351.760062][ T5906] ti_usb_3410_5052 4-1:2.241: missing endpoints [ 351.766530][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 351.838743][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 351.858729][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 351.883323][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 351.921997][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 351.935745][ T5924] usb 4-1: USB disconnect, device number 78 [ 351.986833][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 352.056072][ T24] usb 2-1: USB disconnect, device number 55 [ 352.714553][ T9626] lo: Caught tx_queue_len zero misconfig [ 352.797767][ T9632] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1049'. [ 353.074838][ T5906] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 353.284582][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 353.295139][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 353.311209][ T5906] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 353.326667][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 353.348115][ T5906] usb 2-1: Product: syz [ 353.352527][ T5906] usb 2-1: Manufacturer: syz [ 353.384608][ T5906] usb 2-1: SerialNumber: syz [ 353.395753][ T5906] usb 2-1: config 0 descriptor?? [ 353.402927][ T9631] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.413244][ T5906] hub 2-1:0.0: bad descriptor, ignoring hub [ 353.419902][ T5906] hub 2-1:0.0: probe with driver hub failed with error -5 [ 353.725162][ T5906] usb 2-1: USB disconnect, device number 56 [ 354.167173][ T9666] Cannot find del_set index 4 as target [ 354.485170][ T9671] FAULT_INJECTION: forcing a failure. [ 354.485170][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.823905][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.834325][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.1.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.834359][ T9671] Tainted: [L]=SOFTLOCKUP [ 354.834366][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.834377][ T9671] Call Trace: [ 354.834386][ T9671] [ 354.834394][ T9671] dump_stack_lvl+0xe8/0x150 [ 354.834426][ T9671] should_fail_ex+0x414/0x560 [ 354.834453][ T9671] _copy_to_user+0x31/0xb0 [ 354.834493][ T9671] simple_read_from_buffer+0xe1/0x170 [ 354.834523][ T9671] proc_fail_nth_read+0x1b3/0x220 [ 354.834549][ T9671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.834574][ T9671] ? rw_verify_area+0x2a6/0x4d0 [ 354.834603][ T9671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.834625][ T9671] vfs_read+0x200/0xa30 [ 354.834644][ T9671] ? fdget_pos+0x247/0x320 [ 354.834673][ T9671] ? __pfx___mutex_lock+0x10/0x10 [ 354.834698][ T9671] ? __pfx_vfs_read+0x10/0x10 [ 354.834718][ T9671] ? __fget_files+0x2a/0x420 [ 354.834747][ T9671] ? __fget_files+0x3a0/0x420 [ 354.834770][ T9671] ? __fget_files+0x2a/0x420 [ 354.834803][ T9671] ksys_read+0x145/0x250 [ 354.834821][ T9671] ? __fget_files+0x3a0/0x420 [ 354.834847][ T9671] ? __pfx_ksys_read+0x10/0x10 [ 354.834865][ T9671] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 354.834902][ T9671] do_syscall_64+0xec/0xf80 [ 354.834924][ T9671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.834942][ T9671] ? trace_irq_disable+0x37/0x100 [ 354.834967][ T9671] ? clear_bhb_loop+0x60/0xb0 [ 354.834991][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.835010][ T9671] RIP: 0033:0x7f17b198e15c [ 354.835029][ T9671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.835047][ T9671] RSP: 002b:00007f17afbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.835069][ T9671] RAX: ffffffffffffffda RBX: 00007f17b1be5fa0 RCX: 00007f17b198e15c [ 354.835084][ T9671] RDX: 000000000000000f RSI: 00007f17afbf60a0 RDI: 0000000000000006 [ 354.835097][ T9671] RBP: 00007f17afbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.835109][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.835121][ T9671] R13: 00007f17b1be6038 R14: 00007f17b1be5fa0 R15: 00007f17b1d0fa28 [ 354.835155][ T9671] [ 355.241080][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.433218][ T9673] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1064'. [ 355.764542][ T5924] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 355.944669][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 355.986816][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.002431][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.033787][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.068176][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.136374][ T5924] usb 1-1: config 0 descriptor?? [ 356.145180][ T5924] hub 1-1:0.0: USB hub found [ 356.412919][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.431173][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.444324][ T5924] hub 1-1:0.0: 2 ports detected [ 356.659927][ T5924] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 356.670384][ T5924] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 356.711213][ T5924] usbhid 1-1:0.0: can't add hid device: -71 [ 356.728715][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 356.778273][ T5924] usb 1-1: USB disconnect, device number 53 [ 357.430804][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1079'. [ 357.763045][ T9721] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1081'. [ 357.775715][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 357.964335][ T5828] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 358.146235][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.164861][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.188781][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.214761][ T5828] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.226595][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.246743][ T5828] usb 1-1: config 0 descriptor?? [ 358.677322][ T5828] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 358.855884][ T9749] sctp: [Deprecated]: syz.3.1090 (pid 9749) Use of int in max_burst socket option. [ 358.855884][ T9749] Use struct sctp_assoc_value instead [ 359.204296][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 359.386048][ T24] usb 4-1: device descriptor read/64, error -71 [ 359.725896][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 359.904297][ T24] usb 4-1: device descriptor read/64, error -71 [ 360.019895][ T24] usb usb4-port1: attempt power cycle [ 360.104304][ T5924] usb 1-1: reset high-speed USB device number 54 using dummy_hcd [ 360.424329][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 360.447050][ T24] usb 4-1: device descriptor read/8, error -71 [ 360.705681][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 360.747312][ T24] usb 4-1: device descriptor read/8, error -71 [ 360.869125][ T9787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1099'. [ 360.880651][ T24] usb usb4-port1: unable to enumerate USB device [ 361.399233][ T6319] usb 1-1: USB disconnect, device number 54 [ 363.210096][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 363.301893][ T9815] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 363.381924][ T9817] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 363.846227][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 364.016160][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.074453][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.132116][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.176671][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.206352][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.247001][ T24] usb 2-1: config 0 descriptor?? [ 364.671502][ T24] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 364.734422][ T5906] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 365.085632][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.106555][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.131621][ T5906] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 365.151110][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.178042][ T5906] usb 3-1: config 0 descriptor?? [ 365.787473][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 365.844491][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 365.900216][ T5906] usb 3-1: USB disconnect, device number 52 [ 366.004321][ T24] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 366.676617][ T5924] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 366.861529][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 366.877109][ T5924] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 366.890918][ T5924] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.901109][ T5922] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 366.929333][ T5924] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.955045][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 367.035130][ T24] usb 2-1: device descriptor read/64, error -71 [ 367.078144][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 367.083491][ T5924] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 367.093274][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.118698][ T5924] usb 1-1: config 0 descriptor?? [ 367.128017][ T5922] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 367.136854][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.156665][ T5922] usb 3-1: config 0 has no interface number 0 [ 367.162883][ T5922] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 367.185072][ T5922] usb 3-1: config 0 interface 8 has no altsetting 0 [ 367.358384][ T24] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 367.366954][ T5924] usb 1-1: string descriptor 0 read error: -71 [ 367.384568][ T24] usb 2-1: device reset changed ep0 maxpacket size! [ 367.417239][ T5922] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 367.437883][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 367.447802][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.457549][ T6319] usb 2-1: USB disconnect, device number 57 [ 367.509831][ T5922] usb 3-1: Product: syz [ 367.518256][ T5184] bcm5974 1-1:0.0: could not read from device [ 367.527927][ T5922] usb 3-1: Manufacturer: syz [ 367.532697][ T5922] usb 3-1: SerialNumber: syz [ 367.540594][ T5184] bcm5974 1-1:0.0: could not read from device [ 367.544199][ T5924] usb 1-1: USB disconnect, device number 55 [ 367.556557][ T5922] usb 3-1: config 0 descriptor?? [ 367.562553][ T5184] bcm5974 1-1:0.0: could not read from device [ 367.654481][ T6319] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 367.782168][ T9857] ipvlan2: entered promiscuous mode [ 367.796215][ T9857] bridge0: port 3(ipvlan2) entered blocking state [ 367.803390][ T9857] bridge0: port 3(ipvlan2) entered disabled state [ 367.823671][ T9857] ipvlan2: entered allmulticast mode [ 367.824332][ T6319] usb 2-1: Using ep0 maxpacket: 32 [ 367.829128][ T9857] bridge0: entered allmulticast mode [ 367.837909][ T6319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.868709][ T6319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.881848][ T9857] ipvlan2: left allmulticast mode [ 367.917037][ T9857] bridge0: left allmulticast mode [ 367.917146][ T6319] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 367.973418][ T6319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.050624][ T6319] usb 2-1: config 0 descriptor?? [ 368.061497][ T6319] hub 2-1:0.0: USB hub found [ 368.102138][ T5922] ath6kl: Failed to submit usb control message: -71 [ 368.118600][ T5922] ath6kl: unable to send the bmi data to the device: -71 [ 368.244333][ T5922] ath6kl: Unable to send get target info: -71 [ 368.279220][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.307421][ T5922] ath6kl: Failed to init ath6kl core: -71 [ 368.315737][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.335709][ T6319] hub 2-1:0.0: 2 ports detected [ 368.357192][ T5922] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 368.393066][ T5922] usb 3-1: USB disconnect, device number 53 [ 368.536382][ T6319] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 368.542959][ T6319] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 368.560345][ T6319] usbhid 2-1:0.0: can't add hid device: -71 [ 368.570780][ T6319] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 368.617721][ T6319] usb 2-1: USB disconnect, device number 58 [ 371.277817][ T9915] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 371.304353][ T9915] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1140'. [ 371.786272][ T9924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.817769][ T9929] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1143'. [ 372.273421][ T5199] udevd[5199]: worker [5884] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 372.690766][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 372.712244][ T5906] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 372.895127][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 372.901908][ T5906] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 372.911455][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.996077][ T5906] usb 4-1: config 0 has no interface number 0 [ 373.007868][ T5906] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 373.019895][ T5906] usb 4-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 373.035694][ T5906] usb 4-1: config 0 interface 8 has no altsetting 0 [ 373.056697][ T5906] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 373.066286][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.077081][ T5906] usb 4-1: Product: syz [ 373.094071][ T5906] usb 4-1: Manufacturer: syz [ 373.110813][ T5906] usb 4-1: SerialNumber: syz [ 373.143777][ T5906] usb 4-1: config 0 descriptor?? [ 373.362969][ T9942] tls_set_device_offload: netdev not found [ 373.374599][ T9942] ipvlan3: entered promiscuous mode [ 373.382120][ T9942] bridge0: port 3(ipvlan3) entered blocking state [ 373.419137][ T9942] bridge0: port 3(ipvlan3) entered disabled state [ 373.439604][ T9942] ipvlan3: entered allmulticast mode [ 373.449520][ T9942] bridge0: entered allmulticast mode [ 373.470976][ T9942] ipvlan3: left allmulticast mode [ 373.476595][ T9942] bridge0: left allmulticast mode [ 373.654106][ T5906] ath6kl: Failed to submit usb control message: -71 [ 373.684379][ T5906] ath6kl: unable to send the bmi data to the device: -71 [ 373.691936][ T5906] ath6kl: Unable to send get target info: -71 [ 373.710326][ T5906] ath6kl: Failed to init ath6kl core: -71 [ 373.723669][ T5906] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 373.781130][ T5906] usb 4-1: USB disconnect, device number 83 [ 373.828385][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 374.032099][ T9962] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 374.080153][ T9962] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 374.415732][ T9974] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1159'. [ 374.722164][ T9982] FAULT_INJECTION: forcing a failure. [ 374.722164][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 374.973139][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: syz.1.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.973176][ T9982] Tainted: [L]=SOFTLOCKUP [ 374.973184][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.973196][ T9982] Call Trace: [ 374.973205][ T9982] [ 374.973214][ T9982] dump_stack_lvl+0xe8/0x150 [ 374.973247][ T9982] should_fail_ex+0x414/0x560 [ 374.973273][ T9982] should_failslab+0xa8/0x100 [ 374.973299][ T9982] __kmalloc_noprof+0xdf/0x800 [ 374.973318][ T9982] ? kfree+0x4d/0x660 [ 374.973361][ T9982] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 374.973395][ T9982] tomoyo_realpath_from_path+0xe3/0x5d0 [ 374.973424][ T9982] ? tomoyo_domain+0xd8/0x130 [ 374.973458][ T9982] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 374.973481][ T9982] tomoyo_path_number_perm+0x1e8/0x5a0 [ 374.973507][ T9982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 374.973528][ T9982] ? __lock_acquire+0x6b6/0x2cf0 [ 374.973565][ T9982] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 374.973611][ T9982] ? __fget_files+0x2a/0x420 [ 374.973638][ T9982] ? __fget_files+0x2a/0x420 [ 374.973661][ T9982] ? __fget_files+0x3a0/0x420 [ 374.973683][ T9982] ? __fget_files+0x2a/0x420 [ 374.973711][ T9982] security_file_ioctl+0xcb/0x2d0 [ 374.973736][ T9982] __se_sys_ioctl+0x47/0x170 [ 374.973770][ T9982] do_syscall_64+0xec/0xf80 [ 374.973792][ T9982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.973811][ T9982] ? trace_irq_disable+0x37/0x100 [ 374.973835][ T9982] ? clear_bhb_loop+0x60/0xb0 [ 374.973859][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.973878][ T9982] RIP: 0033:0x7f17b198f749 [ 374.973897][ T9982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.973914][ T9982] RSP: 002b:00007f17afbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.973946][ T9982] RAX: ffffffffffffffda RBX: 00007f17b1be5fa0 RCX: 00007f17b198f749 [ 374.973961][ T9982] RDX: 0000200000000000 RSI: 000000004008af00 RDI: 0000000000000003 [ 374.973975][ T9982] RBP: 00007f17afbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 374.973987][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.973999][ T9982] R13: 00007f17b1be6038 R14: 00007f17b1be5fa0 R15: 00007f17b1d0fa28 [ 374.974032][ T9982] [ 375.246376][ T9982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.492833][ T9986] FAULT_INJECTION: forcing a failure. [ 375.492833][ T9986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.507316][ T9986] CPU: 1 UID: 0 PID: 9986 Comm: syz.2.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.507348][ T9986] Tainted: [L]=SOFTLOCKUP [ 375.507356][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.507368][ T9986] Call Trace: [ 375.507376][ T9986] [ 375.507384][ T9986] dump_stack_lvl+0xe8/0x150 [ 375.507415][ T9986] should_fail_ex+0x414/0x560 [ 375.507441][ T9986] _copy_from_user+0x2d/0xb0 [ 375.507477][ T9986] do_ipv6_setsockopt+0x23e/0x2eb0 [ 375.507514][ T9986] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 375.507554][ T9986] ? __mutex_trylock_common+0x153/0x260 [ 375.507577][ T9986] ? __pfx___mutex_trylock_common+0x10/0x10 [ 375.507601][ T9986] ? rcu_is_watching+0x15/0xb0 [ 375.507620][ T9986] ? trace_contention_end+0x39/0x100 [ 375.507639][ T9986] ? __mutex_lock+0x335/0x1350 [ 375.507669][ T9986] ? smc_setsockopt+0x181/0xab0 [ 375.507687][ T9986] ? __pfx___mutex_lock+0x10/0x10 [ 375.507712][ T9986] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 375.507729][ T9986] ? aa_sk_perm+0x15f/0x920 [ 375.507752][ T9986] ipv6_setsockopt+0x59/0x170 [ 375.507773][ T9986] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 375.507792][ T9986] smc_setsockopt+0x232/0xab0 [ 375.507812][ T9986] ? __pfx_smc_setsockopt+0x10/0x10 [ 375.507825][ T9986] ? aa_sock_opt_perm+0xff/0x1a0 [ 375.507849][ T9986] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 375.507863][ T9986] ? __pfx_smc_setsockopt+0x10/0x10 [ 375.507879][ T9986] do_sock_setsockopt+0x17c/0x1b0 [ 375.507903][ T9986] __x64_sys_setsockopt+0x13f/0x1b0 [ 375.507927][ T9986] do_syscall_64+0xec/0xf80 [ 375.507945][ T9986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.507960][ T9986] ? trace_irq_disable+0x37/0x100 [ 375.507981][ T9986] ? clear_bhb_loop+0x60/0xb0 [ 375.508001][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.508016][ T9986] RIP: 0033:0x7f289438f749 [ 375.508031][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.508046][ T9986] RSP: 002b:00007f28951ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.508065][ T9986] RAX: ffffffffffffffda RBX: 00007f28945e6090 RCX: 00007f289438f749 [ 375.508077][ T9986] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 375.508087][ T9986] RBP: 00007f28951ae090 R08: 0000000000000228 R09: 0000000000000000 [ 375.508098][ T9986] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000001 [ 375.508107][ T9986] R13: 00007f28945e6128 R14: 00007f28945e6090 R15: 00007f289470fa28 [ 375.508134][ T9986] [ 376.128577][ T9] hid_parser_main: 189 callbacks suppressed [ 376.128596][ T9] hid-generic 0080:0003:0001.002E: unknown main item tag 0x0 [ 376.146970][ T9] hid-generic 0080:0003:0001.002E: unknown main item tag 0x0 [ 376.167673][ T9] hid-generic 0080:0003:0001.002E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 376.394526][ T9999] FAULT_INJECTION: forcing a failure. [ 376.394526][ T9999] name failslab, interval 1, probability 0, space 0, times 0 [ 376.408067][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.0.1164 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.408089][ T9999] Tainted: [L]=SOFTLOCKUP [ 376.408094][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.408101][ T9999] Call Trace: [ 376.408106][ T9999] [ 376.408111][ T9999] dump_stack_lvl+0xe8/0x150 [ 376.408132][ T9999] should_fail_ex+0x414/0x560 [ 376.408148][ T9999] should_failslab+0xa8/0x100 [ 376.408163][ T9999] __kmalloc_cache_noprof+0x84/0x700 [ 376.408176][ T9999] ? kobject_uevent_env+0x28c/0x9f0 [ 376.408195][ T9999] ? __pfx_dev_uevent_name+0x10/0x10 [ 376.408211][ T9999] kobject_uevent_env+0x28c/0x9f0 [ 376.408228][ T9999] ? kobject_put+0x52a/0x570 [ 376.408245][ T9999] device_del+0x73a/0x8e0 [ 376.408263][ T9999] ? __pfx_device_del+0x10/0x10 [ 376.408275][ T9999] ? enable_work+0x16b/0x220 [ 376.408291][ T9999] ? enable_work+0x1e9/0x220 [ 376.408306][ T9999] hid_destroy_device+0x6b/0x1b0 [ 376.408327][ T9999] uhid_dev_destroy+0xa2/0x120 [ 376.408343][ T9999] uhid_char_write+0x4a9/0xd10 [ 376.408358][ T9999] ? rw_verify_area+0x255/0x4d0 [ 376.408376][ T9999] ? __pfx_uhid_char_write+0x10/0x10 [ 376.408391][ T9999] vfs_write+0x27e/0xb30 [ 376.408407][ T9999] ? __pfx_vfs_write+0x10/0x10 [ 376.408419][ T9999] ? __fget_files+0x2a/0x420 [ 376.408435][ T9999] ? __fget_files+0x2a/0x420 [ 376.408448][ T9999] ? __fget_files+0x3a0/0x420 [ 376.408462][ T9999] ? __fget_files+0x2a/0x420 [ 376.408481][ T9999] ksys_write+0x145/0x250 [ 376.408493][ T9999] ? __pfx_ksys_write+0x10/0x10 [ 376.408511][ T9999] do_syscall_64+0xec/0xf80 [ 376.408525][ T9999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.408535][ T9999] ? trace_irq_disable+0x37/0x100 [ 376.408550][ T9999] ? clear_bhb_loop+0x60/0xb0 [ 376.408571][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.408582][ T9999] RIP: 0033:0x7f8b5398f749 [ 376.408594][ T9999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.408605][ T9999] RSP: 002b:00007f8b548d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.408620][ T9999] RAX: ffffffffffffffda RBX: 00007f8b53be5fa0 RCX: 00007f8b5398f749 [ 376.408629][ T9999] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 376.408636][ T9999] RBP: 00007f8b548d7090 R08: 0000000000000000 R09: 0000000000000000 [ 376.408644][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.408651][ T9999] R13: 00007f8b53be6038 R14: 00007f8b53be5fa0 R15: 00007f8b53d0fa28 [ 376.408669][ T9999] [ 377.432076][T10018] veth4: entered promiscuous mode [ 377.449645][T10018] veth4: entered allmulticast mode [ 377.484290][ T5922] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 377.667715][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 377.678884][ T5922] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 377.692512][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.721405][ T5922] usb 3-1: Product: syz [ 377.726039][ T5922] usb 3-1: Manufacturer: syz [ 377.730810][ T5922] usb 3-1: SerialNumber: syz [ 377.799627][ T5922] usb 3-1: config 0 descriptor?? [ 377.810041][ T5922] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 378.363122][T10038] netlink: 'syz.2.1168': attribute type 12 has an invalid length. [ 378.630514][T10039] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1168'. [ 378.880389][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.886838][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.114828][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 379.133251][ T5922] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 379.174682][ T5922] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 379.708631][T10052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1178'. [ 379.724283][ T5922] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 379.894399][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 379.894692][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 379.910537][ T5922] usb 4-1: config 3 has an invalid interface number: 171 but max is 29 [ 379.998056][ T5922] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 380.051349][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 380.051368][ T30] audit: type=1326 audit(1768626584.915:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.098574][T10062] netlink: 'syz.4.1181': attribute type 15 has an invalid length. [ 380.227286][ T5922] usb 4-1: config 3 has no interface number 0 [ 380.241734][ T5922] usb 4-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.256138][ T5922] usb 4-1: config 3 interface 171 has no altsetting 0 [ 380.264447][ T30] audit: type=1326 audit(1768626584.915:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.294751][ T30] audit: type=1326 audit(1768626584.955:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.369460][ T5922] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 380.388909][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 380.400853][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 380.414580][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 380.423341][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.428191][ T5922] usb 4-1: Product: syz [ 380.443130][ T5836] usb 3-1: USB disconnect, device number 54 [ 380.453681][ T9] usb 2-1: config 0 has no interface number 0 [ 380.460553][ T30] audit: type=1326 audit(1768626584.955:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.483715][ T9] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 380.501962][ T9] usb 2-1: config 0 interface 8 has no altsetting 0 [ 380.502907][ T5922] usb 4-1: Manufacturer: syz [ 380.513899][ T30] audit: type=1326 audit(1768626584.955:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.534247][ T5922] usb 4-1: SerialNumber: syz [ 380.537232][ T30] audit: type=1326 audit(1768626584.955:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.578865][ T30] audit: type=1326 audit(1768626584.955:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.616883][ T9] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 380.658858][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.659514][T10064] fuse: Bad value for 'user_id' [ 380.667327][ T9] usb 2-1: Product: syz [ 380.679888][ T9] usb 2-1: Manufacturer: syz [ 380.680150][T10064] fuse: Bad value for 'user_id' [ 380.685169][ T9] usb 2-1: SerialNumber: syz [ 380.686237][ T30] audit: type=1326 audit(1768626584.955:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.750132][ T30] audit: type=1326 audit(1768626584.955:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f465ff8df90 code=0x7ffc0000 [ 380.754126][T10064] netlink: 'syz.2.1182': attribute type 25 has an invalid length. [ 380.774440][ T9] usb 2-1: config 0 descriptor?? [ 380.872880][T10064] netlink: 'syz.2.1182': attribute type 7 has an invalid length. [ 380.881035][ T30] audit: type=1326 audit(1768626584.955:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465ff8f749 code=0x7ffc0000 [ 380.906533][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.915831][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.021760][T10049] ipvlan2: entered promiscuous mode [ 381.029256][T10049] bridge0: port 3(ipvlan2) entered blocking state [ 381.037918][T10049] bridge0: port 3(ipvlan2) entered disabled state [ 381.049835][T10049] ipvlan2: entered allmulticast mode [ 381.074511][T10049] bridge0: entered allmulticast mode [ 381.102964][T10049] ipvlan2: left allmulticast mode [ 381.118733][T10049] bridge0: left allmulticast mode [ 381.236091][ T5922] as10x_usb: device has been detected [ 381.246966][ T5922] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 381.350603][ T9] ath6kl: Failed to submit usb control message: -71 [ 381.357714][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 381.374870][ T9] ath6kl: Unable to send get target info: -71 [ 381.385120][ T9] ath6kl: Failed to init ath6kl core: -71 [ 381.392584][ T9] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 381.403051][ T5922] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 381.407772][ T9] usb 2-1: USB disconnect, device number 59 [ 381.478842][ T5922] as10x_usb: error during firmware upload part1 [ 381.503385][ T5922] Registered device Sky IT Digital Key (green led) [ 381.510308][ T5922] usb 4-1: USB disconnect, device number 84 [ 381.545087][ T5922] Unregistered device Sky IT Digital Key (green led) [ 381.547019][ T5922] as10x_usb: device has been disconnected [ 381.902252][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.916411][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 381.924653][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.951795][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 381.964258][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 381.971676][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 382.001169][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 382.046298][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 382.054457][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 382.062435][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 382.071653][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 382.079462][ T5922] hid-generic 0009:0007:0001.002F: unknown main item tag 0x0 [ 382.175066][ T5922] hid-generic 0009:0007:0001.002F: hidraw0: HID v0.06 Device [syz0] on syz1 [ 382.364394][ T5924] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 382.404956][T10093] input: syz1 as /devices/virtual/input/input34 [ 382.475934][T10093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.557519][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.569697][ T5924] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 382.589048][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.639605][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.663551][ T5924] usb 2-1: Product: syz [ 382.674658][ T5924] usb 2-1: Manufacturer: syz [ 382.687456][ T5924] usb 2-1: SerialNumber: syz [ 382.976194][T10090] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 383.413469][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.441665][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.694941][T10090] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 383.909709][ T5924] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 383.938746][ T5924] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 384.159084][ T5924] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 385.664355][ T5899] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 385.865804][ T5899] usb 1-1: config 65 has an invalid interface number: 95 but max is 0 [ 385.884397][ T5899] usb 1-1: config 65 has no interface number 0 [ 385.905280][ T5899] usb 1-1: string descriptor 0 read error: -22 [ 385.917094][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 385.926857][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.018859][ T5899] usbtest 1-1:65.95: Linux gadget zero [ 386.025015][ T5899] usbtest 1-1:65.95: low-speed {control in/out} tests (+alt) [ 386.237229][ T5940] usb 1-1: USB disconnect, device number 56 [ 386.274679][ T5899] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 386.304638][ T5922] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 386.504280][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 386.564475][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 386.596524][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.598379][ T5899] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 386.632953][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.635017][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.715259][ T5899] usb 3-1: config 0 has no interface number 0 [ 386.735574][ T5899] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 386.791638][ T5922] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 386.791658][ T5899] usb 3-1: config 0 interface 8 has no altsetting 0 [ 386.831320][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.854474][ T5899] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 386.864367][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.879882][ T5922] usb 4-1: config 0 descriptor?? [ 386.910423][ T5899] usb 3-1: Product: syz [ 386.929325][ T5899] usb 3-1: Manufacturer: syz [ 386.944845][ T5922] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 386.968864][ T5899] usb 3-1: SerialNumber: syz [ 386.999809][ T5899] usb 3-1: config 0 descriptor?? [ 387.242032][T10135] ipvlan2: entered promiscuous mode [ 387.252161][T10135] bridge0: port 3(ipvlan2) entered blocking state [ 387.259190][T10135] bridge0: port 3(ipvlan2) entered disabled state [ 387.266118][T10135] ipvlan2: entered allmulticast mode [ 387.274920][T10135] bridge0: entered allmulticast mode [ 387.292821][T10135] ipvlan2: left allmulticast mode [ 387.305433][T10135] bridge0: left allmulticast mode [ 387.483696][ T5899] ath6kl: Failed to submit usb control message: -71 [ 387.516590][ T5899] ath6kl: unable to send the bmi data to the device: -71 [ 387.529668][ T5899] ath6kl: Unable to send get target info: -71 [ 387.548527][ T5899] ath6kl: Failed to init ath6kl core: -71 [ 387.556284][ T5899] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 387.587865][ T5899] usb 3-1: USB disconnect, device number 55 [ 387.834574][ T31] INFO: task kworker/1:6:5923 blocked for more than 143 seconds. [ 387.844428][ T31] Tainted: G L syzkaller #0 [ 387.995802][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.005295][ T31] task:kworker/1:6 state:D stack:21464 pid:5923 tgid:5923 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 388.020813][ T31] Workqueue: usb_hub_wq hub_event [ 388.028321][ T31] Call Trace: [ 388.033131][ T31] [ 388.037204][ T31] __schedule+0x149b/0x4fd0 [ 388.045156][ T31] ? device_initial_probe+0xa1/0xd0 [ 388.052836][ T31] ? device_add+0x7b6/0xb80 [ 388.062440][ T31] ? really_probe+0x26d/0xad0 [ 388.068593][ T31] ? device_initial_probe+0xa1/0xd0 [ 388.077597][ T31] ? device_add+0x7b6/0xb80 [ 388.103779][ T31] ? __pfx___schedule+0x10/0x10 [ 388.131216][ T31] ? schedule+0x91/0x360 [ 388.141321][ T31] schedule+0x165/0x360 [ 388.151544][ T31] schedule_timeout+0x9a/0x270 [ 388.171514][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 388.183774][ T31] ? do_raw_spin_lock+0x121/0x290 [ 388.195726][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.210384][ T31] ? wait_for_completion+0x267/0x5d0 [ 388.222350][ T31] wait_for_completion+0x2bf/0x5d0 [ 388.233410][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 388.247705][ T31] i2c_del_adapter+0x591/0x760 [ 388.256595][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 388.264480][ T31] ? kfree+0x1c0/0x660 [ 388.272727][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 388.282053][ T31] ? dvb_usbv2_exit+0x949/0xb90 [ 388.290373][ T31] dvb_usbv2_probe+0x497/0x3c20 [ 388.300123][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 388.308858][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.337659][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 388.371613][ T31] usb_probe_interface+0x668/0xc90 [ 388.376989][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 388.383681][ T31] really_probe+0x26d/0xad0 [ 388.391550][ T31] __driver_probe_device+0x18c/0x320 [ 388.406271][ T31] driver_probe_device+0x4f/0x240 [ 388.414463][ T31] __device_attach_driver+0x279/0x430 [ 388.420054][ T31] bus_for_each_drv+0x251/0x2e0 [ 388.433862][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 388.465717][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 388.476901][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 388.486645][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.496919][ T31] __device_attach+0x2b8/0x430 [ 388.508143][ T31] ? __pfx___device_attach+0x10/0x10 [ 388.519320][ T31] ? _raw_spin_unlock+0x28/0x50 [ 388.529156][ T31] device_initial_probe+0xa1/0xd0 [ 388.543387][ T31] bus_probe_device+0x12a/0x220 [ 388.558221][ T31] ? device_add+0x726/0xb80 [ 388.568421][ T31] device_add+0x7b6/0xb80 [ 388.581012][ T31] usb_set_configuration+0x1a87/0x2110 [ 388.593184][ T31] usb_generic_driver_probe+0x8d/0x150 [ 388.614480][ T31] usb_probe_device+0x1c4/0x3c0 [ 388.687277][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 388.692877][ T31] really_probe+0x26d/0xad0 [ 388.697569][ T31] __driver_probe_device+0x18c/0x320 [ 388.703370][ T31] driver_probe_device+0x4f/0x240 [ 388.708583][ T31] __device_attach_driver+0x279/0x430 [ 388.714040][ T31] bus_for_each_drv+0x251/0x2e0 [ 388.802256][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 388.816366][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 388.829184][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 388.841660][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.855486][ T31] __device_attach+0x2b8/0x430 [ 388.871683][ T31] ? __pfx___device_attach+0x10/0x10 [ 388.885111][ T31] ? _raw_spin_unlock+0x28/0x50 [ 388.890224][ T31] device_initial_probe+0xa1/0xd0 [ 388.895765][ T31] bus_probe_device+0x12a/0x220 [ 388.900859][ T31] ? device_add+0x726/0xb80 [ 388.906866][ T31] device_add+0x7b6/0xb80 [ 388.912462][ T31] usb_new_device+0xa39/0x1720 [ 388.918907][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 388.924465][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.930009][ T31] hub_event+0x29b1/0x4ef0 [ 388.934657][ T31] ? __pfx_hub_event+0x10/0x10 [ 388.940170][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 388.947491][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 388.954413][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 388.960364][ T31] process_scheduled_works+0xad1/0x1770 [ 388.971572][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.978018][ T31] ? do_raw_spin_lock+0x121/0x290 [ 388.983672][ T31] worker_thread+0x8a0/0xda0 [ 388.990877][ T31] ? __kthread_parkme+0x7b/0x200 [ 389.008971][ T31] kthread+0x711/0x8a0 [ 389.013301][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.019007][ T31] ? __pfx_kthread+0x10/0x10 [ 389.031000][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.037603][ T31] ? __pfx_kthread+0x10/0x10 [ 389.042477][ T31] ret_from_fork+0x510/0xa50 [ 389.050761][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.057672][ T31] ? __switch_to+0xc9e/0x1480 [ 389.058775][ T5922] usb 4-1: USB disconnect, device number 85 [ 389.062525][ T31] ? __pfx_kthread+0x10/0x10 [ 389.075657][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.081054][ T31] [ 389.087419][ T31] [ 389.087419][ T31] Showing all locks held in the system: [ 389.147570][ T31] 1 lock held by khungtaskd/31: [ 389.152519][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 389.183081][ T31] 4 locks held by kworker/u8:8/3074: [ 389.195896][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 389.217810][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 389.235483][ T31] #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 389.245063][ T31] #3: ffff888058fc40e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 389.256992][ T31] 2 locks held by getty/5584: [ 389.261866][ T31] #0: ffff88814d2730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.272466][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 389.283639][ T31] 4 locks held by udevd/5884: [ 389.289065][ T31] #0: ffff8880768f4540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 389.298616][ T31] #1: ffff888057ee5c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 389.309516][ T31] #2: ffff88803218fd28 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 389.319415][ T31] #3: ffff888058a7d198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 389.329033][ T31] 5 locks held by kworker/1:6/5923: [ 389.334605][ T31] #0: ffff88801d2cb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 389.346437][ T31] #1: ffffc900047cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 389.358703][ T31] #2: ffff888028d85198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 389.368176][ T31] #3: ffff888058a7d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 389.377578][ T31] #4: ffff8880589f6160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 389.387866][ T31] 3 locks held by kworker/u8:15/6041: [ 389.393249][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 389.405274][ T31] #1: ffffc90004de7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 389.417634][ T31] #2: ffffffff8f3122c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 389.426933][ T31] 2 locks held by syz.0.1210/10163: [ 389.432162][ T31] #0: ffffffff8f8416d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 389.441889][ T31] #1: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.452134][ T31] 2 locks held by syz.4.1211/10167: [ 389.457610][ T31] #0: ffffffff8f3122c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 389.466768][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 389.482846][ T31] [ 389.498949][ T31] ============================================= [ 389.498949][ T31] [ 389.508888][ T31] NMI backtrace for cpu 0 [ 389.508909][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 389.508934][ T31] Tainted: [L]=SOFTLOCKUP [ 389.508941][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.508951][ T31] Call Trace: [ 389.508959][ T31] [ 389.508967][ T31] dump_stack_lvl+0xe8/0x150 [ 389.508996][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 389.509024][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.509054][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.509083][ T31] sys_info+0x135/0x170 [ 389.509106][ T31] watchdog+0xf95/0xfe0 [ 389.509136][ T31] ? watchdog+0x20a/0xfe0 [ 389.509168][ T31] kthread+0x711/0x8a0 [ 389.509196][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.509220][ T31] ? __pfx_kthread+0x10/0x10 [ 389.509247][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.509266][ T31] ? __pfx_kthread+0x10/0x10 [ 389.509291][ T31] ret_from_fork+0x510/0xa50 [ 389.509312][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.509329][ T31] ? __switch_to+0xc9e/0x1480 [ 389.509359][ T31] ? __pfx_kthread+0x10/0x10 [ 389.509385][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.509427][ T31] [ 389.509435][ T31] Sending NMI from CPU 0 to CPUs 1: [ 389.639139][ C1] NMI backtrace for cpu 1 [ 389.639161][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.639183][ C1] Tainted: [L]=SOFTLOCKUP [ 389.639189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.639198][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 389.639222][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 21 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 389.639236][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c6 [ 389.639252][ C1] RAX: 00000000004e3b29 RBX: ffffffff8197149e RCX: 0000000080000001 [ 389.639264][ C1] RDX: 0000000000000001 RSI: ffffffff8d793aa5 RDI: ffffffff8bc08760 [ 389.639275][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 389.639292][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f823070 [ 389.639303][ C1] R13: 1ffff11003955b70 R14: 0000000000000001 R15: 0000000000000001 [ 389.639314][ C1] FS: 0000000000000000(0000) GS:ffff888125f1b000(0000) knlGS:0000000000000000 [ 389.639327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.639338][ C1] CR2: 00007f8b53bb6ad8 CR3: 000000007501a000 CR4: 00000000003526f0 [ 389.639354][ C1] Call Trace: [ 389.639360][ C1] [ 389.639367][ C1] default_idle+0x13/0x20 [ 389.639386][ C1] default_idle_call+0x73/0xb0 [ 389.639406][ C1] do_idle+0x1be/0x4d0 [ 389.639425][ C1] ? __pfx_do_idle+0x10/0x10 [ 389.639441][ C1] ? do_idle+0x11/0x4d0 [ 389.639459][ C1] cpu_startup_entry+0x44/0x60 [ 389.639475][ C1] start_secondary+0x101/0x110 [ 389.639497][ C1] common_startup_64+0x13e/0x147 [ 389.639522][ C1] [ 389.817748][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 389.824646][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 389.835608][ T31] Tainted: [L]=SOFTLOCKUP [ 389.839940][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.850181][ T31] Call Trace: [ 389.853468][ T31] [ 389.856413][ T31] vpanic+0x1e0/0x670 [ 389.860404][ T31] panic+0xb9/0xc0 [ 389.864122][ T31] ? __pfx_panic+0x10/0x10 [ 389.868562][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 389.873948][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 389.880141][ T31] watchdog+0xfdf/0xfe0 [ 389.884404][ T31] ? watchdog+0x20a/0xfe0 [ 389.888751][ T31] kthread+0x711/0x8a0 [ 389.892827][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.897630][ T31] ? __pfx_kthread+0x10/0x10 [ 389.902236][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.907441][ T31] ? __pfx_kthread+0x10/0x10 [ 389.912147][ T31] ret_from_fork+0x510/0xa50 [ 389.917109][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.922361][ T31] ? __switch_to+0xc9e/0x1480 [ 389.927050][ T31] ? __pfx_kthread+0x10/0x10 [ 389.931736][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.936606][ T31] [ 389.940044][ T31] Kernel Offset: disabled [ 389.944392][ T31] Rebooting in 86400 seconds..