last executing test programs: 6.23495165s ago: executing program 3 (id=644): socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000001000)='mountstats\x00') syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) creat(&(0x7f0000000c00)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1fd, {0x7, 0x29, 0x1, 0x24ff87199fb5ffc7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) 4.853820138s ago: executing program 3 (id=652): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x3, 0xee, 0x40, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0xf}, 0x50) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x40}}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000080)="3ec48bb48f963a6f6bfd0dc11e65316b042ac483433977c664e9f539135edeff", &(0x7f00000002c0)=""/74, &(0x7f0000000340)="1ab6570137cae7bfb4e9bc3c4e89282d22d1fbebd3b52a8e9af59a192e93b7aea00965811921cd87fb640f30714cd25ea0e1fb34216fc28ba0bd548205841f4950ca293b09a50d8ed5835037ad04965cc142202d10cad275a81b24c86191ed1460dc7a43d8f44b56735a1821da5cf89b5829c91776618d09b36858838e7885c9d894d9679b62e8b29a7e66561fb4051740d39035734ff1eaa4b40d90ea14c852690b0368c0c8ac6787d550a1ea", &(0x7f00000004c0)="3092e8f200832baf27c1022bb1bf61f27df2f7ae40e931c6", 0x6, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x54}}, {}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0x4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) tkill(0x0, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fc01000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000000000000044000500fa33646d599c39b20000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r5 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[], 0x0) 3.854522031s ago: executing program 0 (id=659): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.734859079s ago: executing program 2 (id=660): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f00000001c0)="82b77610e578fdad5beb7fa5c6de0953a127b5552411e1198f6742249a11efcdcd293ecb8e963135057d4c3d285879f0a0c7edf8abdf83e224b56849edb6d8e046ca53515f2c1293c3c8f0628c03a87bb9dd4aede2"}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000ffffefff00", [0x8, 0xffffffff9673e35d]}}) 3.73034113s ago: executing program 4 (id=661): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001540)=ANY=[], 0x370}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x24, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000000c0)}, 0xb}], 0x2, 0x10, 0x0) 3.670783163s ago: executing program 4 (id=662): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000dc0)=""/4104, 0x1008) (fail_nth: 13) 3.354965616s ago: executing program 2 (id=664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) (async) listen(r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) (async) listen(r1, 0x80000003) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) 3.304227687s ago: executing program 4 (id=665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x8000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x8000}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_usb_connect$uac3(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0x1b}, [@processing_unit={0xd, 0x24, 0x9, 0x1, 0x1, [0x0, 0x0]}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x2, 0x1, 0x5, 0x2, 0x3, 0x7, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x2, 0x3, 0x4}}}}}}}}]}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2d, 'devices'}, {0x6, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_cls'}]}, 0x22) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x8000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x8000}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) syz_usb_connect$uac3(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0x1b}, [@processing_unit={0xd, 0x24, 0x9, 0x1, 0x1, [0x0, 0x0]}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x2, 0x1, 0x5, 0x2, 0x3, 0x7, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x2, 0x3, 0x4}}}}}}}}]}}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') (async) read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) (async) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2d, 'devices'}, {0x6, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_cls'}]}, 0x22) (async) 3.10288641s ago: executing program 2 (id=667): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001780)={0x0, 0x1, 0x0, 0x1}) 3.027268512s ago: executing program 0 (id=668): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x2, 0x672d, 0x1, 0x9}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) unshare(0x22020600) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, 0x0) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x400000000008, 0x8, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0xffffffffffffff7f, 0x14800) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000140)={'\x00', 0x8d46, 0x1, 0x8, 0x9, 0x100, r5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 3.002308293s ago: executing program 2 (id=669): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000040)) 2.812781152s ago: executing program 0 (id=671): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}}) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 2.715035729s ago: executing program 0 (id=672): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000700)={@remote, @broadcast}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="e780e6b9db5ebf81090ccd72da92e62bc3f6c1f72c810ea567a48a0600000036191f0943d9e22f9ba73911b19c84b7eb76f80700b0e19de6858e0c0d7676589cfef675a0aab02291c69b0c", @ANYRES64=r1], 0x38}, 0x1, 0x300}, 0x20000000) unshare(0xc040400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000180)={0x0, 0x51424752, 0x0, @discrete={0xf9ae, 0x3}}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000820404001c0012800b00010062726964676500000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0xcc7, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000080)={'batadv_slave_1\x00', @remote}) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 2.502893121s ago: executing program 0 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000780)=""/169, 0xa9}], 0x2}}], 0x1, 0x2102, 0x0) sendmsg$nl_route_sched(r2, &(0x7f000001f640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001f600)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0x9}, {0x0, 0xa}}}, 0x24}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) close(r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001104ffffffff3f00000000000008", @ANYRES32=0x0, @ANYBLOB="a5fdad88900a00002c0012800b00010062726964676500001c00028008001d000720000005002d000100000006000600460e00000a0001"], 0x58}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x48, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x2001, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x10}, @generic="1ebc12c4"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.394339642s ago: executing program 4 (id=675): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000dc0)=""/4104, 0x1008) (fail_nth: 14) 1.999026165s ago: executing program 1 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.998641159s ago: executing program 4 (id=677): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001c80)={'tunl0\x00', &(0x7f0000000300)=@ethtool_cmd={0x48, 0x0, 0x4000002, 0xfff9, 0x8, 0x1, 0x40, 0x4, 0x7, 0x0, 0x200, 0x40, 0x9, 0x56, 0x7f, 0x7, [0x8, 0x3]}}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000000dc0)=""/4104, 0x1008) 1.908782851s ago: executing program 2 (id=678): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.759873718s ago: executing program 3 (id=679): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.711741406s ago: executing program 1 (id=680): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800080001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x500}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) 1.610989752s ago: executing program 0 (id=681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x119d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000800)={0x80000000}, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0xb, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000680)=""/68, 0x401}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100006325a64040200020726597000001090224e200000000000904000002214c6a0009050702000000da00090589a06fd321845e764cc626586d605ce31aea7bb045ef3d65c07094ca151b28ed9d16de5e52e2f23d23a1fd8ac241a54fe0ba43890bd61079d6f6", @ANYRES8=r1, @ANYRESHEX=r2, @ANYRES16=r6, @ANYRES32=r0], 0x0) 1.571453497s ago: executing program 3 (id=682): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 1.567948436s ago: executing program 1 (id=683): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8c02, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402, 0x8) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x3}, @void, @x25={0x2, 0x0, 0x1, "0aaed2176c646bf00c6e64e09a9fd6cb683e95b988a2bfbbfe93c682aaea028a7dd4e5e2c4754fe87a9552e1d7048b8e6322f8dcd8feffac1ad2f580b972"}}, 0x45) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xdc040, 0xe2, 0x1a}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x9, 0x19a8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x7800, 0xf284, 0xa}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0x1}, {0x0, 0xd}, {0xb, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x20040004) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x81) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) chown(&(0x7f00000004c0)='./file0\x00', r6, r7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@private=0xa010100, @in=@multicast1, 0x4e21, 0x3ff, 0x4e20, 0x5, 0x2, 0x80, 0x0, 0x16, 0x0, r6}, {0x7, 0x0, 0x2, 0x2, 0xffffffffffff1ee1, 0x2, 0xef, 0x2}, {0x100, 0x8, 0x79e2, 0xb5f}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d5, 0xff}, 0x2, @in6=@mcast1, 0x3506, 0x3, 0x0, 0x6, 0x7f, 0xfffffff8, 0x5}}, 0xe8) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000780)=0x2) (async) syz_clone(0x10000, &(0x7f00000007c0)="7d69b4328dad4d21baa914910a73167f54615e56fbc7d059e7076648bcf27671e378c22f3517968ff7a107f3748ff57c80cf8435dd1217430447f3978dca7d42eccbf3543a7c2e24e0279e4d821034a508f0f16420d909a25795c7553d0e2b647686f56dcc49b8cb47ce9992c31c4eb5", 0x70, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="dfcb27059c746cb82c09fc3da40f1a730eae47442b181699ad309bbda5e75b7be847cb4f8df415da0b1322227cbfcbe638e99fb10bb762ffa09998ff7ffefaf3bb6adde587f228ef2510b2f325447efbe5dd34b5a04ac3180a620e3b166ee9b1ff93592341a82af0817419a1a06567d81115c57c6086cf4105b2b35393b4198086115e91203e3c271f4c3057666b75c31570f4922efe738c165293ef5db6e2c5d814b139b31f879c7716d87647ab366a39ff5244cce86caa4bd476c17f26294ea4e311edeac1e0f998af94450df62d3e957b6e6f5b16f61af051fe141c727504338c4c055befd39742ad0e8ec24a73bfa32060") (async) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000a40)={&(0x7f0000000a00)=[{&(0x7f00000009c0)="42e6df8ee521020e304eb01d5a35fb", 0xf}], 0x1, 0x92d7, 0x0, 0x1, 0xe, 0x7, 0x7}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000ac0)={0xfffffffffffffffd, r3, 'id1\x00'}) ioctl$KVM_GET_PIT(r9, 0xc048ae65, &(0x7f0000000b40)) write$char_usb(r9, &(0x7f0000000bc0)="9f5a7e0abee08384ab9d321cc2d29d4d289f946dfd8e103d3914fe0b5f2fa810b5cba9757d93301e187e61b5077ff9243b14d7600780deffe05156d7292e66cd437d8ed1018b1631045eadc52cdb94b09d418dca0b7624fcb0ef925c371bde667c2b6696579a871bfba62ff6be086dd8c74b5a87c79a329202b151d33f09b70660ce68c84f0023515547f51aecfa46adc20170ec19453a90fd0768215666679d53e044bae9a9848b01edb049d9541ddb9d82ddb5848d30717800b76f0a2e159b95285060431d397bc0681b", 0xcb) (async) mq_timedsend(r9, &(0x7f0000000cc0)="38fe0adf0576cc579c4104b125d5824d579c0254705fd5fd5b4594ee46984d89e59918e4c66074db51e6fd1201d917e58cc349b1665cff66653ac9cb4ffa2a27329dddb06f4b1c5338e3c7faddeb20b66e5fd041a9b44aa86f714e9afcfd0554ddf7a509d72e391cdf0265bb3396f1a19b4138c9db7f94fcbab28aa98b279f56f01c5c08ca3fe1f231e38839c22c50182c7921911acfbf1bb0d72098798cc76e33e628ba081fb2c5fd8bb0a28695e04f47cc200999502b1eab14d837038efa15a289715c8538481c23837e39e241d4508e01b13c1314606ae3384d679cefd77129d2eccd6fe290", 0xe7, 0x7, 0x0) (async) ptrace(0xffffffffffffffff, r5) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r9, 0xc0405519, &(0x7f0000000dc0)={0x5, 0x2, 0x10001, 0x4, 'syz0\x00', 0x3ff}) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r9, 0xc040583f, &(0x7f0000000e80)={{@align=0x3, {0x47, 0x8000, 0x4}}, {{[0x0, 0x7, 0x4330, 0x90]}, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000e00)=[{{@_ha_fsid={[0x6, 0x1]}, {0x3800, 0xfb, 0x80000001}}, 0x4, 0x0, '/dev/ppp\x00'}, {{@align=0xfffffffffffffff8, {0x8d67, 0xff, 0xfffffffe, 0xb2b6}}, 0xd20, 0x0, 'syz0\x00'}, {{@_ha_fsid={[0x9]}, {0x5, 0x1, 0x4, 0x100000000}}, 0xa, 0x0, 'id1\x00'}]}}) (async) ioctl$DVB_DVR_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000000ec0)={0x4, 0x80000, r0}) getsockname$packet(r10, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f40)=0x14) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f80), 0x101120, 0x0) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r9) sendmsg$TIPC_NL_BEARER_ADD(r11, &(0x7f0000002400)={&(0x7f0000000fc0), 0xc, &(0x7f00000023c0)={&(0x7f0000001040)={0x1344, r12, 0xa84, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1f3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffe00, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffff8}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x10cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "cae690ba4452a32b2c6e40d92c5b80df9985876e616cae05bb78a41655148e5cd27324f2a14e1bd2d5457616271c7b3cf70d5c085c3ee335ab4b55c217ff9fea8f5d67131b2a78fcf4a644ca483fdfc702ae0372d6875b0e85f7b508a378a73fbe3301ba23588e9bcf6c6d021b176bb28e48972fd2aed2e863fa5d887759ddcf029429d49e0f655b464365453d855e1aaa17a52945890620945485d5436fb0abb92748fe"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "8eccdeef77c84d8830c4b97485c6f10f83de383482fdbff3d263d131ec698bf3ff5f06a780bf858a565e721355e050a86f834e4c5c55399687bbb566bb863d9c563e66756da7a1e8623218b61811a66d31ad4668effdf70e72e27972fd1d60f99eec37c439f6167c7c46b35cad2a6b82a15424534f10f5cb9ca35801ed2bbf500b1ae96f567c7f99265837590f051b226d3a363ba4b46b4e234536218237f9d56327d6fb62ca196e65fcb2e3b538b7b21d25bbc91659619d0b84cb720e835b02ae4811f9357bffa4cce040f0ccc3bf8f5bfaa9259e9c2374be97351188a2ad16df1fd1b4588a3e7a3b39ecb442f103b3f91543b8779536da366bbd7b6b992991b44181da2dd791382f94b527783fc713cf6e0149bf7bfe54cd7411f879d345f744bbf9b976de764cbd56f1d0b3ea9221508e840a755595c1a3d301c4c729acdf1053a306291793ba99efb4dc2b8be75fb9ffd99812a2af746b9ba940942440f25de6001ab343c3ed723ca07a834566ba94f123e87dddb6f958e4e87ae3eb4280bb988a1b5b2afbd964d7dfa93c18ee3bbce7e182525e2eade5849d61d0b006f4cf6e15418dde5e4002990f6c91c3bbfcc40babe5a02db1aa28a94e550ee1a7f88c49813ca8afdee90b6df07a78c9fb0019035da05608ef24966d2e5bc3a10835a58217246295aa7f7c1ad5184733ee02d8f71f719ee8e8a58d566364b13797477d415522807a443a4c0df21889f191df9957ba2819ec0a92f353ec43c247ab3415eb866dfc4ec49684a023e3e1dccda280bb15d68979739f215c66572cfa2ef8678d14e2251f6d3bebe85c08e55b7d32b453c253b1e33edcb849f11089197e762b98ee50615f2ae039240f2e078633c4d0951a821773379550436e8de40f3965199b99a3a703670d57cbf73d5a3394b1040ae4e77094c082951a3e9a307ab4447a225c4e2af34790dffd3bb572771d38a116d7043e84edd1237b0c0c89f1bc5ae8fbd0e5dcb6aa2df1db05fc7f7a64494cb09dd04c9d7b7a8d646edea6371a071a0272b31dd6a1167ccdc63d61dfc47670dcbdbbd9cee4cdc4b33b574f40095129aef2823bb8564da13f3a199d68e9b56d390a6b7ce21750be1880019be4f43f28ab51f0a41891d7733344b90682d7062ebf1125091fc2832db9b2ab868ef3adc252706e61c7f3aed90d11a8482fad270daa468b785cfaa4a6a863c8a10eec3274362df02b431b6e706d706a50502c4ee52de1aecc5fb4f8544a1d88024c7e777fca4f91618ebff4ec42132278763189f49da60ef93dc50be0588fbe670712a405a7100dfe044e597249f66a2617d96e4453bb6ef0da68b22c893dd0dab2697a1fa1308b4802715f0ec3f68f51efab514c0ce34ec292b00211d955e8e7c1fa20e1d7ccf9fa4876df526c0eabf79472d6eefc85c5124b83869a192f97ee68d393e4861e4b99370ee766d41fcd1a0b3dcd5dd59493afec637ef7f09448fb446175feee75b21b5bcb23bdaf93f9cb97e40d42854ba7f8933c2745a18f075b0eb87d8845e473bbb39f3f9d03d2fadf7590cca4e1c30e564a6d81053d72c2dfe0772b6862cdc605bc9647b299c0edba32ed86892e5f46dd36d60ec15db033b2fb84423a6b9addfd90f53899772efe65cfeffe3395a1d90ad42ee15152993f1ca66e98160980cb2d6679b0f43d61741ae539c7f7c8fbc1f03de007a3645a7f83a58e050633a31dce1bbaa1d73cb745560e763a10392448fe8098c2a27c51da9f8b55c5ede5af8b522aa008cd0917b01c7b73ff2ac6be3c8dbbcb0bfa90063e25acd9edf94b4ab0b85adc6383d6cfa10e0ba175a9bb8b5dd08609316373e0a9bed76525c92eba70495a1a545afdec14c25f8ead269cbfc25097d658882c8e3930e59eff10b539687e99a9b9f50cdff1e61f84285a4601bd41a08163f2d95b213be8c7ba7b9764fec7ad970ec03f560f2ac995e46473ce49a91c0d5560339a5cd1ae711531da1f035f6e0d49420516b7b68902b3014b91a4fdc01323f24b23b58c597db150a30302a1fd8207ef62fbe26fcacd7c435c94f927280b2059570602830617adfd24b926050cab507414ceaad0b0f37332e8e2707c82140eecf4c5b991d485f60460ca85d6be748404b69ec951d1144a6393f3a8c9183581615cc87eb72f2079a63ad3bc41dc153d55f0fa2d56fe1a1e40b4b93b8a210d08ecc1a6aa547886c017da47d45f41e617f5590232986a28b131ad7d7c03fa5c2c2eb0e6d4d6bd7f6f85f295ba0ac77728c496d785cea3bc8cfb967a4bb4012044d324a3cd59bab269ae78929af55087e83712a6762d78b6248f0f2a14eb2b2c8ffe558751548b3f94d3da25eaa57440ca04f32c66f3b6bcb49b7d8217979c9652ebd10d71c56e068bf8e6bf4c589cffb126c445022b1d26229313b25a4c0e7f87446124dac3e7f536df112399b6be6fbdb91a45c035708da1dc5c6b965ddb1a6dae254780a654f22edfcdc6df0172bbad861bf32a8980d3b98ca539d55a049fc5d79ef6ba70c0692b53e45f210f42c829bec2d1e264f0f61742a2fbc4f921e3b8a1af707ed2e4032151e4d1885644c3e444a406fcb8cab297f93c234554f70488944734a2bdee2f1596e138d0a6a3022a354560025049bca935432f2376d5d371b9cbd5fc31a790b5d7464633a69064a41aa2c6b2d8fa2f5c2539d56221fe82eb5b18bb654d929e7f53497f746e057f878ceb6a4ab0e2396531939c76817bcdc8f6922d5c4b92b6cc69d4e600b141558b5ecac2f3904a9760d2faa301ecda00f28a81e680eaf2d7a1baf7127908e41d3fc79a714fa458cb59a9ae5bcdb6c313cff15476166ea686bf7cfb60cb046a255d73c4ddfe09a807f4797072c3a01596adf8a9d180840732245c90a8dad3dc0c8e28d28165853d3cad88e8dd87491b622281c5c454e97c9ef33cfbc901d0a57258cc6f5a402ec658360934544e0a6b53b0d9095e98d13ec1b7f7c4c2f903c87c093f32118573d23993a98a8a01e8dc246386fec4183170c363e3090070ff8b122861b4f92cfb4cc6d06a9181d054b3995066c04d1a2a5fbb47376c0d34a4071678455e4a54d07544d02cd0c6836eca31ad3772bf40073051be58c64da73df8a3925ece18fc00071eb162e3209b02d28528b002981cae43b345d96494985274c2380431f713f9a11666b1e40bfda434731b954eecc5dbe3ed9f33cf980042f68d17c31dba6acd2a5b223dff13f7679bbd102e8036a36d103300da39bdca60a0c6bc723eabfc9daa29c5370feaf4e9526450f04dad444c7a731bbeac819345b9d91c3cc685fac5771d7b50a89226dceb12207d14ef009520f43703cf1455c1c618dacbcd34e719a5f74d5c31991cfea28e53a735ed8146ddfe8d7708ac9944b105e32558e0290928870505dfcefa92e243b4d8d232cb10ff6d17b53c19d8151798ddf46dbd05e5ddf6b5835ab1612ca890aac07a000843008bdbb165a06d2671f567f398750f8ac4d9870287eac37c106a5d5d34cb49a490bcf6f8a917c62c6676a0cb76b47117dda0d87faec6b697d5601e51c09645a697216ab03059790324bb0007ff989da815491e32d0451a7b0fbe84aaf17a06fd83f7c4f624ffc438bd261cdbf174c7ed047106fa7d3aaaa56193513e59bf96ee744ce3bd4a88f2d906912beb619c519d18d41dca197938575889ca70b3ddf4a14c369977b1739790024885e55a12f9a99c156ea77693b46b577411839c4db9ef4bc954dd040c6cf90a31b626289a72bf828a8675548ff6b4a6d386a8eaaccaa5a81cc401cee09f9f053a1023331260926835764c098b244368c771e753058f43a694ee794553b42aa9b1cfdcd10074db7c9334653b6788494ad47c65b7b0a77f4d27bc9002f8e94f8f39cc115760c6956a612788797a6b79c5b7dc611991dfd0d224d7448ce36bbead4ea57c9b1466baea674d3b76b3c84434d2f373c640a0cdfad4a1e5807782131fa11d52c3ed7a0d1b355aa816bf0296bee6d71e730e220ba0494a6a8f168d1e67999783366db83805dbfdc8c8482d274d22277ad72778358ab808ec621abb2ee5704ce72b1eaa1ffc6e73988aa8db324e1277051cfd7f0add9defa76441f4543114e6502f99ea6418110163c8f9f5be5e5b2203d36ce7ec339e4933f7e8d5af8dc20f4c2de57241c2236c6c93f4bd8ab126b8241333a88187a03946605f4ceb5c42933e1c3a1f343bf4f11f13615257b8fd5905ca534651d90a0a3d12d5ab394e2efad446e0bacf07522d9c5ffc8bcc9243119e442271c603821663a2528f8312a3ac491e1e76bdc787a831f5ee10144e570e1f7da4576746c619b3dbe4da39399cc68be8d5ca64a681d629d044f4937d7cff511e0c910bca122d03bfddeb680d5eb24dd3e425ffab79c8f93146ad627e86ea58197b1350596f8b2e22424b52e34d29271375cf8d7ea9ebd8317d95cbed691b3d61311b2e16c06497984fe198596aee6979e4eb837be3986de20ee655e78353400fc6875fb0fcce4becbbd2fc508a4683a02509ffc1506863ac2f402d385833c3292286be775c9b1de02a85bfd3370b13370ddd4497f547b0da14caa45f6dc6308cd52a6afd8fd2f52b805a5d896f23819f3c13c8dc607f5fcc088a510dd4d6e581108662ebcb54fc7cfe9b9006a26744b1a4b5dafc79ce20eec796f74b848bff4fad621d51b501ed85aa18b9c51e33e01ff17fd4fa7a2c541a642d250eb6017d3c8f55188c6312d821b99383cc498e56b2e4a2fb6df19ba77d2a57b120e9bfcbdfb2b5f82483be55dc9d045ab02402866c8036feb7a7aa02e2ea878025d6c1f067b442c962208f6b50b490b56d0abcde2adc3f376471687b579ae6a07e308961779cef8ccdc64e28846f2d4eee7f0689adc8fe8c3aadc597931ae3201e78041eab195a94b8c93ccb7d685e259e853f5ee1d441822cebf526c6bb5dd4d24b3d2811b617bae2869cacf1ce68fcb846bdf5c97639437cfef39bef213fb8b8ab73f7ee8729466625937747a1b818141c2104caf35148865838e7f13a884db6bfc77a7859263c7a36c02e803bb2f23adec2a73a6ee19d1242d4144fd801d1b61f23fd34654359de04b73e2ac59e7c53098a475ef65f5c6ab9ff71d4ad8626c6dee8d27923aba67e84543dfa0cae6954cc33dee9556f7c7fccb5b444ecb153b1be43802bc4e77cc4d05a86e6bc24c11ceb62a9c63118e84b38495fb044470e326c5cdaebbce7094a927427584303f3ff317e5c469d9b9b0596bf806e31d1acd4d9d72005c11857fcc6dbe7dadf6cc66e489f18937ba7d83ea3a26e4813334b8fb9c2a190fc03584290838d75a853b63ec1b4b70cfc3a939d7bf47fbbd723507f0b86cdbc50d6e93f4b4adf56c21d9043ff2e131cf887ea97ce893fa687cff17047df4b2651b1c9a52176181277fa5c85c2d2fe87559ebd31c1e69a424adf115f000f4f7c64d9df2de4380094aa358a41daa1c33a472d1fb95d638446b417ab5029ef0b58e4594a28bfb67c6f703d8dc92d2399772ffda7204ca443049004f9eddfcb838b4c72c13280ba3a5e5da67672e59f6371aa98e2f7f02574eb14e132771e699f391b49a54c5e106b1943c71457c0c30ebf8eb854fbe53af252aff423ddbefc5d0ffc95c01fc4ec9c1d738c82d1d66044a13bbfd0fea6c8bed2625f929d2f3807ccd64509f9cd0ef222d9c8a0564c98ed7dd03367c9ab0cda285b48d2e6c7232c53fc890859eca378eee82512cf86953495badd119705e3defa3ae23b08471eda2c778d3fb4d49a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff01}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x52e9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaef2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6b99}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x1344}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 1.404927653s ago: executing program 1 (id=684): socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@xdp={0x2c, 0x9, r1, 0x2f}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="a774a2dd3901f6c6695bb44724a3b8404fbde86720c7a6a28ae2d9323d92dcfc1377c5f94f0d9502e708fab3927320473e02db6c830e4f4c51834495f20024aa30fb8d32213be3129c435c350f77", 0x4e}], 0x1, &(0x7f0000000200)=[{0x88, 0x118, 0x5, "a759d2e002de6ee3c5c8943a53637ac7e4c95a011267a98f30cbd253dc2369d41973011625a733a2161af7b309d83b84699d7c3759ffb5ef11d7c1e6c537e4b018c75334e568e3c73d6fed9f381f79002a53e7f61f1a85c4ec3f7b23692e72b1be077dde347a5d88cf2a153e9eb04fff5f0d2592"}, {0xc0, 0x88, 0xfffffffb, "0083b9e511bb44772da8244956a4045bca16d389c7af77c6709b3f7e2112305b1cbb9e5c12e58d6d66a335feb773cafa05507d80f67d0f141c53b191296f8222b8e87a0ad42419b2d989a37aedcfdbeccf76ea3c674c5d86ba3d57f7c5508810e4428e434cea03c1d9e0ae7fa40a0d4f3f44fea926fb76968b7ae5c984eda8b9d90a68dfdd0a2bd322261685404c1f9bc3a1aba6289af2c4a9349360fd47496439a0494f4b0d75d172a443bafb"}], 0x148}, 0x8000) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_netfilter(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x13c, 0x1, 0x2, 0x201, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x6}, [@typed={0x8, 0x132, 0x0, 0x0, @ipv4=@multicast1}, @generic="c77520588eaf872807a202cc78fb7549a7f753ebb4f2c1901bcec56779db75de2601852201b6095961df7cfe", @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@empty}, @generic="4386268410d482bfc62a60d1d166ae56eb05a4eaa40604b7d13f4f2d77296b268f8f70dee854b0898486b05a45883f721b60ac3eea5a0e90bdf79f850cf7ce701973c47cdc8fed495c01feae211f2cc8133b42eebd28ca2ef9ce003488a33c12b7bdf9422863e4504418cc136a978910513ef5b392074d7969ca9943ba030fa6ea90b4eba476ad37788ae402f804d9a9481baddf4442166b60ba638ab9134b9da63bd14920206f26b8a2a0635bb0596dd3f89c84a21d35113ea278328bdd26bc93d3d39acdb6839d77b12ad0c415426ea38674b2138cac0409a777da5ced0ae6"]}, 0x13c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000005c0)=0x5, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000600)={'security\x00', 0x1000, "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"}, &(0x7f0000001640)=0x1024) sendto$inet6(r2, &(0x7f0000001680)="c82abf3111e48d49dfc881b76745427cc44c04f522356db749a946cda1b64142d2281e9869386de53fd28826bd476daa78bfafe23d9ce666e3000673d1aa685edaa2009d3ec44a1ce1df57c6062718a40d39234c08def47ceea5fbc61aa88c92180ddd", 0x63, 0x4, &(0x7f0000001700)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), r2) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001840)={'syztnl1\x00', &(0x7f00000017c0)={'syztnl2\x00', r1, 0x29, 0x4, 0x9, 0x4, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8000, 0x1, 0x7ff, 0x8000}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001840)={'syztnl1\x00', &(0x7f00000017c0)={'syztnl2\x00', r1, 0x29, 0x4, 0x9, 0x4, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8000, 0x1, 0x7ff, 0x8000}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000001a00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001880)={0x104, r3, 0x110, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000081}, 0x4000000) accept(r0, &(0x7f0000001a40)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000001ac0)=0x80) (async) r5 = accept(r0, &(0x7f0000001a40)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000001ac0)=0x80) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000001b00)={r2, 0x0, 0x81, 0x5, 0xffffffffffffff65, 0x2, [0x40, 0xf974, 0x6, 0x3, 0x5, 0x5ef]}) (async) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000001b00)={r2, 0x0, 0x81, 0x5, 0xffffffffffffff65, 0x2, [0x40, 0xf974, 0x6, 0x3, 0x5, 0x5ef]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b80)={'pimreg0\x00'}) keyctl$join(0x1, &(0x7f0000001bc0)={'syz', 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) sendmsg$NFT_BATCH(r6, &(0x7f0000002040)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6787d270}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x202, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}]}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_NEWCHAIN={0xbc, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}]}, @NFTA_CHAIN_USERDATA={0x90, 0xc, "d15728d695c6c7929cb087e0d14067e2673dbc5065c40a1ec80aba3e3667bc825528e91ae962366f8ca495b0af0aef96b294dfb4a1bd47c4bfa44eba79fd218d7907f3fd1cba975b06e41d9f338474e00f2fca39a4792755b1ab4e0c457d7d6c64617cfa8e2f735c062ecabdf7602f41a59f4f80c5fb725c836483e9bb295b9526f3c6bcc84c6c993de9e1d6"}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0xdc, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x364}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000002040)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6787d270}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x202, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}]}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_NEWCHAIN={0xbc, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}]}, @NFTA_CHAIN_USERDATA={0x90, 0xc, "d15728d695c6c7929cb087e0d14067e2673dbc5065c40a1ec80aba3e3667bc825528e91ae962366f8ca495b0af0aef96b294dfb4a1bd47c4bfa44eba79fd218d7907f3fd1cba975b06e41d9f338474e00f2fca39a4792755b1ab4e0c457d7d6c64617cfa8e2f735c062ecabdf7602f41a59f4f80c5fb725c836483e9bb295b9526f3c6bcc84c6c993de9e1d6"}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0xdc, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x364}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000002080)={{0x1, 0x1, 0x18, r6, {0xfffffff7}}, './file0\x00'}) bind$vsock_stream(r7, &(0x7f00000020c0)={0x28, 0x0, 0x2710, @local}, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002140), r7) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x64, r8, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x33}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0xc000) syz_open_dev$vcsn(&(0x7f0000002280), 0x8, 0x42080) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000022c0), 0x40, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000002300)={0x8, {0x0, 0x7, 0x9, 0x7, 0x4}}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000002340)=0x1, 0x4) (async) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000002340)=0x1, 0x4) recvmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002380)=""/8, 0x8}, {&(0x7f00000023c0)=""/175, 0xaf}, {&(0x7f0000002480)=""/64, 0x40}], 0x3}, 0x7}, {{&(0x7f0000002500)=@x25={0x9, @remote}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002580)=""/42, 0x2a}, {&(0x7f00000025c0)=""/51, 0x33}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/148, 0x94}], 0x4, &(0x7f0000003700)=""/63, 0x3f}, 0x3}, {{&(0x7f0000003740)=@tipc=@id, 0x80, &(0x7f0000003940)=[{&(0x7f00000037c0)=""/245, 0xf5}, {&(0x7f00000038c0)=""/126, 0x7e}], 0x2}}, {{&(0x7f0000003980)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003a00)=""/96, 0x60}, {&(0x7f0000003a80)=""/217, 0xd9}, {&(0x7f0000003b80)=""/144, 0x90}, {&(0x7f0000003c40)=""/67, 0x43}], 0x4, &(0x7f0000003d00)=""/12, 0xc}, 0x693}], 0x4, 0x3, &(0x7f0000003e40)={0x77359400}) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000004440)={0x0, 0x1, 0x0, &(0x7f0000003e80)=[{}], 0x7, 0x0, &(0x7f0000003f00)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000004240)=[{}, {}, {}], 0x9, 0x0, &(0x7f00000042c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000004440)={0x0, 0x1, 0x0, &(0x7f0000003e80)=[{}], 0x7, 0x0, &(0x7f0000003f00)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000004240)=[{}, {}, {}], 0x9, 0x0, &(0x7f00000042c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$SOUND_PCM_READ_BITS(r7, 0x80045005, &(0x7f00000044c0)) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000004640)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004600)={&(0x7f00000045c0)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x4008810) 1.055014439s ago: executing program 1 (id=685): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.010073709s ago: executing program 2 (id=686): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x88c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10003, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r3, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r5, 0xffffffffffffffff, 0x0) 428.615352ms ago: executing program 3 (id=687): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x400454a4, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$qrtrtun(r1, &(0x7f0000000000)="e9c66df74a9192f98195d5f5aacf1408c6b7645c732246f978cae510f323225840225278512aa124db8dbca4a55fc295f1d47a2e5f7240d7b964addc3164fb0d157a64108738d85f26095848cf462f71d57bdad62e04b6b81fd5910b3239dafaf633fabc18ecf75df1b38fb57bba0f6b0304f9c8d4cb89b776151faa98172453a2b9896c4ae258710ce7ed9803bad2264f6358371a68705edff7abc039", 0x9d) 199.396044ms ago: executing program 3 (id=688): r0 = syz_open_dev$loop(&(0x7f0000000880), 0x7, 0x8101) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000008c0)={0x0, 0x200}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10bb0463) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x2a8, 0x25, 0x301, 0x70bd26, 0x25dfdbfd, {0x5}, [@nested={0x294, 0xff, 0x0, 0x1, [@nested={0x28f, 0x96, 0x0, 0x1, [@typed={0xb, 0x4a, 0x0, 0x0, @str='@@-\':[\x00'}, @generic="61091a8a5ff6bdb0120a17888f7a400a796d8a660dc067493be3a3b34c0d8d73801f1a6431c52195810e361d31de927305368fe9a643d4bb80adee137375f5510788a2248dd40482c04d365f9323feee4e53d49a14f0c4c0a6cff95323221aa73595a64e768bb058e1d83e664ab5ee9834f95eedf76086bcc4cd99b2a276ebda554f111948afd187f533dff406c08840a72c8fa95bc6061c9a1f0e904b2ea908adaba09fd08abc7b3d99cc", @nested={0xe8, 0x6e, 0x0, 0x1, [@generic="668787de53f6e8c911474a08d7cdda4695e4ba31627676b419ad9451f28430fec61628e30c6983752ed93a73c84935ae8939a293ff804a99c817757a1643c9a5737c9ae97ce73e17dc5536f7429ba3c566f2967ab3a7b13d66ff590812c578a291ca7e3e3900d71b5ab9f4b2f8bba8b9af7f045bfbc2b9c25a5d5b80103257cbb762ead1fbd1c2e241c3a59b0eb505c2059d4c5785657edde46d81be60", @generic="89934baf6688c2df3dbffe9932b6fe625eb807837c501b43d90fcf61c276e4a4c74e63461fdd347fc67b3135000040009c243054aacea13f15c1c83767717a9e533da20d82fc86"]}, @typed={0x8, 0x44, 0x0, 0x0, @str='+^/\x00'}, @typed={0xe2, 0x6d, 0x0, 0x0, @binary="cbae5983b88ab35b1f0c5fc5ca713a7b3252ac401728dd88895fedab93c6ca301865456fa66e61050db5a43504b069281be1d5ede2068c5a0161694466b9aba238074280033d770c87e7b9d33d36749728254d5d38daa131c787f86fcc777c1120ef491123c5f071013069a3ccbf017cf2e106110415cfaf9c68f2e76727a412d22979f640aef3357c1b35b1da3974f35453453b85f53baf603b0c1eba782a63a0b5b2509a154694c5fec4328dcd5a1d8cb8e1196d5f64350d848d3dae5321fc7b1597116378d0e75ed5e63c344d70000c365d71e8e4f9dd7839d5939d01"}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000280)={0x5, @win={{0x1, 0x1, 0x9, 0x101}, 0x5, 0xffffffff, 0x0, 0xc, 0x0, 0x9e}}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 158.844795ms ago: executing program 4 (id=689): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) mknodat(r4, &(0x7f0000000000)='./file0\x00', 0x200, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(0x0, 0x4, &(0x7f0000003a80)=[&(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000880)="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", 0x1000, 0xfffffffffffffff9, 0x0, 0x2, r4}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000300)="e73ec08c2fb05f031f4b2d8f34a7868d009c35de08d6f3f3c14ab75f515c026ccd7e9ee8a34ae4391b08abf9ac9a8aec4e6552b233a43a610078f51f1bc719178f2a8aec52adf68bf4c6b3b854ce7fedefdf1178105e1c00005b95fe6f1b46d40b29f968d8ebb26f6e4cac964962ba4719c9ea5debd8eb9ce015d3bbbf669cb4e7f15708950c1673af28aa22b3000e4a6c54dacb20d7dbe379c3331ed2a2eb5af5e2348c2249cdff889e0fbadb398ead77dcee6966284520979efe15ce1fbea0e3d15bf059a1bb872d0618dadb703c159579ca58", 0xd4, 0x8c2, 0x0, 0x0, r4}, 0x0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0xfffa, 0xffffffffffffffff, &(0x7f0000002a40)="6674eb4ae327b053027414299273470ae59ec06f75f39a97a21d51f2e7083dab8c49e6dad5cf77bb2ef141644c39fb5ecd6c3a943255b7b4f5c1feb37323f71a887fbc665787cccbd6ac813169df6c8f63308821dc18122ab4bcf906ef6c2b36b4963e4f555254bb876e185268737eca2520549d6ee2f39668f6a1c5dc669999397cd9d9138704031ddb36c6d0baaa0d481c854e671e7e145f7794db6418fbf17001ae6e91f98fb2ee4c414efd1a7fde0ea0561f0ddb0c619ea033b688edbf125294ba16ff3f991302dbbb8acbe0c66a027522371a33424872472fcf62f8b4c23b25f9d0e8366099c35001b0583b2333a2bae4f4889775b2ff5a9fbb7fac688247cc562b1284bbdefd6c23c8bc4b4a6c5337b8fe33df5130a193552667d7e4127838c21acc8407a6e8e26302ad9030888c510a932a7ea1bfeb6a724c59c54f7375229b0808277c02a5c95b60c95c31303cb03ef77524ce6bdbee56b3ae9c4b5180b9c496c2456f4134b1f6f73b66d133c4424a50753e6b0508747b54f930e6ef9ce082cc615a6aa61fe74880c33d4af92b98c5aed78d4d63ab8704a0f02fa6bdb14f67e0183570315b6506077eb9064d6a7c347f68cc126782ebff3b013eff43b250cbe8523f8046f427c89120f3db2adda94d188fd1256674284e9cda0f6b35c80c773ce6607c0cbcf3fb0130959969afc2d9d801e4444ce70dd2b57f5f0bf3a67174f7567155b66fabee27b8f344c8bd8544816a73690297efb51b35b0ea0a72034e73989aeb43ae0e42096c6a06d292400de15f116296f8559d9c01f9abbcbe1c2b8dc518a9dd972627dea00d2d13a5fd999ef8dc6a015a77c30f40fbbf97a528fa221f2577d1e0ef18e827f5a730f041293a895cdc125e85a3de0078115d7dab1d1f1fedfa99f74ad9c88ef58fb35cd675b522180e5f681d9abca4ba58d378e7ff1c36a358230f2cb96e7f5cbf09ee397144f92b6025ed556bf574aaf0bbe4a8cb89d2bd8799d59a3e67af7f09246307ed3acb46d5e93c96eda5f7b98c14a7b783609f93d54242aaef1f56841db4514e5bde5b6574dc8451ce5f1a2b86096b5e316bd190973299295bd0cfff3d1a93fd9182d363d2f457a36177157705965c779b44c004876bdd537a80fcfc1aec80953b69a6dae35e8adedea502202d42f78b11f617bfaa26e7f905f5d7242c4e77a311b3243bcaa93736e1a68a099075e0fc28ab22b4ba686e7d407f5b8a6712ce5d262d0170561964361680bf0b081f69b25bf6bf9102c5f4c288516f31019daf873f489dc1ade6046997338ddd6904d6f7df7ddd9f1bb329c47e6318d6eb9584b6de7441040f341265e0670bcbae40c3b3cf3389686c95d7e44ca75b45ddb4fe2ef841c83dc38f0e51ef3898956fa505e6d34e9435ecf4d08516b0e342b2b7ad6c665aeeecf780ca464bdf4ffd42cf03b92e7414cb96d0418a584c182079f1859fdd9a37e3f81a1e99655c0fce42f06a5fe5e4c153a9c71b2034816bf0a2e33faa8f2b15e66afb942cef54906831e3f9f7d221c922e7a05185e00e3a9b8adc05d16412da5b0c9233b9af8555e318d2bfeb9a67247af13a54265d9a99ced14efa247e931f8bb65257239975304595da161dd1bec8ecb30528a73f82eac6de9a607693ba072227fb1a915e894b1aedbfbada150460479e440c2c473741bbf10f027095d75947a0752becd3bf5fd76d90bd7ed9fd9ab9d6ef242a4e075cb2fb9e81eded5990667acb1a7bc34d1f6da35b601c4d182fc2d7bad9e8197e2d2749cb7c7a9bf667a39554116b41bb6b3c162b9fac899cfd461006ad83b5cb3c0e07310874fd279f75f18425ad80cdf709dc5d995129af57bf7dcdb55c0015dc18f3a5f7579ab02a963de55d08c52c3bf805499bc30b2fbfeb29aca6834c46d9ad1c833154d62d863dfe6bf120e4fa3ac0a5f63a363c36a3728ea5bc8f8a7e8493fdaccf506d6dcaf66e49ddb59e73119f652ec696683f97a6f794a5d1a396714a32156f51877799ab4b3de4064c42a31708d625716caa7ab1480ef51f8736ae77686462cb8e3a402bf0d67bedd2d241d230d10b2a1cb88c14b00ff36b6c2e49c7e93ceee3acda6ef0d33b253aaa0e1364d16450dce3adea922b6f8da2cc327e210a53e29f64eadadca9dc24701ca75c962c20c25cf779958257be1890cf599157d19ae27d21cba10c7b226c8eebc096ea4ecae4d8a787900b0ac8697255dc13d4bddb8b9293f1ed1a4f8c1fa59499ab4bbdf88ccba52fe6168a0e6a74b9a96feeafb3b6011df91cb66bf4f3f1629b431c7c1f3c60c8ebf91d0d40f64a6dfd1bb3b22a9618d074199b8cad3f22ec994dc683670bb5342ec173be8a6912370963b382a5d855c17e2502a28bc1952634fea32e2b0d4273509a804b9cc3c41587dd2df40ea78a83470686447cc8a4a5dc19c64a284ffd33b2b5316544fcd8876ca112202af689be3b44426608328de09c74dea1005abfa274c721f6fbe265bc95d5f1fe32dbe497eacf118e4500ec2c184c6ce0c52df8a4c4317920b5086ca85d624da52e91583351c136f882abec4f2e31ffe78f19bb7bbb8577fba04dba9647739188cfb7d23137ee0bd725432cbf7549b6301ef7d8abc2b3c5d528753923c2c1f4163a7327c20cd27b6b9c79ac2f25e586194e603f9d1a402cbd1977a8bc9ea94a4d85943a886761eaa133ee77176406f8104b7cbfc82833976942094037c8b1406c7abfa6655fc5fe591b932f3f720169fc1d68e38581694fae480e0ddbffe11b266080e46ffa8e99ec3cbca8bf504883242f44e4c027ba952c010b5222296f17721a79bc6afda9237b43f99b4b990b0641e6c05fc856e23bd70bd9d62452e7a6f41151e1373c1f125fda022fa760addec824a3488f119c172083658723da8fb5d04390bc32e4ef214f9ba3da3ee930921fb159ad10c0657145eced181a99f51a3cd673c596e9ac58b220daf7c9a9ab45f6d9ac9b7f1cca197a64c8105e3e96540913bd5bc3859f5ca1f99991e07f59ed15d9966ba1578f293a842d4805c17cb621fccc810b3e27bb4f29a862695288f815325d3bc218736bb30ba643532a39c4d39cde10b0b643822488e79ed9e2136f38f84664d54b75500cc48f4cd8af60b11db31e85dda238d543a23971a81f1c5e3b63c049cf68179cdae28629a5da03faaeba471558dac247426b23f8ec6ff0f37e7ed0aeeb2b7167aee45631a5af4d8eab193c82ddee5884c698a1000a23f516d20153c431d1bd6baf229f18b6858ea1ec6fae27909697e194e9270a643da0dadd2040c36ee71655654c742b47e0fc50bd163b17e85402cc797879ceb48e78961b969615395d0ba2549585978d9e9baa77d2bd43864e2e585f7a51f428abaa7719370b621ff4ffc012a96542ef43cdff1ca631cabc628e88abe5707d7636c064463ab8483c90b6225c9ce43eaadce411c8cd058f73b0234a91f63766b89de169e2ca758ad2647b18ab99c20a619ad729a9ac200871a7c7e1ed8670bf71bd357a007df3bca01dcff5eebb4bf60f52696ae4cf9d49b13053b9cfc95a9e8eacd214462a79103d8c722c894cab5ac09daf5c6d3d24350db029cb83411495a4a7194aab13fdc204463e07cdd5a57c00ec3e1c7653e5c2bfc06aa9a76bca5e68fe08b2d130536f4e4a2cc3e29f3c4934d45412f556ddabc1180b91995fe7c0c453e63d377e75046eca90dad8534f9e219c356ca86c77cd5259706a7d57c42df73a7c63cf1a1a4d5422664edcc50274ceb8607bbba9f33e460f164e5cb584a42b20d6edb07554428a22d3d47499fd8b166c51fc3ab9ff4e31e8e968433694ade85621dbea746884ab3ec99daf590796a44ff1eb7ca025381071c11d12452ba28aba88ec034017c15f01d001651acf7680ee745676ccfefefbc7d91e1f971eb448984b7f9c410b6062259c06c4750cadc8c771a5b1243a29c6810f96b470eb843cd30de855b4a2f9818200368f128eec45045836fdca99db643c1b81a906464e9b1c4b7a7f379cb52bd65c458c2e9570396cf8b66c1946ac4910916f2f059828b924c7d390c504c8d63380ba76ef918c7012e19257740052f3c64f567279535ac116b2086efb31a99e0fc41f8d1c6f7bb285dc68d37e41aae4eb04fa3703d067b16f933e9bfb6d62255d657c9ad0e0cc8428719303ec8d3c978def4c4dee67b21a8e026c93d1cf39ac3d8b3efdc9ce214b830098ada8b7eed3d9972918014e2f414fc60a238703452c0f31d3c678871be558b9a593340ad424ee897ce7d69746ad4052ba902f143a8fb1ea35ba03d5c8912daa134ca2d17e10866f2efcfcdbc54aaa30537026ae0d8e4199bb30777a4c1f13fdb79476bc14a04864edbc00d200aa7a7f59b3f08639f933320a3cf4fc56a105862f491d804de67e8f2c0ee6cc231d0c813fe1e5298439bc3d1bbbda5f58c669813511b4fb127900fe03fc8a8535338a5c8da55536049931cd1c2b18f553470033295b53bef06a09b86b8b587bd879bb37ad9927ed8ff510afe69a734d043b0681899478a72f7a31eeffdc8291a51f6b65a81179f1fb072767c79f9c8c884f4ffbabd90a9e21921ca80895c2f7c55bc8e7d0b3c7f60b113a2873ee1a751de8a1ca81b417c54955435d8d884a1cb23bbc456a1be77795f6f7c2fe15e561aeb2ff3d8d74907d4623791a2d6c4eb0bd1eb2089487b5277cbdd9241f88049280143c95adf4965ebe7f4f5eab005c190506a80000f7ab381c16714aca088c7652ee1fd1f625b2ef8200d25151a15aa945eeec842371547de272828454a21a9495eb8eb132631c0fef054952f28ba75f9c2cd351d7e9b4ae7d9579378e168a77ca3a8cc159573e309b41b5b377237166916f927ab360f709eac7c64e449a20c9b4447272a4c6e0d337a0877fdeeb329c062802d9124f99417d62faec65ee6d0f02b701febd1c12cbe4c2567eda41f3f74e9f025769a70bb43d30563c3525053da94b3831ba4ef471daf715355f77be81278c7cdf657d2179eba6bbbff85e6917a1dbac4f4956a8240e22e6440fec7d977b3db56bd05e43c92984aeb718f73a6ffc411f4bb53d3fa3fa5655023c20d634d4cfdb46b835f7db8bcdb12225238878ff5dc04d943502805c0a9fee31a09fd2239341da62253aec7e33ea080c5577233a7399ffd1c542d38d68e2b181517ee0df3f1be12258122a9d319e04836906f47fb0298ae64ea5c84fc6f967f48ee88b2245bae5754ade7829ce74c0ef6c20c70797f6c2c3d0e045ef6957f25d2b6644e6c0c6b1538af0640df3dda23bb94b8b626faa38eac64babbb7e61fee8ef74a2438c148fa313531765169073a9f237463e4ed32bb2bd66fb1e47e9c2c78ea0ddb76583e5cae13b8467eaa7fbcfd3c4c2bd2d0d0574de2450f41d95ba9b7af00f360d405561c348a42c368aaee4ac7806e7cb386045dbfc645b462cb64ddaee00cbc428effe7c334ab4357ec9f15796f31c75995cfacffa4131ce2b3faa70403ab4bba32a687cac977654cd9e0416024d8422d0ce4ef2a38110f84e18755a053542ec7b2d8786ecbf91678c023986e3fef51bd4c9d6b8b7d1aaec904a05e0820cfa27b12a819286c1dfc010c36f80053a794216b00b27396178fc20c6624a1565b6f41c1934184ec3b872eeab9578bffb2f7472f815709adf695646d02de219e8b735c181229f75c84135b5ef1472673fddcf4e6de7e244ee591ac907961b59c8b6d1c9868caac750c2e5962e5ce85854222ad727acaab57325ee6985e7026fcbebc00720540e20", 0x1000, 0x7, 0x0, 0x1, r4}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1c, r6, 0x303, 0x0, 0x25dfdbff, {0x13}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c044}, 0x20044050) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'bond_slave_0\x00', @random="013701300108"}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0xb000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x6400, 0x0, [0x74, 0xfffffffffffffffc, 0x1, 0x400000000]}) mlock(&(0x7f00005a5000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x1, 0x349, 0x0, 0x4, 0x85}) 0s ago: executing program 1 (id=690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x1a}) (async) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x18) (async) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r4, 0x540a, 0x2) (async, rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xf, 0x7f, 0x0, 0x9, 0xe9, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "400007001f10fad1", '\x00', "3f4051c4", "c27b92786e771ed6"}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r10, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): ioctl_fsgetxattr+0x10/0x10 [ 176.738290][ T7104] ? kasan_quarantine_put+0xbb/0x1f0 [ 176.738317][ T7104] ? tomoyo_path_number_perm+0x219/0x630 [ 176.738343][ T7104] ? tomoyo_path_number_perm+0x219/0x630 [ 176.738371][ T7104] do_vfs_ioctl+0x7a9/0x1530 [ 176.738397][ T7104] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.738431][ T7104] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 176.738474][ T7104] ? __fget_files+0x2a/0x420 [ 176.738495][ T7104] ? __fget_files+0x2a/0x420 [ 176.738511][ T7104] ? __fget_files+0x3a0/0x420 [ 176.738534][ T7104] ? __fget_files+0x2a/0x420 [ 176.738555][ T7104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.738581][ T7104] __se_sys_ioctl+0x82/0x170 [ 176.738602][ T7104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.738621][ T7104] do_syscall_64+0x15f/0xf80 [ 176.738643][ T7104] ? trace_irq_disable+0x3b/0x140 [ 176.738666][ T7104] ? clear_bhb_loop+0x40/0x90 [ 176.738687][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.738704][ T7104] RIP: 0033:0x7f181319cdd9 [ 176.738721][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.738735][ T7104] RSP: 002b:00007f1813fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.738754][ T7104] RAX: ffffffffffffffda RBX: 00007f1813415fa0 RCX: 00007f181319cdd9 [ 176.738766][ T7104] RDX: 0000000000000000 RSI: 00000000801c581f RDI: 0000000000000004 [ 176.738777][ T7104] RBP: 00007f1813fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 176.738787][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.738797][ T7104] R13: 00007f1813416038 R14: 00007f1813415fa0 R15: 00007f181353fa48 [ 176.738824][ T7104] [ 177.055006][ T5891] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 177.334858][ T5891] usb 5-1: device descriptor read/64, error -71 [ 177.446530][ T5891] usb usb5-port1: attempt power cycle [ 177.574801][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.590057][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.629309][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.640965][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.667013][ T7124] syzkaller0: entered promiscuous mode [ 177.673044][ T7124] syzkaller0: entered allmulticast mode [ 177.709368][ T7129] lo: Caught tx_queue_len zero misconfig [ 177.771108][ T7131] lo: Caught tx_queue_len zero misconfig [ 177.785621][ T5891] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 177.816602][ T5891] usb 5-1: device descriptor read/8, error -71 [ 178.094836][ T5891] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 178.115317][ T5891] usb 5-1: device descriptor read/8, error -71 [ 178.226104][ T5891] usb usb5-port1: unable to enumerate USB device [ 178.538323][ T7136] syzkaller0: entered promiscuous mode [ 178.546680][ T7136] syzkaller0: entered allmulticast mode [ 178.648820][ T7139] loop2: detected capacity change from 0 to 7 [ 178.660206][ T7139] Dev loop2: unable to read RDB block 7 [ 178.675640][ T7139] loop2: AHDI p1 p3 [ 178.691876][ T7139] loop2: partition table partially beyond EOD, truncated [ 178.714418][ T7139] loop2: p1 start 2349049979 is beyond EOD, truncated [ 178.810412][ T7143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.821430][ T7143] libceph: resolve '4' (ret=-3): failed [ 179.004835][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 179.176158][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 179.194095][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.218151][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 179.245353][ T9] usb 4-1: string descriptor 0 read error: -22 [ 179.265873][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 179.279225][ T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 179.303116][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 179.324481][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 179.340542][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 179.348456][ T9] usb 4-1: media controller created [ 179.355604][ T7153] FAULT_INJECTION: forcing a failure. [ 179.355604][ T7153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.392193][ T7153] CPU: 1 UID: 0 PID: 7153 Comm: syz.4.314 Not tainted syzkaller #0 PREEMPT(full) [ 179.392216][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.392233][ T7153] Call Trace: [ 179.392240][ T7153] [ 179.392247][ T7153] dump_stack_lvl+0xe8/0x150 [ 179.392279][ T7153] should_fail_ex+0x412/0x560 [ 179.392295][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.392311][ T7153] _copy_to_user+0x31/0xb0 [ 179.392335][ T7153] simple_read_from_buffer+0xe1/0x170 [ 179.392355][ T7153] proc_fail_nth_read+0x1bb/0x230 [ 179.392377][ T7153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.392399][ T7153] ? rw_verify_area+0x2a6/0x4d0 [ 179.392418][ T7153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.392438][ T7153] vfs_read+0x20c/0xa70 [ 179.392462][ T7153] ? __pfx___mutex_lock+0x10/0x10 [ 179.392486][ T7153] ? __pfx_vfs_read+0x10/0x10 [ 179.392508][ T7153] ? __fget_files+0x2a/0x420 [ 179.392529][ T7153] ? __fget_files+0x3a0/0x420 [ 179.392545][ T7153] ? __fget_files+0x2a/0x420 [ 179.392569][ T7153] ksys_read+0x150/0x270 [ 179.392591][ T7153] ? __pfx_ksys_read+0x10/0x10 [ 179.392619][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.392637][ T7153] do_syscall_64+0x15f/0xf80 [ 179.392659][ T7153] ? trace_irq_disable+0x3b/0x140 [ 179.392681][ T7153] ? clear_bhb_loop+0x40/0x90 [ 179.392701][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.392718][ T7153] RIP: 0033:0x7fa91135d60e [ 179.392734][ T7153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.392747][ T7153] RSP: 002b:00007fa912178fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.392765][ T7153] RAX: ffffffffffffffda RBX: 00007fa9121796c0 RCX: 00007fa91135d60e [ 179.392777][ T7153] RDX: 000000000000000f RSI: 00007fa9121790a0 RDI: 0000000000000005 [ 179.392788][ T7153] RBP: 00007fa912179090 R08: 0000000000000000 R09: 0000000000000000 [ 179.392798][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.392808][ T7153] R13: 00007fa911616128 R14: 00007fa911616090 R15: 00007fa91173fa48 [ 179.392835][ T7153] [ 179.720008][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 179.796722][ T9] usb 4-1: USB disconnect, device number 17 [ 179.817170][ T7157] syzkaller0: entered promiscuous mode [ 179.828412][ T7157] syzkaller0: entered allmulticast mode [ 179.837385][ T7161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.057793][ T7165] syzkaller0: entered promiscuous mode [ 180.063337][ T7165] syzkaller0: entered allmulticast mode [ 180.286677][ T7173] loop2: detected capacity change from 0 to 7 [ 180.307025][ T7173] Dev loop2: unable to read RDB block 7 [ 180.322044][ T7173] loop2: AHDI p1 p3 [ 180.332991][ T7173] loop2: partition table partially beyond EOD, truncated [ 180.350680][ T7173] loop2: p1 start 2349049979 is beyond EOD, truncated [ 181.004858][ T5920] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 181.089946][ T7197] syzkaller0: entered promiscuous mode [ 181.108492][ T7197] syzkaller0: entered allmulticast mode [ 181.185467][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 181.196516][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.210184][ T5920] usb 5-1: config 6 has an invalid interface number: 27 but max is 0 [ 181.219223][ T5920] usb 5-1: config 6 has no interface number 0 [ 181.231660][ T5920] usb 5-1: config 6 interface 27 has no altsetting 0 [ 181.262885][ T5920] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c3.00 [ 181.292417][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.326987][ T5920] usb 5-1: Product: syz [ 181.346715][ T5920] usb 5-1: Manufacturer: syz [ 181.366479][ T5920] usb 5-1: SerialNumber: syz [ 181.645002][ T5920] ems_usb 5-1:6.27 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 181.718572][ T5920] ems_usb 5-1:6.27: probe with driver ems_usb failed with error -22 [ 181.756320][ T7210] syzkaller0: entered promiscuous mode [ 181.785901][ T7210] syzkaller0: entered allmulticast mode [ 181.816936][ T5920] usb 5-1: USB disconnect, device number 22 [ 182.548011][ T5920] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 182.694861][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.718851][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.741925][ T5920] usb 5-1: not running at top speed; connect to a high speed hub [ 182.773502][ T5920] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.790607][ T5920] usb 5-1: config 0 has no interface number 0 [ 182.803193][ T5920] usb 5-1: New USB device found, idVendor=16d8, idProduct=7251, bcdDevice=2c.bc [ 182.813032][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.831153][ T5920] usb 5-1: Product: syz [ 182.840076][ T5920] usb 5-1: Manufacturer: syz [ 182.852801][ T5920] usb 5-1: SerialNumber: syz [ 182.870444][ T5920] usb 5-1: config 0 descriptor?? [ 182.881957][ T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 182.899002][ T10] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 182.912560][ T10] usb 2-1: config 0 has no interface number 0 [ 182.934612][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 182.962976][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.982879][ T10] usb 2-1: Product: syz [ 182.993613][ T10] usb 2-1: Manufacturer: syz [ 183.016962][ T24] IPVS: starting estimator thread 0... [ 183.032137][ T10] usb 2-1: SerialNumber: syz [ 183.050561][ T10] usb 2-1: config 0 descriptor?? [ 183.104869][ T5905] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 183.122459][ T7224] vlan2: entered allmulticast mode [ 183.128036][ T7224] team0: entered allmulticast mode [ 183.133326][ T7224] team_slave_0: entered allmulticast mode [ 183.135700][ T7247] IPVS: using max 28 ests per chain, 67200 per kthread [ 183.139521][ T7224] team_slave_1: entered allmulticast mode [ 183.147694][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.178298][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.186927][ T7224] loop2: detected capacity change from 0 to 7 [ 183.209489][ T7224] Dev loop2: unable to read RDB block 7 [ 183.220774][ T7224] loop2: unable to read partition table [ 183.228358][ T7224] loop2: partition table beyond EOD, truncated [ 183.235248][ T7224] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 183.276882][ T5905] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.286477][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.300386][ T5905] usb 1-1: config 0 descriptor?? [ 183.316916][ T5905] cp210x 1-1:0.0: cp210x converter detected [ 183.374970][ T10] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 183.392701][ T5920] usb 5-1: USB disconnect, device number 23 [ 183.418411][ T10] uvcvideo 2-1:0.64: No valid video chain found. [ 183.478020][ T10] usb 2-1: USB disconnect, device number 15 [ 183.494057][ T7253] netlink: 64 bytes leftover after parsing attributes in process `syz.4.345'. [ 183.591808][ T7259] syzkaller1: entered promiscuous mode [ 183.614032][ T7259] syzkaller1: entered allmulticast mode [ 183.719176][ T7264] syzkaller0: entered promiscuous mode [ 183.724859][ T7264] syzkaller0: entered allmulticast mode [ 183.933734][ T7243] x_tables: duplicate underflow at hook 2 [ 183.957441][ T5905] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 183.980311][ T5905] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 184.025349][ T5905] usb 1-1: cp210x converter now attached to ttyUSB0 [ 184.064442][ T5905] usb 1-1: USB disconnect, device number 15 [ 184.078191][ T5891] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 184.108539][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.127912][ T7278] binder: binder_mmap: 7275 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 184.130035][ T5905] cp210x 1-1:0.0: device disconnected [ 184.250541][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.272959][ T5891] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.304837][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.323219][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.345428][ T7270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 184.359391][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.414817][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 184.586035][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 184.600615][ T5891] usb 5-1: USB disconnect, device number 24 [ 184.610209][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.644414][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.690789][ T24] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 184.718752][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.748304][ T24] usb 4-1: config 0 descriptor?? [ 184.764537][ T7288] netlink: 'syz.2.353': attribute type 13 has an invalid length. [ 185.176939][ T24] hid (null): unknown global tag 0xc [ 185.210511][ T24] elan 0003:04F3:074D.0005: unknown global tag 0xc [ 185.238757][ T24] elan 0003:04F3:074D.0005: item 0 4 1 12 parsing failed [ 185.260199][ T24] elan 0003:04F3:074D.0005: Hid Parse failed [ 185.272178][ T24] elan 0003:04F3:074D.0005: probe with driver elan failed with error -22 [ 185.310506][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 186.155889][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.168339][ T7293] netlink: 'syz.1.355': attribute type 11 has an invalid length. [ 186.169264][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.185794][ T7293] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.355'. [ 186.206218][ T29] audit: type=1326 audit(1777074448.775:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e3079cdd9 code=0x0 [ 186.476079][ T5921] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 186.579475][ T7308] syzkaller0: entered promiscuous mode [ 186.585095][ T7308] syzkaller0: entered allmulticast mode [ 186.645271][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 186.652066][ T5921] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 186.661160][ T5921] usb 5-1: config 0 has no interface number 0 [ 186.667375][ T5921] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.679390][ T5921] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.692267][ T5921] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 186.701627][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.709710][ T5921] usb 5-1: Product: syz [ 186.715372][ T5921] usb 5-1: Manufacturer: syz [ 186.720286][ T5921] usb 5-1: SerialNumber: syz [ 186.743086][ T5921] usb 5-1: config 0 descriptor?? [ 186.757593][ T5921] redrat3 5-1:0.83: Couldn't find all endpoints [ 186.961858][ T24] usb 5-1: USB disconnect, device number 25 [ 186.991746][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.001796][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.095364][ T5891] usb 4-1: USB disconnect, device number 18 [ 187.658093][ T7336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.367'. [ 187.686078][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.726368][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.843893][ T7337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.909609][ T7342] syzkaller0: entered promiscuous mode [ 187.927899][ T7342] syzkaller0: entered allmulticast mode [ 188.005157][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 188.460883][ T7370] netlink: 164 bytes leftover after parsing attributes in process `syz.1.378'. [ 188.618675][ T7374] binder: 7373:7374 ioctl 4018620d 200000003280 returned -22 [ 188.650912][ T7374] binder: 7373:7374 ioctl 4018620d 200000003280 returned -22 [ 188.681111][ T7374] binder: 7373:7374 ioctl c0306201 2000000003c0 returned -14 [ 188.705376][ T7374] binder: 7373:7374 ioctl c0306201 2000000003c0 returned -14 [ 188.792121][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 188.835068][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 188.973856][ T7392] syzkaller0: entered promiscuous mode [ 188.992630][ T7392] syzkaller0: entered allmulticast mode [ 189.036717][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 189.058612][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 189.116957][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 189.155075][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.185904][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 189.208840][ T24] usb 2-1: Product: syz [ 189.216842][ T24] usb 2-1: Manufacturer: syz [ 189.227494][ T24] usb 2-1: SerialNumber: syz [ 189.245158][ T24] usb 2-1: config 0 descriptor?? [ 189.254676][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 189.338299][ T29] audit: type=1326 audit(1777074451.905:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.0.388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f918ef96b57 code=0x0 [ 189.361624][ T7410] sctp: [Deprecated]: syz.4.390 (pid 7410) Use of int in max_burst socket option. [ 189.361624][ T7410] Use struct sctp_assoc_value instead [ 189.458113][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.476875][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.515791][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.553900][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.583030][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.617996][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.649831][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.698298][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.765384][ T24] gspca_zc3xx: reg_w_i err -110 [ 189.775988][ T7418] bond1: invalid ARP target 0.0.0.0 specified for addition [ 189.800221][ T7418] bond1: option arp_ip_target: invalid value (0) [ 189.859596][ T7418] bond1 (unregistering): Released all slaves [ 190.354970][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 190.365014][ T24] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 191.081687][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 191.081802][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 191.087972][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.096325][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 191.319512][ T7424] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 191.343815][ T7424] bond1 (unregistering): Released all slaves [ 191.874869][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 191.876365][ T7414] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 192.586292][ T7414] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.600852][ T7414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.607601][ T7414] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.616871][ T7414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.622819][ T7414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.632309][ T7414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.638344][ T7414] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.646772][ T7414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.652818][ T7414] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.697535][ T24] usb 2-1: USB disconnect, device number 16 [ 192.894895][ T5891] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 193.045730][ T5891] usb 4-1: not running at top speed; connect to a high speed hub [ 193.068720][ T5891] usb 4-1: config 7 has an invalid interface number: 116 but max is 0 [ 193.079935][ T5891] usb 4-1: config 7 has no interface number 0 [ 193.087351][ T5891] usb 4-1: config 7 interface 116 has no altsetting 0 [ 193.107564][ T5891] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 193.124800][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.143030][ T5891] usb 4-1: Product: syz [ 193.153758][ T5891] usb 4-1: Manufacturer: syz [ 193.168782][ T5891] usb 4-1: SerialNumber: syz [ 193.405378][ T5891] usb-storage 4-1:7.116: USB Mass Storage device detected [ 193.515455][ T5891] usb 4-1: USB disconnect, device number 19 [ 193.571450][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.600157][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.687511][ T7449] netlink: 'syz.0.400': attribute type 13 has an invalid length. [ 193.757812][ T7451] program syz.0.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.985915][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 194.152871][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.162844][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.649644][ T7472] netlink: 'syz.2.403': attribute type 4 has an invalid length. [ 194.675347][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 194.676501][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 194.681397][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 194.694853][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 194.715544][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.730506][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.734531][ T7461] IPVS: set_ctl: invalid protocol: 229 224.0.0.1:20000 [ 194.744481][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.753758][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.761862][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.771035][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.779405][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.792305][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.806324][ T7474] netlink: 'syz.2.403': attribute type 4 has an invalid length. [ 194.814854][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.822396][ T42] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 194.890568][ T42] hid-generic 0000:0000:0004.0006: hidraw0: HID v0.03 Device [syz1] on syz0 [ 195.006221][ T7476] fido_id[7476]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.664995][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 195.857854][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 195.898706][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.927261][ T9] usb 5-1: Product: syz [ 195.953019][ T9] usb 5-1: Manufacturer: syz [ 195.972795][ T9] usb 5-1: SerialNumber: syz [ 196.413219][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 196.448849][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 196.755372][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 196.761855][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.768279][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.768956][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 197.436543][ T7522] netlink: 'syz.3.412': attribute type 13 has an invalid length. [ 197.468338][ T7525] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 197.488028][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.504371][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.564524][ T7525] bond1: entered promiscuous mode [ 197.584452][ T7525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.641314][ T7528] bond1: (slave bridge1): making interface the new active one [ 197.655944][ T7528] bridge1: entered promiscuous mode [ 197.674203][ T7528] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 198.163377][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 198.195403][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.399498][ T7547] netlink: 484 bytes leftover after parsing attributes in process `syz.0.423'. [ 198.766017][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 198.935840][ T7540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.959827][ T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.973537][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.988473][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.003206][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 199.013914][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.028621][ T7549] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 199.302239][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 199.323132][ T7559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.332212][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 199.333433][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 199.448358][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 199.473786][ T9] usb 5-1: USB disconnect, device number 26 [ 199.555200][ T5920] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 199.727631][ T5920] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 199.748695][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 199.774488][ T5920] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 199.785228][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.798211][ T5920] usb 2-1: Product: syz [ 199.808572][ T5920] usb 2-1: Manufacturer: syz [ 199.815557][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 199.832755][ T5920] usb 2-1: SerialNumber: syz [ 199.853969][ T5920] usb 2-1: config 0 descriptor?? [ 199.876347][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.885243][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 199.896941][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.900138][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 199.919635][ T5920] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 200.009564][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.023244][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.059579][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.092951][ T9] usb 5-1: config 0 descriptor?? [ 200.125888][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 200.160410][ T7576] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.431'. [ 200.172403][ T7576] bridge_slave_1: default FDB implementation only supports local addresses [ 200.528307][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 200.537687][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 200.547799][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 200.556799][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 200.568589][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 200.586189][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 200.599613][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 200.601885][ T7582] netlink: 484 bytes leftover after parsing attributes in process `syz.2.434'. [ 200.617110][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 200.629055][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 200.639103][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 200.647629][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 200.667382][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 200.676231][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 200.688217][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 200.696392][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 200.716796][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 200.723498][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 200.732729][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.745926][ T10] usb 4-1: config 0 descriptor?? [ 200.769336][ T7585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.905343][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 200.940914][ T9] pwc: Registered as video103. [ 200.963290][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 201.002527][ T10] kye 0003:0458:501B.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 201.037729][ T10] hid_parser_main: 91 callbacks suppressed [ 201.037750][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.056225][ T9] usb 5-1: USB disconnect, device number 27 [ 201.064133][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.097889][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.107070][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.113938][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.142897][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.153945][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.163233][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.170926][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.179807][ T10] kye 0003:0458:501B.0007: unknown main item tag 0x0 [ 201.193402][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.202908][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.212788][ T10] kye 0003:0458:501B.0007: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 201.226962][ T10] kye 0003:0458:501B.0007: tablet-enabling feature report not found [ 201.246463][ T10] kye 0003:0458:501B.0007: tablet enabling failed [ 201.282469][ T10] usb 4-1: USB disconnect, device number 20 [ 201.300005][ T7589] fido_id[7589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 201.520821][ T24] usb 1-1: USB disconnect, device number 16 [ 201.520824][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 201.616984][ T5920] gspca_sunplus: reg_r err -110 [ 201.622525][ T5920] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 201.734840][ T10] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 201.823971][ T5920] usb 2-1: USB disconnect, device number 17 [ 201.904875][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 201.960206][ T7604] loop5: detected capacity change from 0 to 7 [ 201.973457][ T7604] Dev loop5: unable to read RDB block 7 [ 201.979455][ T7604] loop5: unable to read partition table [ 201.987669][ T7604] loop5: partition table beyond EOD, truncated [ 201.995510][ T7604] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 202.044850][ T10] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 202.217571][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 202.236195][ T10] usb usb5-port1: attempt power cycle [ 202.446526][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.466578][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.485169][ T7623] binder: 7622:7623 ioctl 4018620d 200000000100 returned -22 [ 202.594894][ T10] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 202.626941][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 202.765279][ T10] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 202.795618][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 202.801553][ T10] usb usb5-port1: unable to enumerate USB device [ 202.964885][ T5920] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 203.134880][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 203.142643][ T5920] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.153007][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.202778][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.225524][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.243249][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.268840][ T5920] usb 1-1: Product: syz [ 203.283127][ T5920] usb 1-1: Manufacturer: syz [ 203.300739][ T5920] usb 1-1: SerialNumber: syz [ 203.366019][ T5920] usb 1-1: 0:2 : does not exist [ 203.390928][ T7638] loop5: detected capacity change from 0 to 7 [ 203.405614][ T7638] Dev loop5: unable to read RDB block 7 [ 203.426210][ T7638] loop5: unable to read partition table [ 203.441916][ T7638] loop5: partition table beyond EOD, truncated [ 203.466470][ T7638] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 203.778372][ T7644] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 204.391329][ T7632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.449'. [ 204.404889][ T7632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.449'. [ 204.443291][ T7632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.449'. [ 204.505901][ T7634] fuse: Unknown parameter 'goup_id' [ 205.084861][ T5921] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 205.224850][ T5921] usb 5-1: device descriptor read/64, error -71 [ 205.464889][ T5921] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 205.625670][ T5921] usb 5-1: device descriptor read/64, error -71 [ 205.669476][ T7661] tipc: Started in network mode [ 205.674613][ T7661] tipc: Node identity ac14140f, cluster identity 4711 [ 205.688755][ T7661] tipc: New replicast peer: 172.20.20.187 [ 205.697719][ T7661] tipc: Enabled bearer , priority 10 [ 205.712859][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'. [ 205.756204][ T5921] usb usb5-port1: attempt power cycle [ 205.783645][ T5920] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 205.919107][ T5920] usb 1-1: USB disconnect, device number 17 [ 206.106666][ T5921] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 206.139475][ T5921] usb 5-1: device descriptor read/8, error -71 [ 206.384844][ T5921] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 206.405547][ T5921] usb 5-1: device descriptor read/8, error -71 [ 206.434932][ T5920] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 206.525644][ T5921] usb usb5-port1: unable to enumerate USB device [ 206.620340][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.659692][ T5920] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.700545][ T5920] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 206.736644][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.761896][ T5920] usb 1-1: Product: syz [ 206.778061][ T5920] usb 1-1: Manufacturer: syz [ 206.794136][ T5920] usb 1-1: SerialNumber: syz [ 206.810614][ T5920] usb 1-1: config 0 descriptor?? [ 206.816673][ T5921] tipc: Node number set to 2886997007 [ 207.042323][ T5921] usb 1-1: USB disconnect, device number 18 [ 207.064884][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 207.094921][ T42] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 207.226642][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 207.237601][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 207.250563][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 207.260367][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.268865][ T24] usb 4-1: Product: syz [ 207.273179][ T24] usb 4-1: Manufacturer: syz [ 207.278170][ T24] usb 4-1: SerialNumber: syz [ 207.282914][ T42] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 207.298660][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.310159][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 207.325010][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 207.339433][ T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.350676][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.360561][ T42] usb 2-1: SerialNumber: syz [ 207.369397][ T7678] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 207.510145][ T24] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 207.519223][ T24] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 207.532551][ T24] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 207.547363][ T24] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 207.580277][ T24] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 207.633456][ T24] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 207.691355][ T24] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 207.723821][ T42] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 207.742254][ T24] usb 4-1: failed to enable PITCH for EP 0x82 [ 207.778093][ T42] usb 2-1: USB disconnect, device number 18 [ 207.928079][ T24] usb 4-1: USB disconnect, device number 21 [ 208.361759][ T7702] Cannot find add_set index 0 as target [ 208.376590][ T7702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.472'. [ 208.426539][ T7703] syzkaller0: entered promiscuous mode [ 208.446089][ T7703] syzkaller0: entered allmulticast mode [ 208.810540][ T7709] netlink: 112 bytes leftover after parsing attributes in process `syz.4.473'. [ 208.858569][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.473'. [ 209.174929][ T5921] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 209.315858][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 209.335233][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 209.346580][ T5921] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 209.365106][ T5921] usb 5-1: config 179 has no interface number 0 [ 209.376349][ T5921] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 209.388114][ T5921] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 209.401605][ T5921] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 209.413461][ T5921] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 209.427167][ T5921] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 209.442967][ T5921] usb 5-1: config 179 interface 65 has no altsetting 0 [ 209.457478][ T5921] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 209.486930][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.492863][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.514498][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.540886][ T24] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 209.555265][ T5920] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.563508][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.568033][ T5921] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input14 [ 209.596765][ T24] usb 2-1: config 0 descriptor?? [ 209.655185][ T5193] input input14: unable to receive magic message: -110 [ 209.666795][ T5193] input input14: unable to receive magic message: -32 [ 209.697787][ T5193] input input14: unable to receive magic message: -32 [ 209.708588][ T5193] input input14: unable to receive magic message: -32 [ 209.734858][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 209.761084][ T5920] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 209.762266][ T5891] usb 5-1: USB disconnect, device number 36 [ 209.770262][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.771988][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.832828][ T5920] usb 4-1: Product: syz [ 209.850952][ T5920] usb 4-1: Manufacturer: syz [ 209.878024][ T7729] netlink: 484 bytes leftover after parsing attributes in process `syz.4.479'. [ 209.887817][ T5920] usb 4-1: SerialNumber: syz [ 209.914933][ T5920] usb 4-1: config 0 descriptor?? [ 209.990449][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.025506][ T24] hkems 0003:2006:0118.0008: item fetching failed at offset 5/7 [ 210.033975][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.042496][ T24] hkems 0003:2006:0118.0008: parse failed [ 210.049551][ T24] hkems 0003:2006:0118.0008: probe with driver hkems failed with error -22 [ 210.084237][ T7732] loop2: detected capacity change from 0 to 7 [ 210.104067][ T7732] Dev loop2: unable to read RDB block 7 [ 210.111422][ T7732] loop2: AHDI p1 p3 [ 210.115567][ T7732] loop2: partition table partially beyond EOD, truncated [ 210.123438][ T7732] loop2: p1 start 2349049979 is beyond EOD, truncated [ 210.250358][ T5921] usb 2-1: USB disconnect, device number 19 [ 210.335448][ T5920] airspy 4-1:0.0: Board ID: 00 [ 210.340283][ T5920] airspy 4-1:0.0: Firmware version: [ 210.784689][ T7744] loop2: detected capacity change from 0 to 7 [ 210.810377][ T7744] loop2: [ 210.817129][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 210.843612][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 210.843785][ T7744] loop2: partition table partially beyond EOD, truncated [ 210.954641][ T7750] netlink: 182 bytes leftover after parsing attributes in process `syz.1.486'. [ 211.145581][ T5891] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 211.315569][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 211.323394][ T5891] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.340657][ T5891] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.353070][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.363456][ T5891] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 211.376276][ T5891] usb 1-1: Product: syz [ 211.380747][ T5891] usb 1-1: Manufacturer: syz [ 211.449457][ T5891] hub 1-1:4.0: USB hub found [ 211.565198][ T5920] airspy 4-1:0.0: usb_control_msg() failed -110 request 0e [ 211.632035][ T5920] airspy 4-1:0.0: Registered as swradio24 [ 211.643141][ T5891] hub 1-1:4.0: 2 ports detected [ 211.648319][ T5920] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 212.494882][ T42] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 212.658498][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.716900][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.769154][ T42] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.794066][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.829521][ T42] usb 5-1: SerialNumber: syz [ 212.864228][ T5905] usb 4-1: USB disconnect, device number 22 [ 212.906782][ T5891] hub 1-1:4.0: activate --> -90 [ 213.095497][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.103653][ T42] usb 5-1: skipping empty audio interface (v1) [ 213.121544][ T24] hid-generic 0008:0091:0009.0009: reserved main item tag 0xd [ 213.126155][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.142447][ T24] hid-generic 0008:0091:0009.0009: item fetching failed at offset 28/32 [ 213.171726][ T5920] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 213.174570][ T24] hid-generic 0008:0091:0009.0009: probe with driver hid-generic failed with error -22 [ 213.191419][ T7747] netlink: 'syz.0.485': attribute type 3 has an invalid length. [ 213.227314][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.241875][ T7747] netlink: 46 bytes leftover after parsing attributes in process `syz.0.485'. [ 213.253393][ T42] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 213.273534][ T5920] hid-generic 0003:0000:0000.000A: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 213.286788][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.300504][ T42] usb 5-1: USB disconnect, device number 37 [ 213.367485][ T6423] udevd[6423]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.395577][ T5905] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 213.568902][ T5905] usb 4-1: config 1 interface 0 has no altsetting 0 [ 213.591611][ T5905] usb 4-1: string descriptor 0 read error: -22 [ 213.609320][ T5905] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 213.645338][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.943908][ T5905] usbhid 4-1:1.0: can't add hid device: -71 [ 213.957150][ T5891] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 213.957682][ T5921] usb 1-1: USB disconnect, device number 19 [ 213.985707][ T5905] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 214.002761][ T5905] usb 4-1: USB disconnect, device number 23 [ 214.339176][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.351947][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.380681][ T29] audit: type=1326 audit(1777074476.945:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.429146][ T7800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.447169][ T29] audit: type=1326 audit(1777074476.975:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.478106][ T29] audit: type=1326 audit(1777074476.975:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.550719][ T5891] IPVS: starting estimator thread 0... [ 214.557531][ T29] audit: type=1326 audit(1777074476.975:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.625760][ T29] audit: type=1326 audit(1777074476.975:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.665604][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.677269][ T7811] IPVS: using max 53 ests per chain, 127200 per kthread [ 214.700550][ T29] audit: type=1326 audit(1777074476.975:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.738465][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.765117][ T29] audit: type=1326 audit(1777074476.975:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.826360][ T29] audit: type=1326 audit(1777074476.975:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.880969][ T29] audit: type=1326 audit(1777074476.975:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 214.925408][ T29] audit: type=1326 audit(1777074476.975:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91139cdd9 code=0x7ffc0000 [ 215.364987][ T5920] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 215.547122][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.571720][ T5920] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 215.582126][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.596721][ T5920] usb 1-1: config 0 descriptor?? [ 215.614869][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 215.813950][ T5920] pwc: send_video_command error -71 [ 215.832220][ T5920] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 215.841159][ T5920] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 215.865238][ T5920] usb 1-1: USB disconnect, device number 20 [ 215.964875][ T42] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 216.057873][ T7846] x_tables: duplicate entry at hook 2 [ 216.125668][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 216.127721][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.129602][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.129635][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.129665][ T42] usb 4-1: Product: syz [ 216.129674][ T42] usb 4-1: Manufacturer: syz [ 216.129682][ T42] usb 4-1: SerialNumber: syz [ 216.131573][ T42] usb 4-1: config 0 descriptor?? [ 216.136015][ T42] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 216.136047][ T42] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 216.253259][ T7844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.513'. [ 216.344810][ T5920] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 216.496602][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.523166][ T5920] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 216.539968][ T42] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 216.552441][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.583590][ T5920] usb 1-1: config 0 descriptor?? [ 216.613730][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 216.770392][ T42] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 216.796860][ T42] em28xx 4-1:0.0: board has no eeprom [ 216.813705][ T7859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.833892][ T7859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.517'. [ 216.867612][ T7859] netlink: 72 bytes leftover after parsing attributes in process `syz.3.517'. [ 216.904963][ T42] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 216.921894][ T42] em28xx 4-1:0.0: dvb set to bulk mode. [ 216.940998][ T5905] em28xx 4-1:0.0: Binding DVB extension [ 216.966170][ T42] usb 4-1: USB disconnect, device number 24 [ 217.007920][ T42] em28xx 4-1:0.0: Disconnecting em28xx [ 217.014702][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00 [ 217.041032][ T5920] pwc: recv_control_msg error -32 req 02 val 2700 [ 217.063882][ T7861] syzkaller0: entered promiscuous mode [ 217.068238][ T5920] pwc: recv_control_msg error -32 req 02 val 2c00 [ 217.086386][ T5920] pwc: recv_control_msg error -32 req 04 val 1000 [ 217.106914][ T7861] syzkaller0: entered allmulticast mode [ 217.112621][ T5905] em28xx 4-1:0.0: Registering input extension [ 217.123151][ T5920] pwc: recv_control_msg error -32 req 04 val 1300 [ 217.136914][ T42] em28xx 4-1:0.0: Closing input extension [ 217.160489][ T5920] pwc: recv_control_msg error -32 req 04 val 1400 [ 217.172742][ T5920] pwc: recv_control_msg error -32 req 02 val 2000 [ 217.189590][ T5920] pwc: recv_control_msg error -32 req 02 val 2100 [ 217.197397][ T5920] pwc: recv_control_msg error -32 req 04 val 1500 [ 217.204705][ T5920] pwc: recv_control_msg error -32 req 02 val 2500 [ 217.214506][ T5920] pwc: recv_control_msg error -32 req 02 val 2400 [ 217.219474][ T42] em28xx 4-1:0.0: Freeing device [ 217.424698][ T7830] netlink: 'syz.0.509': attribute type 32 has an invalid length. [ 217.443314][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 217.461781][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 217.481563][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 217.491721][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 217.502997][ T5920] pwc: Registered as video103. [ 217.516566][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 217.562158][ T5920] usb 1-1: USB disconnect, device number 21 [ 217.635221][ T5921] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 217.798622][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 217.816261][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.827360][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.839102][ T5921] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 217.849111][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.867134][ T5921] usb 5-1: config 0 descriptor?? [ 218.525465][ T7896] lo: Caught tx_queue_len zero misconfig [ 218.564803][ T42] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 218.700355][ T5921] usbhid 5-1:0.0: can't add hid device: -71 [ 218.735579][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 218.775863][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 218.809668][ T5921] usb 5-1: USB disconnect, device number 38 [ 218.813888][ T7901] netlink: 280 bytes leftover after parsing attributes in process `syz.1.527'. [ 218.849875][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.909099][ T7901] netlink: 280 bytes leftover after parsing attributes in process `syz.1.527'. [ 218.931730][ T42] usb 1-1: config 0 has no interfaces? [ 218.949847][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.016403][ T42] usb 1-1: config 0 has no interfaces? [ 219.041449][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.060134][ T42] usb 1-1: config 0 has no interfaces? [ 219.118820][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.137428][ T42] usb 1-1: config 0 has no interfaces? [ 219.167622][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 219.184851][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.195664][ T7909] fuse: fd is not a fuse device [ 219.228187][ T42] usb 1-1: config 0 descriptor?? [ 219.976117][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 220.003033][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 220.367742][ T7934] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 220.406509][ T7934] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 220.681466][ T7943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.706318][ T7939] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 220.719103][ T7939] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 221.094700][ T7934] bond1: (slave gretap1): making interface the new active one [ 221.124842][ T42] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 221.139252][ T7934] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 221.324085][ T5913] usb 1-1: USB disconnect, device number 22 [ 221.372221][ T42] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 221.421847][ T42] usb 5-1: config 1 has no interface number 0 [ 221.445281][ T42] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 221.474133][ T42] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 221.526561][ T42] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 221.561960][ T42] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.639317][ T42] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 221.664819][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.686451][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 221.703942][ T42] usb 5-1: Product: syz [ 221.710184][ T42] usb 5-1: Manufacturer: syz [ 221.722402][ T42] usb 5-1: SerialNumber: syz [ 221.750886][ T7949] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 221.821819][ T7955] bond1: Invalid ad_actor_system MAC address. [ 221.829418][ T5913] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 221.863524][ T7955] bond1: option ad_actor_system: invalid value (3303287) [ 221.912825][ T7955] bond1 (unregistering): Released all slaves [ 221.955011][ T7949] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 222.001278][ T42] usb 5-1: Error in usbnet_get_endpoints (-22) [ 222.011154][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 222.040595][ T5913] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 222.093368][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.127132][ T5913] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.166486][ T5913] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 222.193333][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.261019][ T5913] hub 1-1:1.0: bad descriptor, ignoring hub [ 222.295598][ T5913] hub 1-1:1.0: probe with driver hub failed with error -5 [ 222.330412][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 222.356662][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 222.371896][ T5913] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 222.515748][ T42] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 222.707417][ T42] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 222.734515][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.753896][ T42] usb 4-1: Product: syz [ 222.764794][ T42] usb 4-1: Manufacturer: syz [ 222.773223][ T42] usb 4-1: SerialNumber: syz [ 222.821728][ T5913] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 222.997277][ T5913] usb 1-1: device descriptor read/64, error -71 [ 223.017788][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.041405][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.071125][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.108336][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.149214][ T42] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 223.173401][ T42] usb 4-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 223.200760][ T42] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 223.254899][ T5913] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 223.368978][ T42] usb 4-1: USB disconnect, device number 25 [ 223.438325][ T5913] usb 1-1: device descriptor read/64, error -71 [ 223.456554][ T6423] udevd[6423]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.714876][ T5913] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 223.776398][ T5913] usb 1-1: device descriptor read/8, error -71 [ 223.902201][ T7970] input: syz0 as /devices/virtual/input/input17 [ 224.041336][ T42] usb 5-1: USB disconnect, device number 39 [ 224.067703][ T5913] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 224.130953][ T5913] usb 1-1: device descriptor read/8, error -71 [ 224.256141][ T5913] usb 1-1: USB disconnect, device number 23 [ 225.114867][ T5913] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 225.309407][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.341615][ T5913] usb 1-1: not running at top speed; connect to a high speed hub [ 225.362752][ T5913] usb 1-1: config 16 has an invalid interface number: 36 but max is 0 [ 225.385277][ T5913] usb 1-1: config 16 has no interface number 0 [ 225.405173][ T5913] usb 1-1: config 16 interface 36 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 225.436830][ T5913] usb 1-1: config 16 interface 36 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 225.455726][ T5913] usb 1-1: config 16 interface 36 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.472756][ T5913] usb 1-1: config 16 interface 36 has no altsetting 0 [ 225.492881][ T5913] usb 1-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=4a.9d [ 225.508195][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.527425][ T5913] usb 1-1: Product: syz [ 225.536000][ T5913] usb 1-1: Manufacturer: syz [ 225.545650][ T5913] usb 1-1: SerialNumber: syz [ 225.558491][ T7995] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.945237][ T5913] hub 1-1:16.36: bad descriptor, ignoring hub [ 225.974819][ T5913] hub 1-1:16.36: probe with driver hub failed with error -5 [ 225.992977][ T5913] option 1-1:16.36: GSM modem (1-port) converter detected [ 226.064246][ T5913] usb 1-1: USB disconnect, device number 24 [ 226.077642][ T5913] option 1-1:16.36: device disconnected [ 226.227992][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 226.754633][ T8020] C: renamed from team_slave_0 (while UP) [ 226.763016][ T8020] netlink: 'syz.2.560': attribute type 8 has an invalid length. [ 226.773069][ T8020] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 226.795552][ T5913] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 226.864843][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 226.958032][ T5913] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.972904][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.984939][ T42] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 226.999267][ T5913] usb 4-1: config 0 descriptor?? [ 227.020087][ T5913] cp210x 4-1:0.0: cp210x converter detected [ 227.035029][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 227.043562][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.073641][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.091630][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.107991][ T10] usb 5-1: config 0 descriptor?? [ 227.148895][ T42] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 227.167756][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.196765][ T42] usb 1-1: Product: syz [ 227.208275][ T42] usb 1-1: Manufacturer: syz [ 227.213916][ T42] usb 1-1: SerialNumber: syz [ 227.225527][ T42] usb 1-1: config 0 descriptor?? [ 227.248009][ T42] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 227.409868][ T5913] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 227.452352][ T5913] usb 4-1: cp210x converter now attached to ttyUSB0 [ 227.478961][ T8034] FAULT_INJECTION: forcing a failure. [ 227.478961][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.494487][ T8034] CPU: 1 UID: 0 PID: 8034 Comm: syz.1.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.494516][ T8034] Tainted: [L]=SOFTLOCKUP [ 227.494522][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.494533][ T8034] Call Trace: [ 227.494543][ T8034] [ 227.494551][ T8034] dump_stack_lvl+0xe8/0x150 [ 227.494577][ T8034] should_fail_ex+0x412/0x560 [ 227.494596][ T8034] _copy_to_user+0x31/0xb0 [ 227.494609][ T8034] simple_read_from_buffer+0xe1/0x170 [ 227.494622][ T8034] proc_fail_nth_read+0x1bb/0x230 [ 227.494643][ T8034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.494666][ T8034] ? rw_verify_area+0x2a6/0x4d0 [ 227.494688][ T8034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.494708][ T8034] vfs_read+0x20c/0xa70 [ 227.494733][ T8034] ? __pfx___mutex_lock+0x10/0x10 [ 227.494758][ T8034] ? __pfx_vfs_read+0x10/0x10 [ 227.494778][ T8034] ? __fget_files+0x2a/0x420 [ 227.494799][ T8034] ? __fget_files+0x3a0/0x420 [ 227.494816][ T8034] ? __fget_files+0x2a/0x420 [ 227.494842][ T8034] ksys_read+0x150/0x270 [ 227.494866][ T8034] ? __pfx_ksys_read+0x10/0x10 [ 227.494895][ T8034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.494915][ T8034] do_syscall_64+0x15f/0xf80 [ 227.494937][ T8034] ? trace_irq_disable+0x3b/0x140 [ 227.494960][ T8034] ? clear_bhb_loop+0x40/0x90 [ 227.494981][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.494998][ T8034] RIP: 0033:0x7f1e3075d60e [ 227.495015][ T8034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.495030][ T8034] RSP: 002b:00007f1e3163ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.495049][ T8034] RAX: ffffffffffffffda RBX: 00007f1e316406c0 RCX: 00007f1e3075d60e [ 227.495062][ T8034] RDX: 000000000000000f RSI: 00007f1e316400a0 RDI: 0000000000000004 [ 227.495073][ T8034] RBP: 00007f1e31640090 R08: 0000000000000000 R09: 0000000000000000 [ 227.495084][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.495094][ T8034] R13: 00007f1e30a16038 R14: 00007f1e30a15fa0 R15: 00007f1e30b3fa48 [ 227.495123][ T8034] [ 227.715364][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 227.715380][ T29] audit: type=1326 audit(1777074490.275:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.0.559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f918ef9cdd9 code=0x0 [ 227.728648][ T10] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 227.756490][ T42] gspca_stk1135: reg_w 0x0 err -71 [ 227.762703][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.769413][ T42] gspca_stk1135: Sensor write failed [ 227.774936][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.781491][ T42] gspca_stk1135: Sensor write failed [ 227.786848][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.793173][ T42] gspca_stk1135: Sensor read failed [ 227.800567][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.806952][ T42] gspca_stk1135: Sensor read failed [ 227.812181][ T42] gspca_stk1135: Detected sensor type unknown (0x0) [ 227.820904][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.827302][ T42] gspca_stk1135: Sensor read failed [ 227.832526][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.838920][ T42] gspca_stk1135: Sensor read failed [ 227.844156][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.850544][ T42] gspca_stk1135: Sensor write failed [ 227.855967][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 227.862326][ T42] gspca_stk1135: Sensor write failed [ 227.867873][ T42] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 227.878232][ T42] usb 1-1: USB disconnect, device number 25 [ 228.122431][ T5920] usb 5-1: USB disconnect, device number 40 [ 228.248099][ T9] usb 4-1: USB disconnect, device number 26 [ 228.265485][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 228.301417][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 228.351444][ T9] cp210x 4-1:0.0: device disconnected [ 228.388367][ T8044] loop5: detected capacity change from 0 to 7 [ 228.400286][ T8044] Dev loop5: unable to read RDB block 7 [ 228.414925][ T8044] loop5: unable to read partition table [ 228.426747][ T8044] loop5: partition table beyond EOD, truncated [ 228.449379][ T8044] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 228.464853][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 228.479681][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.500132][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.522681][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.553099][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.567993][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.588262][ T10] usb 2-1: config 0 descriptor?? [ 228.818874][ T10] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 228.848911][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.856944][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.866225][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.873637][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.882690][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.896015][ T29] audit: type=1326 audit(1777074491.465:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 228.918788][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.938759][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.959510][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 228.978615][ T29] audit: type=1326 audit(1777074491.495:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 229.007189][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 229.028254][ T10] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 229.040760][ T10] microsoft 0003:045E:07DA.000C: unsupported Resolution Multiplier 0 [ 229.049214][ T29] audit: type=1326 audit(1777074491.495:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 229.090072][ T10] microsoft 0003:045E:07DA.000C: implement() called with n (56) > 32! (kworker/0:1) [ 229.119360][ T10] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 229.145028][ T29] audit: type=1326 audit(1777074491.495:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 229.168683][ T10] microsoft 0003:045E:07DA.000C: no inputs found [ 229.175564][ T10] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 229.184502][ T29] audit: type=1326 audit(1777074491.495:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f181315d60e code=0x7ffc0000 [ 229.221090][ T10] usb 2-1: USB disconnect, device number 20 [ 229.258608][ T29] audit: type=1326 audit(1777074491.495:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 229.342806][ T29] audit: type=1326 audit(1777074491.505:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 229.396114][ T8059] fido_id[8059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 229.414247][ T29] audit: type=1326 audit(1777074491.505:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 229.418340][ T8061] FAULT_INJECTION: forcing a failure. [ 229.418340][ T8061] name failslab, interval 1, probability 0, space 0, times 0 [ 229.475055][ T29] audit: type=1326 audit(1777074491.505:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f181319cdd9 code=0x7ffc0000 [ 229.516636][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.3.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.516665][ T8061] Tainted: [L]=SOFTLOCKUP [ 229.516672][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.516683][ T8061] Call Trace: [ 229.516690][ T8061] [ 229.516697][ T8061] dump_stack_lvl+0xe8/0x150 [ 229.516730][ T8061] should_fail_ex+0x412/0x560 [ 229.516764][ T8061] should_failslab+0xa8/0x100 [ 229.516788][ T8061] ? security_inode_alloc+0x39/0x310 [ 229.516809][ T8061] kmem_cache_alloc_noprof+0x87/0x650 [ 229.516838][ T8061] security_inode_alloc+0x39/0x310 [ 229.516860][ T8061] inode_init_always_gfp+0x9c8/0xda0 [ 229.516893][ T8061] ? __pfx_proc_alloc_inode+0x10/0x10 [ 229.516913][ T8061] alloc_inode+0x82/0x1b0 [ 229.516939][ T8061] new_inode+0x22/0x170 [ 229.516962][ T8061] proc_pid_make_inode+0x21/0x130 [ 229.516989][ T8061] proc_map_files_instantiate+0xa2/0x190 [ 229.517013][ T8061] proc_fill_cache+0x1ff/0x440 [ 229.517041][ T8061] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 229.517062][ T8061] ? __pfx_proc_fill_cache+0x10/0x10 [ 229.517084][ T8061] ? snprintf+0xe8/0x140 [ 229.517104][ T8061] ? __up_read+0x291/0x6b0 [ 229.517142][ T8061] proc_map_files_readdir+0x7e2/0xa40 [ 229.517174][ T8061] ? __mutex_lock+0x319/0x1550 [ 229.517201][ T8061] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 229.517246][ T8061] ? iterate_dir+0x292/0x570 [ 229.517268][ T8061] ? down_read_killable+0x1bb/0x340 [ 229.517291][ T8061] iterate_dir+0x399/0x570 [ 229.517320][ T8061] __se_sys_getdents+0xf1/0x270 [ 229.517347][ T8061] ? __pfx___se_sys_getdents+0x10/0x10 [ 229.517369][ T8061] ? ksys_write+0x242/0x270 [ 229.517388][ T8061] ? __pfx_filldir+0x10/0x10 [ 229.517413][ T8061] ? __pfx_ksys_write+0x10/0x10 [ 229.517444][ T8061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.517468][ T8061] do_syscall_64+0x15f/0xf80 [ 229.517492][ T8061] ? clear_bhb_loop+0x40/0x90 [ 229.517514][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.517532][ T8061] RIP: 0033:0x7f181319cdd9 [ 229.517550][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.517564][ T8061] RSP: 002b:00007f1813fd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 229.517583][ T8061] RAX: ffffffffffffffda RBX: 00007f1813415fa0 RCX: 00007f181319cdd9 [ 229.517596][ T8061] RDX: 0000000000001008 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 229.517608][ T8061] RBP: 00007f1813fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 229.517619][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.517630][ T8061] R13: 00007f1813416038 R14: 00007f1813415fa0 R15: 00007f181353fa48 [ 229.517660][ T8061] [ 229.960939][ T8040] syz.2.566 (8040): drop_caches: 2 [ 230.098466][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.111893][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.213570][ T8073] lo: Caught tx_queue_len zero misconfig [ 230.325465][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 230.497577][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.509920][ T10] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 230.519447][ T10] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 230.528008][ T10] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 230.534838][ T5913] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 230.537620][ T10] usb 2-1: config 129 has no interface number 0 [ 230.553366][ T10] usb 2-1: config 129 has no interface number 1 [ 230.559997][ T10] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 230.575043][ T10] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 230.588633][ T10] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 230.608720][ T10] usb 2-1: config 129 interface 135 has no altsetting 0 [ 230.620657][ T10] usb 2-1: config 129 interface 5 has no altsetting 0 [ 230.633892][ T10] usb 2-1: string descriptor 0 read error: -22 [ 230.640627][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 230.650942][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.679670][ T5913] usb 5-1: device descriptor read/64, error -71 [ 230.686145][ T5905] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 230.702632][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.723021][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 230.825389][ T5905] usb 4-1: device descriptor read/64, error -71 [ 230.895207][ T42] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 230.935645][ T5913] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 231.052243][ T8097] kvm: emulating exchange as write [ 231.056416][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 231.078088][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 231.089121][ T5913] usb 5-1: device descriptor read/64, error -71 [ 231.095488][ T5905] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 231.116044][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 231.135887][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.154300][ T42] usb 1-1: Product: syz [ 231.160175][ T42] usb 1-1: Manufacturer: syz [ 231.176723][ T42] usb 1-1: SerialNumber: syz [ 231.186171][ T42] usb 1-1: config 0 descriptor?? [ 231.201524][ T42] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 231.215197][ T5913] usb usb5-port1: attempt power cycle [ 231.235138][ T5905] usb 4-1: device descriptor read/64, error -71 [ 231.355140][ T5905] usb usb4-port1: attempt power cycle [ 231.516279][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.526687][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.550722][ T8099] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 231.565353][ T5913] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 231.605314][ T5913] usb 5-1: device descriptor read/8, error -71 [ 231.705011][ T5905] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 231.745672][ T5905] usb 4-1: device descriptor read/8, error -71 [ 231.864837][ T5913] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 231.885744][ T5913] usb 5-1: device descriptor read/8, error -71 [ 231.995097][ T5905] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 232.004653][ T5913] usb usb5-port1: unable to enumerate USB device [ 232.035603][ T5905] usb 4-1: device descriptor read/8, error -71 [ 232.145295][ T5905] usb usb4-port1: unable to enumerate USB device [ 232.725025][ T29] kauditd_printk_skb: 1244 callbacks suppressed [ 232.725038][ T29] audit: type=1326 audit(1777074495.295:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.753966][ T29] audit: type=1326 audit(1777074495.295:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.776868][ T29] audit: type=1326 audit(1777074495.295:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.800593][ T29] audit: type=1326 audit(1777074495.295:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.824559][ T29] audit: type=1326 audit(1777074495.295:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.847234][ T29] audit: type=1326 audit(1777074495.295:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.869868][ T29] audit: type=1326 audit(1777074495.295:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.892399][ T29] audit: type=1326 audit(1777074495.295:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.915020][ T29] audit: type=1326 audit(1777074495.295:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 232.938252][ T29] audit: type=1326 audit(1777074495.295:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e3075d60e code=0x7ffc0000 [ 233.180206][ T24] usb 2-1: USB disconnect, device number 21 [ 233.273002][ T8104] FAULT_INJECTION: forcing a failure. [ 233.273002][ T8104] name failslab, interval 1, probability 0, space 0, times 0 [ 233.295373][ T8104] CPU: 1 UID: 0 PID: 8104 Comm: syz.1.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.295401][ T8104] Tainted: [L]=SOFTLOCKUP [ 233.295408][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.295418][ T8104] Call Trace: [ 233.295425][ T8104] [ 233.295433][ T8104] dump_stack_lvl+0xe8/0x150 [ 233.295465][ T8104] should_fail_ex+0x412/0x560 [ 233.295496][ T8104] ? __d_alloc+0x37/0x6f0 [ 233.295517][ T8104] should_failslab+0xa8/0x100 [ 233.295549][ T8104] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 233.295579][ T8104] __d_alloc+0x37/0x6f0 [ 233.295605][ T8104] d_alloc_parallel+0xe6/0x1610 [ 233.295628][ T8104] ? __d_lookup+0x66/0x780 [ 233.295651][ T8104] ? __d_lookup+0x66/0x780 [ 233.295674][ T8104] ? __d_lookup+0x66/0x780 [ 233.295696][ T8104] ? __pfx_d_alloc_parallel+0x10/0x10 [ 233.295719][ T8104] ? __raw_spin_lock_init+0x45/0x100 [ 233.295743][ T8104] ? __init_waitqueue_head+0xa9/0x150 [ 233.295769][ T8104] proc_fill_cache+0x17f/0x440 [ 233.295796][ T8104] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 233.295817][ T8104] ? __pfx_proc_fill_cache+0x10/0x10 [ 233.295839][ T8104] ? snprintf+0xe8/0x140 [ 233.295858][ T8104] ? __up_read+0x291/0x6b0 [ 233.295896][ T8104] proc_map_files_readdir+0x7e2/0xa40 [ 233.295921][ T8104] ? __mutex_lock+0x319/0x1550 [ 233.295946][ T8104] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 233.295988][ T8104] ? iterate_dir+0x292/0x570 [ 233.296010][ T8104] ? down_read_killable+0x1bb/0x340 [ 233.296032][ T8104] iterate_dir+0x399/0x570 [ 233.296060][ T8104] __se_sys_getdents+0xf1/0x270 [ 233.296086][ T8104] ? __pfx___se_sys_getdents+0x10/0x10 [ 233.296107][ T8104] ? ksys_write+0x242/0x270 [ 233.296126][ T8104] ? __pfx_filldir+0x10/0x10 [ 233.296150][ T8104] ? __pfx_ksys_write+0x10/0x10 [ 233.296179][ T8104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.296197][ T8104] do_syscall_64+0x15f/0xf80 [ 233.296221][ T8104] ? clear_bhb_loop+0x40/0x90 [ 233.296240][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.296257][ T8104] RIP: 0033:0x7f1e3079cdd9 [ 233.296272][ T8104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.296284][ T8104] RSP: 002b:00007f1e31640028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 233.296300][ T8104] RAX: ffffffffffffffda RBX: 00007f1e30a15fa0 RCX: 00007f1e3079cdd9 [ 233.296310][ T8104] RDX: 0000000000001008 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 233.296319][ T8104] RBP: 00007f1e31640090 R08: 0000000000000000 R09: 0000000000000000 [ 233.296327][ T8104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.296335][ T8104] R13: 00007f1e30a16038 R14: 00007f1e30a15fa0 R15: 00007f1e30b3fa48 [ 233.296360][ T8104] [ 233.722056][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 233.751330][ T8106] netlink: 'syz.1.587': attribute type 30 has an invalid length. [ 233.759532][ T42] gspca_zc3xx: reg_w_i err -110 [ 233.765186][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 234.094974][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 234.258796][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 234.269786][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 234.280301][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 234.284916][ T5920] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 234.290284][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 234.310798][ T24] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 234.320150][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.328538][ T24] usb 5-1: Product: syz [ 234.332842][ T24] usb 5-1: Manufacturer: syz [ 234.337984][ T24] usb 5-1: SerialNumber: syz [ 234.347243][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.359208][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.373895][ T24] usb 5-1: config 0 descriptor?? [ 234.379022][ T42] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 234.385481][ T42] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 234.396685][ T24] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 234.405648][ T42] usb 1-1: USB disconnect, device number 26 [ 234.445288][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 234.456597][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.469535][ T5920] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 234.479613][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.491193][ T5920] usb 4-1: config 0 descriptor?? [ 234.710662][ T8120] loop5: detected capacity change from 0 to 7 [ 234.730582][ T8120] Dev loop5: unable to read RDB block 7 [ 234.743832][ T8120] loop5: unable to read partition table [ 234.757771][ T8120] loop5: partition table beyond EOD, truncated [ 234.773385][ T8120] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 235.126241][ T5920] mcp2221 0003:04D8:00DD.000D: unbalanced delimiter at end of report description [ 235.140015][ T5920] mcp2221 0003:04D8:00DD.000D: can't parse reports [ 235.147476][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 235.155411][ T5920] mcp2221 0003:04D8:00DD.000D: probe with driver mcp2221 failed with error -22 [ 235.326660][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.366685][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.414109][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 235.442909][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.473217][ T10] usb 1-1: Product: syz [ 235.490855][ T10] usb 1-1: Manufacturer: syz [ 235.499932][ T10] usb 1-1: SerialNumber: syz [ 235.525684][ T9] usb 4-1: USB disconnect, device number 31 [ 235.633607][ T8142] FAULT_INJECTION: forcing a failure. [ 235.633607][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 235.647014][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.2.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.647041][ T8142] Tainted: [L]=SOFTLOCKUP [ 235.647048][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.647058][ T8142] Call Trace: [ 235.647065][ T8142] [ 235.647075][ T8142] dump_stack_lvl+0xe8/0x150 [ 235.647106][ T8142] should_fail_ex+0x412/0x560 [ 235.647135][ T8142] ? proc_alloc_inode+0x2a/0xc0 [ 235.647156][ T8142] should_failslab+0xa8/0x100 [ 235.647181][ T8142] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 235.647207][ T8142] ? __pfx_proc_alloc_inode+0x10/0x10 [ 235.647224][ T8142] proc_alloc_inode+0x2a/0xc0 [ 235.647242][ T8142] alloc_inode+0x6a/0x1b0 [ 235.647269][ T8142] new_inode+0x22/0x170 [ 235.647291][ T8142] proc_pid_make_inode+0x21/0x130 [ 235.647317][ T8142] proc_map_files_instantiate+0xa2/0x190 [ 235.647341][ T8142] proc_fill_cache+0x1ff/0x440 [ 235.647368][ T8142] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 235.647390][ T8142] ? __pfx_proc_fill_cache+0x10/0x10 [ 235.647411][ T8142] ? snprintf+0xe8/0x140 [ 235.647431][ T8142] ? __up_read+0x291/0x6b0 [ 235.647469][ T8142] proc_map_files_readdir+0x7e2/0xa40 [ 235.647495][ T8142] ? __mutex_lock+0x319/0x1550 [ 235.647529][ T8142] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 235.647573][ T8142] ? iterate_dir+0x292/0x570 [ 235.647595][ T8142] ? down_read_killable+0x1bb/0x340 [ 235.647618][ T8142] iterate_dir+0x399/0x570 [ 235.647646][ T8142] __se_sys_getdents+0xf1/0x270 [ 235.647673][ T8142] ? __pfx___se_sys_getdents+0x10/0x10 [ 235.647695][ T8142] ? ksys_write+0x242/0x270 [ 235.647714][ T8142] ? __pfx_filldir+0x10/0x10 [ 235.647740][ T8142] ? __pfx_ksys_write+0x10/0x10 [ 235.647770][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.647790][ T8142] do_syscall_64+0x15f/0xf80 [ 235.647813][ T8142] ? trace_irq_disable+0x3b/0x140 [ 235.647836][ T8142] ? clear_bhb_loop+0x40/0x90 [ 235.647857][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.647875][ T8142] RIP: 0033:0x7fc29259cdd9 [ 235.647893][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.647907][ T8142] RSP: 002b:00007fc293447028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 235.647927][ T8142] RAX: ffffffffffffffda RBX: 00007fc292815fa0 RCX: 00007fc29259cdd9 [ 235.647940][ T8142] RDX: 0000000000001008 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 235.647951][ T8142] RBP: 00007fc293447090 R08: 0000000000000000 R09: 0000000000000000 [ 235.647962][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.647973][ T8142] R13: 00007fc292816038 R14: 00007fc292815fa0 R15: 00007fc29293fa48 [ 235.648003][ T8142] [ 235.984964][ T5920] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 235.999732][ T10] usb 1-1: unit 0 not found! [ 236.040326][ T10] usb 1-1: USB disconnect, device number 27 [ 236.083373][ T6485] udevd[6485]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.156377][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.167347][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.179374][ T5920] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 236.188467][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.200849][ T5920] usb 2-1: config 0 descriptor?? [ 236.413218][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.424946][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.441129][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.452327][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.467527][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.488070][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.509210][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.520053][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.533260][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.551349][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.846254][ T5920] hid_parser_main: 3 callbacks suppressed [ 236.846275][ T5920] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 236.903453][ T5920] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 236.931340][ T24] scsi host1: usb-storage 5-1:0.0 [ 236.955550][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 237.041305][ T24] usb 5-1: USB disconnect, device number 45 [ 237.046045][ T5920] cp2112 0003:10C4:EA90.000E: error requesting version [ 237.083720][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 237.160059][ T5920] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 237.266723][ T5920] usb 2-1: USB disconnect, device number 22 [ 237.499903][ T8187] FAULT_INJECTION: forcing a failure. [ 237.499903][ T8187] name failslab, interval 1, probability 0, space 0, times 0 [ 237.533107][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.3.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.533136][ T8187] Tainted: [L]=SOFTLOCKUP [ 237.533142][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.533153][ T8187] Call Trace: [ 237.533160][ T8187] [ 237.533168][ T8187] dump_stack_lvl+0xe8/0x150 [ 237.533200][ T8187] should_fail_ex+0x412/0x560 [ 237.533231][ T8187] should_failslab+0xa8/0x100 [ 237.533253][ T8187] ? security_inode_alloc+0x39/0x310 [ 237.533273][ T8187] kmem_cache_alloc_noprof+0x87/0x650 [ 237.533302][ T8187] security_inode_alloc+0x39/0x310 [ 237.533323][ T8187] inode_init_always_gfp+0x9c8/0xda0 [ 237.533356][ T8187] ? __pfx_proc_alloc_inode+0x10/0x10 [ 237.533375][ T8187] alloc_inode+0x82/0x1b0 [ 237.533402][ T8187] new_inode+0x22/0x170 [ 237.533424][ T8187] proc_pid_make_inode+0x21/0x130 [ 237.533450][ T8187] proc_map_files_instantiate+0xa2/0x190 [ 237.533474][ T8187] proc_fill_cache+0x1ff/0x440 [ 237.533500][ T8187] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 237.533522][ T8187] ? __pfx_proc_fill_cache+0x10/0x10 [ 237.533544][ T8187] ? snprintf+0xe8/0x140 [ 237.533563][ T8187] ? __up_read+0x291/0x6b0 [ 237.533600][ T8187] proc_map_files_readdir+0x7e2/0xa40 [ 237.533624][ T8187] ? __mutex_lock+0x319/0x1550 [ 237.533648][ T8187] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 237.533687][ T8187] ? iterate_dir+0x292/0x570 [ 237.533709][ T8187] ? down_read_killable+0x1bb/0x340 [ 237.533730][ T8187] iterate_dir+0x399/0x570 [ 237.533756][ T8187] __se_sys_getdents+0xf1/0x270 [ 237.533780][ T8187] ? __pfx___se_sys_getdents+0x10/0x10 [ 237.533800][ T8187] ? ksys_write+0x242/0x270 [ 237.533818][ T8187] ? __pfx_filldir+0x10/0x10 [ 237.533842][ T8187] ? __pfx_ksys_write+0x10/0x10 [ 237.533872][ T8187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.533893][ T8187] do_syscall_64+0x15f/0xf80 [ 237.533916][ T8187] ? trace_irq_disable+0x3b/0x140 [ 237.533939][ T8187] ? clear_bhb_loop+0x40/0x90 [ 237.533961][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.533979][ T8187] RIP: 0033:0x7f181319cdd9 [ 237.533997][ T8187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.534011][ T8187] RSP: 002b:00007f1813fd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 237.534031][ T8187] RAX: ffffffffffffffda RBX: 00007f1813415fa0 RCX: 00007f181319cdd9 [ 237.534044][ T8187] RDX: 0000000000001008 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 237.534056][ T8187] RBP: 00007f1813fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 237.534074][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.534084][ T8187] R13: 00007f1813416038 R14: 00007f1813415fa0 R15: 00007f181353fa48 [ 237.534113][ T8187] [ 238.005970][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.079183][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.151992][ T8204] fuse: Bad value for 'user_id' [ 238.157339][ T8204] fuse: Bad value for 'user_id' [ 238.584874][ T5906] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 238.612456][ T8219] loop1: detected capacity change from 0 to 7 [ 238.774874][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 238.790470][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.811467][ T5906] usb 1-1: config 33 has an invalid interface number: 3 but max is 0 [ 238.821433][ T5906] usb 1-1: config 33 has no interface number 0 [ 238.841588][ T5906] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 6.07 [ 238.862494][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.932889][ T8219] Dev loop1: unable to read RDB block 7 [ 238.939229][ T8219] loop1: unable to read partition table [ 238.953749][ T8219] loop1: partition table beyond EOD, truncated [ 238.977806][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 238.989261][ T8219] loop_reread_partitions: partition scan of loop1 (Wý* %4FLQk݊5) failed (rc=-5) [ 239.000850][ T42] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 239.009336][ T8233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.622'. [ 239.098149][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 239.098195][ T29] audit: type=1326 audit(1777074501.665:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.145412][ T29] audit: type=1326 audit(1777074501.665:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.196806][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 239.217996][ T42] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 239.231650][ T29] audit: type=1326 audit(1777074501.665:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.254869][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.263154][ T42] usb 5-1: Product: syz [ 239.271645][ T42] usb 5-1: Manufacturer: syz [ 239.275191][ T5920] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 239.276968][ T42] usb 5-1: SerialNumber: syz [ 239.289354][ T29] audit: type=1326 audit(1777074501.695:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.336870][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.346401][ T29] audit: type=1326 audit(1777074501.695:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.407130][ T29] audit: type=1326 audit(1777074501.695:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.454852][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 239.456190][ T42] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 239.462385][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.469727][ T29] audit: type=1326 audit(1777074501.695:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.517912][ T6485] udevd[6485]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.576853][ T8246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.583909][ T29] audit: type=1326 audit(1777074501.695:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.587394][ T5920] usb 2-1: config 4 interface 0 has no altsetting 0 [ 239.635211][ T29] audit: type=1326 audit(1777074501.695:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.679044][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.695746][ T29] audit: type=1326 audit(1777074501.695:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f918ef9cdd9 code=0x7ffc0000 [ 239.721995][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.742793][ T5920] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 239.742832][ T5920] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 239.742853][ T5920] usb 2-1: Manufacturer: syz [ 239.742868][ T5920] usb 2-1: SerialNumber: syz [ 239.758027][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.790448][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.969579][ T8236] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 240.028810][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.047350][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.182934][ T5920] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 240.207378][ T5920] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.228966][ T5920] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 240.245464][ T5920] usb 2-1: media controller created [ 240.278504][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.359465][ T5920] zl10353_read_register: readreg error (reg=127, ret==0) [ 240.486774][ T5920] usb 2-1: USB disconnect, device number 23 [ 241.197705][ T5906] usb 1-1: string descriptor 0 read error: -71 [ 241.223947][ T5906] ftdi_sio 1-1:33.3: FTDI USB Serial Device converter detected [ 241.269951][ T5906] ftdi_sio ttyUSB0: unknown device type: 0x607 [ 241.301025][ T5906] usb 1-1: USB disconnect, device number 28 [ 241.328236][ T5906] ftdi_sio 1-1:33.3: device disconnected [ 241.594381][ T42] usb 5-1: USB disconnect, device number 46 [ 241.603177][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.617193][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.666525][ T5906] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 241.828620][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.839855][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.849784][ T5906] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 241.859027][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.870800][ T5906] usb 1-1: config 0 descriptor?? [ 242.094630][ T8260] netlink: 76 bytes leftover after parsing attributes in process `syz.0.628'. [ 242.182889][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 242.202378][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 242.251611][ T5906] usb 1-1: USB disconnect, device number 29 [ 242.547333][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 242.929043][ T8316] loop2: detected capacity change from 0 to 7 [ 242.936723][ T8316] Dev loop2: unable to read RDB block 7 [ 242.942389][ T8316] loop2: AHDI p1 p3 [ 242.946917][ T8316] loop2: partition table partially beyond EOD, truncated [ 242.965810][ T8316] loop2: p1 start 2349049979 is beyond EOD, truncated [ 242.994874][ T5906] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 243.026963][ T5920] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 243.164816][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 243.173428][ T5906] usb 4-1: config 0 has no interfaces? [ 243.181832][ T5906] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 243.191491][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.199641][ T5906] usb 4-1: Product: syz [ 243.203970][ T5906] usb 4-1: Manufacturer: syz [ 243.217058][ T5906] usb 4-1: SerialNumber: syz [ 243.218565][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.235727][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.239253][ T5906] usb 4-1: config 0 descriptor?? [ 243.261313][ T5920] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 243.271202][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.297538][ T5920] usb 1-1: config 0 descriptor?? [ 243.500709][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'. [ 243.517831][ T8331] netlink: 144 bytes leftover after parsing attributes in process `syz.1.650'. [ 243.570271][ T5905] usb 4-1: USB disconnect, device number 32 [ 243.718335][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.728376][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.740448][ T5920] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 243.748098][ T5920] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 243.755982][ T5920] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 243.764666][ T5920] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 243.774089][ T5920] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 243.786598][ T5920] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 244.222468][ T8340] openvswitch: netlink: IP tunnel TTL not specified. [ 244.353911][ T5920] playstation 0003:054C:0DF2.000F: Failed to retrieve feature with reportID 5: -71 [ 244.395909][ T5920] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense calibration info: -71 [ 244.421400][ T8345] loop5: detected capacity change from 0 to 7 [ 244.422955][ T5920] playstation 0003:054C:0DF2.000F: Failed to get calibration data from DualSense [ 244.440808][ T8345] Dev loop5: unable to read RDB block 7 [ 244.446731][ T5920] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 244.458021][ T5920] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -71 [ 244.471453][ T8345] loop5: unable to read partition table [ 244.479067][ T5906] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 244.484702][ T5920] usb 1-1: USB disconnect, device number 30 [ 244.496950][ T8345] loop5: partition table beyond EOD, truncated [ 244.506348][ T8345] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 244.634846][ T5906] usb 4-1: device descriptor read/64, error -71 [ 244.697529][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.708597][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.719527][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.729636][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.740470][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.752944][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.764399][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 244.764412][ T29] audit: type=1326 audit(1777074507.325:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 244.796574][ T29] audit: type=1326 audit(1777074507.325:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 244.819290][ T29] audit: type=1326 audit(1777074507.325:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 244.853340][ T29] audit: type=1326 audit(1777074507.335:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 244.887988][ T29] audit: type=1326 audit(1777074507.335:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 244.935140][ T5906] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 244.949067][ T29] audit: type=1326 audit(1777074507.335:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 244.972377][ T29] audit: type=1326 audit(1777074507.335:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 244.985083][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.996479][ T29] audit: type=1326 audit(1777074507.335:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 245.044001][ T29] audit: type=1326 audit(1777074507.335:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc29255d60e code=0x7ffc0000 [ 245.067153][ T29] audit: type=1326 audit(1777074507.335:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29259cdd9 code=0x7ffc0000 [ 245.078058][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.105240][ T5906] usb 4-1: device descriptor read/64, error -71 [ 245.227178][ T5906] usb usb4-port1: attempt power cycle [ 245.266697][ T8366] loop2: detected capacity change from 0 to 7 [ 245.288076][ T8366] Dev loop2: unable to read RDB block 7 [ 245.304821][ T8366] loop2: AHDI p1 p3 [ 245.317798][ T8366] loop2: partition table partially beyond EOD, truncated [ 245.344689][ T8366] loop2: p1 start 2349049979 is beyond EOD, truncated [ 245.377863][ T8370] FAULT_INJECTION: forcing a failure. [ 245.377863][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 245.422304][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.4.662 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.422331][ T8370] Tainted: [L]=SOFTLOCKUP [ 245.422338][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.422355][ T8370] Call Trace: [ 245.422363][ T8370] [ 245.422370][ T8370] dump_stack_lvl+0xe8/0x150 [ 245.422404][ T8370] should_fail_ex+0x412/0x560 [ 245.422436][ T8370] should_failslab+0xa8/0x100 [ 245.422460][ T8370] ? security_inode_alloc+0x39/0x310 [ 245.422481][ T8370] kmem_cache_alloc_noprof+0x87/0x650 [ 245.422508][ T8370] security_inode_alloc+0x39/0x310 [ 245.422529][ T8370] inode_init_always_gfp+0x9c8/0xda0 [ 245.422561][ T8370] ? __pfx_proc_alloc_inode+0x10/0x10 [ 245.422589][ T8370] alloc_inode+0x82/0x1b0 [ 245.422619][ T8370] new_inode+0x22/0x170 [ 245.422641][ T8370] proc_pid_make_inode+0x21/0x130 [ 245.422666][ T8370] proc_map_files_instantiate+0xa2/0x190 [ 245.422692][ T8370] proc_fill_cache+0x1ff/0x440 [ 245.422722][ T8370] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 245.422744][ T8370] ? __pfx_proc_fill_cache+0x10/0x10 [ 245.422765][ T8370] ? snprintf+0xe8/0x140 [ 245.422783][ T8370] ? __up_read+0x291/0x6b0 [ 245.422820][ T8370] proc_map_files_readdir+0x7e2/0xa40 [ 245.422846][ T8370] ? __mutex_lock+0x319/0x1550 [ 245.422873][ T8370] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 245.422916][ T8370] ? iterate_dir+0x292/0x570 [ 245.422938][ T8370] ? down_read_killable+0x1bb/0x340 [ 245.422960][ T8370] iterate_dir+0x399/0x570 [ 245.422989][ T8370] __se_sys_getdents+0xf1/0x270 [ 245.423015][ T8370] ? __pfx___se_sys_getdents+0x10/0x10 [ 245.423036][ T8370] ? ksys_write+0x242/0x270 [ 245.423056][ T8370] ? __pfx_filldir+0x10/0x10 [ 245.423099][ T8370] ? __pfx_ksys_write+0x10/0x10 [ 245.423127][ T8370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.423147][ T8370] do_syscall_64+0x15f/0xf80 [ 245.423171][ T8370] ? trace_irq_disable+0x3b/0x140 [ 245.423194][ T8370] ? clear_bhb_loop+0x40/0x90 [ 245.423217][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.423234][ T8370] RIP: 0033:0x7fa91139cdd9 [ 245.423251][ T8370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.423266][ T8370] RSP: 002b:00007fa91219a028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 245.423285][ T8370] RAX: ffffffffffffffda RBX: 00007fa911615fa0 RCX: 00007fa91139cdd9 [ 245.423298][ T8370] RDX: 0000000000001008 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 245.423310][ T8370] RBP: 00007fa91219a090 R08: 0000000000000000 R09: 0000000000000000 [ 245.423321][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.423334][ T8370] R13: 00007fa911616038 R14: 00007fa911615fa0 R15: 00007fa91173fa48 [ 245.423365][ T8370] [ 245.450509][ T8372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.671211][ T8375] Cannot find add_set index 0 as target [ 245.725606][ T5906] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 245.760647][ T5906] usb 4-1: device descriptor read/8, error -71 [ 245.780366][ T8381] ip6tnl0: Caught tx_queue_len zero misconfig [ 245.880123][ T8384] loop5: detected capacity change from 0 to 7 [ 245.894954][ T8384] Dev loop5: unable to read RDB block 7 [ 245.908322][ T8384] loop5: unable to read partition table [ 245.934513][ T8384] loop5: partition table beyond EOD, truncated [ 245.962181][ T8384] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 246.005337][ T5906] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 246.035966][ T5906] usb 4-1: device descriptor read/8, error -71 [ 246.054850][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 246.059594][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.107000][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.167458][ T5906] usb usb4-port1: unable to enumerate USB device [ 246.205071][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 246.218298][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 246.230444][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.257711][ T10] usb 5-1: Product: syz [ 246.259810][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 246.288449][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 246.288676][ T10] usb 5-1: Manufacturer: syz [ 246.304908][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 246.306748][ T10] usb 5-1: SerialNumber: syz [ 246.340980][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.359328][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.376101][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.398799][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.562394][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 246.586198][ T10] usb 5-1: unit 5 not found! [ 246.589682][ T8407] FAULT_INJECTION: forcing a failure. [ 246.589682][ T8407] name failslab, interval 1, probability 0, space 0, times 0 [ 246.604482][ T8407] CPU: 1 UID: 0 PID: 8407 Comm: syz.4.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.604509][ T8407] Tainted: [L]=SOFTLOCKUP [ 246.604515][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.604526][ T8407] Call Trace: [ 246.604533][ T8407] [ 246.604541][ T8407] dump_stack_lvl+0xe8/0x150 [ 246.604572][ T8407] should_fail_ex+0x412/0x560 [ 246.604605][ T8407] should_failslab+0xa8/0x100 [ 246.604628][ T8407] ? security_inode_alloc+0x39/0x310 [ 246.604649][ T8407] kmem_cache_alloc_noprof+0x87/0x650 [ 246.604678][ T8407] security_inode_alloc+0x39/0x310 [ 246.604699][ T8407] inode_init_always_gfp+0x9c8/0xda0 [ 246.604735][ T8407] ? __pfx_proc_alloc_inode+0x10/0x10 [ 246.604754][ T8407] alloc_inode+0x82/0x1b0 [ 246.604779][ T8407] new_inode+0x22/0x170 [ 246.604801][ T8407] proc_pid_make_inode+0x21/0x130 [ 246.604827][ T8407] proc_map_files_instantiate+0xa2/0x190 [ 246.604850][ T8407] proc_fill_cache+0x1ff/0x440 [ 246.604875][ T8407] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 246.604895][ T8407] ? __pfx_proc_fill_cache+0x10/0x10 [ 246.604916][ T8407] ? snprintf+0xe8/0x140 [ 246.604934][ T8407] ? __up_read+0x291/0x6b0 [ 246.604973][ T8407] proc_map_files_readdir+0x7e2/0xa40 [ 246.604996][ T8407] ? __mutex_lock+0x319/0x1550 [ 246.605022][ T8407] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 246.605064][ T8407] ? iterate_dir+0x292/0x570 [ 246.605084][ T8407] ? down_read_killable+0x1bb/0x340 [ 246.605106][ T8407] iterate_dir+0x399/0x570 [ 246.605135][ T8407] __se_sys_getdents+0xf1/0x270 [ 246.605160][ T8407] ? __pfx___se_sys_getdents+0x10/0x10 [ 246.605190][ T8407] ? ksys_write+0x242/0x270 [ 246.605211][ T8407] ? __pfx_filldir+0x10/0x10 [ 246.605235][ T8407] ? __pfx_ksys_write+0x10/0x10 [ 246.605265][ T8407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.605285][ T8407] do_syscall_64+0x15f/0xf80 [ 246.605310][ T8407] ? clear_bhb_loop+0x40/0x90 [ 246.605332][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.605347][ T8407] RIP: 0033:0x7fa91139cdd9 [ 246.605364][ T8407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.605378][ T8407] RSP: 002b:00007fa91219a028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 246.605398][ T8407] RAX: ffffffffffffffda RBX: 00007fa911615fa0 RCX: 00007fa91139cdd9 [ 246.605410][ T8407] RDX: 0000000000001008 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 246.605421][ T8407] RBP: 00007fa91219a090 R08: 0000000000000000 R09: 0000000000000000 [ 246.605432][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.605441][ T8407] R13: 00007fa911616038 R14: 00007fa911615fa0 R15: 00007fa91173fa48 [ 246.605470][ T8407] [ 246.993973][ T10] usb 5-1: USB disconnect, device number 47 [ 247.010222][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 247.022352][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 247.081921][ T6485] udevd[6485]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.945686][ T8442] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 248.040298][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 248.404970][ T5905] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 248.595188][ T5905] usb 1-1: config index 0 descriptor too short (expected 57892, got 36) [ 248.647960][ T5905] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 248.685812][ T5905] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 248.714882][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 248.741534][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 248.776939][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 54127, setting to 64 [ 248.804963][ T5905] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 248.821912][ T5905] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 248.831715][ T5905] usb 1-1: Manufacturer: syz [ 248.887012][ T5905] usb 1-1: config 0 descriptor?? [ 248.926582][ T5905] smsusb:smsusb_probe: board id=9, interface number 0 [ 248.957205][ T5905] smsusb:siano_media_device_register: media controller created [ 249.024849][ T5905] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 249.051025][ T5905] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 249.063574][ T8451] netlink: 'syz.2.686': attribute type 11 has an invalid length. [ 249.090001][ T5905] ------------[ cut here ]------------ [ 249.096130][ T5905] !PageLargeKmalloc(page) [ 249.096151][ T5905] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:6/5905 [ 249.110290][ T5905] Modules linked in: [ 249.114970][ T5905] CPU: 1 UID: 0 PID: 5905 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.125937][ T5905] Tainted: [L]=SOFTLOCKUP [ 249.130254][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.140759][ T5905] Workqueue: usb_hub_wq hub_event [ 249.145860][ T5905] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 249.151596][ T5905] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 52 38 ff 8d 5b 41 5e 5d e9 1f 56 02 ff [ 249.171367][ T5905] RSP: 0018:ffffc90004326b20 EFLAGS: 00010206 [ 249.177462][ T5905] RAX: 00000000ff000000 RBX: ffffea000130d880 RCX: 0000000000000001 [ 249.185469][ T5905] RDX: ffffc90019efd000 RSI: ffff88804c362000 RDI: ffffea000130d880 [ 249.193454][ T5905] RBP: 0000000000000000 R08: ffff8880367f4403 R09: 1ffff11006cfe880 [ 249.202197][ T5905] R10: dffffc0000000000 R11: ffffed1006cfe881 R12: 1ffff110052f1482 [ 249.210704][ T5905] R13: 0000000000000000 R14: ffff8880367f4460 R15: dffffc0000000000 [ 249.218740][ T5905] FS: 0000000000000000(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 249.227688][ T5905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.234257][ T5905] CR2: 000020000057f000 CR3: 00000000546c8000 CR4: 00000000003526f0 [ 249.242254][ T5905] Call Trace: [ 249.245575][ T5905] [ 249.248509][ T5905] usb_free_urb+0xd0/0x120 [ 249.252931][ T5905] smsusb_term_device+0x1d7/0x3e0 [ 249.257994][ T5905] smsusb_probe+0x1aba/0x2280 [ 249.262699][ T5905] ? __pfx_smsusb_probe+0x10/0x10 [ 249.267763][ T5905] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 249.273330][ T5905] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.279162][ T5905] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 249.284816][ T5905] usb_probe_interface+0x659/0xc70 [ 249.289930][ T5905] ? __pfx_usb_probe_interface+0x10/0x10 [ 249.295587][ T5905] really_probe+0x267/0xaf0 [ 249.300872][ T5905] __driver_probe_device+0x1ef/0x380 [ 249.306733][ T5905] driver_probe_device+0x4f/0x240 [ 249.311779][ T5905] __device_attach_driver+0x279/0x430 [ 249.317328][ T5905] bus_for_each_drv+0x258/0x2f0 [ 249.322193][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 249.328109][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.333471][ T5905] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.338691][ T5905] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.344492][ T5905] __device_attach+0x2c5/0x450 [ 249.349269][ T5905] ? __pfx___device_attach+0x10/0x10 [ 249.354554][ T5905] ? _raw_spin_unlock+0x28/0x50 [ 249.359416][ T5905] device_initial_probe+0xa1/0xd0 [ 249.364526][ T5905] bus_probe_device+0x12a/0x220 [ 249.369413][ T5905] device_add+0x7e9/0xbb0 [ 249.373742][ T5905] usb_set_configuration+0x1a87/0x2110 [ 249.379304][ T5905] usb_generic_driver_probe+0x8d/0x150 [ 249.384788][ T5905] usb_probe_device+0x1c4/0x3b0 [ 249.389638][ T5905] ? __pfx_usb_probe_device+0x10/0x10 [ 249.395026][ T5905] really_probe+0x267/0xaf0 [ 249.399522][ T5905] __driver_probe_device+0x1ef/0x380 [ 249.405599][ T5905] driver_probe_device+0x4f/0x240 [ 249.410651][ T5905] __device_attach_driver+0x279/0x430 [ 249.416349][ T5905] bus_for_each_drv+0x258/0x2f0 [ 249.421196][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 249.427100][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.432462][ T5905] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.437677][ T5905] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.443478][ T5905] __device_attach+0x2c5/0x450 [ 249.448263][ T5905] ? __pfx___device_attach+0x10/0x10 [ 249.453541][ T5905] ? _raw_spin_unlock+0x28/0x50 [ 249.458401][ T5905] device_initial_probe+0xa1/0xd0 [ 249.463428][ T5905] bus_probe_device+0x12a/0x220 [ 249.468321][ T5905] device_add+0x7e9/0xbb0 [ 249.472647][ T5905] usb_new_device+0xa08/0x16f0 [ 249.477764][ T5905] ? __pfx_usb_new_device+0x10/0x10 [ 249.482962][ T5905] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.488170][ T5905] hub_event+0x2a1c/0x4f30 [ 249.492574][ T5905] ? do_raw_spin_unlock+0xf5/0x210 [ 249.497720][ T5905] ? __pfx_hub_event+0x10/0x10 [ 249.502474][ T5905] ? process_scheduled_works+0xa70/0x1860 [ 249.508627][ T5905] ? process_scheduled_works+0xa70/0x1860 [ 249.514343][ T5905] ? process_scheduled_works+0xa70/0x1860 [ 249.520342][ T5905] process_scheduled_works+0xb5d/0x1860 [ 249.525929][ T5905] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.531902][ T5905] ? assign_work+0x3d5/0x5e0 [ 249.536504][ T5905] worker_thread+0xa53/0xfc0 [ 249.541101][ T5905] kthread+0x388/0x470 [ 249.545186][ T5905] ? __pfx_worker_thread+0x10/0x10 [ 249.550286][ T5905] ? __pfx_kthread+0x10/0x10 [ 249.554923][ T5905] ret_from_fork+0x514/0xb70 [ 249.559525][ T5905] ? __pfx_ret_from_fork+0x10/0x10 [ 249.565189][ T5905] ? __switch_to+0xc79/0x1410 [ 249.569858][ T5905] ? __pfx_kthread+0x10/0x10 [ 249.574432][ T5905] ret_from_fork_asm+0x1a/0x30 [ 249.579272][ T5905] [ 249.582293][ T5905] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.589558][ T5905] CPU: 1 UID: 0 PID: 5905 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.600475][ T5905] Tainted: [L]=SOFTLOCKUP [ 249.604788][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.614841][ T5905] Workqueue: usb_hub_wq hub_event [ 249.619871][ T5905] Call Trace: [ 249.623140][ T5905] [ 249.626060][ T5905] vpanic+0x56c/0xa60 [ 249.630038][ T5905] ? __pfx__printk+0x10/0x10 [ 249.634649][ T5905] ? __pfx_vpanic+0x10/0x10 [ 249.639141][ T5905] ? is_bpf_text_address+0x292/0x2b0 [ 249.644439][ T5905] ? is_bpf_text_address+0x26/0x2b0 [ 249.649659][ T5905] panic+0xc5/0xd0 [ 249.653376][ T5905] ? __pfx_panic+0x10/0x10 [ 249.657797][ T5905] ? ret_from_fork_asm+0x1a/0x30 [ 249.662737][ T5905] __warn+0x315/0x4c0 [ 249.666719][ T5905] ? free_large_kmalloc+0x9b/0x110 [ 249.671827][ T5905] ? free_large_kmalloc+0x9b/0x110 [ 249.676934][ T5905] __report_bug+0x29a/0x540 [ 249.681439][ T5905] ? device_initial_probe+0xa1/0xd0 [ 249.686635][ T5905] ? bus_probe_device+0x12a/0x220 [ 249.691658][ T5905] ? device_add+0x7e9/0xbb0 [ 249.696160][ T5905] ? free_large_kmalloc+0x9b/0x110 [ 249.701267][ T5905] ? __pfx___report_bug+0x10/0x10 [ 249.706283][ T5905] ? usb_new_device+0xa08/0x16f0 [ 249.711211][ T5905] ? hub_event+0x2a1c/0x4f30 [ 249.715800][ T5905] ? process_scheduled_works+0xb5d/0x1860 [ 249.721544][ T5905] ? smscore_unregister_device+0x651/0x780 [ 249.727354][ T5905] ? free_large_kmalloc+0x9b/0x110 [ 249.732462][ T5905] report_bug+0x16a/0x220 [ 249.736789][ T5905] ? free_large_kmalloc+0x9b/0x110 [ 249.741895][ T5905] ? free_large_kmalloc+0x9d/0x110 [ 249.747012][ T5905] handle_bug+0x9c/0x200 [ 249.751261][ T5905] exc_invalid_op+0x1a/0x50 [ 249.755765][ T5905] asm_exc_invalid_op+0x1a/0x20 [ 249.760614][ T5905] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 249.766336][ T5905] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 52 38 ff 8d 5b 41 5e 5d e9 1f 56 02 ff [ 249.785937][ T5905] RSP: 0018:ffffc90004326b20 EFLAGS: 00010206 [ 249.791997][ T5905] RAX: 00000000ff000000 RBX: ffffea000130d880 RCX: 0000000000000001 [ 249.799957][ T5905] RDX: ffffc90019efd000 RSI: ffff88804c362000 RDI: ffffea000130d880 [ 249.807917][ T5905] RBP: 0000000000000000 R08: ffff8880367f4403 R09: 1ffff11006cfe880 [ 249.815878][ T5905] R10: dffffc0000000000 R11: ffffed1006cfe881 R12: 1ffff110052f1482 [ 249.823841][ T5905] R13: 0000000000000000 R14: ffff8880367f4460 R15: dffffc0000000000 [ 249.831824][ T5905] usb_free_urb+0xd0/0x120 [ 249.836246][ T5905] smsusb_term_device+0x1d7/0x3e0 [ 249.841273][ T5905] smsusb_probe+0x1aba/0x2280 [ 249.845954][ T5905] ? __pfx_smsusb_probe+0x10/0x10 [ 249.850975][ T5905] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 249.856524][ T5905] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.862326][ T5905] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 249.867960][ T5905] usb_probe_interface+0x659/0xc70 [ 249.873078][ T5905] ? __pfx_usb_probe_interface+0x10/0x10 [ 249.878704][ T5905] really_probe+0x267/0xaf0 [ 249.883207][ T5905] __driver_probe_device+0x1ef/0x380 [ 249.888494][ T5905] driver_probe_device+0x4f/0x240 [ 249.893506][ T5905] __device_attach_driver+0x279/0x430 [ 249.898869][ T5905] bus_for_each_drv+0x258/0x2f0 [ 249.903714][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 249.909605][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.914975][ T5905] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.920187][ T5905] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.925996][ T5905] __device_attach+0x2c5/0x450 [ 249.930761][ T5905] ? __pfx___device_attach+0x10/0x10 [ 249.936049][ T5905] ? _raw_spin_unlock+0x28/0x50 [ 249.940897][ T5905] device_initial_probe+0xa1/0xd0 [ 249.945920][ T5905] bus_probe_device+0x12a/0x220 [ 249.950769][ T5905] device_add+0x7e9/0xbb0 [ 249.955100][ T5905] usb_set_configuration+0x1a87/0x2110 [ 249.960575][ T5905] usb_generic_driver_probe+0x8d/0x150 [ 249.966041][ T5905] usb_probe_device+0x1c4/0x3b0 [ 249.970905][ T5905] ? __pfx_usb_probe_device+0x10/0x10 [ 249.976275][ T5905] really_probe+0x267/0xaf0 [ 249.980786][ T5905] __driver_probe_device+0x1ef/0x380 [ 249.986084][ T5905] driver_probe_device+0x4f/0x240 [ 249.991114][ T5905] __device_attach_driver+0x279/0x430 [ 249.996492][ T5905] bus_for_each_drv+0x258/0x2f0 [ 250.001342][ T5905] ? __pfx___device_attach_driver+0x10/0x10 [ 250.007226][ T5905] ? __pfx_bus_for_each_drv+0x10/0x10 [ 250.012593][ T5905] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.017793][ T5905] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.023601][ T5905] __device_attach+0x2c5/0x450 [ 250.028375][ T5905] ? __pfx___device_attach+0x10/0x10 [ 250.033671][ T5905] ? _raw_spin_unlock+0x28/0x50 [ 250.038519][ T5905] device_initial_probe+0xa1/0xd0 [ 250.043548][ T5905] bus_probe_device+0x12a/0x220 [ 250.048400][ T5905] device_add+0x7e9/0xbb0 [ 250.052736][ T5905] usb_new_device+0xa08/0x16f0 [ 250.057505][ T5905] ? __pfx_usb_new_device+0x10/0x10 [ 250.062846][ T5905] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.068056][ T5905] hub_event+0x2a1c/0x4f30 [ 250.072468][ T5905] ? do_raw_spin_unlock+0xf5/0x210 [ 250.077614][ T5905] ? __pfx_hub_event+0x10/0x10 [ 250.082373][ T5905] ? process_scheduled_works+0xa70/0x1860 [ 250.088099][ T5905] ? process_scheduled_works+0xa70/0x1860 [ 250.093820][ T5905] ? process_scheduled_works+0xa70/0x1860 [ 250.099540][ T5905] process_scheduled_works+0xb5d/0x1860 [ 250.105116][ T5905] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.111100][ T5905] ? assign_work+0x3d5/0x5e0 [ 250.115693][ T5905] worker_thread+0xa53/0xfc0 [ 250.120304][ T5905] kthread+0x388/0x470 [ 250.124369][ T5905] ? __pfx_worker_thread+0x10/0x10 [ 250.129479][ T5905] ? __pfx_kthread+0x10/0x10 [ 250.134069][ T5905] ret_from_fork+0x514/0xb70 [ 250.138659][ T5905] ? __pfx_ret_from_fork+0x10/0x10 [ 250.143771][ T5905] ? __switch_to+0xc79/0x1410 [ 250.148442][ T5905] ? __pfx_kthread+0x10/0x10 [ 250.153029][ T5905] ret_from_fork_asm+0x1a/0x30 [ 250.157793][ T5905] [ 250.161381][ T5905] Kernel Offset: disabled [ 250.165701][ T5905] Rebooting in 86400 seconds..